hxxp://thespotlight[.]com[.]mx

Analysis

user interaction
yes
max time kernel
959s
max time network
951s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
12/09/2026, 22:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://thespotlight.com.mx
Sample260912-2jrdpswgnf

Score

6^/10

discovery persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
956	chrome.exe

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337262442242228"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3718455638-2296795630-1576855121-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3718455638-2296795630-1576855121-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3718455638-2296795630-1576855121-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3718455638-2296795630-1576855121-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3718455638-2296795630-1576855121-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
1212	chrome.exe
1212	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe
Token: SeShutdownPrivilege	3088	chrome.exe
Token: SeCreatePagefilePrivilege	3088	chrome.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe

Suspicious use of SendNotifyMessage 44 IoCs

pid	Process
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
3088	chrome.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe

Suspicious use of SetWindowsHookEx 13 IoCs

pid	Process
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe
4188	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3088 wrote to memory of 5016	3088	chrome.exe	83
PID 3088 wrote to memory of 3840	3088	chrome.exe	84
PID 3088 wrote to memory of 3840	3088	chrome.exe	84
PID 3088 wrote to memory of 956	3088	chrome.exe	85
PID 3088 wrote to memory of 4764	3088	chrome.exe	86
PID 3088 wrote to memory of 4764	3088	chrome.exe	86
PID 3088 wrote to memory of 1732	3088	chrome.exe	87
PID 3088 wrote to memory of 1484	3088	chrome.exe	88
PID 3088 wrote to memory of 1732	3088	chrome.exe	87
PID 3088 wrote to memory of 1484	3088	chrome.exe	88
PID 3088 wrote to memory of 4672	3088	chrome.exe	90
PID 3088 wrote to memory of 4228	3088	chrome.exe	93
PID 3088 wrote to memory of 4228	3088	chrome.exe	93
PID 3088 wrote to memory of 1560	3088	chrome.exe	94
PID 3088 wrote to memory of 1560	3088	chrome.exe	94
PID 3088 wrote to memory of 1552	3088	chrome.exe	95
PID 3088 wrote to memory of 1552	3088	chrome.exe	95
PID 3088 wrote to memory of 2028	3088	chrome.exe	97
PID 3088 wrote to memory of 5108	3088	chrome.exe	98
PID 3088 wrote to memory of 1504	3088	chrome.exe	99
PID 3088 wrote to memory of 2088	3088	chrome.exe	100
PID 3088 wrote to memory of 2088	3088	chrome.exe	100
PID 3088 wrote to memory of 760	3088	chrome.exe	101
PID 3088 wrote to memory of 760	3088	chrome.exe	101
PID 3088 wrote to memory of 228	3088	chrome.exe	102
PID 3088 wrote to memory of 228	3088	chrome.exe	102
PID 3088 wrote to memory of 1252	3088	chrome.exe	103
PID 3088 wrote to memory of 1252	3088	chrome.exe	103
PID 3088 wrote to memory of 756	3088	chrome.exe	104
PID 3088 wrote to memory of 756	3088	chrome.exe	104
PID 3088 wrote to memory of 1212	3088	chrome.exe	105
PID 3088 wrote to memory of 1176	3088	chrome.exe	106
PID 3088 wrote to memory of 1176	3088	chrome.exe	106
PID 3088 wrote to memory of 568	3088	chrome.exe	107
PID 3088 wrote to memory of 568	3088	chrome.exe	107
PID 3088 wrote to memory of 3392	3088	chrome.exe	108
PID 3088 wrote to memory of 3392	3088	chrome.exe	108
PID 3088 wrote to memory of 1752	3088	chrome.exe	109
PID 3088 wrote to memory of 1752	3088	chrome.exe	109
PID 3088 wrote to memory of 3804	3088	chrome.exe	110
PID 3088 wrote to memory of 3804	3088	chrome.exe	110
PID 4424 wrote to memory of 4188	4424	firefox.exe	115
PID 4424 wrote to memory of 4188	4424	firefox.exe	115
PID 4188 wrote to memory of 4868	4188	firefox.exe	116
PID 4188 wrote to memory of 4868	4188	firefox.exe	116
PID 4188 wrote to memory of 4868	4188	firefox.exe	116
PID 4188 wrote to memory of 1192	4188	firefox.exe	117
PID 4188 wrote to memory of 1192	4188	firefox.exe	117
PID 4188 wrote to memory of 1192	4188	firefox.exe	117
PID 4188 wrote to memory of 1192	4188	firefox.exe	117
PID 4188 wrote to memory of 3212	4188	firefox.exe	118
PID 4188 wrote to memory of 3212	4188	firefox.exe	118
PID 4188 wrote to memory of 3212	4188	firefox.exe	118
PID 4188 wrote to memory of 3212	4188	firefox.exe	118
PID 4188 wrote to memory of 1592	4188	firefox.exe	119
PID 4188 wrote to memory of 1592	4188	firefox.exe	119
PID 4188 wrote to memory of 1592	4188	firefox.exe	119
PID 4188 wrote to memory of 2520	4188	firefox.exe	120
PID 4188 wrote to memory of 2520	4188	firefox.exe	120
PID 4188 wrote to memory of 2520	4188	firefox.exe	120
PID 4188 wrote to memory of 2520	4188	firefox.exe	120
PID 4188 wrote to memory of 5596	4188	firefox.exe	121
PID 4188 wrote to memory of 5596	4188	firefox.exe	121
PID 4188 wrote to memory of 5596	4188	firefox.exe	121

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://thespotlight.com.mx
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffabd43c728,0x7ffabd43c734,0x7ffabd43c740
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,17231955045548208881,399894178487649543,262144 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,15957209544390744458,6888390844512158298,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,15408207763620089646,9095553455768492541,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2328 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3108,i,16110703455589605706,3900094704772083035,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3132 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,820449737844545212,9134833659922762456,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5080,i,13320353122680149998,6743549969229276808,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5112,i,11091438772965732086,10404000247714731352,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3436,i,17217127932906219093,15537771074083212024,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5336,i,550469179049886486,12523871342997680597,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3120,i,12578900447345604743,2834095974803952822,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3124 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,17466618232350138773,924355866586359880,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3232 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5696,i,7953396877170226890,7602440060163566176,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=840,i,1693803906761588021,1673492872575049120,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3424,i,11698156191271276725,11541821360803850693,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3124,i,3613612182031672636,3061859759148265142,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5336,i,16187584096416598344,6775918980131679954,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5544,i,9773563720618029498,11287111945717254864,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5324,i,4632249597164606403,2035770480015122700,262144 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5576,i,8207068104697038127,13799289022950756676,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4480,i,3294553742445139761,15279803836280784595,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4496 /prefetch:1
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5576,i,12676856106590946254,17168738570469880478,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,17551335350772627871,14858379110995273526,524288 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5288,i,17249078635417984665,12011286694149986071,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5424,i,494336369116463697,16546388684156007219,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5080,i,12304434561301828170,7086006794685877171,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=1252,i,16370159285544268873,5878225962041708059,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=3408,i,1686296186797429772,1750613283918979506,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5372,i,9473584285259914308,241688358809869901,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5416,i,13931723487226527466,79506835136039071,2097152 --field-trial-handle=2008,i,11718454233878481531,2497725577073513477,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:5608

