1c5dc80c3138b9e478321757fa1af70f37fd0c63e7f7e8868ca63cac342be321

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
53s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.exe
Size 160KB
Sample260922-wp4y4at19l
SHA256 1c5dc80c3138b9e478321757fa1af70f37fd0c63e7f7e8868ca63cac342be321
MD5 52b662b614e719176c2edaab2ac140ce
SHA1 c1895e33aa93303a138e4a4bf9ca477d072c3128
SHA512 2394299080da5d2865f58ee19fb3896b3e713bc829242ed7502303f9c84004c66ac3f29b05da656bf0ebe6bc9784098f8c03e3d93b13abbcdc0d2d9332c3cbcb
SSDEEP 3072:hBv62tRcvXCDBTkekbiYb3q6b/o5BrBZnGH4P:hBv62tyAB9kbiEgXN
TLSH
T193F34D17B7A530F9E1778938C8524905FB327C754B61AADF07600EB60E676E09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Creates a file in the Startup directory 1 TTPs 2 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\app.exe	app.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\app.exe	app.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\config\systemprofile\AppData\Local\SnakeBackup	app.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3292	chrome.exe
3040	msedge.exe
5552	msedge.exe

C:\Users\Admin\AppData\Local\Temp\app.exe
"C:\Users\Admin\AppData\Local\Temp\app.exe"
1⤵
- Creates a file in the Startup directory
- Drops file in System32 directory
PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com
  2⤵
  PID:4168
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8f608c728,0x7ff8f608c734,0x7ff8f608c740
    3⤵
    PID:1912
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,12419312262318098158,13740970393738040154,262144 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1976 /prefetch:2
    3⤵
    PID:3312
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,12412259810014707770,16388476528646235414,524288 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2320 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3292
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,14116348836598690551,4707354713342824046,524288 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2572 /prefetch:8
    3⤵
    PID:2992
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,8218082038787407992,3392031097602680987,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
    3⤵
    PID:4904
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,16149872698830942497,1324554559297581864,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
    3⤵
    PID:1212
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3652,i,3499568279650801340,12928993723540648705,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3664 /prefetch:1
    3⤵
    PID:4320
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3804,i,2949724924231265161,17816068855246085070,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3788 /prefetch:1
    3⤵
    PID:4476
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3940,i,5457722416599680614,5247760716755773404,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1672 /prefetch:1
    3⤵
    PID:3824
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3980,i,9621765406508679445,3552974266232549840,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4004 /prefetch:1
    3⤵
    PID:4280
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3960,i,17654372952832230213,5873770395368044864,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4228 /prefetch:1
    3⤵
    PID:1144
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4260,i,2229172894144180964,10571257054854621581,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4264 /prefetch:1
    3⤵
    PID:3472
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4304,i,10138123815555517071,17015529628239442417,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4316 /prefetch:1
    3⤵
    PID:760
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4352,i,11063300145235408543,13648247916832255925,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4364 /prefetch:1
    3⤵
    PID:1012
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4392,i,465093231076963639,13311598207127908099,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4408 /prefetch:1
    3⤵
    PID:3512
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5136,i,317693104148457228,12552555949970768880,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5696 /prefetch:2
    3⤵
    PID:5216
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6480,i,11101812164618425946,10700290869670275028,524288 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6504 /prefetch:8
    3⤵
    PID:6020
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,11487011608423381870,12726104875536810160,524288 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6536 /prefetch:8
    3⤵
    PID:6028
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6516,i,1241874944734486847,14759321785848398588,524288 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6572 /prefetch:8
    3⤵
    PID:6036
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6756,i,396975216669220469,801430688834054626,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6820 /prefetch:1
    3⤵
    PID:1880
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7056,i,16022873158099531177,11927475711603521019,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7012 /prefetch:1
    3⤵
    PID:6160
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5144,i,11895141002814612436,18405258826571532091,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7164 /prefetch:1
    3⤵
    PID:6576
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7328,i,4036453092544289200,13171219864358016185,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7284 /prefetch:1
    3⤵
    PID:6868
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7448,i,17317238048722468380,14351100706539057419,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7464 /prefetch:1
    3⤵
    PID:6896
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5184,i,3137056879160441355,12125354387828800654,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7600 /prefetch:1
    3⤵
    PID:6916
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7760,i,16068701921741602031,11720597775153906326,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5228 /prefetch:1
    3⤵
    PID:6252
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7856,i,11024026430049919713,9463659632366889259,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7872 /prefetch:1
    3⤵
    PID:6216
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=8004,i,7909320101794278113,7456461284045630248,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8036 /prefetch:1
    3⤵
    PID:6728
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=8184,i,8073842351597882551,6923817970953836216,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8200 /prefetch:1
    3⤵
    PID:6696
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=8324,i,6577826077844956018,12794931714427087076,2097152 --field-trial-handle=1980,i,16097981497401128165,18341597594270328605,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8332 /prefetch:1
