Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • user interaction
    yes
  • max time kernel
    1225s
  • max time network
    1229s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-es
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 22:34

General

  • Target
    https://anotepad.com
  • Sample261002-2hblvsxtdt

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in System32 directory 4 IoCs
  • Drops file in Program Files directory 22 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 3 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 19 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Views/modifies file attributes 1 TTPs 1 IoCs

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://anotepad.com"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4756
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://anotepad.com
      2⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      • NTFS ADS
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4288
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1928 -prefsLen 27019 -prefMapHandle 1932 -prefMapSize 270249 -ipcHandle 2016 -initialChannelId {768fd8c4-9501-491b-8e39-f15d354dc75e} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:5444
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2380 -prefsLen 27055 -prefMapHandle 2384 -prefMapSize 270249 -ipcHandle 2400 -initialChannelId {11da3f2f-0345-4834-97f8-8a455a0f2de1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:304
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3880 -prefsLen 25151 -prefMapHandle 3884 -prefMapSize 270249 -jsInitHandle 3888 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3896 -initialChannelId {5fc96366-ad17-40f4-8c0d-b7940b68c909} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
              PID:1292
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3920 -prefsLen 27245 -prefMapHandle 3832 -prefMapSize 270249 -ipcHandle 4164 -initialChannelId {eb594833-a239-4160-8642-13f7016c505c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
              3⤵
                PID:3668
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4452 -prefsLen 34744 -prefMapHandle 4456 -prefMapSize 270249 -jsInitHandle 4460 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4468 -initialChannelId {37b7724f-9d85-4c6a-8759-dd23189d38cc} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                3⤵
                  PID:5880
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5184 -prefsLen 34903 -prefMapHandle 5188 -prefMapSize 270249 -ipcHandle 4640 -initialChannelId {a41ac8e3-630d-4dd1-880c-42d0c42c8cc4} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                  3⤵
                    PID:1576
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776 -prefsLen 32952 -prefMapHandle 2732 -prefMapSize 270249 -jsInitHandle 4640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5868 -initialChannelId {89b66c94-bf01-4e05-b42b-0a5bf576c6cb} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                    3⤵
                    • Checks processor information in registry
                    PID:6096
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2904 -prefsLen 32952 -prefMapHandle 5804 -prefMapSize 270249 -jsInitHandle 2860 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5900 -initialChannelId {cc4205e0-5251-43d5-adff-a3baf68e8cc6} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                    3⤵
                      PID:3808
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6232 -prefsLen 32952 -prefMapHandle 6236 -prefMapSize 270249 -jsInitHandle 6240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6244 -initialChannelId {97c35240-83ac-47de-ad95-362c5a83c703} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                      3⤵
                        PID:204
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3148 -prefsLen 35062 -prefMapHandle 4808 -prefMapSize 270249 -jsInitHandle 2568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6224 -initialChannelId {f25c631a-a42f-42d3-bc77-b6f7fbc6c766} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                        3⤵
                        • Checks processor information in registry
                        PID:2512
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6900 -prefsLen 33031 -prefMapHandle 5404 -prefMapSize 270249 -jsInitHandle 6868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6952 -initialChannelId {f01766e5-24a2-4d65-b831-6382c7040b9a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                        3⤵
                        • Checks processor information in registry
                        PID:428
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7256 -prefsLen 33031 -prefMapHandle 7260 -prefMapSize 270249 -jsInitHandle 7264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7388 -initialChannelId {15cddcab-db24-4f27-bf91-e2a60186f5b4} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                        3⤵
                        • Checks processor information in registry
                        PID:1984
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7284 -prefsLen 33397 -prefMapHandle 7684 -prefMapSize 270249 -jsInitHandle 7688 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4612 -initialChannelId {d5b8f4cd-6c0b-4430-884f-7420f2272496} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                        3⤵
                          PID:1728
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8240 -prefsLen 36822 -prefMapHandle 8244 -prefMapSize 270249 -jsInitHandle 8248 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8256 -initialChannelId {3bb1340d-a556-46cc-bd8c-714d98f04a71} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                          3⤵
                            PID:3868
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7028 -prefsLen 36822 -prefMapHandle 7056 -prefMapSize 270249 -jsInitHandle 7064 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5428 -initialChannelId {3c9a7025-6d3b-43c2-b7ce-bd1e6d7744c0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                            3⤵
                              PID:2924
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9316 -prefsLen 36822 -prefMapHandle 9320 -prefMapSize 270249 -jsInitHandle 9324 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9332 -initialChannelId {89223823-3c54-4730-9631-66941a8129f0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                              3⤵
                                PID:3164
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9368 -prefsLen 36822 -prefMapHandle 9316 -prefMapSize 270249 -jsInitHandle 9320 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9332 -initialChannelId {48d59f49-9482-480e-90bb-1403f607675a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                                3⤵
                                • Checks processor information in registry
                                PID:2392
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7288 -prefsLen 36822 -prefMapHandle 7720 -prefMapSize 270249 -jsInitHandle 7756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7744 -initialChannelId {4bb4682c-b893-4cc6-8fc6-5bb5bb4626c7} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
                                3⤵
                                  PID:5660
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6992 -prefsLen 36822 -prefMapHandle 7236 -prefMapSize 270249 -jsInitHandle 9820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9812 -initialChannelId {f9791a62-e1ab-41ba-aa85-2386fe980731} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
                                  3⤵
                                    PID:6112
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10000 -prefsLen 36822 -prefMapHandle 9996 -prefMapSize 270249 -jsInitHandle 10048 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10052 -initialChannelId {a6b1d84d-b39b-4c02-b960-c8fa424700b2} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
                                    3⤵
                                    • Checks processor information in registry
                                    PID:3860
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10276 -prefsLen 36822 -prefMapHandle 10280 -prefMapSize 270249 -jsInitHandle 10284 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10220 -initialChannelId {b87b2313-9977-4b91-bc18-497426f85bfe} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
                                    3⤵
                                      PID:2560
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10528 -prefsLen 36822 -prefMapHandle 10540 -prefMapSize 270249 -jsInitHandle 10544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10552 -initialChannelId {8191fd85-96fb-480b-bb30-b7a148e4d7e1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
                                      3⤵
                                      • Checks processor information in registry
                                      PID:6352
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10600 -prefsLen 36822 -prefMapHandle 10604 -prefMapSize 270249 -jsInitHandle 10608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10616 -initialChannelId {66fa5066-7f42-43d9-bbf8-6d2de692b2ec} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
                                      3⤵
                                        PID:6364
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10832 -prefsLen 36822 -prefMapHandle 10836 -prefMapSize 270249 -jsInitHandle 10840 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10784 -initialChannelId {52f6f39f-09da-47ad-98a1-8ffe91c17408} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
                                        3⤵
                                        • Checks processor information in registry
                                        PID:6372
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11152 -prefsLen 36822 -prefMapHandle 11148 -prefMapSize 270249 -jsInitHandle 8112 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8416 -initialChannelId {5246f938-9683-41c5-9641-aa1b1bd89455} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
                                        3⤵
                                          PID:5324
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 8164 -prefsLen 39847 -prefMapHandle 8708 -prefMapSize 270249 -ipcHandle 10252 -initialChannelId {0d636d5b-913f-43e9-bd1f-bd306ab021bd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 utility
                                          3⤵
                                            PID:2152
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9096 -prefsLen 36822 -prefMapHandle 10964 -prefMapSize 270249 -jsInitHandle 11076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7304 -initialChannelId {fd810476-cd4a-4f4b-85b4-0d148737b82a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:6860
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11452 -prefsLen 37155 -prefMapHandle 11448 -prefMapSize 270249 -jsInitHandle 11444 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2668 -initialChannelId {eee844fd-ae12-49a8-bf55-dcb8d2ff5e89} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:2204
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11548 -prefsLen 37155 -prefMapHandle 11552 -prefMapSize 270249 -jsInitHandle 11536 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 472 -initialChannelId {b2978264-d7fc-4152-99b3-f8b84fc998fc} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:6496
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12028 -prefsLen 37155 -prefMapHandle 12032 -prefMapSize 270249 -jsInitHandle 12036 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12068 -initialChannelId {a21195e2-5710-4fb8-a464-a0aa64eca4bd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:7420
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12180 -prefsLen 37155 -prefMapHandle 12224 -prefMapSize 270249 -jsInitHandle 12228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12236 -initialChannelId {8c963731-87bb-40d5-a71b-fb5ab8dc3509} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
                                            3⤵
                                            • Checks processor information in registry
                                            PID:7428
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10680 -prefsLen 37155 -prefMapHandle 10668 -prefMapSize 270249 -jsInitHandle 10656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10664 -initialChannelId {1b636aae-f022-461a-9093-891c41965426} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
                                            3⤵
                                              PID:5760
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11848 -prefsLen 37155 -prefMapHandle 11856 -prefMapSize 270249 -jsInitHandle 11852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11752 -initialChannelId {a535f7e1-333a-4d6d-a7d8-df089ccdea2a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
                                              3⤵
                                                PID:5756
                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12096 -prefsLen 37155 -prefMapHandle 12080 -prefMapSize 270249 -jsInitHandle 12084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11428 -initialChannelId {7ad8a0f8-e173-492b-9d0a-14a51d16d967} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
                                                3⤵
                                                  PID:7824
                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7552 -prefsLen 37155 -prefMapHandle 11980 -prefMapSize 270249 -jsInitHandle 11360 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10808 -initialChannelId {e6fd2aea-a0bc-4782-aaed-97b8d8e47645} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
                                                  3⤵
                                                  • Checks processor information in registry
                                                  PID:7224
                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12456 -prefsLen 37195 -prefMapHandle 12132 -prefMapSize 270249 -jsInitHandle 12464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12460 -initialChannelId {0b894683-5e4a-4177-bab0-753d1c68adfd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
                                                  3⤵
                                                    PID:4836
                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10956 -prefsLen 37195 -prefMapHandle 11796 -prefMapSize 270249 -jsInitHandle 11792 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11132 -initialChannelId {a837cc5f-488d-486d-b78d-5b2d1afa821a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
                                                    3⤵
                                                      PID:7988
                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12408 -prefsLen 37195 -prefMapHandle 12120 -prefMapSize 270249 -jsInitHandle 7204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12144 -initialChannelId {16bbb2ee-2b8b-4df4-8002-8752784bd3a2} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
                                                      3⤵
                                                        PID:3936
                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10800 -prefsLen 37195 -prefMapHandle 7780 -prefMapSize 270249 -jsInitHandle 8724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10232 -initialChannelId {9884409f-6134-49c2-850f-e992ba17d75b} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
                                                        3⤵
                                                        • Checks processor information in registry
                                                        PID:6304
                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7216 -prefsLen 37195 -prefMapHandle 6976 -prefMapSize 270249 -jsInitHandle 13228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13220 -initialChannelId {6982a52c-15a0-40bb-a850-76527d10076a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
                                                        3⤵
                                                          PID:5684
                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13228 -prefsLen 37195 -prefMapHandle 2916 -prefMapSize 270249 -jsInitHandle 11800 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11536 -initialChannelId {f097775f-e769-45ea-b9e4-24b7b5616b1f} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
                                                          3⤵
                                                          • Checks processor information in registry
                                                          PID:7604
                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11112 -prefsLen 37195 -prefMapHandle 11872 -prefMapSize 270249 -jsInitHandle 11964 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12976 -initialChannelId {1c70de91-4510-435c-8442-fef897b8a8f5} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
                                                          3⤵
                                                          • Checks processor information in registry
                                                          PID:3360
                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4620 -prefsLen 37195 -prefMapHandle 6724 -prefMapSize 270249 -jsInitHandle 12096 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11960 -initialChannelId {895c76ba-85ed-456f-8a57-44510624ad56} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
                                                          3⤵
                                                          • Checks processor information in registry
                                                          PID:7868
                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11968 -prefsLen 37195 -prefMapHandle 13212 -prefMapSize 270249 -jsInitHandle 11760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13308 -initialChannelId {041b6433-54a8-4e8e-900f-670e89c99d64} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
                                                          3⤵
                                                            PID:3780
                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11876 -prefsLen 37195 -prefMapHandle 7404 -prefMapSize 270249 -jsInitHandle 12396 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12728 -initialChannelId {c3e93e56-46b6-443a-b8c0-1a77ddbe8976} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 45 tab
                                                            3⤵
                                                            • Checks processor information in registry
                                                            PID:7992
                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12948 -prefsLen 37195 -prefMapHandle 6624 -prefMapSize 270249 -jsInitHandle 6628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9348 -initialChannelId {f87a082f-f1af-46ad-963f-aa77b4d53e1a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 46 tab