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5092

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4424
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4188
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1964 -prefsLen 27100 -prefMapHandle 1968 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {ba0b340a-b38b-4a50-8a7f-acc574e2cf73} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4868
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27136 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {81f38409-eca1-47d4-8209-459cc861278e} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:1192
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 27277 -prefMapHandle 3860 -prefMapSize 270279 -jsInitHandle 3864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {1a0ec4d5-8cf5-4ace-a822-766df89b498b} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3212
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27277 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4156 -initialChannelId {47c0b646-cac9-4d0d-b7a2-9d748d5ab43d} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4396 -prefsLen 34776 -prefMapHandle 4400 -prefMapSize 270279 -jsInitHandle 4404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4412 -initialChannelId {66b92523-9dbd-41d1-9eed-c46a78d862ce} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4880 -prefsLen 35013 -prefMapHandle 4784 -prefMapSize 270279 -ipcHandle 4744 -initialChannelId {6e197f3a-7a9c-4de5-920e-56d1678d8603} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5068 -prefsLen 32900 -prefMapHandle 5072 -prefMapSize 270279 -jsInitHandle 5076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4948 -initialChannelId {9b592145-8c41-4dc0-b92a-4189e6d955a0} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5348 -prefsLen 32952 -prefMapHandle 5352 -prefMapSize 270279 -jsInitHandle 5356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5364 -initialChannelId {3eb6b160-9c8b-415a-a8a6-e73cd663726b} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2664 -prefsLen 32952 -prefMapHandle 5304 -prefMapSize 270279 -jsInitHandle 5296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5244 -initialChannelId {71527fed-857d-43c9-b14f-4f5e79cbbc31} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5696
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6500 -prefsLen 37328 -prefMapHandle 6744 -prefMapSize 270279 -jsInitHandle 6352 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6640 -initialChannelId {c643e3e7-58b5-43ad-9a06-8d0680bb8ec5} -parentPid 4188 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4188" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 25bd1b42cb9567a89c1d32619499f4ada682738ac43d1bce28b8d8ace20583bb
MD5 077f645a5b8d7cc29d05f273723aefcc
SHA1 c3ce24b0feac256959d83a0f9b0fbe432a4ceb36
SHA512 694a4dc4c4657e9f60fdaf659a4d191fc5f78ac82a7482222145c4351657cd1b71d31fbd648e711979ef8e591b69011715f82e82388108fa58529932ea6fa261
TLSH
T1F9E02B7DCD62EC3708FD0B1850554646EA5013572A514B4F3B3DC10D8FB067F918589D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d93f3ceab5ad11e26b39bd6cdc73a3eef8bdea03c4d503df07312acef8649d01
MD5 770ec46b41c0580a8ba9b36615bfafdd
SHA1 21c915d91ad0428335a87c787c2a2d192000ddfb
SHA512 7ba88a6bfcfd706c6851447d1f3ff25a4893a822086472caaa9741877722f2e3072fe30ebb9f715d3f482c1fa1561eb25515016c07c7125ac3f71b28440593e7
TLSH
T12551BEF7C7D8863D895156F8AB116E1FCE6D0A54132D3C26C8D8AE1F53E28B2D24069F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 828f8b6183ae5e194da64bf6d733d45eed132a20aed2de64cd2a4b00099a4283
MD5 42744384b3c60ae593c2c4b7fad24021
SHA1 253fd6eb80429eb4b94c44972bcd106b6e6e063c
SHA512 c585ed8f9672c5611cc360c88ec42ae901a988f4ff2146055079e0bf5cd10696886abafb3061c29c3f0a21c9b64dcaf6f2943a27ce3a0880e9c9ace5b4fdd6eb
TLSH
T10D51BBF7C7D8863D895166F8AB116E1FCD6E0A54132D3C16C8D8AE1F93E28B1D24069F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e2163169a1f9f94ebbd5809b562c0f68879bdb45ff7bf0ce95e06dbd68af611f
MD5 e51a094a47998a0fb3aad47d8a7f1aa1
SHA1 6237b15116402c50d98a6d7abf97680374bf13be
SHA512 9e5907b6a9d213661b2b7649bec7cc9442c71ecbb2c7cdf0295e73445b9ec5c584af79ac1fb897d9bb97caa4cfeaf886aa30c33719a4fa42fd8f0856345d579f
TLSH
T1FB51BEF7C3D8863D884152F897116E1FCD6D0A54122D3C16C8D8AF1F53E28B1D21069F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 25b4ab2ca884179b14f18d270dda03fb0bcc47e26c93ef5c6ad42ba1e871b5a0
MD5 9067ad99397a6ce51edd26282c325be2
SHA1 67bc955b41ebe6c1b9315e1e3879bd952d79c711
SHA512 227a22ffd6590d9f6a483d4af7f10bacfdd4b899ea3822ef621fff1c95609975248f684dc899b8120c32203c5b47dcfc7cfef489eb889d499202f39fa9a6d1fd
TLSH
T187F059A7D3ADB46740BF45A65E04BC0956B9AC3206512CF0CE9A826ED0C66F30B03843
MD5 SHA1 SHA512 TLSH