    3⤵
    PID:6968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com
  2⤵
  PID:1832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x29c,0x35c,0x7ff8f5ebc188,0x7ff8f5ebc194,0x7ff8f5ebc1a0
    3⤵
    PID:636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,6641596575632443273,10752636770710122391,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,5956609590178367771,7070155311676757388,262144 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
    3⤵
    PID:2924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,361434897535842478,7249178407891194870,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
    3⤵
    PID:2356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3296,i,14507556424729969746,9151821120228144317,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
    3⤵
    PID:856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3288,i,2276669461959153601,8327385428758508891,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:3236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3812,i,7644763521795092903,11023801581313682673,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
    3⤵
    PID:964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,469191440525334846,3478806926046543015,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
    3⤵
    PID:2616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4364,i,14711837487201270873,13372082904363894172,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4504,i,12366211902912903213,10440822103311661284,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
    3⤵
    PID:2956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4648,i,5656162726454023150,5339100820239418367,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:1
    3⤵
    PID:3760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4784,i,7610200842623704503,15552489992463833462,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
    3⤵
    PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4928,i,2794694437499469381,7372145502013546574,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:1
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5072,i,4643024314533174547,14435488305139619273,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
    3⤵
    PID:512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5100,i,5233261664252781865,13864860287749114649,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5576,i,10235358506976622297,12663542500114988464,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:1
    3⤵
    PID:3044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5588,i,12281675865114667451,6351867342324195045,2097152 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:2
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,3749121054299446132,5562357228229731187,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:8
    3⤵
    PID:5236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,6838008035587934462,4776780977747633822,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:8
    3⤵
    PID:5244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=704,i,14139658168419076677,10649709153132139689,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:8
    3⤵
    PID:6056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,2404775270676503585,5206447372437957517,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:8
    3⤵
    PID:6064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,5622184863846048163,8667426885557780912,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:8
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,11293266244052672631,5598234892437695489,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7524,i,15959433240298517269,13441378013162211312,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:8
    3⤵
    PID:5904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7696,i,14940196558571533468,1476326749522458564,524288 --field-trial-handle=2000,i,13698412778012136161,16200877731644987969,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:8
    3⤵
    PID:6356
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com
  2⤵
  PID:2268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com https://www.youtube.com
    3⤵
    PID:2056
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2000 -prefsLen 27099 -prefMapHandle 2004 -prefMapSize 270279 -ipcHandle 2076 -initialChannelId {15e60f9f-8f6c-419a-b23a-ee84ffaf8b09} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:4276
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2376 -prefsLen 27135 -prefMapHandle 2412 -prefMapSize 270279 -ipcHandle 2520 -initialChannelId {e0faf678-52b4-4854-a0e8-d929f1c1f5f3} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:5340
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3800 -prefsLen 25403 -prefMapHandle 3804 -prefMapSize 270279 -jsInitHandle 3808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3816 -initialChannelId {a3c1c3e2-3c06-4376-9198-363829a01ce3} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      PID:6300
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3992 -prefsLen 27554 -prefMapHandle 3996 -prefMapSize 270279 -ipcHandle 3840 -initialChannelId {7e00a5b3-c68d-426e-8084-fa97a7b31b97} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:6428
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 440 -prefsLen 25403 -prefMapHandle 3080 -prefMapSize 270279 -jsInitHandle 3172 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4260 -initialChannelId {40da4263-02b1-4873-8252-487400582cfa} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      PID:6952
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4376 -prefsLen 25403 -prefMapHandle 4380 -prefMapSize 270279 -jsInitHandle 4384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3264 -initialChannelId {e63524ce-6e87-445e-9f99-1b470486a427} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
      4⤵
      PID:6960
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4468 -prefsLen 25403 -prefMapHandle 4472 -prefMapSize 270279 -jsInitHandle 4476 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4444 -initialChannelId {36d9cd2b-ebfa-4ea5-9488-5bfa9e2295fe} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      PID:6972
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4640 -prefsLen 35159 -prefMapHandle 4644 -prefMapSize 270279 -jsInitHandle 4648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2888 -initialChannelId {7e55c681-92de-4aaa-af14-1463cfe64047} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      PID:7060
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3176 -prefsLen 35347 -prefMapHandle 3288 -prefMapSize 270279 -ipcHandle 4944 -initialChannelId {07510e76-651b-4f47-8ee3-c63e00507020} -parentPid 2056 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2056" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 utility
      4⤵
      PID:4608