                                                            3⤵
                                                              PID:4532
                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6684 -prefsLen 37195 -prefMapHandle 12404 -prefMapSize 270249 -jsInitHandle 13020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12940 -initialChannelId {aaf79e8e-8ed1-4e67-8e15-779387655a92} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 47 tab
                                                              3⤵
                                                                PID:1716
                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13300 -prefsLen 37195 -prefMapHandle 13288 -prefMapSize 270249 -jsInitHandle 12124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7780 -initialChannelId {71ab9a56-365f-4570-8722-a23cf40a1aa5} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 48 tab
                                                                3⤵
                                                                • Checks processor information in registry
                                                                PID:7524
                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2916 -prefsLen 37195 -prefMapHandle 6668 -prefMapSize 270249 -jsInitHandle 7204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10680 -initialChannelId {606ba17d-0592-483a-af91-097b1e6f9a01} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 49 tab
                                                                3⤵
                                                                  PID:7084
                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4448 -prefsLen 37195 -prefMapHandle 10668 -prefMapSize 270249 -jsInitHandle 10628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12944 -initialChannelId {38e189cc-0fcc-4b5a-b990-8d8f660ee165} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 50 tab
                                                                  3⤵
                                                                    PID:8180
                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9516 -prefsLen 37195 -prefMapHandle 12752 -prefMapSize 270249 -jsInitHandle 3244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13224 -initialChannelId {30259d96-5738-40d1-893e-243944ae2dfc} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 51 tab
                                                                    3⤵
                                                                      PID:5328
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11920 -prefsLen 37195 -prefMapHandle 11428 -prefMapSize 270249 -jsInitHandle 6760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12940 -initialChannelId {4e97a47a-7ccb-4d6d-8051-32757a738c89} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 52 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:5756
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6684 -prefsLen 37195 -prefMapHandle 4624 -prefMapSize 270249 -jsInitHandle 11376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12676 -initialChannelId {2d905b76-910f-4804-bef2-9ddbce6b5c26} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 53 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:2920
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11820 -prefsLen 37195 -prefMapHandle 8092 -prefMapSize 270249 -jsInitHandle 12908 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4624 -initialChannelId {c870095a-ce7f-4867-9c71-c3c648e5e9fd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 54 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:6868
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12320 -prefsLen 37195 -prefMapHandle 11984 -prefMapSize 270249 -jsInitHandle 12440 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6644 -initialChannelId {09493845-c43f-4de9-b727-6977168a2860} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 55 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:3112
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12260 -prefsLen 37195 -prefMapHandle 5796 -prefMapSize 270249 -jsInitHandle 12436 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13284 -initialChannelId {9c046a16-0657-4c11-8b55-aaa4988a47c1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 56 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:8148
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13132 -prefsLen 37195 -prefMapHandle 12248 -prefMapSize 270249 -jsInitHandle 6488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11976 -initialChannelId {5ce919e9-d45a-429d-b674-ad664175f856} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 57 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:7780
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12916 -prefsLen 37195 -prefMapHandle 10956 -prefMapSize 270249 -jsInitHandle 11784 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11916 -initialChannelId {746e8907-96f3-43fc-a3dc-276ce38dab07} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 58 tab
                                                                      3⤵
                                                                      • Checks processor information in registry
                                                                      PID:7348
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9292 -prefsLen 37195 -prefMapHandle 12668 -prefMapSize 270249 -jsInitHandle 2916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13252 -initialChannelId {51c246ce-ba60-4d0c-8f4d-d19462a4466d} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 59 tab
                                                                      3⤵
                                                                        PID:6420
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11808 -prefsLen 37195 -prefMapHandle 6724 -prefMapSize 270249 -jsInitHandle 5056 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12296 -initialChannelId {75e184f1-18ee-4d1f-a25a-bd66a80920d1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 60 tab
                                                                        3⤵
                                                                        • Checks processor information in registry
                                                                        PID:3340
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11152 -prefsLen 37195 -prefMapHandle 12740 -prefMapSize 270249 -jsInitHandle 10736 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12284 -initialChannelId {7554126e-2a9a-44c1-a6a3-cc0b43f65328} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 61 tab
                                                                        3⤵
                                                                        • Checks processor information in registry
                                                                        PID:3496
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11800 -prefsLen 37195 -prefMapHandle 12744 -prefMapSize 270249 -jsInitHandle 6684 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12392 -initialChannelId {232da1b4-0df5-4096-abc2-e2de984901bd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 62 tab
                                                                        3⤵
                                                                        • Checks processor information in registry
                                                                        PID:5692
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10784 -prefsLen 37195 -prefMapHandle 13012 -prefMapSize 270249 -jsInitHandle 12708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12636 -initialChannelId {ae673c27-e5d5-4094-9f6a-99987e4573e0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 63 tab
                                                                        3⤵
                                                                        • Checks processor information in registry
                                                                        PID:52
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12272 -prefsLen 37195 -prefMapHandle 6848 -prefMapSize 270249 -jsInitHandle 12704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13000 -initialChannelId {435312b1-3ad1-4cec-98b4-3860fec7777c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 64 tab
                                                                        3⤵
                                                                          PID:6396
                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10784 -prefsLen 37195 -prefMapHandle 12444 -prefMapSize 270249 -jsInitHandle 7588 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12948 -initialChannelId {08fb2b82-8c41-41d3-9dcd-547d809367ff} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 65 tab
                                                                          3⤵
                                                                            PID:7620
                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7352 -prefsLen 37195 -prefMapHandle 6908 -prefMapSize 270249 -jsInitHandle 11916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11976 -initialChannelId {79be5215-443a-42c1-a16a-1ba73d30cf9c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 66 tab
                                                                            3⤵
                                                                              PID:3340
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11716 -prefsLen 37195 -prefMapHandle 8452 -prefMapSize 270249 -jsInitHandle 12908 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9336 -initialChannelId {e0892b64-97e0-40f2-9981-888ef74e1ded} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 67 tab
                                                                              3⤵
                                                                              • Checks processor information in registry
                                                                              PID:5352
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11888 -prefsLen 37195 -prefMapHandle 6636 -prefMapSize 270249 -jsInitHandle 13212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13244 -initialChannelId {4455930f-cb49-4d01-9d45-e40ed5abb509} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 68 tab
                                                                              3⤵
                                                                                PID:8084
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10232 -prefsLen 37195 -prefMapHandle 7280 -prefMapSize 270249 -jsInitHandle 12996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6752 -initialChannelId {8d5733a9-eda5-413a-85f7-452ad3b97360} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 69 tab
                                                                                3⤵
                                                                                  PID:7504
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12200 -prefsLen 37195 -prefMapHandle 11368 -prefMapSize 270249 -jsInitHandle 12984 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13004 -initialChannelId {227868fd-8847-49d8-b87d-adf27d4bfae0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 70 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:3252
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12272 -prefsLen 37195 -prefMapHandle 6832 -prefMapSize 270249 -jsInitHandle 12656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10500 -initialChannelId {b616245f-4b5b-41da-b9af-864e4758c5a4} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 71 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:6028
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12096 -prefsLen 37195 -prefMapHandle 12984 -prefMapSize 270249 -jsInitHandle 2696 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11792 -initialChannelId {dc9c4fd8-4ebc-4b5e-82dc-7bc5be25642e} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 72 tab
                                                                                  3⤵
                                                                                  • Checks processor information in registry
                                                                                  PID:8116
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9360 -prefsLen 37195 -prefMapHandle 7000 -prefMapSize 270249 -jsInitHandle 3112 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12708 -initialChannelId {8414b0b9-ea7c-459e-8e35-db4c09981bad} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 73 tab
                                                                                  3⤵
                                                                                    PID:7836
                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10232 -prefsLen 37195 -prefMapHandle 7280 -prefMapSize 270249 -jsInitHandle 12704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6688 -initialChannelId {6803884c-bda2-464b-a3a4-dc637cdd7c14} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 74 tab
                                                                                    3⤵
                                                                                      PID:7188
                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2696 -prefsLen 37195 -prefMapHandle 11928 -prefMapSize 270249 -jsInitHandle 11276 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11932 -initialChannelId {378f6daa-a961-4d1c-8e74-8cf6c44c9ee4} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 75 tab
                                                                                      3⤵
                                                                                        PID:7448
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11668 -prefsLen 37195 -prefMapHandle 12128 -prefMapSize 270249 -jsInitHandle 6704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11760 -initialChannelId {a0541f91-27cf-4e1f-9a44-e3df9d276927} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 76 tab
                                                                                        3⤵
                                                                                          PID:7404
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5092 -prefsLen 37195 -prefMapHandle 7644 -prefMapSize 270249 -jsInitHandle 12648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13212 -initialChannelId {7fac22f8-e9b0-40e2-90c5-bce2d840ce9c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 77 tab
                                                                                          3⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:6848
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10248 -prefsLen 37195 -prefMapHandle 9292 -prefMapSize 270249 -jsInitHandle 11816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7900 -initialChannelId {4272cd33-7c89-42a0-85d9-d8416f4a48b8} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 78 tab
                                                                                          3⤵
                                                                                            PID:6444
                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13208 -prefsLen 37195 -prefMapHandle 11932 -prefMapSize 270249 -jsInitHandle 12384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12312 -initialChannelId {7f9c03a9-b7d8-405c-90fe-f9d79b380e23} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 79 tab
                                                                                            3⤵
                                                                                              PID:7468
                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12308 -prefsLen 37195 -prefMapHandle 12116 -prefMapSize 270249 -jsInitHandle 13056 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8504 -initialChannelId {0f8a2c97-eabc-4ffd-b020-08f401a2f99a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 80 tab
                                                                                              3⤵
                                                                                                PID:8148
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6672 -prefsLen 37195 -prefMapHandle 8460 -prefMapSize 270249 -jsInitHandle 11392 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11760 -initialChannelId {c5ddb4de-8e21-44f1-8bdc-03dd98ed209b} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 81 tab
                                                                                                3⤵
                                                                                                • Checks processor information in registry
                                                                                                PID:4264
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9072 -prefsLen 37195 -prefMapHandle 13292 -prefMapSize 270249 -jsInitHandle 13020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12392 -initialChannelId {111eb4b1-7631-4565-9052-dce3bb8312ed} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 82 tab
                                                                                                3⤵
                                                                                                • Checks processor information in registry
                                                                                                PID:2964
                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12320 -prefsLen 37195 -prefMapHandle 12460 -prefMapSize 270249 -jsInitHandle 10624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12464 -initialChannelId {d16fdd38-4ee4-4ae0-ae4f-7646a5bf7ae1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 83 tab
                                                                                                3⤵
                                                                                                  PID:6848
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6720 -prefsLen 37195 -prefMapHandle 11584 -prefMapSize 270249 -jsInitHandle 13260 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7972 -initialChannelId {1bf4ea2f-2a69-436e-8ee9-4533032f8e73} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 84 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:4256
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6248 -prefsLen 37195 -prefMapHandle 12656 -prefMapSize 270249 -jsInitHandle 9336 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11276 -initialChannelId {3bac9fd7-961d-49fd-a74b-aa0561489988} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 85 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:5600
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7952 -prefsLen 37195 -prefMapHandle 12416 -prefMapSize 270249 -jsInitHandle 7668 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10560 -initialChannelId {8b935272-681a-419b-9b1d-937e502d5587} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 86 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:5764