Submit Download

ef19ec6b-4db5-477e-8a0f-6ceecfe8d570.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ef19ec6b-4db5-477e-8a0f-6ceecfe8d570.tmp
Size 2KB
SHA256 a4c63b1543cd238e49f49417737153a987738af968449d8810e5cfddacf2761f
MD5 eb53e399de6254e3fde0faa3e2f5ad95
SHA1 2521339ead179da140af17478b2b38dca4d7e3fe
SHA512 f9141d0217a2f965a35b92cd774e515c509fd3f56abd92b008871f04dfd1d88a44b04a3c7f4d1fc420b0e45dc40f59844553fbe8abd56152c96f372b84579d3c
TLSH
T1AE51ADF7C3D8863D894156F8A7116E1FCD6D0A54132D3C66C8D8AE1F53E28B2D24069F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 649554642671c5243d33abee3153dafbc5ff167d0e64815c373c22bbc0d5f67b
MD5 eef4a8d31b27da307beac1b8be53a558
SHA1 c7bfb04a9e113a304e66fd6725c3db8852498034
SHA512 31bf04ab937204c819bd06590803bcf143c44c64ea21a82a247883def5f2e249f6bfb4252c689123d0ca6ee1e61ea8df04ab6b5274d8745a9aa87f81b5da2ded
SSDEEP 192:JRG6uwLUZVv7bTpAPRp2C9RH/Kb+WNnr8P9EeTRVyIsnAUge:JRGVaULXTUXlbOIP/3e
TLSH
T14C32842DAE60753B9CDBC21AF9617A93E7F5102531D02F44EAFC892C25E76CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 72a107792b923367a6164de26ed6016524b94404bdcf1ce8dab19482ca9d0fe1
MD5 a3914f1d199e35389fee0e0275f672dc
SHA1 5ffa5544e9fe93e73b46bad8a5479f56a345a169
SHA512 bd01c579bbe9f47da0a74cb5331938d2d09598e88e7128182719a55063aa74406c68e7b7432f46be6533be25d3fa984bade3ffa5a053e628a8ac923c12129632
SSDEEP 192:JRG6uwLUZvv7bTpAPRp9yR9RH/Kb+WNnr89wxocLEeRRVyIsnAUgE:JRGVaUhXT0XwbuICoQ3E
TLSH
T17A42722DAEA4657B9CDBD21AF9617B93E7F5202121D01E44EAFC892C25E7ACC2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 98282ea689bc78014adbd15b47cff073fee83dddbad52a75cbe7ba3a93b67fc9
MD5 6110e9ce5943d7cfd47a9e38eaf9b4a9
SHA1 65eae66584495653f360abb3ba7332c8eb4722d3
SHA512 5f500133e247da27f6c083a183d47aae72289844a09b37ab9c56f5657d610f590b72a957d959cce92ddcc378c6e95e290154adde986647de5cedf32dd9a3883f
SSDEEP 192:JRG6uwLUZDv7bTpAPRp2yL9RH/Wb+WNnr89y02dEeTRVyIsnAUge:JRGVaUxXTUXdbCIx2f3e
TLSH
T17432732DAE60753B9CDBC21AF9617A93E7F5102521D41F80FAFC892C25E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a7aed2805635536b2b857eb8a6efd067b7a75267653aa4806c8bfbb5648cefc9
MD5 77b14dc7684c54e8453598b473d459a8
SHA1 1ac60fe35279e7983f3d2a8615167adb957b70d9
SHA512 d9a5d5a276571307adb37771dc35685cf5edb3aee21d404cac4193d0ead50a067d4e16893d88b6873fdd529573885810d925cde2e8d1b33587ef29cc9c79b84c
SSDEEP 192:JRG6uCLVZIv7bTpAPRp9y9N9RH/6b+WNnr89VyuFLEeRRVyIsnAUgE:JRGVkViXT0XWbeIyuF3E
TLSH
T1C742832DAE60657B9CD7C21AF9617B93E7F5102521E01E44FAFC892C25E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 319752fd219a794ef6e0ffc276fab46dfd37a39532b9dd05a97c7b8c1c3243a8
MD5 2a0505e5786928af2af7fcf47380aacd
SHA1 72f1d981742f9acffc5e6e0f6ef0a7c8bef7a717
SHA512 f7c32bb163ef429bb743823b45fb962c2781bab363c7cd179d1bc9a7fbe02323f3da1a7431d34adfbccf3bd6aed75d8b3d664b27dc6e6fde06e98673e37d0830
SSDEEP 192:JRG6uwLxZ5v7bTpAPRp9ym9RH/Wb+WNnr8952WhLEeRRVyIsnAUgE:JRGVaxjXT0XfbCIiWB3E
TLSH
T16342732DAE60657B9CDBD21AF9617B93E7F5106121D02F44FAFC892C25E7ACC221341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 937b2f8888fc0e595679467aaf5eb1eb18ae4a450328930787efdec7ee1dae84
MD5 679ab125ec6163a14b56a1d06b1de1d0
SHA1 f0e9acf9a2007de74d435313784f17ebe9cc5454
SHA512 9c8b2ef84fd77528e90522787ab95414aa6380f194f531475dfff19608073f448616427a9959d9a50df930af1ef429cc0287889ed58a330a84add7ef97bf357b
SSDEEP 192:JRG6uwLUZqv7bTpAPRp9yL9RH/1ob+WNnr89y02KLEeRRVyIsnAUgE:JRGVaUMXT0XibSIx2i3E
TLSH
T1ED42612DAE60657B9CDBD21AF9617B93E7F5102121901F84FAFC8A2C25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a925b627273fa7ff385db1f2b10549f2e2915b4602e754b6eae6efe26ab3acec
MD5 8034be38413cd7b48b7be362a3c88acf
SHA1 a3d3ddc636a498b79f783e138e188929169efb9a
SHA512 302dd8fa0660c8b5f6d0d745e6fae5d1aab2e54cb44e7cb1e0aad5a5c79bf4be941720f3414cf2f62f04190696fcc25f6c58ba53362e3edf607ac4fe988b1792
SSDEEP 192:JRG6uwLUZ/v7bTpAPRp9yF9RH/qb+WNnr89k7gs8nKLEeRRVyIsnAUgE:JRGVaUdXT0X8buIW8i3E
TLSH
T1CF42831DAE64653B9CDBC21AF9617B93E7F5206121D01E44FBFC892C25E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 7682b505500481f3aadd2f25c3e8485d87099b993fd3cf3dbe6a9a8e1b87df28
MD5 806afde8d6224f31ffba2cba46619c5e
SHA1 d66e92852dffe754e46e6dc2fe633f76e908eee7
SHA512 1602ef929f2d65962c11887e09b5a347b3c5ece57ab40f2bebccfc771c1f732b29c628377f59afbe5ee2247d13d610e9c0a43eaa28eac8258f6362c90d52967b
SSDEEP 192:JRG6uwLUZNv7bTpAPRp2yL9RH/Ob+WNnr89y02/Ee9RVyIsnAUgE:JRGVaU7XTUXdbKIx2D3E
TLSH
T1D732732DAE60757B9CDBD21AFA617B93E7F5102121D01F40EAFC892C25E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a8a1a289b0c73257bb7711fdb3451035e5da658735fe0636e423adfd594f2ae4
MD5 0e6964104a63cca52a9bc1c8d2d656b3
SHA1 24714bd02358e7370b031d34bb454aa45d6a93e9
SHA512 18c0339e316ebe7a1d95731a328434d4a953a8f240afd9bf93f7a9f1847303d15fef10124adca57b3cdb9d0ffdedb6e65aa058d62c67e54929b792741b8e0596