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4fc 0x2d0
1⤵
PID:944

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Credential Access

Discovery

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 79abb2edb5f22f7faf9a9d53633528141e5eb6c40cb3d685626efc2e712850aa
MD5 1b6f8ddc9241b8818aebfdb654133e65
SHA1 72f65a1e5264a2edfdfa3d9208ed8518a8ed8413
SHA512 d74f1b17fbd3c3fb83d186b283797d1037cff9e204be7337b55834596633750bfed0d95d6a4985cf0ab034f6a27c2432dd532825bef759adc75e5a81160f8fc0
SSDEEP 192:4RuhFVDKK7s85v7VJpAPRp2B9fHsb+WNn7GPc1RVyIsnAUge:4RuLFjZvUXGhwKPcle
TLSH
T1E732612DBE14753B9DDBD32AFA217AA3D7F6102225902E84D6F8C93C15EB5CD2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 98634aeb8236655488c5fa458415c33202b955105a649c2032d22f93ba69054c
MD5 2fb40e807dbad3e4388ff9bfefb94dca
SHA1 d1e8b42d2815d4470393c77ea87476ef3ab434f1
SHA512 698014fab74e00c4444da48d31f2381058a8c42b9dfee9efcb3da4bb26197107ad87c9cdb1d4286cdc40475fe978f782402201300466d0ad6301482d2c82f4e4
SSDEEP 192:4RNhFjNR7szP5v7VJpAPRp24hx9fHsb+WNn7GhB2YcWW2iQkwGl9VyIsnAUgtaJ:4RNLWPZvUXHhwK6Yc52bmV8
TLSH
T1E442A32DFD10753B9DDAD22AF9217B62D7F6102221842E84EAFCCA3C15EB5CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 16KB
SHA256 7e62ba477ed907472bcd67f1bf01e050de22807d96a1e3e99ec972cad0e6c77b
MD5 7a656580357af5adef9b34fd12779ead
SHA1 b64b01fe70608153f306450756456aa9ab8f3fb5
SHA512 33b475b38cf03b9185bd4fa9f5656074ff9a08227ea9630af8ada0850f00b0ba1c87a8f2556ecb57cfbd117e5fe212bad3a9108b7d8e1430832cdf65753c109e
SSDEEP 384:JvjFE7KxkXqKf/pUZNCgVLH2HfgslsS7pLuLcIbWXODFs+ErU3kTHGD/Wmrga2:JbFE7KxkXqKf/pUZNCgVLH2HfgsKS7pT
TLSH
T14A721A67AC4C9E3B4FD4C6CCD8167B4FADB5024B65DE886483FA982503D5ACB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9fef2b6230e5940e2469cb86a2a873569d0666bd63432558b5a87d5dcf3cbf2c
MD5 7402e893b577db1d0c1c60cdad685775
SHA1 34a0f1d44ee0e7182547a2ac4148354ea7c67849
SHA512 d92e425cb343693f82d2e29bdf4943f862c33a73481cba8a87b55eaead85d53f3165c4d477ad9deb89cb13ebba4583fd226d2c2a20390076c6c9fbae1bc4e244
TLSH
T113B01256C4819152C00503B819C4CC9C3218FF14C602030371E427029D367600D17140
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59711f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59711f.TMP
Size 96B
SHA256 00b8ef18dd9513ec7116df17052537f7b2d09706e2d6f6d67003421d8854f55e
MD5 84ed0f53cf3be16ff46a2e04cbc8babc
