Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • user interaction
    yes
  • max time kernel
    389s
  • max time network
    393s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-it
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-itlocale:it-itos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 09:40

General

  • Target
    http://simosnap.org
  • Sample260910-lnfvrsgd69

Malware Config

Signatures

  • Drops desktop.ini file(s) 3 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 58 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 37 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://simosnap.org"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://simosnap.org
      2⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4936
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2028 -prefsLen 27099 -prefMapHandle 2032 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {a64dc24c-2a85-4a2e-8045-dc9d8b0f9dba} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:3084
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2496 -prefsLen 27135 -prefMapHandle 2500 -prefMapSize 270279 -ipcHandle 2508 -initialChannelId {45ace2ad-fdad-42b1-aa15-e83993370ac1} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:1468
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3824 -prefsLen 25164 -prefMapHandle 3828 -prefMapSize 270279 -jsInitHandle 3832 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3840 -initialChannelId {e2d767df-b23a-4584-ab4f-db482558fc32} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:4976
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3984 -prefsLen 27276 -prefMapHandle 3988 -prefMapSize 270279 -ipcHandle 4072 -initialChannelId {a8683ae7-c9ff-464f-b4d7-71293728e426} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:3468
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4404 -prefsLen 34775 -prefMapHandle 4412 -prefMapSize 270279 -jsInitHandle 4416 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4424 -initialChannelId {0d49a3cd-3a1b-4cc5-97c4-cf56761698e5} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:1528
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4828 -prefsLen 35012 -prefMapHandle 4268 -prefMapSize 270279 -ipcHandle 2908 -initialChannelId {c1709d50-9bf0-4de4-bea1-7cf9d2fa0e35} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:3364
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5128 -prefsLen 32952 -prefMapHandle 5132 -prefMapSize 270279 -jsInitHandle 5136 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5144 -initialChannelId {03d2126d-204e-46eb-9543-0ecc9bdfad7d} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:1568
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5160 -prefsLen 32952 -prefMapHandle 5164 -prefMapSize 270279 -jsInitHandle 5168 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5176 -initialChannelId {256d4f9f-e834-461f-bf86-40e8cea7994c} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:116
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5552 -prefsLen 32952 -prefMapHandle 5556 -prefMapSize 270279 -jsInitHandle 5560 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {c9b48720-cabb-4144-a5b2-f80f77e1243a} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:1036
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5464 -prefsLen 32952 -prefMapHandle 6048 -prefMapSize 270279 -jsInitHandle 3996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6080 -initialChannelId {e07b1d15-7120-461c-8601-e35b89093501} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:4960
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1648 -prefsLen 32994 -prefMapHandle 4912 -prefMapSize 270279 -jsInitHandle 4816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6324 -initialChannelId {41a92711-3c6c-4825-bad6-66bc5795d8c4} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
              3⤵
              • Checks processor information in registry
              PID:2340
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5212 -prefsLen 32994 -prefMapHandle 5312 -prefMapSize 270279 -jsInitHandle 6496 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4816 -initialChannelId {11b99771-0834-47b4-bee5-8647debc513e} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
              3⤵
              • Checks processor information in registry
              PID:4864
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5400 -prefsLen 32994 -prefMapHandle 5388 -prefMapSize 270279 -jsInitHandle 5376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5352 -initialChannelId {3aef2d60-c16d-411e-9d71-14ef92c67df4} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
              3⤵
              • Checks processor information in registry
              PID:4984
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6788 -prefsLen 33123 -prefMapHandle 2748 -prefMapSize 270279 -jsInitHandle 3068 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7128 -initialChannelId {782aca2c-2e01-492c-9988-a9c67542d870} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
              3⤵
              • Checks processor information in registry
              PID:5612
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6944 -prefsLen 33123 -prefMapHandle 6856 -prefMapSize 270279 -jsInitHandle 7080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6812 -initialChannelId {b6cecc81-a8a0-41f2-bb9d-ae8aac256072} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
              3⤵
              • Checks processor information in registry
              PID:5620
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6884 -prefsLen 33123 -prefMapHandle 4912 -prefMapSize 270279 -jsInitHandle 6936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7160 -initialChannelId {17cc969d-8afa-4394-856f-c70d08c546f2} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
              3⤵
              • Checks processor information in registry
              PID:5824
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7896 -prefsLen 33313 -prefMapHandle 7900 -prefMapSize 270279 -jsInitHandle 7904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6884 -initialChannelId {34e151a9-0ea7-40c7-bf2f-ba42b8135d78} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
              3⤵
              • Checks processor information in registry
              PID:5740
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 3 -prefsHandle 8064 -prefsLen 38455 -prefMapHandle 3228 -prefMapSize 270279 -ipcHandle 3016 -initialChannelId {2f704f2c-cf38-4508-a505-7f208d2c2c1b} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 utility
              3⤵
              • Checks processor information in registry
              PID:5852
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5584 -prefsLen 40023 -prefMapHandle 4704 -prefMapSize 270279 -ipcHandle 4740 -initialChannelId {1d808069-4669-4403-930a-85b7edb5d360} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 utility
              3⤵
              • Checks processor information in registry