SSDEEP 192:JRG6uwLUZ5v7bTpAPRp9ym9RH/mb+WNnr8952WhLEeRRVyIsnAUgE:JRGVaUjXT0XfbSIiWB3E
TLSH
T13C42731DAE60657B9CDBD21AF9657B93E7F5102121E02F44FAFC892C25E7ACC221341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 431e26edf56ce1952c0c76a400d0734af0fbfede49f16f7c2ceb68edcc769d7f
MD5 2ab8d10998ada5c3a1013f481470b6ab
SHA1 fa34c4962faab9f080c938800da76683f59e5246
SHA512 a9bcd6b6b2e6268abc02a22ddafb90efed4284491a5e63781c202421c32112ede64b2da4ed7ca58923aec810667cbf3b5e63f6076ae2de04ff3f29c6c2c8637d
SSDEEP 192:JRG6uwLqZ5v7bTpAPRp9y9N9RH/qb+WNnr89H0EHLEeRRVyIsnAUgE:JRGVaqjXT0XWbuIqET3E
TLSH
T1BD42822DAE60657B9CDBD21AF9617B93E7F5102121D01F84FAFC892C25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 8947277e37fde3414f5e2d688a3c8d7e79a45b114216d4be379c91a10b961983
MD5 ffbf5842883d59633fb6880e11400ff9
SHA1 865e6b495d35129760e6ff1dd71310b22c2337a3
SHA512 3a22ddea74558e9dd1bcf38cfbdb194a45ff1081326bc3ed3b4419119081027096179a394b02c37eb6350b7afd7d6f26f15f5838797952d3d1c8b3fb1ae49d3f
SSDEEP 384:DVjv27KxkXqKf/pUZNCgVLH2Hfgslj8XODvS+ErU336HGwMMYtbz:DFv27KxkXqKf/pUZNCgVLH2HfgsBuObJ
TLSH
T167520A6B64CC963F4FD8DA4CDC126F4FADB102577668096853FB9C1803A57CA114A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 2d8b742f12c077c5251c6d0a2fdf8522c4fb91dc066a446206638503e829c29c
MD5 7ad4c3f87dacca9432b9b6e2834245e4
SHA1 99f68237a7de7cac068a26e5d756ff3e3911c3b2
SHA512 8febb32c981bb1a3151817b4e629c52d2fa030ae4bf0163adbed106e7d6b3c541f9da92e66606e136741cfb0b7e582343e80fb7ca3f9e8fa69f61d99814968fc
SSDEEP 3072:XIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzC:fPtbmf1K49XLWbEPi4NTKlLzC
TLSH
T1A0D312217D11BCB4A9EEDB21A1801A16EAF8C84B953D7BE558DE3F4C05E3AD9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 e2b97e37e695e61ffe9686f1d50a55e7d0cec004a35aadae24c2a4f2219e76de
MD5 cb622245c7c0b75b5421a551c7a3cea1
SHA1 95c92721ae692a470024d2e4368afd407802589e
SHA512 3619c3f9ebe066526f19387a82d21a9aa3fb46ed4790ebf9c531aa1e50bc69e18010aeae0efd0480a02efce6c29119ec3b77094206ee864b9a970f558b400fee
SSDEEP 3072:58IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzC:5YPtbmf1K49XLWbEPi4NTKlLzC
TLSH
T18ED302217D157CB8A9EEDB21A1901E16A9B8C80B953D3BE55CDE3F8C05A3ADDC304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 76f2063e14e19395691f68185fa711e716f869bf631c9f68e1c65a740c2d1bda
MD5 e0b42060d5f486ccc89a6980c3c87902
SHA1 a6fed94c6aec95a5c8dc4e3ae34063022a12b51f
SHA512 037e1bfb304b34856a7bd485d4c7e2123c78d4e2a45823c149bf3e27041ee70f402ec3f25e3e871d15aab99944f5ff9dda1186e5d82979b410837280cdb8da53
SSDEEP 3072:FIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzC:hPtbmf1K49XLWbEPi4NTKlLzC
TLSH
T144D312217E11BCB4A9EEDB21A1905A15EAF8C90B953D3FE618DE3F4C05A3AD9C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 a06bc1e388927b899588a70cf9aef9a240999301de04ef165526215e14ecbf30
MD5 e4a953eb79898a5f04e4e4e25de9078c
SHA1 9a9c4d1f75f9298c26ba0fbcc35644a0b66d4b77
SHA512 c1a54c1802d6ee6ca988d658d8ccf780d74e2733d28362abb5d341d762a5da8920a1091e7a7a46696ef241a6d8f7e6c831a281aa25401224994a136718bb8998
SSDEEP 3072:98IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzC:9YPtbmf1K49XLWbEPi4NTKlLzC
TLSH
T125D302217D157CB8A9EEDB21A1901E16A9B8C90B953D3BE55CDE3F8C05A3ADDC304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 dadc7137b3b86a70289398e475908faa5b85ab0c416c42c74ecd7da80cbd06e4
MD5 47d852462b7d7f9be4b74bbf26d72a57
SHA1 52bfdf3f647d0ae54827ee1f5fde81df92f8bc81
SHA512 21bd8b60c691c39aa1afb853cadf8a4fef3658d89eca658bb7efa49ebe75a5584f9e05e03e00fb56c95aaefbb222d1385f7881548bf198896b296e4f9a37a081
SSDEEP 3072:OIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzC:OPtbmf1K49XLWbEPi4NTKlLzC
TLSH
T14ED312217E11BCB4A9EEDB21A1901A16EAF8C94B953D7BE558DE3F4C05E3AD9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\activity-stream.contile.json
Size 5KB
SHA256 52ec27a71f3e289dcd32946a579e9e855edc7835bb96905ec8365ab8fdb68d36
MD5 33b0b7b3a3bfd4b5e993dd32227d0720
SHA1 111eb5f02f92d5dfcbbb6bce195104fa009c8fe8
SHA512 25c94345079fcbda455dc46bf41eff0fd2507342c0fa6e1275ff01d3e63191b6e758b761aa7f8c978cddfbd7d40d49110067586b1983d593ab0636dc1977e2b0
SSDEEP 96:T/OMMKZwEdP5CMQpQtsgIoRAMOlYNT+mRYib:7TfdRntsgPfOlPmRYib
TLSH
T18AB1FB9FE8A0451327726BD06E563FADF243B017D9E4C65CA3D96831454831742EE8C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 b3a26df025bb233d58bb1132d5282b86c40c0515c6df004e3261d14fc6202da5
MD5 dbecf20676831cb16d2750f71a06fd96
SHA1 2c1055f894a089e7684d9fbc95f5f35446758956
SHA512 37580ca226a12969773ebf0a2e219cc5b3c349ef36c916ff57c6ee4a5f1e54210d309e88854863584a487a796c2880de5caaec23f0eb537aa301f1a95a95d8db
SSDEEP 768:7y+PHaGYN2FsNV2UdA1Ni+hHWI6OglXfZZ314YRPpu7P+GD:G4pFs72Ud8NR27OglXb15RxSGGD
TLSH
T1C673E8A3A7ECB1BB0BD037C62C4F796B52E1024AF34509C9ECEAC91CC18D655523A5F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5E43012191E7B1F510ACD5BF039D8BF1B9A277B2