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13156 -prefsLen 37195 -prefMapHandle 11836 -prefMapSize 270249 -jsInitHandle 12464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11376 -initialChannelId {349b1fe1-f6c4-46a9-a408-d25390fa7dee} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 87 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6724
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11816 -prefsLen 37195 -prefMapHandle 8264 -prefMapSize 270249 -jsInitHandle 11040 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13168 -initialChannelId {197e9f7f-519d-4eb2-b3a9-3f00d876f1bd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 88 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:1308
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 13308 -prefsLen 37195 -prefMapHandle 11760 -prefMapSize 270249 -jsInitHandle 7216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2664 -initialChannelId {35982d6d-26ac-4648-b659-bce755ff24c9} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 89 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:992
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8264 -prefsLen 37195 -prefMapHandle 11816 -prefMapSize 270249 -jsInitHandle 12920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11636 -initialChannelId {7a64fdea-587b-47cc-b428-dcfa47b9467c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 90 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6948
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12272 -prefsLen 37195 -prefMapHandle 7952 -prefMapSize 270249 -jsInitHandle 6708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13068 -initialChannelId {20190f80-aafe-4aa0-a8c0-c78bfd2636bd} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 91 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:2696
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6956 -prefsLen 37195 -prefMapHandle 8448 -prefMapSize 270249 -jsInitHandle 12460 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12116 -initialChannelId {6fa5cf97-ab87-4c83-9bd4-0d63c0779e3a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 92 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6628
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11668 -prefsLen 37195 -prefMapHandle 11928 -prefMapSize 270249 -jsInitHandle 9760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11716 -initialChannelId {42f419d8-38dd-4bc9-9941-19d2b0f76947} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 93 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:2800
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11784 -prefsLen 37195 -prefMapHandle 12672 -prefMapSize 270249 -jsInitHandle 11616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7216 -initialChannelId {046f6c36-e6b7-4236-85a6-ed3d16e8e43d} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 94 tab
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  PID:6280
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7344 -prefsLen 37195 -prefMapHandle 11816 -prefMapSize 270249 -jsInitHandle 13232 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12920 -initialChannelId {9b941986-e384-4d1a-90f5-68aa953de9a0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 95 tab
                                                                                                  3⤵
                                                                                                    PID:4820
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11376 -prefsLen 37195 -prefMapHandle 11808 -prefMapSize 270249 -jsInitHandle 10808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7944 -initialChannelId {99f5fe3c-2800-449c-b21c-c3afcd32f864} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 96 tab
                                                                                                    3⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:7956
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12344 -prefsLen 37195 -prefMapHandle 9764 -prefMapSize 270249 -jsInitHandle 12296 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9756 -initialChannelId {bab77c9f-6c1b-4a2f-b5e9-420182c39038} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 97 tab
                                                                                                    3⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:8092
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12400 -prefsLen 37195 -prefMapHandle 7276 -prefMapSize 270249 -jsInitHandle 11788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6704 -initialChannelId {8c88bbc7-f734-400f-ac58-342e1601c869} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 98 tab
                                                                                                    3⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:8020
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11784 -prefsLen 37195 -prefMapHandle 8208 -prefMapSize 270249 -jsInitHandle 5788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12168 -initialChannelId {6bcd21b5-2226-4b45-98f6-42fb0fbcf932} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 99 tab
                                                                                                    3⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:6724
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12384 -prefsLen 37195 -prefMapHandle 12984 -prefMapSize 270249 -jsInitHandle 2676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11428 -initialChannelId {b170dec4-2d12-49ee-8013-118ab6047876} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 100 tab
                                                                                                    3⤵
                                                                                                      PID:8072
                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12388 -prefsLen 37195 -prefMapHandle 9772 -prefMapSize 270249 -jsInitHandle 9768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10568 -initialChannelId {b734cdac-5de7-4af5-bc09-df9d86fe6aca} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 101 tab
                                                                                                      3⤵
                                                                                                      • Checks processor information in registry
                                                                                                      PID:804
                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12344 -prefsLen 37195 -prefMapHandle 13236 -prefMapSize 270249 -jsInitHandle 13280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8504 -initialChannelId {7eed8931-e706-4fbb-bae3-e4a0b2ee83f7} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 102 tab
                                                                                                      3⤵
                                                                                                      • Checks processor information in registry
                                                                                                      PID:7960
                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9668 -prefsLen 37195 -prefMapHandle 11616 -prefMapSize 270249 -jsInitHandle 5788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11144 -initialChannelId {be587378-37a7-41f7-9e0e-b2735f958c0d} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 103 tab
                                                                                                      3⤵
                                                                                                        PID:7756
                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6712 -prefsLen 37195 -prefMapHandle 5092 -prefMapSize 270249 -jsInitHandle 12648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13204 -initialChannelId {a946b0fc-94e2-492d-b0de-73f6bc4d53ee} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 104 tab
                                                                                                        3⤵
                                                                                                        • Checks processor information in registry
                                                                                                        PID:2920
                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9760 -prefsLen 37195 -prefMapHandle 11376 -prefMapSize 270249 -jsInitHandle 11540 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10456 -initialChannelId {1ae9170e-bb9f-4ede-b989-8b42847a6a3a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 105 tab
                                                                                                        3⤵
                                                                                                          PID:6364
                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7144 -prefsLen 37195 -prefMapHandle 5416 -prefMapSize 270249 -jsInitHandle 7756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6956 -initialChannelId {436e5efd-d659-46eb-a2d4-cbc59a33b514} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 106 tab
                                                                                                          3⤵
                                                                                                          • Checks processor information in registry
                                                                                                          PID:7124
                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5928 -prefsLen 37195 -prefMapHandle 5932 -prefMapSize 270249 -jsInitHandle 6008 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5984 -initialChannelId {43e4acf6-a74a-4bbc-a409-b752d5beacb1} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 107 tab
                                                                                                          3⤵
                                                                                                            PID:4804
                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11316 -prefsLen 37195 -prefMapHandle 8460 -prefMapSize 270249 -jsInitHandle 2912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11240 -initialChannelId {f17a7a38-d7db-4820-beff-99ce3d82675f} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 108 tab
                                                                                                            3⤵
                                                                                                              PID:8012
                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                          1⤵
                                                                                                            PID:7264
                                                                                                          • C:\Program Files\7-Zip\7zG.exe
                                                                                                            "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE\" -spe -an -ai#7zMap10797:144:7zEvent17072
                                                                                                            1⤵
                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                            PID:7868
                                                                                                          • C:\Users\Admin\Downloads\MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE\Installer Manager Offline Setup.exe
                                                                                                            "C:\Users\Admin\Downloads\MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE\Installer Manager Offline Setup.exe"
                                                                                                            1⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:8068
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\is-LP3KGVJHPI.tmp\Installer Manager Offline Setup.tmp
                                                                                                              "C:\Users\Admin\AppData\Local\Temp\is-LP3KGVJHPI.tmp\Installer Manager Offline Setup.tmp" /SL5="$C0258,561346543,889856,C:\Users\Admin\Downloads\MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE\Installer Manager Offline Setup.exe"
                                                                                                              2⤵
                                                                                                              • Executes dropped EXE
                                                                                                              • Drops file in Program Files directory
                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                              PID:4964
                                                                                                              • C:\Program Files\MasteringTheMix\Installer Manager.exe
                                                                                                                "C:\Program Files\MasteringTheMix\Installer Manager.exe"
                                                                                                                3⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • Loads dropped DLL
                                                                                                                • Drops desktop.ini file(s)
                                                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:4480
                                                                                                                • C:\Windows\System32\cmd.exe
                                                                                                                  "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\mtm-install-88b6c57921404955a394d79d93b25dd7.bat"
                                                                                                                  4⤵
                                                                                                                  • Drops file in System32 directory
                                                                                                                  • Executes a command shell one-liner
                                                                                                                  PID:5008
                                                                                                                  • C:\Windows\system32\chcp.com
                                                                                                                    chcp 65001
                                                                                                                    5⤵
                                                                                                                      PID:2416
                                                                                                                    • C:\Windows\system32\xcopy.exe
                                                                                                                      xcopy /E /I /Y /H /R "C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-aax-extract\FUSER.aaxplugin" "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FUSER.aaxplugin"
                                                                                                                      5⤵
                                                                                                                      • Drops desktop.ini file(s)
                                                                                                                      • Drops file in Program Files directory
                                                                                                                      PID:6876
                                                                                                                    • C:\Windows\system32\attrib.exe
                                                                                                                      attrib +R "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\FUSER.aaxplugin"
                                                                                                                      5⤵
                                                                                                                      • Drops file in Program Files directory
                                                                                                                      • Views/modifies file attributes
                                                                                                                      PID:7220
                                                                                                                    • C:\Windows\system32\xcopy.exe
                                                                                                                      xcopy /E /I /Y /H /R "C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-vst3-extract\FUSER.vst3" "C:\Program Files\Common Files\VST3\FUSER.vst3"
                                                                                                                      5⤵
                                                                                                                      • Drops file in Program Files directory
                                                                                                                      PID:4532
                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                              C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                              1⤵
                                                                                                                PID:7808
                                                                                                              • C:\Windows\system32\SnippingTool.exe
                                                                                                                "C:\Windows\system32\SnippingTool.exe"
                                                                                                                1⤵
                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:6440
                                                                                                              • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                1⤵
                                                                                                                  PID:5312
                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                  1⤵
                                                                                                                    PID:5740