              PID:6200
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7832 -prefsLen 36900 -prefMapHandle 8096 -prefMapSize 270279 -jsInitHandle 8396 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8196 -initialChannelId {49353066-19c5-4e36-b3ac-3342021bb3ce} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
              3⤵
              • Checks processor information in registry
              PID:7004
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8344 -prefsLen 36900 -prefMapHandle 6896 -prefMapSize 270279 -jsInitHandle 7136 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5372 -initialChannelId {c6d9866c-1e98-41d0-97ed-9751269ec66a} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
              3⤵
              • Checks processor information in registry
              PID:5972
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8824 -prefsLen 36900 -prefMapHandle 8828 -prefMapSize 270279 -jsInitHandle 8832 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4736 -initialChannelId {fdae83e8-b6e0-4dcd-8d45-7647cbe628d0} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
              3⤵
              • Checks processor information in registry
              PID:5196
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5508 -prefsLen 36900 -prefMapHandle 5224 -prefMapSize 270279 -jsInitHandle 5816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6204 -initialChannelId {4ad49015-630a-4e46-aeb1-dfaaa24ce9c0} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
              3⤵
              • Checks processor information in registry
              PID:6476
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5740 -prefsLen 36900 -prefMapHandle 7256 -prefMapSize 270279 -jsInitHandle 7128 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5432 -initialChannelId {b30e3889-d4f7-4547-9995-161c8b20c4b8} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
              3⤵
              • Checks processor information in registry
              PID:6920
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5432 -prefsLen 36900 -prefMapHandle 6008 -prefMapSize 270279 -jsInitHandle 8896 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8904 -initialChannelId {e498a3a7-fe8c-4811-8138-42558552bdc0} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
              3⤵
              • Checks processor information in registry
              PID:2796
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6232 -prefsLen 36900 -prefMapHandle 6076 -prefMapSize 270279 -jsInitHandle 6480 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9036 -initialChannelId {4b0fe4e1-22d3-4a61-b850-c1b7cf5f88cf} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
              3⤵
              • Checks processor information in registry
              PID:6644
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6444 -prefsLen 36900 -prefMapHandle 9016 -prefMapSize 270279 -jsInitHandle 9020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6600 -initialChannelId {70f141d5-3a65-4b6a-a739-2a417435d4ba} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
              3⤵
              • Checks processor information in registry
              PID:3732
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9016 -prefsLen 36900 -prefMapHandle 9156 -prefMapSize 270279 -jsInitHandle 6868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8692 -initialChannelId {d6fa3af8-2503-446f-8a76-2e0a659bfb6b} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
              3⤵
              • Checks processor information in registry
              PID:5616
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8400 -prefsLen 36900 -prefMapHandle 4948 -prefMapSize 270279 -jsInitHandle 7020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8016 -initialChannelId {0787f9ba-1943-400e-9a5b-9e9e12d94334} -parentPid 4936 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4936" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
              3⤵
              • Checks processor information in registry
              PID:6548
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe"
          1⤵
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:1828
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc7e7fc728,0x7ffc7e7fc734,0x7ffc7e7fc740
            2⤵
              PID:5172
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,4075053144743462742,14382401688742286995,262144 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
              2⤵
                PID:624
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2272,i,1983030520158625816,1067899522853691080,524288 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2284 /prefetch:3
                2⤵
                • System Time Discovery
                PID:692
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,945311935093569909,11353465236640218085,524288 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2476 /prefetch:8
                2⤵
                  PID:3980
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,12638015240711711933,1534536451222050628,2097152 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
                  2⤵
                    PID:6092
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,7245880682175277191,8308904430119981996,2097152 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
                    2⤵
                      PID:5552
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4020,i,1201349937821409508,14477820819932664698,2097152 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4080 /prefetch:2
                      2⤵
                        PID:5180
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4560,i,120639291961913748,16985728923060353456,2097152 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:1
                        2⤵
                          PID:5164
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,11467740144238036109,3366896060763014248,524288 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5456 /prefetch:8
                          2⤵
                            PID:6608
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,9637293959317880706,787450517513503485,524288 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:8
                            2⤵
                              PID:6616
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,9746773325513816392,18367377868568504274,524288 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5488 /prefetch:8
                              2⤵
                                PID:6640
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4084,i,5575524358481911223,2483951873268328598,2097152 --field-trial-handle=580,i,4483166801547324662,4788089526898293766,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4020 /prefetch:1
                                2⤵
                                  PID:7120
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:6108