SHA1 b9f2e29e9884212b5b3d4f4d07c9a35de9fc783a
SHA512 7925e9969b7eab716aa72101aee152742bc44e16e392c07dcf9d80de83b8cff0760b8120262d3bc51a11d3217e6d8b52e31e4760fcb4483c2e450a4c22ed7525
TLSH
T12CB02208C202B202C80203B03A8A8ACC32A0CF28C203032E82E02E23CC2B2200030032
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 8688fea8c6f48c4f32de42d07aeb4ed59b31c014d81d51394cde9cba18fb10a3
MD5 4f330630975d12d1a05b762f39699091
SHA1 4e3693065eea1a1b36fa53a0c99c7ec8cc641718
SHA512 d0c0bb04712b833bbdf9be4532316455cb79b499a2940bdad06e4ec49ddac0228372fb1294e51041cf6cde734ca6a6054acded9c5957b343e42800335cf14c6a
SSDEEP 3072:wJp+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g3:wz+hFD+7t56OD9ZfSAppr3
TLSH
T114D31232AA94C8BBC9BC6541F157A300CE626CED41DE7A09444A9F8EE09FC5C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 3b78b079a60e729ecb649b3f62377d9e29a0e7836822c950ecd99a3e1987f80d
MD5 dcac3920319b9ce0a75a5bddafd69246
SHA1 9f3fc17d94f65d0ff95b2a4588354d0d59d32543
SHA512 0e3b126e50af848c8b7e61667e2b0a3bc4bfee4b36be0fe6d4bb397326ef960de8387baaa55e79043976239e6217ecd74581108fda6f126d3c315ee67ec32c32
SSDEEP 3072:eJL+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gu:el+hFD+7t56OD9ZfSAppru
TLSH
T150D31233AA94D8B7C9FD6541F147A300CE6268ED41DE3A09845A5F8EA19FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 7d7950e3134994240412dc8c4ff2e1094a855af18da50390db7acbba149769c1
MD5 0a56ffdff66ab717cc67c9277ab84bf5
SHA1 74b21da633fca1d547a50998aac2b39987798dfe
SHA512 6f81f3d2efa4e4c3986345c19ac8b08aaa490299987f5e321f3cef0ba14279976b1c513f2ad2d91a664a5e58218895d289b3e03c44c69b7f0bd1456ca6dbbda7
SSDEEP 3072:rJL+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gu:rl+hFD+7t56OD9ZfSAppru
TLSH
T1F5D31232AA94D877C9FD6541F147A300CE6268ED41DE3A09445A9F8EA19FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 578c7c5a069c6170e55319470ef0632c96862edca1e5f81a0a995870460f50e5
MD5 c714bfd63d916b7315f7dce2c3c7bf6f
SHA1 07b66592517b62bec66050a9556a03084d0216e1
SHA512 78d541b1117a0e29e4a0f003272cc922d83869c30009e189b606fc95d722811be03a1fa4c3d49b7ee0a5edf67fe9fb3cf5f1ff82371ed7ef0200a5544aef3eb7
SSDEEP 3072:wJL+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gu:wl+hFD+7t56OD9ZfSAppru
TLSH
T1E0D31232AA94D8BBC9FD6541F157A300CD6268ED45DE3A09845A5F8EA19FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 c14377ad029dc79fc688bd48af556ce978a877f6bb9099b0bf1ec07f0d29c8ce
