Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://silentnet.st...

windows11-21h2-x64

1

https://silentnet.st...

windows11-ltsc_2024-x64

8

Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    899s
  • max time network
    892s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/08/2026, 17:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://silentnet.st/internal/ddos/attacks
  • Sample260826-v8rmfaee66
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops desktop.ini file(s) 3 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 27 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 39 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 56 IoCs
  • Suspicious use of FindShellTrayWindow 61 IoCs
  • Suspicious use of SendNotifyMessage 46 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 53 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://silentnet.st/internal/ddos/attacks"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://silentnet.st/internal/ddos/attacks
      2⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1152
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 26983 -prefMapHandle 1956 -prefMapSize 270110 -ipcHandle 2040 -initialChannelId {c5cb79a4-ae0e-41cb-8a12-9a01544aab2f} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:4596
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27019 -prefMapHandle 2424 -prefMapSize 270110 -ipcHandle 2448 -initialChannelId {b3424fcd-0d7e-41b3-bbc7-d97fb880d967} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:2532
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3716 -prefsLen 25069 -prefMapHandle 3720 -prefMapSize 270110 -jsInitHandle 3724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3732 -initialChannelId {37345bb6-bcf5-424e-b6cd-973c9017ecae} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:6088
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3760 -prefsLen 27160 -prefMapHandle 3860 -prefMapSize 270110 -ipcHandle 3976 -initialChannelId {c03318f8-df2a-4601-a455-3227449caa5f} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:3696
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4424 -prefsLen 34647 -prefMapHandle 2576 -prefMapSize 270110 -jsInitHandle 2744 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2760 -initialChannelId {943a7b0f-a914-4343-aa47-5a558f0cdbb5} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:5516
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5080 -prefsLen 34696 -prefMapHandle 5084 -prefMapSize 270110 -ipcHandle 4692 -initialChannelId {40543d53-e728-4ac4-abe6-2391a776d2a8} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:1512
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5840 -prefsLen 32923 -prefMapHandle 5844 -prefMapSize 270110 -jsInitHandle 5848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5816 -initialChannelId {c4d5030e-2900-4e2e-a65c-de20147d4a19} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:2952
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5672 -prefsLen 32923 -prefMapHandle 5868 -prefMapSize 270110 -jsInitHandle 5872 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5888 -initialChannelId {23ddd4ea-11a7-451e-bfc9-0d5261aaac27} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:3288
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6208 -prefsLen 32923 -prefMapHandle 6212 -prefMapSize 270110 -jsInitHandle 6216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6224 -initialChannelId {980f1a3e-66a8-4425-a2ce-2eb8237894ff} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:248
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6760 -prefsLen 35848 -prefMapHandle 6764 -prefMapSize 270110 -jsInitHandle 6768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5716 -initialChannelId {9da042b0-b4a4-40e3-b96e-6c2da1153e31} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:2288
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6656 -prefsLen 36883 -prefMapHandle 6640 -prefMapSize 270110 -jsInitHandle 6644 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6632 -initialChannelId {d8ca30eb-aedb-40e1-9de5-1f1300558b7e} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
              3⤵
              • Checks processor information in registry
              PID:2876
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5296 -prefsLen 40031 -prefMapHandle 5928 -prefMapSize 270110 -ipcHandle 5720 -initialChannelId {4a82d62a-4762-405f-9be1-753522aa2587} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
              3⤵
              • Checks processor information in registry
              PID:5316
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6440 -prefsLen 36883 -prefMapHandle 6444 -prefMapSize 270110 -jsInitHandle 6448 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5808 -initialChannelId {c9f794fa-43bf-4acf-933d-fb23f65e6e67} -parentPid 1152 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1152" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
              3⤵
              • Checks processor information in registry
              PID:5976
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k GPSvcGroup
          1⤵
            PID:6072
          • C:\Windows\system32\sihost.exe
            sihost.exe
            1⤵
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4220
            • C:\Windows\explorer.exe
              explorer.exe /LOADSAVEDWINDOWS
              2⤵
              • Boot or Logon Autostart Execution: Active Setup
              • Enumerates connected drives
              • Checks SCSI registry key(s)
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              PID:4668
          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
            1⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:2496
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:400
          • C:\Windows\System32\SecurityHealthHost.exe
            \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
            1⤵
              PID:4340