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      BookmarkMergedSurfaceOrdering

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                      • Size 6B
                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                      • MD5 SHA1 SHA512

                                      the-real-index

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 264B
                                      • SHA256 758a194065f090b10f405d313ac09a6a33cfb6492215d7055e2a237c0cb7b985
                                      • MD5 SHA1 SHA512 TLSH

                                      Network Persistent State

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                      • Size 3KB
                                      • SHA256 1444efc5194bb23904a2cb12e98efd1324cfca6b3c9878ff438bb789cab2d628
                                      • MD5 SHA1 SHA512 TLSH

                                      SCT Auditing Pending Reports

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512

                                      TransportSecurity

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                      • Size 691B
                                      • SHA256 c31a081f9eaeeeb716e95f4fe78e598deea834e43eb5467e80e6d68bc7b90079
                                      • MD5 SHA1 SHA512 TLSH

                                      Preferences

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                      • Size 12KB
                                      • SHA256 257e9c61a97c7cc34c46e5d6afbf653d7b748777ddccddd6ec646815c8b9162c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Secure Preferences

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                      • Size 17KB
                                      • SHA256 f9fc3d1d51c54cb59c76009730fef7ab919ef7c180c0ac258fbb52ccd5d4e46c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      the-real-index

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                      • Size 120B
                                      • SHA256 d50ef69b73e923eaafbb59117dd01fc8e53913cb0f85b9b04c4e96c004d4f4a9
                                      • MD5 SHA1 SHA512 TLSH

                                      the-real-index~RFe59334b.TMP

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59334b.TMP
                                      • Size 96B
                                      • SHA256 9050cc53357241a4e8ce70230ea59d08ce36bf0fc9aafc859c60be3913a7dcea
                                      • MD5 SHA1 SHA512 TLSH

                                      Local State

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                      • Size 116KB
                                      • SHA256 0f7e26b3509adc3eb485bc9a6dc1f41f5a2c66210cf15c605c92778c2d8f2a49
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Local State

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                      • Size 116KB
                                      • SHA256 fde99106e430f5f1e2510fb093828bdb57527939d9ab875378135ede96cf8008
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Local State

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                      • Size 115KB
                                      • SHA256 3e187b21567c83ff5f9f97a19264093a4fcc537236fcea57b0eb3d8795fe880c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      Local State

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                      • Size 116KB
                                      • SHA256 1f954c1340cc328495990e9417d075d465e48924b9e931ccee0c6aef8c7b1182
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data_1

                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                      • Size 264KB
                                      • SHA256 9ba04b355e0624bec6974c592c01f76d231046c7be7c712325968680185c9347
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      activity-stream.contile.json

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\activity-stream.contile.json
                                      • Size 5KB
                                      • SHA256 ab3ddf6a6775d9ff851758cb3374fefbb41d88b58db0067af2e7fb1759610da1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      13162

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\13162
                                      • Size 25KB
                                      • SHA256 8d87686eb3543a2c6617663b446779b870dfe51b1662a22151024453e032d2ee
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      14652

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\14652
                                      • Size 65KB
                                      • SHA256 04109520e329923c0292d4e40ef06539fad06343792275238f57dfb5681d4633
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1783

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\1783
                                      • Size 12KB
                                      • SHA256 4e8bbec93aa34cd8a356c6008e76631c1bdbc09a7d5f2ea2ff85ae6b4d560cf6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      21454

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\21454
                                      • Size 33KB
                                      • SHA256 436bb26afa872391e0f02dd4d8447228fe1b71fb5e5fe5a071709fab06129e69
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      22762

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\22762
                                      • Size 110KB
                                      • SHA256 caec7fbceccda29afeee86ea0dc66670c8443cde393a4b0314c236d7f22c72fe
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      25056

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\25056
                                      • Size 12KB
                                      • SHA256 4763fef2c1135091721543c496a23aed57cd024156f699644ed24a1ee7ffb11c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      27991

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\27991
                                      • Size 8KB
                                      • SHA256 1662a2ebf844d3bd595e417a98715e38a720e9cc95514a4c1a0d1565ee1de3ea
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      3382

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\doomed\3382
                                      • Size 15KB
                                      • SHA256 b39c9f05dc39521443c1248b0603b79496eb5f19c8a43bc47aede0a83489e7d4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      03FDF47CC75AD2C75D838FA941B828B1231844B9

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\03FDF47CC75AD2C75D838FA941B828B1231844B9
                                      • Size 94KB
                                      • SHA256 7a86904fbaf5c4e7eb302118adf66aebc3baea8fc55c882d19c033750edc30f0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      041DAF581F3FBCBBE24F93172C0C76219F3B259A

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\041DAF581F3FBCBBE24F93172C0C76219F3B259A
                                      • Size 1.8MB
                                      • SHA256 49977ab4a87d27844a7d456848b45d6b26e4fd744f5ab94b0cd9353c8c34812f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      05076CE6A73056541A7E3C72865FA99A741B9B1D

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\05076CE6A73056541A7E3C72865FA99A741B9B1D
                                      • Size 18KB
                                      • SHA256 63b852dbbd066af3ecd39ce99916948f0fb8ae4065e015eab94dd5b97fa2f58c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      09D5A69F4EFA07ADFE4C6B837352BFB64BB1268E

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\09D5A69F4EFA07ADFE4C6B837352BFB64BB1268E
                                      • Size 103KB
                                      • SHA256 a2b5c799fd7f82743be31f4059291aae98d700c3d3ef33b2e1e2a5cebd25dbb2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1281D6EC5FA66E344A37F4C43306C5ECA0C1803A

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1281D6EC5FA66E344A37F4C43306C5ECA0C1803A
                                      • Size 42KB
                                      • SHA256 cb2010530e19fbaaa8d7d30104fa01e910a2cdbc272890c35fefac5828ad160e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1929A721DDA3AD6FD87396E84EC38B150081C0D0

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1929A721DDA3AD6FD87396E84EC38B150081C0D0
                                      • Size 15KB
                                      • SHA256 48698c29497b573c0abea7c96dcf8667ffd0d4115554a26e1c5bc536b6070ba6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1BD25F33FE0C6F126A295F23F976CF139775D52F

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1BD25F33FE0C6F126A295F23F976CF139775D52F
                                      • Size 110KB
                                      • SHA256 cd590d3f960c2efd97addff5f06f0486fbcbf937d30f8bafa8c27a589944dfe9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1C0F1D1463732E257264F21050E42B9CC74DACAA