MD5 02051229ad8d97e93fef9abaf34afcab
SHA1 9965daa2021bf52db9695a73393643f91fb8025c
SHA512 5715851c049a088a4dc8b4e08fd8d55603f8492c2f5ee1daf6fc8a07d76cfe99c2142122700685f1ae86e410bdac2b94e3daf6135ebb247bf8d10ff991d5e13d
SSDEEP 192:sxZWY97W/fbbszisdpJHW6+WNGY3vyeIg5JJ:sxZR9i/f3szpJHbGCZ
TLSH
T16912A656AE38657B8CCBE21DBB257F43E6FA4032A1941E58E6FC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 55e7966d847f86e12422a02d4ae6a20dacbf97389f47bee031b9c5a922c695cf
MD5 7559d094b6b997f911b54e5e7331a55b
SHA1 05bc0033e7cf3dbbeb55299cace6f5e9cc879a1f
SHA512 797aecec79d9899a3ff8ee07c1d3e543e44ec7a4dbcad0cde154040f7ca3f6eda54a6504f2ea2a19b0e51bbeca4f2bcbad637b9fa620f7ad32f56be2f91d2303
SSDEEP 192:sxpY97W/fbbsrisdpJHW6+WNGY3OyeIg5JJ:sxq9i/f3srpJHbGPZ
TLSH
T14E1296566E38657B8CCBE21DBA257F43E1FA5032A1D41E58EAFC861C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 229d95b6bc989f38327513151ebe254a67e5b90a88e1479d35e8708eb7d165ae
MD5 0f051746aadb911769c6e0fccbf548a5
SHA1 07546beea48e0144f0ba4df93eba4a26be87317e
SHA512 fbcd851edb3d011869fd032b441a1f9350d59a8d0a0fef94d8fcfa963bbf4e3e3eec1d149de1dc5539435fc5a3710118774b7ba9ec963566ca1aae17bb31bd01
SSDEEP 192:sxpY97W/fbbsWisdpJHW6+WNGY3OyeIgrJ:sxq9i/f3sWpJHbGP9
TLSH
T18B1296526E38657B8CCBE21DBA257F43E6FA503261D41E58EAFC961C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b422082d-2ee1-4b54-9f5c-43c453e2a816.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b422082d-2ee1-4b54-9f5c-43c453e2a816.tmp
Size 26KB
SHA256 8de015d43134d73e021285542cf61e4dbf3ceade82e66851b04888753fbd63f5
MD5 d5d893d2502fc72a6df5e084797181c0
SHA1 a3fff6ac731d6710caf33412266ba843a324e2d5
SHA512 1a376e2605e2d07d8f89eca14b4923659898e6a38e3d30fae937eeb32291af186142755fc952291c87a9cdc0d8f1dbf311a602506b0a56b0bc024f78f7693971
SSDEEP 768:6i30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ7uRrolZMt:6i30AbSWvS2l9u1jaLmLZ1uqO
TLSH
T165C2DA3B640CCB7E4FC01A9DDC6AAF9B6E9C02C796648D4047FA984C02C77EA91174DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 598ae429b75d2b26541671097a400dbc468c1df2fa142d093c8a8ea433a833cb
MD5 946e93dce26a81bbb1118c761e545683
SHA1 e1a23f57d70976d17ac7e729acbc1c2211cb6589
SHA512 45fe048ca2a0318618f468b4af072c2160b52ababe13b8d53148274a5f49852b700f42e459088b2b9d320d4aec172b6d4497b6862062878fe170df6576b561ba