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  activity-stream.contile.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.contile.json
                  • Size 1KB
                  • SHA256 f0730c246bcdb35ca6de332c6c679aa01877b170f0148acd78f796b159f5af6d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  activity-stream.discovery_stream.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.discovery_stream.json
                  • Size 22KB
                  • SHA256 3285e224f3c8f34d1266d45bb31520c836624f5e644f2eae72591e7870cd5685
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                  • Size 16KB
                  • SHA256 56d148e2359c44de226258d6693e236e6696614acfe557cdcf4a11f436652783
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
                  • Size 16KB
                  • SHA256 edbd335c536fb850ea0fd176d9ab5b7f7c62037b1bdae851000b827d9e19f259
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_arts_and_entertainment.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                  • Size 67KB
                  • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_autos_and_vehicles.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                  • Size 44KB
                  • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_beauty_and_fitness.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                  • Size 33KB
                  • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_blogging_resources_and_services.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                  • Size 33KB
                  • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_books_and_literature.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                  • Size 67KB
                  • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_business_and_industrial.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                  • Size 45KB
                  • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_computers_and_electronics.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                  • Size 45KB
                  • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_finance.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_finance.json
                  • Size 33KB
                  • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_food_and_drink.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                  • Size 67KB
                  • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_games.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_games.json
                  • Size 44KB
                  • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_health.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_health.json
                  • Size 33KB
                  • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_hobbies_and_leisure.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                  • Size 67KB
                  • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_home_and_garden.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                  • Size 33KB
                  • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_internet_and_telecom.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                  • Size 67KB
                  • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_jobs_and_education.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                  • Size 33KB
                  • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_law_and_government.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                  • Size 68KB
                  • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_online_communities.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                  • Size 67KB
                  • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_people_and_society.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                  • Size 45KB
                  • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_pets_and_animals.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                  • Size 44KB
                  • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_real_estate.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                  • Size 67KB
                  • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_reference.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_reference.json
                  • Size 56KB
                  • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_science.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_science.json
                  • Size 56KB
                  • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_shopping.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_shopping.json
                  • Size 67KB
                  • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_sports.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_sports.json
                  • Size 56KB
                  • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nb_model_build_attachment_travel.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\nb_model_build_attachment_travel.json
                  • Size 67KB
                  • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  recipe_attachment.json
                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\personality-provider\recipe_attachment.json
                  • Size 1KB