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1C0F1D1463732E257264F21050E42B9CC74DACAA
                                      • Size 116KB
                                      • SHA256 70be5343a659d58b960f5dc6cf36daf1fdd25bd6670a82a701e4097bab1b906a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1E93CBCD464A7F37285B091AF8F4A9BC2CD72010

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1E93CBCD464A7F37285B091AF8F4A9BC2CD72010
                                      • Size 147KB
                                      • SHA256 e81834aef7e128b36d44e1e9ba8c1c20be156ed7b679bef76dcd50132170bd33
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      1F89BEEB154C719C658C81228041AC5D05E26368

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\1F89BEEB154C719C658C81228041AC5D05E26368
                                      • Size 25KB
                                      • SHA256 cbcdfd0ca0cfc2d07fb2cc167ae35d77d6d28b27f23c814a1a65bdf9f2cb03c8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      2CA122C1C4360D9BE073A3B19BFCC982CD95AD01

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\2CA122C1C4360D9BE073A3B19BFCC982CD95AD01
                                      • Size 3.8MB
                                      • SHA256 a473a540a59227b3721e688a58d6cb5b2363be62459f8f295e40ef368fdb500c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      300F3CB08E34E5717BF68D2273C095999408FAAF

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\300F3CB08E34E5717BF68D2273C095999408FAAF
                                      • Size 13KB
                                      • SHA256 ffad23f38afd4eeb63491372637fb45ceb5c4ab2674519b99f53c174f2e4c732
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      343077950B1498D5423FC83518557B1FD4FD9419

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\343077950B1498D5423FC83518557B1FD4FD9419
                                      • Size 1.2MB
                                      • SHA256 4380d921c43636abe06ba24698602b8747e913abe5bf48da32151f1079a635aa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      37EEA383E5A38EACC60E7A36EEC6B5B1ECED6FC9

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\37EEA383E5A38EACC60E7A36EEC6B5B1ECED6FC9
                                      • Size 878KB
                                      • SHA256 d3ee4678e1e1e9066d2af70a75dc87f3e807c95c5d73f1edb5895b0245dfe803
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      3FE419A2115B9FB439235665D20B4E196D52C8EC

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\3FE419A2115B9FB439235665D20B4E196D52C8EC
                                      • Size 12KB
                                      • SHA256 ca28fb617f3d28144fa8d83aeb18862be1cbe3764102f96a4d69b4800697802a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      3FE419A2115B9FB439235665D20B4E196D52C8EC

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\3FE419A2115B9FB439235665D20B4E196D52C8EC
                                      • Size 12KB
                                      • SHA256 e39ea830feecce58dd4154cb821d2c3e2d34f29caedc01d678595898f24e8972
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      423D50CB0F98C32DC47E9A7C4618BC8DC90C9E75

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\423D50CB0F98C32DC47E9A7C4618BC8DC90C9E75
                                      • Size 116KB
                                      • SHA256 4a0dff7a401211019dd97c2e8f48b6e80f7320dda699979f46708f801dc27837
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      46102409E2B1C34A08304FED8C0D5AB08C8AF8C2

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\46102409E2B1C34A08304FED8C0D5AB08C8AF8C2
                                      • Size 17KB
                                      • SHA256 b4cf1f76d9222c12483092995b747f66c9e06eb3be8cd75ac161cf30d53123c3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      46876BDE27D7F45CD7CF650EF55F29B5867A6B2A

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\46876BDE27D7F45CD7CF650EF55F29B5867A6B2A
                                      • Size 158KB
                                      • SHA256 4d21138d82bd8fd2d9c3778a4cd6ca0ee5e6a427e0e96bd734003450fa28135a
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      4A0BED4109EAF7358F61C3B71059055376553751

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\4A0BED4109EAF7358F61C3B71059055376553751
                                      • Size 15KB
                                      • SHA256 f18aee0c83c125025e2aefd59a055fafd59f0971361594ed50c1be4e2461bbcd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      4BF75EF8BCB03B99865799D70C9FD338D3741134

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\4BF75EF8BCB03B99865799D70C9FD338D3741134
                                      • Size 17KB
                                      • SHA256 21c5b8d18e9acebfa7c1875229cb057aa1446c158669313ff5ea0d8d2d2863df
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      53223F39DDAD04D3AC9CBE1EEF28CE9EA2F83BF9

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\53223F39DDAD04D3AC9CBE1EEF28CE9EA2F83BF9
                                      • Size 64KB
                                      • SHA256 263498e0ec238f3d209b5de31f24249ed5927df3967b45e833aa460bed84aea8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      548B20A13B45B202905A4E582043CD7E4917AD2E

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\548B20A13B45B202905A4E582043CD7E4917AD2E
                                      • Size 937KB
                                      • SHA256 9492daee70612ab4d5cd16f73593fa3e31d1717677ecc01cc8a1633d8f8306ab
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      56E0CFE2395873574CF83F815E92DE316C910BD9

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\56E0CFE2395873574CF83F815E92DE316C910BD9
                                      • Size 19KB
                                      • SHA256 2c66a91821cf47692b0602e01ea68d8ad8acb8103cd8fd91f8123bc16484c853
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      57AE64A4F435430E6604C9C35B6F001CBE6D337E