                                                                                                                  Network

                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                        Replay Monitor

                                                                                                                        Loading Replay Monitor...

                                                                                                                        Downloads

                                                                                                                        Installer Manager.exe

                                                                                                                        • Path C:\Program Files\MasteringTheMix\Installer Manager.exe
                                                                                                                        • Size 6.6MB
                                                                                                                        • SHA256 624c830d1330bd7b231c7366896aac011cc83d4cd6b6932d65f100ea4dec27fa
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        unins000.dat

                                                                                                                        • Path C:\Program Files\MasteringTheMix\unins000.dat
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 5a9b2caf04ae992168024ae4b76e5773d090b81dfe897877a278b678121097e2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        unins000.exe

                                                                                                                        • Path C:\Program Files\MasteringTheMix\unins000.exe
                                                                                                                        • Size 4.2MB
                                                                                                                        • SHA256 9b2fcdc73db47372117aebc14776b3d2f94091c1b26d40df8b5a172dad0ed64f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        fuser-1.0.9-win-aax.zip

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\fuser-1.0.9-win-aax.zip
                                                                                                                        • Size 13.0MB
                                                                                                                        • SHA256 d6a20bed39031651e375ab7d6f3a83cbaf2278e4bb51789bae8f7ae7cd962923
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        BASSROOM.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\BASSROOM.jpg
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 32f12679d8f6b770c35763749cc7cf4ff96c00ca01e9c28f0f0329c1403aefd8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        EXPOSE2.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\EXPOSE2.jpg
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 ebc1d5b96751725294cdf6f40dfead5f55a8cb83ebc9e962c383a1618ae77c55
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        FUSER.png

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\FUSER.png
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 72dc728e62a3a6fb2ae2c8d1b7af074390316dad66c8cfcf3d0998d7c4f0b7a2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Faster_Master.png

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\Faster_Master.png
                                                                                                                        • Size 26KB
                                                                                                                        • SHA256 7c5295e2e9a54be84df3cc04dcb11fe762169453c5d31caab3a049ba5cdea8fe
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        LEVELS.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\LEVELS.jpg
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 cd124e96f80d08021266cc4244cb28740201d953485e3d9bf15d194b13eb61bd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        LIMITER_Smart_mastering_plugin.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\LIMITER_Smart_mastering_plugin.jpg
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 459ca519de598d5834dcb303a5efa5d47ea90fc190f9967a10fda6d14dc17a81
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        MIXROOM.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\MIXROOM.jpg
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 0adce9edb77f2f5b9b9dbc3025ac3d58342ac0a2fc340c56d7f1060b6b6b0f6c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\[email protected]
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 9b4c86d26f54a0fc10a22064681b242ca05b069c516ee240622db371762e9dc1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        REFERENCE_3.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\REFERENCE_3.jpg
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 980e90ccce98d2c4e7f13c51a974357af652fc067433682c65a97ceb325f8fe5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        RESO.jpg

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\RESO.jpg
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 4d1fb1fe8f60a37d65373392a9f934fc602dbb1b2fe69b0de194903e786b72f4
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        STEREOVAULT.avif

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\images\STEREOVAULT.avif
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 9763864a07775fef2d34fccabe487ed3bd0b606ac6d7b5f9f0751ee5f06b583b
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        is-162NEIZJ8M.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-162NEIZJ8M.tmp
                                                                                                                        • Size 13.7MB
                                                                                                                        • SHA256 7c594f5c947685c0d87a8a0f9fa8c87c5d6b6be84da33eef02be1ea266ede361
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-9M94LI5FXN.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-9M94LI5FXN.tmp
                                                                                                                        • Size 19.2MB
                                                                                                                        • SHA256 ca0cf412bbfa6ef07472b5346e5f82319311ebdb09dd5ee5a838729d4d55be9a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-G7M8R29MA1.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-G7M8R29MA1.tmp
                                                                                                                        • Size 14.6MB
                                                                                                                        • SHA256 5e1fb7b6e9fa5167ecb15dcab66ffc1925702cb569755135db3a93c17eac4b02
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-GQ22WOMDR0.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-GQ22WOMDR0.tmp
                                                                                                                        • Size 1.2MB
                                                                                                                        • SHA256 8c54c16c22ecdf2f938e0d0c067a1adcea6112349f0aaa172cca479113b766fd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-L2CZU281U8.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-L2CZU281U8.tmp
                                                                                                                        • Size 13.3MB
                                                                                                                        • SHA256 5f5eadb9718d8043ffcef6840cbbf9f2f7fdb3072d69cd2f1bfe8135ccf734e2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-N4OOP77WWQ.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-N4OOP77WWQ.tmp
                                                                                                                        • Size 13.3MB
                                                                                                                        • SHA256 e9dd0a8a2d66c566e82a92afb192d7ba940d63e01821fc28a5e33cc44feaf42c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-SGGJCP7GNM.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-SGGJCP7GNM.tmp
                                                                                                                        • Size 15.6MB
                                                                                                                        • SHA256 c893ef5fd0c1034fd96c670530b39c7e15c5ed66597aaab47528215bc0e87920
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-TUV8DDS3MY.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-TUV8DDS3MY.tmp
                                                                                                                        • Size 13.0MB
                                                                                                                        • SHA256 b13d8ecacfc067065c5ac543fa10cdb5c5530376d62bbf4a036709fe01b304cd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-TZM8BC5TBY.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-TZM8BC5TBY.tmp
                                                                                                                        • Size 12.1MB
                                                                                                                        • SHA256 55accb5b09187add69edf15a4ebb429c3f43cbd2cf06eba087e9a01855f71376
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-Y3EC7QD1WL.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-Y3EC7QD1WL.tmp
                                                                                                                        • Size 14.7MB
                                                                                                                        • SHA256 b9c3eeb6f050a2b9c7ab8a3ac205647e943a50867d5f5d8ed5ab2c5b3c45b9af
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        is-ZL0DVBA9JM.tmp

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\is-ZL0DVBA9JM.tmp
                                                                                                                        • Size 18.4MB
                                                                                                                        • SHA256 31dc2fdbde6c6a0e859880c6ddf1cf3598ef817833111327343746d55816b3ec
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        libiomp5md.dll

                                                                                                                        • Path C:\ProgramData\MasteringTheMix\InstallerManager\offline\libiomp5md.dll
                                                                                                                        • Size 1.5MB
                                                                                                                        • SHA256 a9c9ddf4bb1477645120b481a14a9bcb02b8da6eece12032376e33a1ba96d2ea
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        activity-stream.contile.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\activity-stream.contile.json
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 f6600c5350cf5a41f69802d3b508faeccb0b7e9a0c17c92b0e4c9d392ed92112
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        activity-stream.contile.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\activity-stream.contile.json
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 c0d1596e3824413e21dcb4616c1b865cf019b6fa315f7304cb3604d7099b8c17
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        activity-stream.discovery_stream.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\activity-stream.discovery_stream.json
                                                                                                                        • Size 75KB
                                                                                                                        • SHA256 c328f0715df374448b345fce825f1a56f9a9686383acf7ca8696b779673ad94e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        activity-stream.discovery_stream.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\activity-stream.discovery_stream.json
                                                                                                                        • Size 74KB
                                                                                                                        • SHA256 8a44c361b82ede8d4cc84694e866eef9dc2de312718a8e87eef3e6e190ae929c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        10538