                  • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  prep_Activatable Class_Hermes_perf.cache
                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                  • Size 607B
                  • SHA256 7030d7b0e9e8972e876a00fea052bea4c48539ed73747ddf29b04ab02d8fdf04
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  prep_Activatable Class_Hermes_perf.cache
                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                  • Size 599B
                  • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  649c8245-ccc2-4bac-9211-59e953b891eb.zip
                  • Path C:\Users\Admin\AppData\Local\Temp\649c8245-ccc2-4bac-9211-59e953b891eb.zip
                  • Size 3.8MB
                  • SHA256 6fefb2a92306f096f4e34de85fdaa1e185ef1ddc1d43d8cc2731c58d90d477d0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  remote-settings-startup-bundle-
                  • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                  • Size 569KB
                  • SHA256 07f0ffd3225126e973406030cbaf81de7597c1b7cd3b338f5c75978f7594d507
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  tmpaddon
                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 11KB
                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  tmpaddon
                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 502KB
                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  T0TUGM0JZU2L3HOCLS2Z.temp
                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\T0TUGM0JZU2L3HOCLS2Z.temp
                  • Size 7KB
                  • SHA256 3e484ac9ade5e5ebc3c8e968a2105014602ad6b5902e88782b9e7a7e5c7488f3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  AlternateServices.bin
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
                  • Size 10KB
                  • SHA256 befed6bae035d7d297cf7dd5686ced575f49ddffb2cb8603f791fa2393ce1a9e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  AlternateServices.bin
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
                  • Size 13KB
                  • SHA256 0d3c9c5b53dfb377c19b02354d8278b98346d8b58b9d2fa12f7b4f64da84da90
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  addonStartup.json.lz4
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\addonStartup.json.lz4
                  • Size 4KB
                  • SHA256 3f529dd28409b2f3c6d68eb13ee0d5555e11732e984b214d3b7875bff237e961
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  bookmarks-2026-08-27_10_ig9BSvzqMRRH1BwXDrDz_eRECWf26z5Yu611ubSP8hs=.jsonlz4
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\bookmarkbackups\bookmarks-2026-08-27_10_ig9BSvzqMRRH1BwXDrDz_eRECWf26z5Yu611ubSP8hs=.jsonlz4
                  • Size 858B
                  • SHA256 31d3570ca42fa3f8c724b2b984b67d922dfcc5f8572d96f755399cc94719a591
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 87KB
                  • SHA256 5cfcc2e1254127aefa459b788c69ad9fc72efbb3ccf2051ff04704794ff7f457
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 82bc85526d7ce4142bef333c2cd3b32bb76fe5edba2bfd86525f730c78b7bfa6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 6d927774adeaf2748378d3a702c4eb416b87ef54dcf3a45c50fbd5c28798c063
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 87KB
                  • SHA256 589cfb97112e44d6f6c33f1b712e4912b5f3bf105daed3203248e9e9f959248e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 34a7a3ab8df4fdcef8c91090982a80dcf92a97061c3bdb0162dd9626b37ba494
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 87KB
                  • SHA256 a5441e35e8613e7717eda03d89d875fec180f4edfad31b99f9967267a1af5498
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 87KB
                  • SHA256 919b8f99e205a17cbcf4fb1f289c429a2a2e0087291f3739684b54365351feec
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  data.safe.tmp
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 41564e8a0b81a5e2a05c91a19f7126ab32d74e3e1949107f501ed1841b1bd748
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  events
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 bcdebc3f87d8e50439fe30d72dfc7535ff7d8ff72494c0b4682a59489b1e4b67
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  events
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
                  • Size 4KB
                  • SHA256 a34bed2a1d8ae2cd4a7e58e175afa834c85add9491360c32771fbff02474241d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  103fa051-1675-4cb4-b445-c230a1f8fb2b
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\103fa051-1675-4cb4-b445-c230a1f8fb2b
                  • Size 280B
                  • SHA256 300e4f4663a58318eb3b0920030d1e047a45655738dc1709fcd3f27b73992ae7
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  14830f2a-2a0b-45bd-be40-6edb7a278fcf
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\14830f2a-2a0b-45bd-be40-6edb7a278fcf
                  • Size 886B
                  • SHA256 3a77d6851c90fe6bed99ce6bc00e69382a1b586c33f8f7764342ada7ba4279e6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  39527a7e-ef78-4463-b508-27d231743b0f
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\39527a7e-ef78-4463-b508-27d231743b0f
                  • Size 2KB
                  • SHA256 82c997589594c8de9ee9c061800aaf3142f20ae6097a326c2b74583ec3bf16ef
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  5686f80a-6347-4229-92f2-26995e508159
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\5686f80a-6347-4229-92f2-26995e508159
                  • Size 883B