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\57AE64A4F435430E6604C9C35B6F001CBE6D337E
                                      • Size 50KB
                                      • SHA256 50695529d95ebfbf4b21cf91fcd669d10d966ceebd988f5debea7a5928c909ff
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      59FD6143187B87909AEA65736E5D463D341C0D2D

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\59FD6143187B87909AEA65736E5D463D341C0D2D
                                      • Size 143KB
                                      • SHA256 b10c177f5cc97057cfaa983e07efa42516ea850a5b68fb36cae228b6b732c8c8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      5E43012191E7B1F510ACD5BF039D8BF1B9A277B2

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                                      • Size 16KB
                                      • SHA256 b242f4c5b6e64759fd0aa6b2d9bece549d7a95c187c672d207c5c01237a25b76
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      65ECCBB786B37EE3547651DA815435B1BDD17D2E

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\65ECCBB786B37EE3547651DA815435B1BDD17D2E
                                      • Size 4.1MB
                                      • SHA256 1cb158ecd1c7ad5f9ac4a7fc2ad4f0e0032b53f0b3a01d059bd6a04a3fce115f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      67DD34744177C0FA76E970D6E9FDF787BA9235AC

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\67DD34744177C0FA76E970D6E9FDF787BA9235AC
                                      • Size 408KB
                                      • SHA256 93b69d340c18f7591033fa1d623a55fa2ef3f44103ee49df23442e11459137c9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      6D89348819C8881868053197CA0754F36784BF5F

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
                                      • Size 16KB
                                      • SHA256 bb53724d6cbcb32105fd7ef783b98b6f8553bd0a82a6c885a6c2269146ac2778
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      71C7DF737F21D9F1A89B843E8D3B5E1FAE3C86DD

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\71C7DF737F21D9F1A89B843E8D3B5E1FAE3C86DD
                                      • Size 13KB
                                      • SHA256 fb3c9683f47f59e225581e423a36b35258f5fa4402696546fc027b3e3e7795fc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      73549CB72E6CEC989A135998844CA1E4E8D123B9

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\73549CB72E6CEC989A135998844CA1E4E8D123B9
                                      • Size 115KB
                                      • SHA256 607b952f1488fa3422028580b2a34915d00202bd9745b92dca0c05d199df7199
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      818E71ED4C05D0638438A95D69F4086593181E7F

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\818E71ED4C05D0638438A95D69F4086593181E7F
                                      • Size 125KB
                                      • SHA256 c05164235a874edef15c8a6467e96c20a2f8181f117d3a8aa8c6f30c38f75d5b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      847D6EB300E1DDFEAB693592C3CCDDC2485C2E27

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\847D6EB300E1DDFEAB693592C3CCDDC2485C2E27
                                      • Size 29KB
                                      • SHA256 81e74118c5a9af9d31a33804de4c12a27182b17cb267dd1c55bf508607aa0362
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      8BD00F970CFB7BF31453051819B8A6CAE28B0184

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\8BD00F970CFB7BF31453051819B8A6CAE28B0184
                                      • Size 2.0MB
                                      • SHA256 754df2b780f9d08527090fbdcbde8a10fc6f8814ff08c01bc2ba257255f7b0b6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      8BFFF2F2409856D5B4DE0465E95471AD2F58D6E0

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\8BFFF2F2409856D5B4DE0465E95471AD2F58D6E0
                                      • Size 20KB
                                      • SHA256 ea54a82dc0a71e04936513ac2ab42c5e12657e723593095bd8dde5c013246102
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      8DB50BF3389BD501BEAFC1845969FF9DD33CB908

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\8DB50BF3389BD501BEAFC1845969FF9DD33CB908
                                      • Size 14KB
                                      • SHA256 e1e7253e92e627e54dee10807c770979f07ad48023fcc0e4cda8cd99ffa0687c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      906E2420F942CCA7FA094CCA537659B1A4184B67

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\906E2420F942CCA7FA094CCA537659B1A4184B67
                                      • Size 51KB
                                      • SHA256 bbaef74f4979fe8e8834c5f1a233a90aedc5d0e76adec94efb69a9e572ef8914
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      966E4768B8B97ED59D615F4DB2E63B59334904F5

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\966E4768B8B97ED59D615F4DB2E63B59334904F5
                                      • Size 218KB
                                      • SHA256 284a7cd14ed588da70a560c4fef530d04f25871818e470ec56425427bf2f4ae3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      9A535DBFE9831E194C09D4CF2BFBF4D8D11EA7D7

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\9A535DBFE9831E194C09D4CF2BFBF4D8D11EA7D7
                                      • Size 56KB
                                      • SHA256 c82621ed2cfe2548763fef012b56786eb42e9ce16670b20e681e624c889c2fc8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      9C22EA6EEE7EB6C42B6C8A5B062821C75BC1568F

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\9C22EA6EEE7EB6C42B6C8A5B062821C75BC1568F
                                      • Size 114KB
                                      • SHA256 5f3315d5ab0c7478a7a36bf30158a1ef3ecfbf234e9ec0082938651574fa3a50
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      9D42E0B7AB938283CDEAD5121BB5259927902EFF