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
Size 16KB
SHA256 c02840bc9d1a7b212592985ca03c684ca3c04f72326b232ee1e4a93c431a416d
MD5 8b7f4fc8f4ed83a0d6293484eed9cac3
SHA1 5196540c2d116e66e50db4c44942d46e695e0f01
SHA512 2c5e7afb7205b81e7cbaea5809dd5da738629abeaf9787f5dc34ceeb24201abd8cee303ea850d6f405087f02f8f90478c249f4273f6514ceaf2d13881fe8dc38
SSDEEP 384:HkCjiO024YlDL84KKDL849B7SOEAd9KVRaAcP+AWRMA6:EzZYlDL8lKDL8CB7S/AmVAf+hRMf
TLSH
T123729E3D5F013CBD25A7C1E8C5F9929A8D18B7A3CFE6806D21583D0DC698A69B0F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jikkdvu4.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

f577ab03-1d68-4792-8034-9fd6fefa331d.zip

Path C:\Users\Admin\AppData\Local\Temp\f577ab03-1d68-4792-8034-9fd6fefa331d.zip
Size 3.8MB
SHA256 9f1e30912efa87a9f722e3465702f94fbc2049cbcf30d2ef7348ed46701e61ac
MD5 f1d1337d9b3ff05f33b73ab1ba5c8bfa
SHA1 dda4cb05ed70b6d2517354dddd9b3207a5034545
SHA512 3404f68a4731a1d04b6b9cd68c3d7d3832cc8ade39a3b3aeb5535c00749de96eb03b4105f9b9dfb82f0708c3ea9920214ae1d22a36546b61738b539a262d869b
SSDEEP 49152:ghuQ0bjLLIq1TkZfo8osKQXx4hL7kabuTO7rgwRssJ6cehbBShs1K6JUCqjW/s2I:kuQhZ7Oo4hftgwRsI6cgSXnC/s234
TLSH
T12006F175D75C1A09C9CF83BA850C2FCE884F4FA68054EB6B7A6A997D5CA31F21F4484C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 547KB
SHA256 3c99bb81630ea69cc0ca688b3267114ce46dc39abc7933d7fe78ed86123a5afd
MD5 37159ade5ac3afb3bf07e03e98d91349
SHA1 ee1a188c57c466ac2855f25300937b8c1340d0ec
SHA512 fb61220c89b40f1eb75d9acb60b5a8a7177041e0fdcd3005b735a0fb9e135ab9b584f5ef936885f57e8a98c5a092e7942a73cb07d092ec2ed717e68577ffd2fe
SSDEEP 12288:w48SE5tAJ2YFeGS3JO/AYj6uwcLa0ldJaiaW4ne063tn11XDVlYR:wWE5tAcYFeGS3Mog7jLn7mjd69nnDW
TLSH
T160C4F2F9F7607CF3A7BE034B9D967EAD1B524226878FE0CC443B5BC2455362AAE64404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 5KB
SHA256 4f1eb2ae3b1372f9c1704b6a517caa8336ccf5720ca3dd701cf5bf0550e1320c
MD5 bff4c22adcc39d8b43bd784eaf7efc80
SHA1 3d786b4a1dae071a96589faac79545d3aeb9624b
SHA512 d57efe8f21b988564ca195d8b890c81b0020bf64bf2f384b76a4ff28784dc648b7189392a3b749d659e9bbd9ffbd36e755549aaaf77d567a0df534589ea59f5d
SSDEEP 48:jNYBd6J5Ugdwx8E86z7NRBd6J/6Bdwx8E8G7NTBd6J/adwx8E8Uk:2IZFiI/SFWI/CFP
TLSH
T192B18B010FFA0996F4F397326631BB47A673FC011B5B175ED2C26248093636495AEFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\addonStartup.json.lz4
Size 4KB
SHA256 d458ddd7d27ab7f7f815643eb38374bfd6caca31ae929142013846f339f24853
MD5 6863bb7d4ca528a6404dc806a4896958
SHA1 d55d0f15f838106628b9510f8118e083466597d3
SHA512 1a33fea484e9f07a4a298f47a335478d75df4e2ad74571bfbda3070161fd92dada1930b789e7bb4c8993eff9bfafdd67c57a47bbdd5d635c53ad7671791f22ea
SSDEEP 96:NvT7o4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nf52xxhD8rGvm6ApwnHUuhN
TLSH
T127A17D7AD541EFA2FD32C04348D93FB2E6D6AB7410B9C4D4F16A71294C74A731701340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-09-12_10_DTT68ftalKZyrpJkxmCbNbhaRzkwWwH7e9phbrxqzNQ=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\bookmarkbackups\bookmarks-2026-09-12_10_DTT68ftalKZyrpJkxmCbNbhaRzkwWwH7e9phbrxqzNQ=.jsonlz4
Size 852B
SHA256 5e6db0c2c77844d11db3e5119f082d7b4b25a781e29da7fc069593e7d5b5f745
MD5 3d5970847b537889922182f318667d01
SHA1 b3611be509dcffe5adcb93972423f10f94d8b39e
SHA512 b9ee65881d25a81d0ea043fd57c689d80ffb54e4737da7ba84f0c6dda9deafd0fcee65c0979e04f7e2f2da50e9b1108b7b5c05500f92a528d2c6a7cc49c45b58
TLSH
T10901864DEAF108D40AD1407B50425B99B5B37E038FC808FCFF8E086C5099D9093E9ACA
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 44KB
SHA256 10046bf2de6460b358bb2c904d2c545008c6287b831ac85617e2088126e8440b
MD5 20cb6b8bbede425a05e29ae3bb9eadc5
SHA1 0a3e2b7c29f073fc4f258d646842fae12508157c
SHA512 0ed85f6ca212e1fc2f964396bad8302def3a2e2ad972f003fa2d94ebf712f2f2f4034aa5edb22427beca78cd62a636873b9c08070552eaf2569ee9d6ece50d36