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\10538
                                                                                                                        • Size 139B
                                                                                                                        • SHA256 7a58af57f5b0b81f6cf781a630435e08c6e7f075f0f7e6d731c063b21cf6bf6a
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        10540

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\10540
                                                                                                                        • Size 141B
                                                                                                                        • SHA256 d797bdbf62c369a3f64ac06378c09ddd1a009a22951521421865d0ee22e02520
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        106

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\106
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 65de6eddab14500612b078d793da560e0f03f0b225f0261ae2d1f58a00e31287
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        11570

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\11570
                                                                                                                        • Size 386B
                                                                                                                        • SHA256 4b2b7b2ba3b031124a75551eba1f609ef49f32ee54a25d7f6c73fd5cbb804fbc
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        11606

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\11606
                                                                                                                        • Size 155B
                                                                                                                        • SHA256 58b239b4a9e67f0947ab87cdf2b1653e965852a91649e583cce15944ce290262
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        12289

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\12289
                                                                                                                        • Size 256KB
                                                                                                                        • SHA256 d10210593c43323e1dab0e2dbd03066b360cf1cc3063e66b09aa0a25b434909b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        12510

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\12510
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 d6991b22905247d1081f782bf8e6e56ce502c53427d09a327560412a162abe30
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        12629

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\12629
                                                                                                                        • Size 237B
                                                                                                                        • SHA256 0f8f538f3bc84188bdb860ab3281837c4b3cc8d9f7943d1dda2152743d80a993
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        12769

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\12769
                                                                                                                        • Size 1001B
                                                                                                                        • SHA256 0d0747e7b4de6ed3a90e7530c02086cd802bec7d77354ee79ca6093235a3e530
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        13081

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\13081
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 054d0981c814386ff5031b216b4405b61f217c132a88687ee29d0d8dd6e7de26
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        14049

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\14049
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d09a14a6677a7afc7030c9b4ceae5e7b2e2e07d2948d8bd22aa38277f1a974b3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        14874

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\14874
                                                                                                                        • Size 1.8MB
                                                                                                                        • SHA256 bf61beb6ea6a1c87ccea717c5fcfa3a7bd2c85eb52b973d49faa55e9dd4882a7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        14891

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\14891
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 1983d88446e2b12dcf499d77d968de21c8c0db69e353ab2938e19f3f3ab8bf86
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        15001

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\15001
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 8d04b423baecb1f1cb5615289d8e548b1c41cc262fea2adf75ff52a97f70bd2f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        15037

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\15037
                                                                                                                        • Size 276B
                                                                                                                        • SHA256 37d231fe17454823da5a7547bd2b3f0dd1bae9e18c7dcbcc4db2d935072af9c9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        15627

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\15627
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 aca70f83f0ebf975e069902a9e72e2e6c859a0ab8e34a5ed23b63b34087b55ca
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        15836

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\15836
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 dd7cabd4411cc266dddffae6c0a2738b27a3178de5a9810212ba9ec5c6c479af
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        15858

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\15858
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 6cdfe65927c52f1f9c41608b309c04f2c9c19eed7cef9b8ee6d4642b99ad894f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        16089

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\16089
                                                                                                                        • Size 279KB
                                                                                                                        • SHA256 7d488f98e6a69477f52699dfd73d39e7382d18336b1f356b7190c2ef54520344
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        16590

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\16590
                                                                                                                        • Size 228B
                                                                                                                        • SHA256 9cd4aa42605d9fecdc5bcd13630efcfb497ff0a86407dc9b8503951a56e1601c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        16915

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\16915
                                                                                                                        • Size 276B
                                                                                                                        • SHA256 d58e64cb59d3f75dc1cd7f4620b6c120f2fb68a8205a158a2ae49863e9de32e0
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        18079

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\18079
                                                                                                                        • Size 279KB
                                                                                                                        • SHA256 403148564b400d927318c13a9d54521ced10f3820d263c0fc91c776a0fa7f0f5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        18832

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\18832
                                                                                                                        • Size 154B
                                                                                                                        • SHA256 c9b5d8a8697fc60039da884f8fb5d086f57efed32139f82a6a70ebf762864293
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        19501

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\19501
                                                                                                                        • Size 590B
                                                                                                                        • SHA256 ba408f2796c3138d2d470d4a68b68599af35844c286d4402b84bf16504ceeec5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        19527

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\19527
                                                                                                                        • Size 1.8MB
                                                                                                                        • SHA256 21505fd207d12e88406e7524af285bfbb9bf53ec20de690adaba344b69b072a0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        1956

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\1956
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 672fd9fce0416b25b161441bbd1845aa5d0d9e126ce0d3ccd9f4310342a67a2c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        20111

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\20111
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 7c5f61ef9817662a86e456938c184057eb98432fc8019a470d243549fc9e4392
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        2078

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\2078
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 debf622d4cd6e536ed850cb44406063e48c4042f9e8cb40371bf84e98a371119
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        21473

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\21473
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 8c79160878497864c337f9674a9ccdcf9d0a08dd0328df8cc7a609b65e87cce5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        2149

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\2149
                                                                                                                        • Size 865B
                                                                                                                        • SHA256 fc768cca7f07517e697ae5bb6ad20b34095a67a622e5959dad4df8035f0a0128
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        21568

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\21568
                                                                                                                        • Size 154B
                                                                                                                        • SHA256 06a3e6e82f5b04a4445e3c509997b3a83538e590c67a9177121c20a71b6574ca
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        21730

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\21730
                                                                                                                        • Size 276B
                                                                                                                        • SHA256 c7f54b2cf6bd662f75e15590ebb55925f3af1a073ec3fa235e78dd6de162bcc5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        22250

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\22250
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 c6f278b116aec5e35032e9dc490ada3c09fc83ed90189fce5b4ea451d225f8d3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        22426

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\22426
                                                                                                                        • Size 241B
                                                                                                                        • SHA256 334b4ee18cbc0984cb8a13ab5af1f71a24844c722454c0821df9fb5fb3d3ccf8
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        23002

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\23002
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 74a44a513286fa41c2e1f1772eacc383042b505ca388c1e2274857e5115d3655
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        23251

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\23251
                                                                                                                        • Size 201B
                                                                                                                        • SHA256 72cf1dc4fc46d33324eb3d91cfa6c2d543b44eb3007a539f8d71f36bc9c8589c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        23367

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\23367
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 7a1b9fd90747f0a0f83a271ace365acb50781970b6d7bdc3dfefae14ee0caec9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        23538

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\23538
                                                                                                                        • Size 241B
                                                                                                                        • SHA256 320e63b6e7661dd02a66be010f7eeb38c8d1ef900c3cba3049cd6cc57f73ef08
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        23647

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\23647
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 4aad8423245cd2de3e989a3666b78b360d3ada6228d30ea703270c83af4f51d8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        24095

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\24095
                                                                                                                        • Size 512KB
                                                                                                                        • SHA256 e5501ad0161665083fdf6df4c9263043e9c386da1103286ee76760d9a6a27d7d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        24774

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\24774
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 49c7d2d2bf607ea7ade7b6ee9e21c434ea28e95c93ac04d8c0c3dc383d2abcfc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        24833

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\24833
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 b4d8370360af7629b5584eb0f1ed2c29aafaa881027f9e0b0ad731d2a01dbf0a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        25621

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\25621
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 5d1ac79dd201510afbf57ef07131b3c3712ed064a596c81fdd2b0f37ccb3b504
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        29473

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\29473
                                                                                                                        • Size 123B
                                                                                                                        • SHA256 e719cb02f5a9366b7a6f609e7cfd74e84b325292af2a4cc927af6818090bf591
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        29522

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\29522
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 bcb0bdaae215cca8300de9f42f6d6dc22d0dfca173244abb7b583b4ed26fe53b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        29815

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\29815
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 31b664f99976611f4b4d401c64f7b31612be21bf639200ae0cabcf0fd997c20c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        29868

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\29868
                                                                                                                        • Size 386B
                                                                                                                        • SHA256 d96f6400b7829ac5d54e239d09e01613976fb8408731ed17cce800772d9968a9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        30305

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\30305
                                                                                                                        • Size 256KB
                                                                                                                        • SHA256 bf5f0509674cb26b70730e43e4ce3b26d3f431d32ee67109fc98749d086621cc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        31894

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\31894
                                                                                                                        • Size 276B
                                                                                                                        • SHA256 347a946bd7134d6159d7f6d22791a8dd4c702fefe313bf304e84ddc7a43a76f5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        32204

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\32204
                                                                                                                        • Size 153B
                                                                                                                        • SHA256 9bfaaeeb7e6cfe40a9b9bef80f197930fc3ec1be295056fc6096080f35f9ff88
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        3238

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\3238
                                                                                                                        • Size 279KB
                                                                                                                        • SHA256 d1081e6ac0701501a1d7acb1fd6349a99d4274b944fc496c409855622ae20cb1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        32450

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\32450
                                                                                                                        • Size 52B
                                                                                                                        • SHA256 866842553b56d3184a87c3be835bef2025e6baa9ef29b58523def15d25893475
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        32681

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\32681
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 51eaaf94c872065dc4ba866ab3a570e3166a05cdf8d87f5257b209ab34dca3de
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        401

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\401
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 62720e099dbc5c3cb29973368292c8b4e0814c089a9fd8399228cdbf25880809
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        4443

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\4443
                                                                                                                        • Size 139B
                                                                                                                        • SHA256 7634c82c94f49560df1b200736924c52940500f5f39c725c15ada13650fac8b0
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        4454

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\4454
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 47fb4b020bfa0ac66c472e04f7cff6f652643d44804ef72f9be172f79deb0a32
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        4780

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\4780
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 da9b40cff5febf0d68ddb1bf8a797ec684220bf2876b792ca8dfde34f5658f34
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        4889

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\4889
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 f3273a1ca6ffe29e35621aa9d06a2fb1b7960f4d10d5d62cdacf7f09aa0ae022
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        5112

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\5112
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 530db17125d44aa38f11ad152e8f445c4b67b8b7bbf922cb1f1c88873f4c2355
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        5392

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\5392
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 4f6f8276f62a294569bdfc5db764ecfe62387804e8652d96fa694a542e3ab822
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        5722

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\5722
                                                                                                                        • Size 512KB
                                                                                                                        • SHA256 98379496b83dc6947bbb4b38c294d136259d96a37030562b29fa61350d67fa30
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        5789