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\9D42E0B7AB938283CDEAD5121BB5259927902EFF
                                      • Size 26KB
                                      • SHA256 f9d9fd3ee24a1bae3c890f71ffeae5648796a2aca726d33e77311670c55301ea
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      A5A64014772084E816C037250DF40524F8AAE3D5

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\A5A64014772084E816C037250DF40524F8AAE3D5
                                      • Size 22KB
                                      • SHA256 76e6e286decfee0d2fdf5247c687769328f0c574a897dcb2acc4b39ad330b86f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      A79089D08FAB9F8708FB976D3AFB42B8C94B77FA

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\A79089D08FAB9F8708FB976D3AFB42B8C94B77FA
                                      • Size 676KB
                                      • SHA256 562635a415a000131318ef44a7e4b2f4055c306e1061cb268e5d66bdf40af4bf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      A9D3AF8C3E67767F5AA7480D63E2B4311A985AAF

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\A9D3AF8C3E67767F5AA7480D63E2B4311A985AAF
                                      • Size 18KB
                                      • SHA256 b280688cfd68207de6a22b0db1037df294f42aa9a32c2bdbe5146043a797c513
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AE588F57FD6EF6E542D0B4237524F0590CB14D7E

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\AE588F57FD6EF6E542D0B4237524F0590CB14D7E
                                      • Size 227KB
                                      • SHA256 580f18a985a0fed4b533545fb97d403c774ce93fcbfab1a0c8b07bb2193caf24
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      B379AD24CABC6496B9726745E1A42D9FEEE95206

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\B379AD24CABC6496B9726745E1A42D9FEEE95206
                                      • Size 19KB
                                      • SHA256 c6df15cca06febdf5f6ba70804e40ec5f01579e88d00729fe37dcdf79f060b5f
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      BDAC8BFEC7E807559F25956FE8881C0D9AF047DF

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\BDAC8BFEC7E807559F25956FE8881C0D9AF047DF
                                      • Size 2.3MB
                                      • SHA256 0ff85baf5712d7153728d225641d2252bf2e185e05b05223522fcf9e5f71859e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      BDD9FEB706D9050EC0E1B8CB335632B93B800250

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\BDD9FEB706D9050EC0E1B8CB335632B93B800250
                                      • Size 12KB
                                      • SHA256 e8a8ddbe2d5bfa159860e0c1f92275c0dd3bc25da541f1812f74dad318703726
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      C2D9CA323628CB71C42D636AD40311BC013767F8

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\C2D9CA323628CB71C42D636AD40311BC013767F8
                                      • Size 133KB
                                      • SHA256 9c0d1804f071f08b8c0f4ef4e9f8aaa8504608bebc20b245d4bdea20ba569b2b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      EA82010B3F05DE696C4F8337F9CA793A906B1C12

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\EA82010B3F05DE696C4F8337F9CA793A906B1C12
                                      • Size 27KB
                                      • SHA256 7f136d2f11da0da9cc312a78b15eec7d792f84b7a08b502721777ef419289bdf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      F2642BE88595D6A715373CCC74FD92B4F9FB009A

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\F2642BE88595D6A715373CCC74FD92B4F9FB009A
                                      • Size 38KB
                                      • SHA256 e87d1327a7c9042911dc6201421481ff75a94fdb341d8855e92b7b6da8482ada
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      F4DF3154C0481997BCA783A8B79F18A5401CB9B4

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\F4DF3154C0481997BCA783A8B79F18A5401CB9B4
                                      • Size 955KB
                                      • SHA256 2a38390c7dea7cf15fecb6c798f7b1d75871c3e2e94bc5136d331316a274cd93
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      F7FB84CD1B9AE7A659551B311342659659F7FFCE

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\F7FB84CD1B9AE7A659551B311342659659F7FFCE
                                      • Size 92KB
                                      • SHA256 0747c0f071423ab207f64c4d070728f1b4073f3f4548a352ac633415a2677be3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      FAD610E5CFBF67D1A4475DD3181BB209E6A04423

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\cache2\entries\FAD610E5CFBF67D1A4475DD3181BB209E6A04423
                                      • Size 23KB
                                      • SHA256 90a06c3b046c8cd4e6ca36748f5e1971fc400ad782ac9bdafc80c6ee82308b63
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      CbPb+9GtJ9LtRbCFOCBDfmg38HsJXY0LYG8PRaBEgyw=.ico

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\jumpListCache\CbPb+9GtJ9LtRbCFOCBDfmg38HsJXY0LYG8PRaBEgyw=.ico
                                      • Size 1KB
                                      • SHA256 fabcc0b43dc637a622322c132734bb53afbdc104f3daad3212802a46bbd914cb
                                      • MD5 SHA1 SHA512 TLSH

                                      webext.sc.lz4

                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\iorza73p.default-release\startupCache\webext.sc.lz4
                                      • Size 104KB
                                      • SHA256 5e49c9cd0216c8ec906149a852523b5cdfefe2131d0cc1318b0fa3edf4f3847b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      tmpaddon

                                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                      • Size 502KB
                                      • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      tmpaddon

                                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                      • Size 11KB
                                      • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      6824f4a902c78fbd.customDestinations-ms

                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                      • Size 13KB
                                      • SHA256 38256697bfef5f45d7684c64e50dcc7ab34c87bf9b7d0d1491927d94ed6f2a0c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      6824f4a902c78fbd.customDestinations-ms