SSDEEP 768:jPsMtMqwVML1GcmhumllXQKPhuQ/pcUnyMabnbIb0bPbjblbLb2bv1G/MMwuNLvh:4MtMqwVMeA01G/MMwuNLvm1ETH
TLSH
T10E231144EB1A953FD42802BB9CE217142F78F889591A2F67365C64386C872DC3E9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 1667f5df137560c969fcae6bbe7ad1fc4133834d5881de9a5aab5feb798a02d8
MD5 7d6bb172191ce9c58b85739171193f52
SHA1 6aade3261db52171833cde9e1b34bd176976839b
SHA512 eab6dc82513077dc8fd03b6e9adbd76e22cb37d5ebc2819817686228f0e80dfa37e4801f2b665f168bab7846ef196ac322ee9543c5230e92e5fcfc30a580d783
SSDEEP 192:Y1d66Joz1zgCl6mc0dnOv5zboAeZZxyjBOQ:yd66Joz1zgC1jyborZZxyjn
TLSH
T1C8E1FC68EA28863FC018037BCCA21B550F75389A9C4E7F29359D650C2D572DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 52KB
SHA256 041e9f50ad1a3b996f966aa9cd8f78507879420d291743bf5ecb4df4ac4daa11
MD5 e4b1c4401200c54efbd242c00990f3e9
SHA1 1b9ee0ace773f07e0d5d94f796accb124b8e3fb9
SHA512 16e63fd80b9827c1f1c3f751948b217dc68cffa9ddd18a0bd45123e0b2cd20d9ca3c47aadac3aa511346b39dc3491772a205aae39b62b5c6692e69880ef6ccc3
SSDEEP 768:jPcKs5JjNqEuvV5S6GcmhuURIKZBHL1NMUnUPAMbFbwbvbibWb0bLb2bcb1wFyWm:K5JjNqEuvV8mFwF99FK9fBtW8qtS
TLSH
T108330F44EB1A953FD86812BADCA217003F38F889591A2F57365C64787C872DC3D9E16F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 44KB
SHA256 df08f89f93e868457009a5b4fd047b737a347c712cabeee3a69533a4f9e2eb6d
MD5 5b604d6c10b323ac7eb89c00b0aa4d6e
SHA1 1011fb3ad9dc35d82df9a51176288535b4f2a7e6
SHA512 3ff765ddfd05d66174fe289afd3e3810fa5f0b422884286df5fdf23dc0f16696ee1e05612b83259a5b618e9e3d66811837d0d41e174dbe90934433e0a3be362d
SSDEEP 768:tK5PsMtMqwVML1GcmhumllXQKPhuQ/pcUnyMabnbIb0bPbjblbLb2bv1G/MMwuNo:nMtMqwVMeA01G/MMwuNLvm1ETy
TLSH
T196231144EB1A953FD42802BB9CE217142F78F889591A2F67365C64386C872DC3E9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 37c56eed06b6dded32d338d276a67bccb2327c1df9ec694916ad8cdb0ef4a744
MD5 807c1f16816cd79ce2ad40b195e869e1
SHA1 cff9a0d40969619103d033b0f818da2dc1d946c8
SHA512 3be88a267ef669e14fd4704708b50b461194f560272b9a70815253498666833ee7d0a41e624b29eb29c05b38a13fe737b53dd4d7411dfa923d5e050bb541e979
TLSH
T1CF61B658F628863FE448413ADC925B441F347426A8AF7F2A35ACA04D1E4B3CD36CD03E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 93a84040bf82e923ed92a8110a3d02c881bad53e0ef4fece837e55ec7b6f1d9f
MD5 424c73f83f0813408aea6df6c69c057b
SHA1 1a8bd9a328278c1cd847254dae4647dafc53c8bb
SHA512 5432c984fb084dc44f722a1e0dd5e74c4fdf2a6f8ebcbda1221af0f187efdd957db43983c86a4797c525eefba9f80aa31b661c3456f6b86dfbb3ebd30ab4efe1
SSDEEP 192:Y1d66Joz1zgCl6mc0dOOv5zboBbZxyjnoz:yd66Joz1zgC1jrboBbZxyjs
TLSH
T108D1C928E638463BC448033BCCA61B510F76399B985E7F69359C240C2D5B2DEBB8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 c3c969591c9592c8e63bcec7a85215a3b25e396e7ab1e5e509c59d052b58eafe
MD5 f93900b8c85ff6d44c51cefea04ed43a
SHA1 01a4276688288e75aaf582edfe1c12978fe2de89
SHA512 bc947d947fcda12c3b5186622501e1bfd1f37ae2660e23ce071d081a912cc4b5d7fda61c948b0a1b54b2ac146f62249b890d19aff8e82dd518e2ac4b85e5f95c
SSDEEP 192:LOv5zbombZxyjZxu1d66Joz1zgCl6mc0dz:UbombZxyjsd66Joz1zgC1jd
TLSH
T1BED1B828E638463BD418023BCCA61F500F76399B984E7F6931AC240C2D572DEBB8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19409476-ef2b-4d25-aaf3-2e913f699ab7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\19409476-ef2b-4d25-aaf3-2e913f699ab7
Size 235B
SHA256 930d6d9a55f0d50f96d5e1fe8e07eeef7b029eaf31c3494a6d2a19bcd502278e
MD5 ec0ca96e90eea02cd0253e49b22e8fa3
SHA1 7cc5045eff16c6f345bfa42d2b3ef43a15c0b7ab
SHA512 d28bc1751948f63a4d0adbb9999ababe430e253927ec82cd9dfbeed9d9b7b10f89ef0b125d8ea25fa3472dff4b767564384628ffd9be1166d338260a27d3bf17
TLSH
T176D095D418CC171C48180F07B0E06DC530C44C3310645D50C552457445FCACCC15150B
MD5 SHA1 SHA512 TLSH