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\5789
                                                                                                                        • Size 150B
                                                                                                                        • SHA256 832072f251cc3897393187c74ec01117605da87c38cfb56b868c7f62c45ca044
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        5872

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\5872
                                                                                                                        • Size 2.0MB
                                                                                                                        • SHA256 a7d58658ffd19ea74ef85c95e8b7e83613f14637247a7133470ab867e38d2dcc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        6434

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\6434
                                                                                                                        • Size 237B
                                                                                                                        • SHA256 f80ec657d95911336ff8e445fedd6348d287f853c13d00239762130ebbed3ba3
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        6515

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\6515
                                                                                                                        • Size 386B
                                                                                                                        • SHA256 62a67f89c0b225f8ef56f0d393686d950c173543d703fcf03590a3fdde6ff24d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        6793

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\6793
                                                                                                                        • Size 386B
                                                                                                                        • SHA256 22084a45a14bc272eef5514f606afba01265720f79728a2609c07bba8a759d6f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        6828

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\6828
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 344d5e33e0f9e03227a922497da80759908603655c5cdb771956ae8ffd39c44d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        7300

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\7300
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 bcff513c687d4018bc6d2cf4d3bc1db4c748d41ab1fd1adf225339f86efe1eab
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        7383

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\7383
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 bd10a2e4f70c79e4b634de49ccbe8cd9b13e2f112ef62ae009225f980649ddd5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        8045

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\8045
                                                                                                                        • Size 223B
                                                                                                                        • SHA256 5e0ef5049a9890ca5718cfe4e8ee7635daa8be9fab5919f2bb9da35ab5cd6baa
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        8281

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\8281
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 8a79215d87f73c0a59e445a0fb0360933d5ce07ae175212f69dad1bea729e56d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        8525

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\8525
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 da295221581ca1fb1968631baa5026220436f28bf164f6ab3c9b6b0433b066b3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        86

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\86
                                                                                                                        • Size 387B
                                                                                                                        • SHA256 350416726397bb3b345c9c31142db795581e74895b94912be06c409bfdf7f96f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        9233

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\9233
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 bb11b6916678ef5df8ca512e3b3371afc210353a93b12c2b6e488c803685f39a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        9814

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\doomed\9814
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 70ef805382b5f175beee5eff2987a8078c5d711fe2a419ab8b54171b3a488d27
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        0EC0357C523B803CE80C2296C2E8998D4911D1B6

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\0EC0357C523B803CE80C2296C2E8998D4911D1B6
                                                                                                                        • Size 6.7MB
                                                                                                                        • SHA256 55b38302bb6a1cf3c426f40cd109369c0d62989430eaf478a3ebcc0b3bc55193
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        1093E258196114831B0ED12C399390A2DEC5960E

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\1093E258196114831B0ED12C399390A2DEC5960E
                                                                                                                        • Size 295KB
                                                                                                                        • SHA256 c1a14decab2c27c986a3b9fa7f8e35fe78729f15833c68126f68b4edc26d74b9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        149E279A1BA5661E995A1B897FEE8A8945D36AE2

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\149E279A1BA5661E995A1B897FEE8A8945D36AE2
                                                                                                                        • Size 26KB
                                                                                                                        • SHA256 a774148a1f78cee6b259fc94a90fb51115c56f684f16a8277088f21158baccbe
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        1DF8879E8A428FDB59A537410EB5916771D6D513

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\1DF8879E8A428FDB59A537410EB5916771D6D513
                                                                                                                        • Size 6.6MB
                                                                                                                        • SHA256 31b40ffab4dd41018220798cb68f58eaee656f015d6e648ddcdff3b30a64777c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        1EDC1F780C20A575CA19DD3ED2CE5B9F441BA8A6

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\1EDC1F780C20A575CA19DD3ED2CE5B9F441BA8A6
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 a6b9596fc82753d02129f6c7555a52d5ff8bb06f677cc56795ec6ad2e101cb84
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        27981B30734C9745ECA13F164FFE6315B5338F1F

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\27981B30734C9745ECA13F164FFE6315B5338F1F
                                                                                                                        • Size 9.3MB
                                                                                                                        • SHA256 cb4a874e519bf599646b66f58586f6551b2e91cd49893dad3c64fefd8a8709c2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        448F1033EEBA8D10216988D947D3AE4170C74AB9

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\448F1033EEBA8D10216988D947D3AE4170C74AB9
                                                                                                                        • Size 8.0MB
                                                                                                                        • SHA256 1e2f19e6813417bed250c8ea929207f711e2b32660d3c633228f359d8af3918d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        4FBD33E3E759E05EB52D445254952555CC5E197F

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\4FBD33E3E759E05EB52D445254952555CC5E197F
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 1a5b8b941de004f7e94fc4618b87ea7992f501070f19e3f1ed663700faa89620
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        62FFD6395098C534E8F961836ED463B26D0A7171

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\62FFD6395098C534E8F961836ED463B26D0A7171
                                                                                                                        • Size 125KB
                                                                                                                        • SHA256 502eb4ae98a2988cdd2039fa0bc33bda6d04f0a19caa869488215e2945ec3d40
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        73661A90EACD5A16818A452C80E3C3F9103015EF

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\73661A90EACD5A16818A452C80E3C3F9103015EF
                                                                                                                        • Size 151KB
                                                                                                                        • SHA256 da1f219c33c1864816faa62f2a0e09cf2f3712fd13d1c48380cb76b8eaa2c778
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        7937453422DD7BD31FC6412B3E378BA0B030C35C

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\7937453422DD7BD31FC6412B3E378BA0B030C35C
                                                                                                                        • Size 209KB
                                                                                                                        • SHA256 40fa9989385449b2d8e05a04c9e26ab4f0229d9b3e1066aaf30eb330672911d6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        7C0E37360369F59E887209FD48FC6D1F525E0AE5

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\7C0E37360369F59E887209FD48FC6D1F525E0AE5
                                                                                                                        • Size 59KB
                                                                                                                        • SHA256 70bb18cfeb3d0a6e487b616a48862b66897b3c505b442a90ee059c735316a6bd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 f1c620c9860f7a4fd7b9849e424a25176d494360339ba9ec1b8c291ed2a0631d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        C133442F18B7FED7656AF1BAAC072CF76A02D347

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\C133442F18B7FED7656AF1BAAC072CF76A02D347
                                                                                                                        • Size 33KB
                                                                                                                        • SHA256 5d78c7cd252cb4c3536e9b00b5463c1b1f23e95a95bd03eb10114b755d311e81
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        CDCC00F736C4C57290E38BE7109DDC4DF3617C6D

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\CDCC00F736C4C57290E38BE7109DDC4DF3617C6D
                                                                                                                        • Size 57KB
                                                                                                                        • SHA256 60dc9dcecadf000d7471731bca90cfe79c5108e099177781a76fd35b58d0f9bf
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        EED8BB0F9595D51FD76A36900E471AA0500762F7

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cache2\entries\EED8BB0F9595D51FD76A36900E471AA0500762F7
                                                                                                                        • Size 83KB
                                                                                                                        • SHA256 110b3c877e73f08125099d74f1f10d98ec1ddb4a8eefaaf8345f374eb64737b2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        webext.sc.lz4

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\startupCache\webext.sc.lz4
                                                                                                                        • Size 105KB
                                                                                                                        • SHA256 6775527e36830c22ee47030dc543605678f2b1dbc6606ac0c81564d36b82b2a9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        webext.sc.lz4

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\q70bjwr6.default-release\startupCache\webext.sc.lz4
                                                                                                                        • Size 104KB
                                                                                                                        • SHA256 e2c30cec1934f751de45793078bbbb3147a2b2b944e735fd529dfd2b64aac908
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Installer Manager Offline Setup.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\is-LP3KGVJHPI.tmp\Installer Manager Offline Setup.tmp
                                                                                                                        • Size 4.2MB
                                                                                                                        • SHA256 40eb8c6f894426cb0a97b77009599d41dab6f3525e32308e71e7df5febc18d89
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        mozilla-temp-18467

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-18467
                                                                                                                        • Size 8.2MB
                                                                                                                        • SHA256 b99173c1c7640a2ee5e555df944ffa0eca4e9d2d040e008d6ae0f1d6ae120f38
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        mozilla-temp-29358

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-29358
                                                                                                                        • Size 9.0MB
                                                                                                                        • SHA256 218eef210af8f0f10394deb04cac57b4b0daf3d24e2a279fedf687b02f88b3d0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        mozilla-temp-6334

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-6334
                                                                                                                        • Size 9.3MB
                                                                                                                        • SHA256 f1b9951d83dc42f18ed6c7973bd263826105caeaf34ed34ce3749cc39d750488
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        mtm-install-88b6c57921404955a394d79d93b25dd7.bat

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\mtm-install-88b6c57921404955a394d79d93b25dd7.bat
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 93405fff7eb981b16cbb22141b7821c3e1772122012fd78a44a729c2b4d41c77
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        tmpaddon

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                        • Size 21.6MB
                                                                                                                        • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        tmpaddon

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        tmpaddon

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                        • Size 502KB
                                                                                                                        • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        installer-manager.log

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\installer-manager.log
                                                                                                                        • Size 400B
                                                                                                                        • SHA256 4e45bbb5b5a0fd59722a4fc591dfb87dd0042674877fe08b39f19dbdeaa0c567
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        installer-manager.log

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\installer-manager.log
                                                                                                                        • Size 766B
                                                                                                                        • SHA256 58a971a05de719351ca5ff9e6e84069e2dbda4481d6ace59c2aa1f9a2351cc32
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        manifest.cache.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\manifest.cache.json
                                                                                                                        • Size 42KB
                                                                                                                        • SHA256 b38672fab6fa76ccdb3e5213c52d2e6247ea4b08726eb246ba637674b59fde01
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        settings.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\settings.json
                                                                                                                        • Size 187B
                                                                                                                        • SHA256 0fb59684ba6351128b53dcb2644154edf8af7da11901a59fb228e5040987216f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        FUSER.aaxplugin