                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                      • Size 19KB
                                      • SHA256 31c0e3cac11d93487f547c70b009f3f1eac67a0ae978b755f213741bfd32cdc7
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 35KB
                                      • SHA256 6d9989b895d222d2ce3b0819d7fd254bdb9b312177e3a188f91ebb994ff59e01
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 35KB
                                      • SHA256 4b6827d2ce46d971de13a7acf23520acca2138062ca0d87969fcb884d84d0d8e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 38KB
                                      • SHA256 6a0197426265c91215ca57ec9dc5becb321b856a100adb45985dae1580539472
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 38KB
                                      • SHA256 0b8f16d5436bfed9f0dfbcecc34272bc0d5de65d79118ec6b4cf16adfe4e87dc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 38KB
                                      • SHA256 486857b703801198e5df1db1149fadbac7b0c1c237bb54ba78293d6d5ba37ed0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 38KB
                                      • SHA256 012b92d232bb66afabbe2f56227bd99406c94b2ba3f8fc1a1f1587f81a459ff8
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 10KB
                                      • SHA256 ae2fecb61c383a12783cc7b0cce0f5a90b18e7cf773417ce774c74bf7b371ef3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      AlternateServices.bin

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\AlternateServices.bin
                                      • Size 33KB
                                      • SHA256 6cfa442fed3390077a99131b4206203a15e0f3abbab8425a013f9fe4352fcc67
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 5KB
                                      • SHA256 17b3c8685b072366d017739d54fb496dd9e12f124aede091ae7472df7566879b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 7KB
                                      • SHA256 68537968896539369ad942e1802a18f6685b377c3d75ae1ec77e02382c5c2134
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 128KB
                                      • SHA256 51d7b45d325fe3f5eff9635a818d556795773c1ba690ce9f2091975e5f9f10ff
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 128KB
                                      • SHA256 0dc0eff84a2e2b2e80b88e0b352e0514e135d132f0808a7054512cce0158b112
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 7KB
                                      • SHA256 57b6289b9234881996ffe64b5fc6edc428d6d00697ee7cca5f4207d6b4758054
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 6KB
                                      • SHA256 301e4def5ba857444046ff994b3838aca5faf039bc1d40d87ed8a61a780e8bb1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 128KB
                                      • SHA256 b175e2069e66d55a16ea48e0e2ba2dc3a9fec28fb25438aa7e6a8ba49fff0295
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 3KB
                                      • SHA256 03dc90b7e4ddb80449274f98b8a842d5a06707a844a2f4e3444ca024320c83e2
                                      • MD5 SHA1 SHA512 TLSH

                                      data.safe.tmp

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
                                      • Size 7KB
                                      • SHA256 a2657213329e6d7c04ae52cff125fc989fa13055bc5a15721399ae0c848c88fb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      events

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\events\events
                                      • Size 1KB
                                      • SHA256 2d1e69b39760c20ac0b16b1bbeecda4810f1614109bc51f45f3ec37659ca00e7
                                      • MD5 SHA1 SHA512 TLSH

                                      events

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\events\events
                                      • Size 5KB
                                      • SHA256 427506734698235f3555c20dad836089721eea0d995f3cd75e671e8d2845aba4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      3945c7ff-a56a-4c38-b5f8-f4cb63f4e923

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\3945c7ff-a56a-4c38-b5f8-f4cb63f4e923
                                      • Size 883B
                                      • SHA256 f0c91f03ff12cf0ef7ace8730a6f677edf2f8a5e672b06d039e66ad11509a5be
                                      • MD5 SHA1 SHA512 TLSH

                                      646db448-f2a9-4aea-9601-3d4f57151622

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\646db448-f2a9-4aea-9601-3d4f57151622
                                      • Size 1008B
                                      • SHA256 ae6125e771dfc1ceaef3642a8bd0f05c34ed4fc925e9ef1f2c9a0b576c0fcee7
                                      • MD5 SHA1 SHA512 TLSH

                                      751d9497-b757-4034-ac0d-319bb46e3134

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\751d9497-b757-4034-ac0d-319bb46e3134
                                      • Size 13KB
                                      • SHA256 924c328203bb7b804574ab93d58d28462a941584fccbfea0f0a39f957fef8ae5
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      9813de11-2d31-48e8-b730-76e79b860e63

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\9813de11-2d31-48e8-b730-76e79b860e63
                                      • Size 281B
                                      • SHA256 7b63f42e6f4e6d16364cf31cf0f789a3283380e5afc22752c15f4d5380600096
                                      • MD5 SHA1 SHA512 TLSH

                                      a68b7431-5fc6-49ef-91a7-f4da8880272d

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\a68b7431-5fc6-49ef-91a7-f4da8880272d
                                      • Size 2KB
                                      • SHA256 5e803279f093eacd7362af84ad1557dfccdfa742ba5def3e1f302c56b92e751c
                                      • MD5 SHA1 SHA512 TLSH

                                      a7e054c9-7264-4aae-975c-f91fd1dbf0a2

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\a7e054c9-7264-4aae-975c-f91fd1dbf0a2
                                      • Size 886B
                                      • SHA256 3c87f296e49815765b742c17563c37b9f337cbeaad58d864f187bcb55377e75d
                                      • MD5 SHA1 SHA512 TLSH