Submit Download

673aee7c-2573-43d5-8729-ff8b2fa928d2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\673aee7c-2573-43d5-8729-ff8b2fa928d2
Size 2KB
SHA256 5147f9ba41604d1645d962400dc82632a21fc4ce25535cef57d6ccc85b9f3334
MD5 4f00f54d4c07756ed96a9d17b1dd6e75
SHA1 94031e9a9adad6aa50a53985ef2131323ef88959
SHA512 7502177c5884c5d3db3cde0a9b3858c67c567fd9d48950cd954b0a3270e9be5d3804da4e97194066d723f41aa3106881b32457dab011b9f8e6b4bebda388cb55
TLSH
T10441115CB5B85D7798DBF24E94D2334F57608A1340822C83AD51EF0C8C966AD33AA556
MD5 SHA1 SHA512 TLSH

Submit Download

778357e5-0bbd-4d58-828f-77f4501bd81a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\778357e5-0bbd-4d58-828f-77f4501bd81a
Size 235B
SHA256 76eea97186e0ac3bea44ee268a2a0e52bc103ca638eae8baf157ff634d0f4efd
MD5 a761b572aced9268dd5ae009bac13787
SHA1 d1863867e6ab4e6e0fc338ad91dc399976e99a37
SHA512 319d01efd14135643d3232177bcc4e0e4edd873ef0cc6dfbe9285511546adb1fcb642f47f590b352e3773be63fc84c0c77e555f306a6ff45327bc60a2e1cde15
TLSH
T146D097D92898A72E0C002F16F0B839CA70548C3354A46C20A69109B889F8AC81232A47
MD5 SHA1 SHA512 TLSH

Submit Download

8bd2b068-dee9-4725-a388-845b48c8a63b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\8bd2b068-dee9-4725-a388-845b48c8a63b
Size 15KB
SHA256 7f83473d2d2ee8fcf7521d7f3be6ee55448ac6e33aaa123a387924c829e6f530
MD5 92480648bcac9642285a8a831a8b1926
SHA1 c4fad49c1b353fcabc37ed5dc27228451f705fe3
SHA512 d85d9791de2cefed19e4c768c4a30115acbf0264e053568d62c857548c334461c92ebfdc16f2d80f8039bfae79939ba62c06819fab9c0e5ee19dec2fd5bf6319
SSDEEP 192:/kkcXuuRifGKJwzaP/hR8L4BTTkp1IP1kx1r42jYFhJ/TWj3DUQ7gi4/CsFQV+zk:/5QRiuKJwOPH8L4Fk2Er42jYFASe
TLSH
T12F72B8562860497A8651E36998FCBFC3F2F538CF4C419FCA8BE4BE085DDA06D112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5fefb1b-50df-4e6c-b10c-b0473d60d95b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\d5fefb1b-50df-4e6c-b10c-b0473d60d95b
Size 886B
SHA256 591e6204b7701d11347a997a189f47ad2829e54de709f875c007093bf86301f2
MD5 49cc0bc58ccf9e187d85433b0c77ae56
SHA1 0df58801cb22b8e6bf3d1bd8ccb39dc66bc23b86
SHA512 94767448619fa7cf5b56d344ad72c1a7aed8528adc29ff673e7e70680d60de88e369eed82a873e9aec5ed186abfe96aa085e4cdf286e511a2dbf51e28a788647
TLSH
T1F611238859747AB28C6CA34BC9E17B4347E43533D0C959543EA51F184CAB51DA3A7707
MD5 SHA1 SHA512 TLSH