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-aax-extract\FUSER.aaxplugin\Contents\x64\FUSER.aaxplugin
                                                                                                                        • Size 40.5MB
                                                                                                                        • SHA256 de0f9cfcba56ce9a383b5f539af1025d1478bc8ff79f71bdc3653f9bddd0eae7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        aax_desktop.ini

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-aax-extract\FUSER.aaxplugin\aax_desktop.ini
                                                                                                                        • Size 80B
                                                                                                                        • SHA256 34b7fb2daafdf887abf4397c52a6c69ce5c233466ac8f3100708bcf6f4984a82
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        plugin.ico

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-aax-extract\FUSER.aaxplugin\plugin.ico
                                                                                                                        • Size 354KB
                                                                                                                        • SHA256 6cd99e8cc4d7c8bdc137e2b908210100319181165820649dacc0fae4974150b6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        fuser-licence.dat

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-aax-extract\fuser-licence.dat
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 e6d1be6496b53070ed94e595753a8847e027d5bd008c74b5ad35f0a0b7e30839
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        FUSER.vst3

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\MasteringTheMix\InstallerManager\staging\batch-4eaf53b31e4a49eebe70e0f556519b12\fuser-vst3-extract\FUSER.vst3\Contents\x86_64-win\FUSER.vst3
                                                                                                                        • Size 40.5MB
                                                                                                                        • SHA256 ca8f53db619c78fc90e8a25f3054ad11e71303925fa164822c0a5a64f6f4969f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        6824f4a902c78fbd.customDestinations-ms

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 d942399852c3be274e1b19465832995ffe9e3fb1bb0006884c344a1d418eb8a1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        EZDPKV9BH8RNHZMI92B1.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EZDPKV9BH8RNHZMI92B1.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 61d8563b7d9a8492e24d638fcb2a5381f946e9a5506dc585818febf2f3889aaa
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        GO5YFJU728J2YQNVEYML.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\GO5YFJU728J2YQNVEYML.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 530b04fc6844968c3b02b9623a61c4fa888cf20e8144eefd41b35571fc4f8f03
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        L5S8KLVD72HQP0VLS2ZX.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\L5S8KLVD72HQP0VLS2ZX.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 a10e0544246acc603e607aed1b4f03a7dcf4b19e7ac9b67f14fc7c045debbcca
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        LHX88V0WWU77FL3QO4X5.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\LHX88V0WWU77FL3QO4X5.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 f15e2e7ba5a52903b6efedf5ebe989ba90fac2cde36a5f0bd2a75a1ee261f6ee
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        PZNKCL8KG35YRZW4RYGW.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PZNKCL8KG35YRZW4RYGW.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 09d6e740022ecbf3185153bad0d2a9800ba8a5c55f88c6da1897c72b93011fd7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        SRRC4QJFQH4WEMK95562.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SRRC4QJFQH4WEMK95562.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 2b396fcf99e982283f58790f767d6c66239e82b9a5d3d7469b39f4c49cbc7e18
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        WWIMRECPG923JR75UYSS.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\WWIMRECPG923JR75UYSS.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 ad127ceae6a54575f4f0b87d4418aa17bf9fc9bbdab78813da1307b726b47abb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        XU9K502QSOTLI5H48OSE.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XU9K502QSOTLI5H48OSE.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 4ce0db289e0cf076ec4d3c097c86a3c2f8935f051e9f4410ccf4a796cca07d9c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Z2CAQS5OR99HB18LGQ8M.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z2CAQS5OR99HB18LGQ8M.temp
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 aae3af37f1520c38f4217b1706f245910f09446495a2ecc75f16144d17da9eac
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        AlternateServices.bin

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\AlternateServices.bin
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 42fec343efedb3ec2e0fc4da8652de53f0eab2147ad8eb3ea50aa47901c9bd60
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        AlternateServices.bin

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\AlternateServices.bin
                                                                                                                        • Size 18KB
                                                                                                                        • SHA256 4903e0680da9442b6fb2661e7da374f255ff45d972486637e74d121de14f248b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        addonStartup.json.lz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\addonStartup.json.lz4
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 eac333b401243e06b8d7e7b39ab73f0b85cb9d8b0206a1891726886d4b76d031
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        broadcast-listeners.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\broadcast-listeners.json
                                                                                                                        • Size 221B
                                                                                                                        • SHA256 a7520dc431ba45cb9fb923292b163e4510f3a113192ca6da044aa698afd19ad1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        store.json.mozlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\crashes\store.json.mozlz4
                                                                                                                        • Size 66B
                                                                                                                        • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 b98652c2ae54add43d14d1930ff81f5b3b18484b88b68eb196cf70019d71341f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 40336eb95e25decda891d7a34309590ebb4f51416e1a64207efe1b7dd5dbab7b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 9a492bcfd481ad2f7e535bf9ed669d6db1f9ce6e72a8efd120dc82bb0d5ee1f8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 9a95a443b1ff1af518949d5305428fb3324d805a1d40e33e1604ed5c2accc1a8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 126KB
                                                                                                                        • SHA256 42ae5002d0551657a860b30011f360ca62068919a667f064c3806b7a50c6a877
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 129KB
                                                                                                                        • SHA256 aa6632aa0b456f0afeb26e6586ccc2f34a7a1b88144f4007e6f2ec3a22aa743d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 131KB
                                                                                                                        • SHA256 cc54f82e2cd4d5e8902527641fcb229efedb4e379c156d50f743ba2c56b940a8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 97KB
                                                                                                                        • SHA256 ceec65168ab476bb26d6818762788cf793ae0adab4bc79d14d3bd6b8a8e4fe5b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 126KB
                                                                                                                        • SHA256 c061b00ca0034cd6ba84b2338d4c061f63df787ff2d3dea32a0670c444a035ed
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 126KB
                                                                                                                        • SHA256 bdaec13dc6cef657202a960456c97b2e0dcca304a11533a882bba12921298da9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 135KB
                                                                                                                        • SHA256 3df90c7a518a8e6573e2937119dc7e7d98548f6a69bf2b9139240d7684d8d60f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 148KB
                                                                                                                        • SHA256 b3d0c9eb276d931e28c4b51e0113c5f36d3123e3ee5857e70add8c36dc02948d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        data.safe.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                        • Size 44KB
                                                                                                                        • SHA256 fad1c71982494af82d449d542fa8f508a7c202d37f837ac9f3835103480028f0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        events

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\events\events
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 647cf70b2f5f67cde8970047a1bb3347ddf9deacc46c7b2c9980e211d2a03b07
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        events

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\events\events
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 3b902de16bc28e692cc8f04e8f6422f9fcd45f0861faf742287cc726b093894b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        events

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\events\events
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ec299041700acdbcfa39114badc3ab4fd01f725dc7e4462b311672d3ea81318e
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        0f2956d1-acf1-4e24-8cfe-3549a671d1bd

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\0f2956d1-acf1-4e24-8cfe-3549a671d1bd
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 c1c7ff4c125203f73daee3bb8c7770bbcd2d4fc21d873acbdb5c7acbae1c44ec
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        38ffdfc1-08bd-4ef1-826e-9f48e660b4fb

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\38ffdfc1-08bd-4ef1-826e-9f48e660b4fb
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 db8753394c50e9bb61e55ddae15bc528f0b78f52a8ed7904fdd05a4ae5ffca16
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        8abcba89-452f-4478-9635-5baaff5cbb84

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\8abcba89-452f-4478-9635-5baaff5cbb84
                                                                                                                        • Size 235B
                                                                                                                        • SHA256 032d43922f70e76e69170e92109f0c71f5f8e1b25d9a22df906093a3dab9028d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        8fe66be7-fafd-43b4-8c66-af6f28a94742

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\8fe66be7-fafd-43b4-8c66-af6f28a94742
                                                                                                                        • Size 883B
                                                                                                                        • SHA256 7e59c80738fc6d2d9d2da7b1fc82e13442566cfd33d17ef207af5570f0b4f6b5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        f125387c-ec52-4c07-a1d7-5f806cc16c19

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\f125387c-ec52-4c07-a1d7-5f806cc16c19
                                                                                                                        • Size 886B
                                                                                                                        • SHA256 0871ddef4b9dd352adf80bd26366079759c0f4170bdbf1170cbeb406073589f9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        fb4e04c5-3e81-469d-ab1d-dea86a0045a3

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\datareporting\glean\pending_pings\fb4e04c5-3e81-469d-ab1d-dea86a0045a3
                                                                                                                        • Size 235B
                                                                                                                        • SHA256 6a03643998a12ec7ee48caedf3c4cf097ddfad1d9be557061c084939079abdea
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        downloads.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\downloads.json
                                                                                                                        • Size 916B
                                                                                                                        • SHA256 ccad816ad6046febf978625acc8b67fdec4df387611c3e4003782a9a9ebe7515
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        extension-preferences.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\extension-preferences.json
                                                                                                                        • Size 942B
                                                                                                                        • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        extensions.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\extensions.json
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 2bee2a0c066a67e3eb6077cb18e38a40d5a357164158b119c3d8e3f00a58736d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        gmpopenh264.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                                                                        • Size 1.1MB
                                                                                                                        • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        gmpopenh264.info

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                                                                        • Size 116B
                                                                                                                        • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        LICENSE

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                                                                                                                        • Size 473B
                                                                                                                        • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        manifest.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                                                                        • Size 1002B
                                                                                                                        • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        widevinecdm.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                                                                        • Size 21.6MB
                                                                                                                        • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        widevinecdm.dll.sig