                                      ca82a1bc-1648-4639-b68c-ee61e85f79fd

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\ca82a1bc-1648-4639-b68c-ee61e85f79fd
                                      • Size 235B
                                      • SHA256 ba3e705a6cf8b983a2ea3a8c4a53034c3dcf147ea4d41c383f036fe83dd47f15
                                      • MD5 SHA1 SHA512 TLSH

                                      cdb8ea28-f6e2-4173-830e-5c8cd2cffbf9

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\cdb8ea28-f6e2-4173-830e-5c8cd2cffbf9
                                      • Size 15KB
                                      • SHA256 aa4d16c9b9e91a415776fd11b39efdefff4c3b6ac92889e4f840963a2d1ffab0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      f1757948-05dd-4113-b8d6-a3b1c0516535

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\f1757948-05dd-4113-b8d6-a3b1c0516535
                                      • Size 235B
                                      • SHA256 5edddabff941c64036da12676dbcdf80cc91d8f1d00159d4a29f8dae26315fb6
                                      • MD5 SHA1 SHA512 TLSH

                                      extensions.json

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\extensions.json
                                      • Size 16KB
                                      • SHA256 e800657fb315395550ecbc64933577129a471b933047b82afd40e45044135c04
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      gmpopenh264.dll

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                      • Size 1.1MB
                                      • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      gmpopenh264.info

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                      • Size 116B
                                      • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                      • MD5 SHA1 SHA512 TLSH

                                      manifest.json

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                      • Size 1002B
                                      • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                      • MD5 SHA1 SHA512 TLSH

                                      widevinecdm.dll

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                      • Size 21.6MB
                                      • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs-1.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
                                      • Size 6KB
                                      • SHA256 414b62b88d6e0d9c88bd3cd0b1fced52c5c8116e75cbffabe56228d07bc9d8eb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs-1.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
                                      • Size 7KB
                                      • SHA256 16d849ec63338e1a92f8a3908e1db0396f315969f2b4d1714a6941250ded5b9b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs-1.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
                                      • Size 7KB
                                      • SHA256 bfaccd672f27cce8ad093b83cc35994986ff85556d46f01a15c346e874c3e585
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs-1.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
                                      • Size 12KB
                                      • SHA256 ba417bdb0b2470e20e417270b5c3486f88e457579b54f45763b5b8dff6a0a194
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs-1.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
                                      • Size 12KB
                                      • SHA256 0eb89d9ba822eccba224e854923b91ff2271f1b466839825b1ae14b47527dd41
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs.js
                                      • Size 6KB
                                      • SHA256 eeba3bd4bdccf783102d637a78b079661499b095a4eefd2aa3570e8b64648205
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs.js
                                      • Size 6KB
                                      • SHA256 8f4d10367cf761315d556760e5a44535a1fd83b6d2ff0fecf9883b0c49c4136e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      prefs.js

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs.js
                                      • Size 7KB
                                      • SHA256 9f769a54789e2bffba10bf8c77564e8b241b3d0ae7a01d265b9d9055cbb33aa3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 15KB
                                      • SHA256 9a714e2981e48323dd1ddd34867395ba07aa9764759051a179faa09de8e5836d
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 16KB
                                      • SHA256 8306c6a93b57fad8ff090f5beb5f63fac0bb64e77fde4a76e2bbc2336f18c23e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 16KB
                                      • SHA256 514f868d5c0a7ad88795f949e2cfa5a7adb7cc818d52bfc62597e7f256212511
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 17KB
                                      • SHA256 75626aa9697d0c796cd2d5270b41c75e1fbbe3a29f7e0934f50c30662f94d298
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 4KB
                                      • SHA256 6ad94d217c55e380aec65071831bc5d59f66b086c2e3061718d210470a47cf19
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 15KB
                                      • SHA256 d3f764652fca8b73b59deae82509fefe8cbb3ce5a676531433c15541722dd863
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 16KB
                                      • SHA256 9d6dd57779d16cf7b3f8a1ac9f91d5c5a03a1997d555e135202c300fc9ac4773
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 f030cf4d5792d4b7fe76817127d1e9da60349bea9c45fc25a96b98864150e7be
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 b463fa4d569c2ea4b71dd2a38a3693b27df42bb0175fa616bb6e317b675b34d6
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 ba0ba5ef1145e7005de06d4f259950e67fc80dbe617c5e1d29c6b003aea50e90
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 17KB
                                      • SHA256 dc94f45bf080db65725f2ddcb462a70f9336095d7eaf7047ba755dcd98a77729
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 e0ac23c9ce9576002a5374461502a18a2355d97d8967c3c9c15832c53a815076
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 73340804831080d715a7b41d8769afb60686e2b200fe1adb066ff8c023b02b16
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.baklz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.baklz4
                                      • Size 18KB
                                      • SHA256 420f4262ea73566313c6da44157b79223e133766c921ab004fb7dddcbefd5d12
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      recovery.jsonlz4

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\sessionstore-backups\recovery.jsonlz4
                                      • Size 18KB
                                      • SHA256 747f32195952fabbc7e68262bf4c9e5148009606e798bc6316a4c087541d9817
                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                      3870112724rsegmnoittet-es.sqlite

                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                      • Size 6.6MB
                                      • SHA256 e9ea7703188ea5c778cae733278fc9214682c70aa9b8c4332c0072bbbef5b442
                                      • MD5 SHA1 SHA512 SSDEEP TLSH