Submit Download

f2d48d23-d760-4a3c-bec6-701c536a3ecb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\datareporting\glean\pending_pings\f2d48d23-d760-4a3c-bec6-701c536a3ecb
Size 883B
SHA256 a66115c26354fb426f7c3280d5521b1686802797941edc61b61b2fbedb364345
MD5 0f9bb6b84b7c866a8ce9ed3026df0e50
SHA1 5a9babfbde3babb5216efc98f81b2a68a1bce947
SHA512 0a9c9adaa641c8100289073477954291a58c6ba604ee9ab27008235f4e9cd935b4c4806433bcc277e53ffcabc6583cfb0d7c99db20c94da7e9c8b766d2f67d55
TLSH
T1DB11048496707972CC6C930BC9A177064BE87933C0CA55543DB51E180C7F92DA3A6607
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\extensions.json
Size 16KB
SHA256 197a88056224e3b795cbe3ad7c01db2a69a937860cb2154894f7a1d885c7442d
MD5 9acf9bd8c1b96776b2f6843c9cdb4c51
SHA1 6c1e56f50b3eba2bcacdacd0484a6d9faa5d0a8a
SHA512 e33356dee60ce43951e612f6302e492b6e9cb1bceed5fdad888905e355d305fbe0c1c87b58694c4521755a690e48087074d6c8ecc955c60ee1b957a4cbfcc7c0
SSDEEP 384:ykI4vxUmldv68dhWT94zh96o7L4HuL4PctL4HHL4HYL4H+d4h0:FI45RffXe4T6Q404Et4L4a4u4m
TLSH
T19F72421545048EB8294FA78BAA367E02C37D473B60845C78F4DD8FC842FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\prefs-1.js
Size 8KB
SHA256 1bb4d356355b3f7fc95b8b712558f3e38b218fb718817f678bda566aac47b983
MD5 a87a7f364d4c36eda23a52a49fa4cece
SHA1 3e518f7b931a0c782f8fb014f4df2cdf0390b66e
SHA512 5fc89611fbed573b0ff4a2982e1cf46d2df3682df694bc0bb7b0bbf2906c66c3eae8a8bda754a937ddcd715413b8d25fdccd8d25e0c79f10838ff21d97ffdf89
SSDEEP 96:xHXtBTUWqGqQrf4G7FObzSDSSlkdv9jvnEWR+YdBBw88AjAKowZ8L4cn4i8rcGS:RtgRcf4G7FBSSmR9BBw885KowNm
TLSH
T121020E385044CF7F64F676BCAC2449705A62063BB6BF68D710BA5885454CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\prefs-1.js
Size 12KB
SHA256 7fb5d26bcf7d688517420ffea0b3ee5f5d4c66f202b33d47ce104f05eadcae7c
MD5 58f7fa7d0d1f6964a3aa4904c9843792
SHA1 22d6b54a58a10ebad7551f5d55fb7a3dd5c0a26b
SHA512 91a7c7bc4f1f60a804e24bf7beab47a7f69ec58166790c5dca330a950acaed8d57edbf892085a2b48d7bbf53841eecaff89a4e91de75730950e2b47be2733ce1
SSDEEP 192:ttgRcf4G7FBSS5LR99/XOBw88UYco5yjP:t133RYwfgz
TLSH
T12042CF3C50848F3F64F632BDAC254A7019514627B6BFBCD305F998D2484CF6941EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\prefs-1.js
Size 13KB
SHA256 d87eb2ea0801941163d88127cb7a0f1ef786b31e42354afe9a71b7086aeaf8f6
MD5 b1d40152f42061b1b6e87b207600ddd6
SHA1 826d6beecafb1318c396809e2477905752cd9921
SHA512 6bc3bf9a93c7abd3a735a17a3dd0f87c95b43927dfcd9f372d1b03d13017a4480c9ce880c936a6bb71300872aeaf8d0a42ecc83db7dbe0e73d7a1b448106d3d5
SSDEEP 192:ttgRcf4G7FsSS5LR94/XOBw8V0zv6Rlg9fJ:t13kR9wg0+GR
TLSH
T18A52CC3C50948B3FA4F2327D6C249DA119910677B6BFBCD705F98892444DF2842FAAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\prefs.js
Size 6KB
SHA256 59d951946d93b5f65dbf4e61029e54455e17a80ee80c7be43d7ec732739f2edb
MD5 15584f348bb2d09af1cb04a4d2b899b4
SHA1 0f1a075f2f2178e4b77bf3acdd286ae07ccf0239
SHA512 b17a593b084e988cfde8ad93653ca16d2782d72a8d8f4b7dbed6726fc5b7e824aef91fd18a70b8bfbbc76eebbe8e5e5c523cfe3d649c93815880b8dffca1757f
SSDEEP 96:xHXtUTUWqGqQrf6N21zS7ESSlkdv9j4nEHsdCBw88P8L4cn4i8rB:RtxRcf6N2eESSkcCBw88Hd
TLSH
T143E11E789048CF6F64B6776CAC648C319AB2013B77BF68D750B65484054CF3882F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\prefs.js
Size 6KB
SHA256 aec34a68e7e9aaf6f58fbda7a5075a7601fab4d4c86fd5e1da8236854a7088e5
MD5 e8d5f6f1d98b59aafc48613d2a64c469
SHA1 1c9f2ab57046e23f1495be1e55113c8dd5751341
SHA512 8a2c2604d036b4297f7b22b7a6a8853d2bafd10cc1eaae4c6ea102c8bfe1217b0bfab83b94b772b4d8459b3786bbdb8a07b254649f575a7b4c3c7896d0437b1f
SSDEEP 96:xHXtUTUWqGqQrf6G7F1zSDSSlkdv9jvnEHsdCBw88P8L4cn4i8rB:RtxRcf6G7FySSXcCBw88Hd
TLSH
T1A7E11F7894488B7F74B6776CAC688C319AB2013BB7BF68D750B65484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 f65fd77bc57cd4fc1f5801055474200a7de3dfc58fef7ff6583f35c43b63f795
MD5 d770e89f70cdd1c067d2dfe43a0ea651
SHA1 810af6c7bcd1c4268e389d553503acf4b833704a
SHA512 9690306565d7d11c7626b3f0977c54dfeff03b012671e881047793125c43faf6132825a4fb264917185679646f58526cdf58732f5f26d0b87a8cb82a7b863a5a
TLSH
T1FB21D8846C0E18E2B684D18A84C817A96A597022C364FCD1DD5D5D0207E4C5B31DA39A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 79e48b6675daaf7596f34f59237acf53befe6551dfe729a3b2ef68be0fe1dcd6
MD5 6231f8eb02726ca65289e6a97798700b
SHA1 96caadb76fde830b5ae258d9a728dda97ac00a02
SHA512 cd5f8695d9c916ccb931c7e1763ba821f6b3865649efffedbba160bcc0c81d4bb5dc87bf1e72401f56fcb793a5a03d712c04ce9400380d1fe76e713507cf4390
TLSH
T14B21DA83583F1AFABE10E1A6C0CC07F6D6083432C17AA8E0D5994D0356EDC4A77C516A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 03e30e4508f9f0d042735647abb57e707e5d97d398166098b43e8847a5e7fc1a
MD5 c53285014ef90a81333a46d54d517275
SHA1 2443c7b15c285ebbe971d361419f7755037b5d45
SHA512 219449e5a071e90bb08b045a8a826611183a54be35c5ce43bc21bb2f6e8e931ba56a1bfd56d548e6504e9289b02547425dacc55305d3f276f2bf3eb5a1075a4e
TLSH
T18431DA85216F147DDA66595F83C50AFD2E8C3211C12CA4E0ECE9AA13057CE4636A73D5
MD5 SHA1 SHA512 TLSH

Submit Download

xulstore.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jikkdvu4.default-release\xulstore.json
Size 170B
SHA256 824b37fb029b3460c8dee14ac1afbbb0f2a5b90101a109ad3d824bc82966f647
MD5 d7db90990dabc8b1100642834d2f360c
SHA1 f72c992007d781e754b599ffb6ac47f27c91f208
SHA512 baadf0e40b1fa9df3f4a2390255fedccc9db9c012dafc86e210a00871f4bd14dbe914c7da61e1095cc47a0cdf44dc27627b42ccd9922d8dcf00968449d976da5
TLSH
T1BCC0C071202BC8443D13CA8F12C561543C34492441D011C170E590F0048030E8C041CA
MD5 SHA1 SHA512 TLSH

Submit Download