SSDEEP 192:zbsN+VAmwpummQQmiU1/cu19iX5FC3jzor9myXXXFi+2tlIn/q+VU9:zbsN+Vipum+W9iX5FC/8TXX1i+2k5U9
TLSH
T1C2220A35A978AC3B49E3A155B08B3753DFA91077DE846F54D9EC0B2C01D7398274A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 2343850e1f2678b08fe4ec9f4901b5562cc070cf3e9eee7f77639ce7e232b388
MD5 4e8cb635e089954f844d783ec6cd70f6
SHA1 eb72b1872d77cb43c54c84eb21f7d5b141b42f20
SHA512 864141ae3a37231e75aa98677df9266cda022f1db45df0173e54f4783799933e63f820512d189502a7ed44e2782ce1b16c8a092c4b47259600e9e1ec093f4cba
SSDEEP 192:zQ6sN+VAmwpummQQmiU1/cu19iX5FC3jzor9myXXXFi+2tlIn/q+VU9:zPsN+Vipum+W9iX5FC/8TXX1i+2k5U9
TLSH
T131220A35A978AC3B49E3B154B08B3753DFA91077DE886F94D9E80B2C01D7398274A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 cf3a8ef717ca587e32dcc7ee7f93b4ec141569af14053ec00aba67addb14e241
MD5 825486c596e1e9cfbc74ee4972ea9f17
SHA1 0a36e3908adac68a4983c6c2d312c005d1cd9cc5
SHA512 204583747b290f91fa9e6e92f1fd8664368d45429c8fefa300b29d5a599a2e38c235f80a549c5984d9627ffc9b42b98eb1fb082fcc267cae2bd778eacc074c0c
SSDEEP 384:ztsN+d5LOCpu4+W9iX5FC/8TXX1i+2k5lTA:xl+CauMclk5lM
TLSH
T101424A35A9789C2B59E7B249F44B3B539FB81077DE881F54D9F84B2D01CB29C170B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 49a27676be54eb2d249491654c30e1e11efacfb2927adc621074f635bdd95a31
MD5 9a8ba807577bff5fce6f2336d67d6542
SHA1 1a8d71224f01b31c6b27aafed16c239f467ea20b
SHA512 a6ee198ab033c033e2d593f551829a1672a0162234249052836da9e749c08783d2dbcef51f17cce160845d5dc3868423c2d19e72042c91c0fa276b2f255dae02
SSDEEP 192:LONv6AmwplQmiUyowFsiX5FC3jzor9myXXXFi+2tlRn/q+VU6:LONv6ipD+FsiX5FC/8TXX1i+215U6
TLSH
T11D123B35B87CAC2B09E3B554B08736539FA91177DF896F94DAE80B2C01D734C2B0E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ff4b63eed209d2e32489b891508683e97d81f6fa97b7dc43ecedafee814f3d6b
MD5 327e143bc67a40280697a410d1a09b05
SHA1 7f27752cd3cc95cb548fae5827a0d80f88070de0
SHA512 c7c4e444827a29bdcc6f71fb67a1cba434db952afb9ad9e40e99c493f873a0a1a41ba5a61683f73d0858328348220d8b5444db62d38e17a7d37ec9990a2f7aa2
SSDEEP 192:LONv6AmwprQmiUyIw6siX5FC3jzor9mylJiiMU6:LONv6ipd86siX5FC/8TiHU6
TLSH
T1D102EA35EC786C7F8AF2AE45B18737139FA9116BEB942F84CAE8172D01D725C1306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46702c8f-fb15-452a-adff-40f96db43bc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46702c8f-fb15-452a-adff-40f96db43bc9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