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        prefs-1.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs-1.js
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 06a971e851bbffc3c5139e3de18ac5ba0e749f0935338aefa3a52c0dd567d5b5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 e369dc19c5f926d79c499d7a6ce168a85b8670559179b992c77b119b741a7fbc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 f440ae67fd075fdb5471ebfbd39a7c4b8b7bdb422453c779cbfc1627d5334c58
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 aa0c5c5356228bddd31c8c501bcd29890d5fa8b4e6baf92d4693059eb10d22b5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 4eea887677a3a7c2a867e67d222b03d06000b951ace2ddd3f64118a7800ee491
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 1fd07788b200868e9dd61628a0b799a86ec8fae2962337cbdd11b80a1b1800a2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 dfa9f93dd0d30d9d9a53f3538b6db76df7695d93968d0c0d97ecbb11f4ee1c87
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        prefs.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 b7714d37ab033a79de1590f27eb70d50396e80e67f0a726e4787c6bd097836db
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        sessionCheckpoints.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionCheckpoints.json
                                                                                                                        • Size 53B
                                                                                                                        • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        sessionCheckpoints.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionCheckpoints.json
                                                                                                                        • Size 90B
                                                                                                                        • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 d681fb9f3b1c15c9f2fcbfacf3ae1e5d6202b4286afdacb9caea4f94265d7633
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 fa65cc11f64e767f5fcd32226e0bb40f38808d9a1592220c12c8d84143e8b638
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 482b9443f8850b4d9c0ea0e827854628a6f81bc1a711ed5b9db3eb58fba5d836
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 472f0cb05b74b6c435032a70b865c3cb650fb324d809b55646adae9259ccd764
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 64e6768f25c0b45aa0654c5076d54f56991b36c1a8f2efc49257ab4d47a530a9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 3ce9dd2e2054d154d16ab0f0d5193b9784b7e219bb22f197792dd542828d3ff9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 7c85ecf6b20c0a60e7432e195b3069b5c4a11180a53cf36a2258636df71484ed
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 220311c643e3f6a3407d310b24099322484b31d576cfd3e1d40391f47642068c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 7e8c6746e32f77c03251e973bdc94469417ea64ab5cd3c72daa1b10ecc98f54a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 b4312c643ec0095559b667a7ef158a6274a46523c679a66573dc9b1456c784ea
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 2edf7d9b4931dbb4ef802bb18054911eabc71cb2eb9c32060db26dd87f8133da
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 4059e4dbf0dd3425ffa3f2604747b71367ca3c449781937e398f2760022fef6a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 53edc180f0adb5b058f62cb3b9d7ffd62cbb33a10b3ccffffe84b22b39dbdb8e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 9a6d42d8d3239f175db2cb7505bc68328a585fd27fd205f3d0d0a0df60bf2584
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 583de6395196d1a471a6f4ba3e5f3510bbc3b871bdaf0ca71eb3d2cbd1c62b53
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 71622858bc4899de5333fbb410eebeb61e138321d35c2428f82e323f680d6487
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        recovery.jsonlz4

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                        • Size 69KB
                                                                                                                        • SHA256 92a2a2534fd7d3d4a513fb466c6e279abd8a9a33910b8c935c40ede2fb624317
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        usage

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++anotepad.com\ls\usage
                                                                                                                        • Size 12B
                                                                                                                        • SHA256 7ea422668cb73704c2982044bfde099e599a8e5f8343143b506091d7537bb52f
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        usage

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++anotepad.com\ls\usage
                                                                                                                        • Size 12B
                                                                                                                        • SHA256 97dbe8b47ebc560beee919d5d239423a815f6c207a37edf5e7865c33595d43f6
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        usage

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++anotepad.com\ls\usage
                                                                                                                        • Size 12B
                                                                                                                        • SHA256 89352ce7b08990de9ffcbab0c9d8ab26b34ced03b500e801bfcfb7dff8306f39
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        {4ae11542-d8cf-4637-9112-ca6567149c74}.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\116\{4ae11542-d8cf-4637-9112-ca6567149c74}.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 a65bc2912537659c23d813361be8dafec8fd6bb4d3d970f6a18cc6a3559666e4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {03e7a486-7cbb-49af-97a4-1292cbee3cc6}.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\198\{03e7a486-7cbb-49af-97a4-1292cbee3cc6}.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 eb533cc084ef83ce18562aece850b35e2660987761780975c94a4069f8b7869b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {9fbc5d96-dadd-436a-b699-dddcb47c1de3}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\227\{9fbc5d96-dadd-436a-b699-dddcb47c1de3}.final
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 73c0db12a54b43a7f48e459b4b546c95cd622f3ba6f3aed2a3e69feaf7da1572
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        {1cc63ee0-bc49-4e83-9d55-a0fc752035f8}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\248\{1cc63ee0-bc49-4e83-9d55-a0fc752035f8}.final
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 57e004bc54b10fbb26b09d526657ea4c5efc0cc9de2b04295260ba6627b7e954
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {77e5ca29-73de-4430-b1fa-54cfc9a0fd25}.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\37\{77e5ca29-73de-4430-b1fa-54cfc9a0fd25}.tmp
                                                                                                                        • Size 21KB
                                                                                                                        • SHA256 0a7031b971729b6a0e4eb6ffff71774c62d39070883d76c3ee581b4e61e2069f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {a002dd9c-082e-4bce-b829-ab2d9568922e}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\46\{a002dd9c-082e-4bce-b829-ab2d9568922e}.final
                                                                                                                        • Size 23KB
                                                                                                                        • SHA256 c7f2de07f74866d22087bd56298b601ebc398365d611200a9aea06a900a11653
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {be77f78e-0492-47d8-9e43-58ceac9bae05}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\5\{be77f78e-0492-47d8-9e43-58ceac9bae05}.final
                                                                                                                        • Size 148KB
                                                                                                                        • SHA256 55285e6ec9db830b0ee9c27c20ab9e250898fa5b1f2d601c74023b16a875bcd1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {9010b640-d2e9-4307-91ad-37534485f157}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\87\{9010b640-d2e9-4307-91ad-37534485f157}.final
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 08497c8c2bdcc0c1f904e2e666c810aeb7c906e13ff880485df6d84e450dbde7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {42642c1f-731b-4492-ac46-52663cd6f65d}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\93\{42642c1f-731b-4492-ac46-52663cd6f65d}.final
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 95708743ba36070bac7ddf53e073c4e8334fadd843ae960580128833a22e8a7d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        {e3560327-9f54-4fd3-9553-5a501860255d}.final

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\cache\morgue\93\{e3560327-9f54-4fd3-9553-5a501860255d}.final
                                                                                                                        • Size 36KB
                                                                                                                        • SHA256 15ebbeeebccf9dd5e99d6a924bea7ed53c8ebb961a3dda05f6a4e83a5dc14cb0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        2647014652tnwoembm-oc.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\idb\2647014652tnwoembm-oc.sqlite
                                                                                                                        • Size 48KB
                                                                                                                        • SHA256 fde07f799b983b3855ec432b34ab2816d249007fe67d3c49e81edc458d9ec6e0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3244498674t1w-etbn-uaocc.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\idb\3244498674t1w-etbn-uaocc.sqlite
                                                                                                                        • Size 48KB
                                                                                                                        • SHA256 e90a774b800af253dd0ddab7768e4e72b7b7579c357139491a9a32c4ef499ff6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3244498674t1w-etbn-uaocc.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\idb\3244498674t1w-etbn-uaocc.sqlite
                                                                                                                        • Size 1.8MB
                                                                                                                        • SHA256 1ff4e343db2c22da9ace0ef226e3a65b17f0f7decde6b490238790ef9fb06c67
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        usage

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\ls\usage
                                                                                                                        • Size 12B
                                                                                                                        • SHA256 afe51ae0f732d8cc3cc3b8a4d1c8c8862e52a0f6bcf5cb30d22349b7bb25535c
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        usage

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\default\https+++web.telegram.org\ls\usage
                                                                                                                        • Size 12B
                                                                                                                        • SHA256 7ca5b932c8e4009e4fc632df43af33318edd21f826d43ec2c4ead6bd90a3928b
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 5.1MB
                                                                                                                        • SHA256 27108c003a6d6b311b76ad15083bc01fd19a3a01a3c41d9151f04a3220d965c9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 5.1MB
                                                                                                                        • SHA256 9c0c5721acf9d4e9556f3dc2d6d42c9de6b7c33877a3864bed8cff19346e6000
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 5.7MB
                                                                                                                        • SHA256 070a6e374c6a5aa4ee7afad12692acc8e6e04b8dac13710fb808ea47b8b78a72
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 6.6MB
                                                                                                                        • SHA256 3e8771554f0c05b150b984eff6c197b07983a14085673782d8f11439d5b810a4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 7.3MB
                                                                                                                        • SHA256 be18feba932fc0c50af5c28db7b6a999767c55c67135a5ae5f5463ea39bd9c5d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        3870112724rsegmnoittet-es.sqlite

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                        • Size 7.4MB
                                                                                                                        • SHA256 7ad2a36fa284340ae19de38fad7cfec727835ce9c31f906871838bda2506cc6f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        targeting.snapshot.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\targeting.snapshot.json
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 0c3f74b4a2e5508831fae7bf8f642091fb2ee0140d482705173191759ef6cd8c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        xulstore.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\xulstore.json
                                                                                                                        • Size 170B
                                                                                                                        • SHA256 9a064be7a03a41018e66e7987d47ffc3736718756ee071ba8494a49c857636d6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE.zip:Zone.Identifier

                                                                                                                        • Path C:\Users\Admin\Downloads\MasteringTheMix_INSTALLER_WIN_MTM_OFFLINE.zip:Zone.Identifier
                                                                                                                        • Size 185B
                                                                                                                        • SHA256 2d4ce353408db4d0485beb2c99a5b463ecebc73266109d559350c391d44a9c00
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        bsdRNcBi.zip.part

                                                                                                                        • Path C:\Users\Admin\Downloads\bsdRNcBi.zip.part
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 ed8c849b678601fde03b02b92a40b8482d813f2823ff91255f7b8b8f87c766ca
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        memory/4964-3679-0x0000000000CA0000-0x00000000010E2000-memory.dmp

                                                                                                                        memory/4964-3573-0x0000000000CA0000-0x00000000010E2000-memory.dmp

                                                                                                                        memory/4964-3574-0x0000000003260000-0x0000000003261000-memory.dmp

                                                                                                                        memory/4964-3493-0x0000000003260000-0x0000000003261000-memory.dmp

                                                                                                                        memory/4964-3751-0x0000000000CA0000-0x00000000010E2000-memory.dmp

                                                                                                                        memory/4964-3907-0x0000000000CA0000-0x00000000010E2000-memory.dmp

                                                                                                                        memory/8068-3572-0x00000000003A0000-0x0000000000488000-memory.dmp

                                                                                                                        memory/8068-3486-0x00000000003A0000-0x0000000000488000-memory.dmp

                                                                                                                        memory/8068-3908-0x00000000003A0000-0x0000000000488000-memory.dmp