                  • SHA256 2c80841963741742421858fce3b537bf2035fff8de4aaad99433d09e0287732f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  5fe88e0c-d562-4ae0-9dc3-3db32c383096
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\5fe88e0c-d562-4ae0-9dc3-3db32c383096
                  • Size 235B
                  • SHA256 d1b60abdecab737bff04209643d26b5de136d09e7bdb8cbfa418e614650d6120
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  94999dbb-dc60-4cda-9767-dcd8dddd12fe
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\94999dbb-dc60-4cda-9767-dcd8dddd12fe
                  • Size 1007B
                  • SHA256 58e0050049ba7a84896e35fc548f0b77c370838bb97f1b51ad5e4ec0065a465f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  989ab609-19ca-452c-a1e6-4bb1d6450615
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\989ab609-19ca-452c-a1e6-4bb1d6450615
                  • Size 235B
                  • SHA256 4c633514ed672dadbbbc07100a309efca80b290c0a321718a551a630bd2006c2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  ed1fb377-3fda-41fb-8222-5b2ce9ed3430
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\ed1fb377-3fda-41fb-8222-5b2ce9ed3430
                  • Size 15KB
                  • SHA256 a4c80eb6128751770431a44b1e4c86fc4e5dddd9e9b5756d85ea0eb6bc2056de
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  f9e695b2-b9b9-4f68-a64a-f0438e5f833f
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\f9e695b2-b9b9-4f68-a64a-f0438e5f833f
                  • Size 5KB
                  • SHA256 fb2cc1af95a541efe1d9ed13c03472ce32c9e4ed7c65b12575a56b8f9bb18d1e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  extension-preferences.json
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\extension-preferences.json
                  • Size 942B
                  • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  extensions.json
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\extensions.json
                  • Size 16KB
                  • SHA256 625850f64beec002fd61fb1a68c16a0040fd2d0db5ae7b66377f724bcadadc78
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  gmpopenh264.dll
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                  • Size 1.1MB
                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  gmpopenh264.info
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                  • Size 116B
                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                  • Size 1002B
                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  widevinecdm.dll
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                  • Size 21.6MB
                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 6KB
                  • SHA256 b63456c520aee86b758c54e324fd7f7d4659a875a78442305b38200ee337830b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 6KB
                  • SHA256 641bd4c5c9cd506c4dc32732bf16345ad2a0ad1b613115026a7be2e2dd4f60c1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 6KB
                  • SHA256 90d5b1e7e9307aed31b02510c71ca877a58af4d6f46dc740b1829a8aad5981ad
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 7KB
                  • SHA256 0e87cf77b77fe6da1f01c2c4596673e9f7730810c91d5c3f3bbad80dc97615e2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 12KB
                  • SHA256 ca0df174cb3fcc423e66a8f0642cca09c59bd3e91145b1bad71777f0619825f8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs-1.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                  • Size 12KB
                  • SHA256 6dd4ad1a8aa72952da58ad4a3127012a8ff510e59997cccd1b8f24e0dffa3416
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  prefs.js
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
                  • Size 6KB
                  • SHA256 e01786c42417f3daa00088156f008ff0bdf58aa918dec26c7e4999686b53cd0b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  search.json.mozlz4
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\search.json.mozlz4
                  • Size 303B
                  • SHA256 027075f78ac1b8df96da7803ba917b5317d591018e36f0cc15daedf167c98ed0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  recovery.baklz4
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
                  • Size 152KB
                  • SHA256 aedbb99bdeed240c5250f79e610f97c1d9d30d0ef55ca613a4bc78dbcd5d8db5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  recovery.jsonlz4
                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 152KB
                  • SHA256 b869a982bc94351f827167550be5221796510d341aeb4a87ec637c8d05856633
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  memory/400-1127-0x000001DD3EBC0000-0x000001DD3EEC5000-memory.dmp
                  Download

                  memory/400-1156-0x000001DD3EBC0000-0x000001DD3EEC5000-memory.dmp
                  Download

                  memory/400-5134-0x000001DD3EBC0000-0x000001DD3EEC5000-memory.dmp
                  Download

                  memory/2496-896-0x00000120801E0000-0x00000120802E0000-memory.dmp
                  Download

                  memory/2496-923-0x0000012081AD0000-0x0000012081AF0000-memory.dmp
                  Download

                  memory/2496-942-0x0000012081D30000-0x0000012081D50000-memory.dmp
                  Download

                  memory/2496-924-0x0000012085000000-0x0000012085100000-memory.dmp
                  Download

                  memory/2496-958-0x00000120852B0000-0x00000120852D0000-memory.dmp
                  Download