compatibility.ini

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\compatibility.ini
Size 198B
SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
MD5 ce9ef13caa8a74c25157b184aa038475
SHA1 db03a9935d8bb3ce6b120aca98feade536805160
SHA512 0f6f5053e78167ef5cc5fa70ed3a87dd116df0671a590299277a197341bed983e3d77e37ad2c33cd4afe880fab9ed1c7f7502210040617a01f97a81c1e1d4f29
TLSH
T1C1D022818BC7848C9D4AA8E4537C38086BF2EE0E0604492A32827F0B4164F09023C3F9
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 6649a8a3c52c2d0a5ad4f226196fcc0673efcc834d76eeee1128a103caa3f144
MD5 e6630e1053ba6fdc530b067391d95796
SHA1 729dbf6bc7bdcf6b78838fdaa52d4ba835593036
SHA512 c6223054f4c7da261dabd9799ca3509559206ef69d00b11224becb2f1ff570a0b9173c12eccbaff9118f890d32fed9dcbf915ba1a0a07cdc36c301bcb4cea992
SSDEEP 192:q1d66JozGzgCl6mc0dk1vOv5zbokw4Tvyj6LI:Ud66JozGzgC1j5bo/4ryjZ
TLSH
T1CFD1D958F639823FC458423BDCA61B800E3A788A988E3F25319C645D2D572DD7ACE17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\events\events
Size 1KB
SHA256 44104fb9549687269ad6b6156cb65ce3cdaf33b45394cf7afe371dc7941ca8e1
MD5 2f86c2abf9faa71c212df6f33485facf
SHA1 195ad800d878749932135fd7d5dff5b46d0b37ce
SHA512 2c485682243bdd53588e9997873c12df1588a48652eae32d7b7582afc7c517ec622289c99a8e4e6b25f02f14254cbf19c9702a2b67d8d55fb3314ac6db7b479f
TLSH
T117216D8C3EB94D2A59CBE69C748151CF53D24E0B09C71D431E52DE8CED815E971AA43D
MD5 SHA1 SHA512 TLSH

Submit Download

10dd9a3f-d34c-4b37-b9c7-9484274a42fe

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\10dd9a3f-d34c-4b37-b9c7-9484274a42fe
Size 235B
SHA256 c376606be78ded84a9c40ce526a07875e8d9b0e851850ea142daba926781b069
MD5 3b32a13424165f1ed150879764e3a303
SHA1 f1556cade4a1d27070ee3d907e1424bd27507198
SHA512 3ce03ab459d472b82fddf3ab3902b965a056bb63d124ad47dd68d0e22844c90b2f6ff2319506d5552d2184c4422a72f7591c4b8b059b4af095fad715892cbba8
TLSH
T194D09780A8883B6C08080F1BF0E06AD63448CC3B5478EC20DA9100789ABAEC80121807
MD5 SHA1 SHA512 TLSH

Submit Download

5a202e8d-6ea7-4d56-bc87-3ed8194cd35a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\5a202e8d-6ea7-4d56-bc87-3ed8194cd35a
Size 16KB
SHA256 5a79449181a1de41e09794c8f3687706b8d0ed7ad1b40a48607c3302289aebc2
MD5 77bb2e42b5eadf51d241536dd5bfda2a
SHA1 899e2dace1e14909ff7ade1dda5bbd43eefa5514
SHA512 c40a5d09e19efc9f60d47ff02f1e7cc138549f9762c550bff0cf61a149e8f937b40250d001d4abb6caced549861c9354031713c1e33291a7572bd5d3ea5dc569
SSDEEP 192:H28REM8i8Q0IBzd5bRBM1IUOYoSB47sqrTxOVloXGjmt89JzxBiMUD1Ip57DxU1t:rEM8i8FIBJ5RR9rN69JlBiMU5IpRxDih
TLSH
T18472B956642045BAC291E36994FCBFC3E6F528CF4C418FCA9BE4BE085DDE06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b579240-e4df-4408-8d0d-1626e70b8022

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\5b579240-e4df-4408-8d0d-1626e70b8022
Size 886B
SHA256 b6cdd09c1779982977a6fb5e800891eb9b78ee30a6cb9ee8807e227c80f73060
MD5 d0e535d763498ea57a3a785d1b0cd176
SHA1 5ad9dd16f8bec458b2c9168bac0f66b72b0d4c8d
SHA512 9a1ab7112bdb9df687ca17f70eca9697cb8c0c58985f25687f4667188cfc56f8966503ff0e186d7d6d6c77b7fbcf8a7818dc7a055bbf5d041d1c80b028ec9cbc
TLSH
T1011127809A75B5F2CD7CD24FD8A0774346D47113C0CB45143D658E284DAB51E63D7707
MD5 SHA1 SHA512 TLSH

Submit Download

9ebf753c-e935-48ce-abe1-f297f721378e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\9ebf753c-e935-48ce-abe1-f297f721378e
Size 235B
SHA256 b737130e433f43a2816a22a8c6ee995c9212119f3c036339c86682ef7249b2b6
MD5 079a2e69864654a2e19a01bb8a880d2e
SHA1 d1b121efed9831596b3e8f4f6cecc07ce919f61b
SHA512 1ac2b2c652d127d9e2ee7e326da3c3c61371ffe39bca556ae60fe52120d6d083b50f8da939eaa2ed95d123857439e21f280b9ac62cc93498a430f879a6477ff4
TLSH
T1CCD09780A4A8279C08040F06B0A06AC630A44C3314B0E824AA600838DAFEAC481A2A1A
MD5 SHA1 SHA512 TLSH

Submit Download

a8017742-2806-45cf-a351-11c7c04e1c69

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\a8017742-2806-45cf-a351-11c7c04e1c69
Size 883B
SHA256 5d4506335f460faa911e0096e90031dd4572e95dea05410ec96a2658fbab1707
MD5 de381dad18d31054869f6c5ec8a666c8
SHA1 2712727d8a5f9dfcb269985cd5130183686f2e26
SHA512 fd17a633b76857b73b1fce1cdc1c0f0c21a55003cb5ac3f3b4ac8d669c698110ed311f0d8d884f3d66eaea29e895c0a129bbb954f73839dd974c1ae716f71a2c
TLSH
T1E5110081A771B5F6CDBCC24FCD6137415BE8B12380CA91143E655D280D7A51DA3AB217
MD5 SHA1 SHA512 TLSH

Submit Download

fc4ec281-a079-46c4-9fb8-c57b13f65437

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\datareporting\glean\pending_pings\fc4ec281-a079-46c4-9fb8-c57b13f65437
Size 2KB
SHA256 52943207aff18595426f97a115980c79592161a7ead58206b907fcb1005848e5
MD5 9226d7ba9f010ab14a1cd47a1985a76f
SHA1 8fa152bcec1adf5eeb6852c67ffadafa4241f124
SHA512 01a7d37d659e39496f43f7e885e776e7c7dc29d3e00ada220111491b8c40d0ba74e3050ea8631046d54a6cc0ca68a6827b2934d49d1e4a7e46b04cfbcb2b093d
TLSH
T10F41545C76B88CB75CCEE64D9451238E53B48A9310C71C872E51DE0C8DA269933AE53F
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\prefs.js
Size 7KB
SHA256 7231a38f3b8432a876077b58cc798bf76d032a303d466632961494d0fba92e9e
MD5 e90ad9e9eaf3f25908231da5800e16eb
SHA1 cb9799d1760648e71b2388d0cb44a5c8fc4c16e5
SHA512 49fdb646ab5e850595935d26acb5e14f6c23c2c03db4cb411a1502935372e49b85fdae1b5d1c06c5693735470b226ce9ca0c78e752f1303a5a34aae380973f49
SSDEEP 96:xH+kmjTUhvqGqpfqrq1zSISSlSdv9jpnhHa7QDkBw88n8L4cncV3+U:Rm/RpfqrqNSSkaUkBw88ZkU
TLSH
T17DE13E789408CB6F74B677ACAC2888315AB2013BBBBF68D750B954C5051CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads