Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • user interaction
    yes
  • max time kernel
    4s
  • max time network
    57s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/10/2026, 01:56

General

  • Target
    https://www.tiktok.com/@might.be.a.va/video/7697410378610773279
  • Sample261017-ccvecazy7q
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 12 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://www.tiktok.com/@might.be.a.va/video/7697410378610773279"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1028
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://www.tiktok.com/@might.be.a.va/video/7697410378610773279
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2620
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2000 -prefsLen 27099 -prefMapHandle 2004 -prefMapSize 270279 -ipcHandle 2092 -initialChannelId {47d1005e-628c-432c-98fe-f65371df85c1} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:2284
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2488 -prefsLen 27135 -prefMapHandle 2492 -prefMapSize 270279 -ipcHandle 2328 -initialChannelId {37b947a6-dd1b-4dbd-8da8-f7b630c370fe} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:1260
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3648 -prefsLen 25164 -prefMapHandle 3652 -prefMapSize 270279 -jsInitHandle 3656 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3664 -initialChannelId {c9a6ecb8-813f-4ebb-885f-8a46827fe1b2} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:4316
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3812 -prefsLen 27276 -prefMapHandle 3816 -prefMapSize 270279 -ipcHandle 3884 -initialChannelId {d1514718-f43c-4be5-b10a-b83f2243fd44} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:2916
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2688 -prefsLen 34775 -prefMapHandle 1244 -prefMapSize 270279 -jsInitHandle 1384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3052 -initialChannelId {425ef34e-cb14-44fe-8f36-1b30c1dd32bd} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:3556
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5000 -prefsLen 35012 -prefMapHandle 5020 -prefMapSize 270279 -ipcHandle 5028 -initialChannelId {2d6eabe4-50ee-4fb4-a998-e8b14c1f2b47} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:5260
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5240 -prefsLen 32952 -prefMapHandle 4888 -prefMapSize 270279 -jsInitHandle 4920 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5320 -initialChannelId {f5ca85f5-68e8-4f27-9d0c-af14f904fc46} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
                PID:5340
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5332 -prefsLen 32952 -prefMapHandle 5336 -prefMapSize 270279 -jsInitHandle 5340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5348 -initialChannelId {604f93f2-7b8a-4174-b964-97b56f62588e} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                3⤵
                  PID:5348
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5396 -prefsLen 32952 -prefMapHandle 5400 -prefMapSize 270279 -jsInitHandle 5404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5412 -initialChannelId {00948e89-4f6c-4ae9-8270-ef0148c8c8f2} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                  3⤵
                    PID:5356
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6024 -prefsLen 35064 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 5824 -initialChannelId {5dbe0de4-2966-4e21-8810-052e21eadc56} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 utility
                    3⤵
                      PID:6016
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6004 -prefsLen 35064 -prefMapHandle 6052 -prefMapSize 270279 -ipcHandle 5416 -initialChannelId {0d3fff9e-65a7-4f0a-9853-8b77e8457479} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
                      3⤵
                        PID:6036
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6456 -prefsLen 32952 -prefMapHandle 6460 -prefMapSize 270279 -jsInitHandle 6464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6472 -initialChannelId {50d5e1b8-4233-4709-bcec-399544848561} -parentPid 2620 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2620" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                        3⤵
                          PID:3248

                    Network

                          MITRE ATT&CK Enterprise v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          activity-stream.contile.json

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\activity-stream.contile.json
                          • Size 4KB
                          • SHA256 9bac7b5b19f5393cbd8b16af381b119f2c4b30b4e16ada02b5499d83ae7fa35c
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          activity-stream.discovery_stream.json

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\activity-stream.discovery_stream.json
                          • Size 75KB
                          • SHA256 2f74d9c9d4c75a058d1f3bdfbbf765e24853f26782ef743ecda36ee712ec5dfc
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          activity-stream.discovery_stream.json

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\activity-stream.discovery_stream.json
                          • Size 75KB
                          • SHA256 4000fcac4cdbf3f40e97514a8c24212ac52e048f64f2571eccbd0b48beb62958
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          12100

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\12100
                          • Size 12KB
                          • SHA256 6580e57309a122600fef05a05318e98ff4effb8a33f2b91273b9fd90b8008376
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          13168

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\13168
                          • Size 9KB
                          • SHA256 9adbb1cb1eca563e5ee777137bf46f26ba69034403fc585db5dc4ac2d0a8a711
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          13311

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\13311
                          • Size 10KB
                          • SHA256 238944a6fe3d02baa2d354378ca0e7b9d02e2993db5f082324314605469489fd
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          15014

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\15014
                          • Size 12KB
                          • SHA256 1b66770d76c50ed37fb12ca144362bba8d2e76b69fb77f81f5f824f84ef67d3f
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          18575

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\18575
                          • Size 149B
                          • SHA256 9f3cb08e3adce310075863a176cf839466385203bfc24c65417819046cf09fef
                          • MD5 SHA1 SHA512 TLSH

                          20064

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\20064
                          • Size 7KB
                          • SHA256 d20967fea0e0e26d0c76fba846a86ee44eddfb18287c524e8eb93dbca9f1463a
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          22532

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\22532
                          • Size 7KB
                          • SHA256 59b715868fbc13dc193785a8066019e09435c849847786403d0f1798274df743
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          23187

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\23187
                          • Size 1KB
                          • SHA256 25531d6ac94b24d16947e33c9984906d77d16c69c34385856183e3e712003ef1
                          • MD5 SHA1 SHA512 TLSH

                          23511

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\23511
                          • Size 10KB
                          • SHA256 157b8da9bb0d775dc5ee9e7defdfa123311738e3e6e10e2c309b029c683e8b1c
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          28839

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\28839
                          • Size 14KB
                          • SHA256 adc0a2219ef61b16754ce882c77b6febce17b04c1973c098a59db217a558a5d3
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          29283

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\29283
                          • Size 10KB
                          • SHA256 14ba2fff03f5a83c403bfe161ffe9991ef7f3a7f2bed5ba2bbd68d8d23ed9496
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          29931

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\29931
                          • Size 192B
                          • SHA256 375cf4af812e7ac8befa72fe4d555a395baddb79bb8b0f861ded475a78b88ceb
                          • MD5 SHA1 SHA512 TLSH

                          30113

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\30113
                          • Size 8KB
                          • SHA256 39e28ee085e704306c2d898f5408c7153cf9bf6cdc98c519c656b4c0e90e49b0
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          31319

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\31319
                          • Size 18KB
                          • SHA256 8363db5735d0ff47e0cf3ee8930ae245525df88d974e746b2815b7c12b115e66
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          31880

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\31880
                          • Size 10KB
                          • SHA256 e2f7f946130bcf60c1ffc896de3e7f253883cceae2b67962bb36f6c37644ab40
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          3596

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\3596
                          • Size 63KB
                          • SHA256 fa8cb44ef6b456bb3f86218586a0e0848e2255a076234971709a4ef37ca6490d
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          5244

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\5244
                          • Size 842B
                          • SHA256 86fd7c337d5c97f2daa5ceb71b8204a8362a9732d339b34ef0b9f05a94aaf29c
                          • MD5 SHA1 SHA512 TLSH

                          5779

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\5779
                          • Size 9KB
                          • SHA256 5df85c8d9c27a997e95f1d8f0c9f9c2718c71e1f2a5d173d82c1f04f40ae390b
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          6934

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\6934
                          • Size 1KB
                          • SHA256 b3524fd22f76bbd3005f042d8a94cb4efac6ccc3dc2ebe6ff4e58875001b8416
                          • MD5 SHA1 SHA512 TLSH

                          7895

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\7895
                          • Size 8KB
                          • SHA256 c675fecfed0cdb0c705bc14328a97aaa94cc86ebe76b610bf4406018b2be8239
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          7916

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\doomed\7916
                          • Size 808B
                          • SHA256 3aa18d9667476ff0a70bfe88458fa74ec1553710389ec81b816be33957c58213
                          • MD5 SHA1 SHA512 TLSH

                          10CD44790092F2839B819C37529474A55045B527

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\10CD44790092F2839B819C37529474A55045B527
                          • Size 21KB
                          • SHA256 a59a009558170ad5740585fda8a0b29e929b5051995470255778e0864a31fb5d
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          34BF3D8DDDF7BD1317CA18FEDCCBBBAA43DD1A66

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\34BF3D8DDDF7BD1317CA18FEDCCBBBAA43DD1A66
                          • Size 18KB
                          • SHA256 91184508cb992bc6f3869b0d6381c5f2a11be4397a2361b0e53ba12a82e02988
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          541FA3D2A0FFF232B228FBD45311FE10CCFEDE23

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\541FA3D2A0FFF232B228FBD45311FE10CCFEDE23
                          • Size 33KB
                          • SHA256 7a82594de28e3e39f1225b6640995cc4c01c0b68168b99d3a7d8880308573b8f
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          6012B400EE8975B8EE05A983DD39ACA711F48FED

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\6012B400EE8975B8EE05A983DD39ACA711F48FED
                          • Size 141KB
                          • SHA256 a9bac18259d473725988cf7e748d2033f754bb3a4be38cdf0801204e82431b61
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          67F765102180ED6A8A0C3EA466B2C5043B900874

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\67F765102180ED6A8A0C3EA466B2C5043B900874
                          • Size 142KB
                          • SHA256 1059646185358beb039ebc03c76b15111042a1469f4d5471f6be331db5919a40
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          9FBCABFDCBE4D4F36E232E84312C861AAD9C8A04

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\9FBCABFDCBE4D4F36E232E84312C861AAD9C8A04
                          • Size 16KB
                          • SHA256 cd5d75cd774fc04134bcb30cea70a59b9b65d534a5c16aa09cc30c037144c0a0
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          E9338C5CCF1E2FCF149487351399F198A4F9FCD6

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
                          • Size 16KB
                          • SHA256 965b00e22cff95f72cfdf368b436cd7ede9f5d1a6934ad1627a92b927e29d903
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          webext.sc.lz4

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\startupCache\webext.sc.lz4
                          • Size 104KB
                          • SHA256 a91a11835eeb5aadc05309863443d43e2a64f939c9c40fcb8c221069c134f28f
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          webext.sc.lz4

                          • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\startupCache\webext.sc.lz4
                          • Size 105KB
                          • SHA256 80e88e39a5986deb347d66e30622afb3c98ef8e8cecd1081bfb3dfa856ef1166
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          tmpaddon

                          • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                          • Size 11KB
                          • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          tmpaddon

                          • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                          • Size 502KB
                          • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          tmpaddon

                          • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                          • Size 21.6MB
                          • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          AlternateServices.bin

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\AlternateServices.bin
                          • Size 8KB
                          • SHA256 6d516884f423470577b50d05a58509e1d8bd0ccf7d5198540116ec5a8574eefa
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          addonStartup.json.lz4

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\addonStartup.json.lz4
                          • Size 4KB
                          • SHA256 a15229a2c81955b86e8d0c88d0d230b98a1894850aacb983c5eed78cef38ee7e
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          data.safe.tmp

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\db\data.safe.tmp
                          • Size 28KB
                          • SHA256 779df6e9d8224ddb600ea2a396eeb22f8dd7315b9b6cccff8e64a1a59aa142ef
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          data.safe.tmp

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\db\data.safe.tmp
                          • Size 28KB
                          • SHA256 d04e8973fd9f0162b7f5208591bb1774522f299360e3f3c961933898f76efc80
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          data.safe.tmp

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\db\data.safe.tmp
                          • Size 6KB
                          • SHA256 7a1615195edde1892a29c216894f4f9bd6bf9faf1929e84fdf520e0ab75ebf19
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          events

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\events\events
                          • Size 2KB
                          • SHA256 14a4abd3fef25c43bee12cfdaad9fe6ef4c5e7d9ed20a586dcefaa1371fe0953
                          • MD5 SHA1 SHA512 TLSH

                          events

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\events\events
                          • Size 1KB
                          • SHA256 1170a7218359498023cc7152236d6f58e63e2a0e5af6dc9272be8251e3523e94
                          • MD5 SHA1 SHA512 TLSH

                          665c41c4-3ca1-4f7b-a529-2f3ed65b3cfe

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\665c41c4-3ca1-4f7b-a529-2f3ed65b3cfe
                          • Size 15KB
                          • SHA256 dfec4ad2713a9ad8b1d4a17ced9f05dc66ee4c67efd59425c9b663db2a6b9066
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          ab5b4aa8-c749-4bfe-bea7-164e8b49bcae

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\ab5b4aa8-c749-4bfe-bea7-164e8b49bcae
                          • Size 235B
                          • SHA256 9ba01b678c344e00375b7eae82f9ad967c4943e881c3ab341b68cd956cc7680a
                          • MD5 SHA1 SHA512 TLSH

                          b8a25daf-ef0c-4275-9c0e-3991887b567b

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\b8a25daf-ef0c-4275-9c0e-3991887b567b
                          • Size 2KB
                          • SHA256 07430c4e212a4de1cfa17d9ab3e2f3df0ef44bf2a4bbe72aa6d155acc327f7bc
                          • MD5 SHA1 SHA512 TLSH

                          d028eadb-d324-49c9-a63b-d1a6888c4c45

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\d028eadb-d324-49c9-a63b-d1a6888c4c45
                          • Size 886B
                          • SHA256 ea6ff017c7b2eafb621706c12d6f71133be51feb40f7faf79cf9330b7d2be2fc
                          • MD5 SHA1 SHA512 TLSH

                          d70b63eb-228c-45c2-95fa-7b2c0d857cf8

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\d70b63eb-228c-45c2-95fa-7b2c0d857cf8
                          • Size 883B
                          • SHA256 13f2978f6a97879b724402a30fcdcfa739c604ce53d56742940e734a07c4713d
                          • MD5 SHA1 SHA512 TLSH

                          dbd80bbd-1599-4e0d-ae9b-289cc453bf1d

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\datareporting\glean\pending_pings\dbd80bbd-1599-4e0d-ae9b-289cc453bf1d
                          • Size 235B
                          • SHA256 80fe48dcbcedf235ebfffb088adbc1a800dae525b918600dbc7ba4711252af04
                          • MD5 SHA1 SHA512 TLSH

                          extension-preferences.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\extension-preferences.json
                          • Size 942B
                          • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                          • MD5 SHA1 SHA512 TLSH

                          extensions.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\extensions.json
                          • Size 14KB
                          • SHA256 7a302584eb499e1fcdaa62808b93b6a60dae733b3f3a3cc852bda91c992d2f38
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          gmpopenh264.dll

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                          • Size 1.1MB
                          • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          gmpopenh264.info

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                          • Size 116B
                          • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                          • MD5 SHA1 SHA512 TLSH

                          LICENSE

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                          • Size 473B
                          • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                          • MD5 SHA1 SHA512 TLSH

                          manifest.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                          • Size 1002B
                          • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                          • MD5 SHA1 SHA512 TLSH

                          widevinecdm.dll

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                          • Size 21.6MB
                          • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          widevinecdm.dll.sig

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                          • Size 1KB
                          • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                          • MD5 SHA1 SHA512 TLSH

                          prefs-1.js

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\prefs-1.js
                          • Size 6KB
                          • SHA256 a419f8e9805cd258279b34ff30b0a568814b61cf8653d2b06e2539f002e774d8
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          prefs-1.js

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\prefs-1.js
                          • Size 6KB
                          • SHA256 4e64923636288b3d3bca763d030d83e98ed8088227c7c1e73d88e3f57bd05e1e
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          prefs-1.js

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\prefs-1.js
                          • Size 7KB
                          • SHA256 90b707deb120cc91fa2a8dc547555810b220efc914880bfc8ea156cf31d893e1
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          prefs.js

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\prefs.js
                          • Size 6KB
                          • SHA256 3c4dc60b8383697efbbab9090d2803abe59262f8346983c85d03c92598fd60eb
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          serviceworker-1.txt

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\serviceworker-1.txt
                          • Size 147B
                          • SHA256 5eff3af7cd87d290fc4144f862f514e14c424c54d73905e482d0766ad2274704
                          • MD5 SHA1 SHA512 TLSH

                          sessionCheckpoints.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\sessionCheckpoints.json
                          • Size 53B
                          • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                          • MD5 SHA1 SHA512 TLSH

                          sessionCheckpoints.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\sessionCheckpoints.json
                          • Size 90B
                          • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                          • MD5 SHA1 SHA512 TLSH

                          recovery.jsonlz4

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\sessionstore-backups\recovery.jsonlz4
                          • Size 3KB
                          • SHA256 0738568c8a888f7f8341db58eae62bbf4fa6a29258a20fb362d725fbe81fc18b
                          • MD5 SHA1 SHA512 TLSH

                          recovery.jsonlz4

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\sessionstore-backups\recovery.jsonlz4
                          • Size 3KB
                          • SHA256 f3308b7c1db12b051625540ae82d67d382eb53b707191fc4ea1a536c4b26aae7
                          • MD5 SHA1 SHA512 TLSH

                          recovery.jsonlz4

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\sessionstore-backups\recovery.jsonlz4
                          • Size 3KB
                          • SHA256 3cfbb2d8f4b6cee8461ac7e6780911575e18687296e840d93b0ffff2ceee383f
                          • MD5 SHA1 SHA512 TLSH

                          {6b333abf-820e-4506-9a92-5fff99233964}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\100\{6b333abf-820e-4506-9a92-5fff99233964}.final
                          • Size 3KB
                          • SHA256 70650c4a292ad6adc7cc3fcad05cb7a0f9d560e20baeea52ec1fddbae3df32fd
                          • MD5 SHA1 SHA512 TLSH

                          {0e4e16c2-02a9-433c-85d0-5849953f967a}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\122\{0e4e16c2-02a9-433c-85d0-5849953f967a}.final
                          • Size 3KB
                          • SHA256 75a3de412c495d0fc4733d0a3f2f49fcea184cf8433d27a3c1d279f9c83dc08d
                          • MD5 SHA1 SHA512 TLSH

                          {31a01094-5f2f-4be0-bbae-bbe309fdb9a1}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\161\{31a01094-5f2f-4be0-bbae-bbe309fdb9a1}.final
                          • Size 2KB
                          • SHA256 fa257cfca3b7c9839fff7603ab498c705170a72cb74b16c5d648b07c339ad450
                          • MD5 SHA1 SHA512 TLSH

                          {12300e6c-35e0-41fd-ae04-890a9b99deaf}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\175\{12300e6c-35e0-41fd-ae04-890a9b99deaf}.final
                          • Size 3KB
                          • SHA256 59c1abb82bf916e276eabef5186f4739bdb446317478c5ff70552d1d2ecf3a74
                          • MD5 SHA1 SHA512 TLSH

                          {f8a9c6d4-f33c-4177-be86-5d3e21728dc2}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\194\{f8a9c6d4-f33c-4177-be86-5d3e21728dc2}.final
                          • Size 5KB
                          • SHA256 97ebd0d2b7be09e5c3e2fc4275e9a02be98c4d7dcc07ca09c4d10d06c08bb577
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          {089ed9ca-e3c1-43ee-8f85-ed80db4579db}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\219\{089ed9ca-e3c1-43ee-8f85-ed80db4579db}.final
                          • Size 1KB
                          • SHA256 ffbb19921c7649fe48296865fba09cc5b0daed8615e80c28113784fefb22b681
                          • MD5 SHA1 SHA512 TLSH

                          {983c07eb-345e-42f9-8d7c-f429414b1ee7}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\231\{983c07eb-345e-42f9-8d7c-f429414b1ee7}.final
                          • Size 459B
                          • SHA256 8cbc58810b87de0a914af7fe5c05d8cd248ba7499e886b62cf001fd41ccff0f1
                          • MD5 SHA1 SHA512 TLSH

                          {7faa430f-317c-490d-a7cd-c82945b3781e}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\30\{7faa430f-317c-490d-a7cd-c82945b3781e}.final
                          • Size 7KB
                          • SHA256 5a42ef07c1399d3f0f04c31a94784e5b15dbf9ef2d96dc501f0b6bbedebe2c0f
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          {d712f695-552f-4173-87f1-d326fda13004}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\4\{d712f695-552f-4173-87f1-d326fda13004}.final
                          • Size 14KB
                          • SHA256 d9d7a953f375ed928f85350714c8f3144608907b6d0656aaaf3d49dfb41d9a88
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          {4021cbe1-fa73-4a28-9c42-ddf4038e473e}.final

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\cache\morgue\62\{4021cbe1-fa73-4a28-9c42-ddf4038e473e}.final
                          • Size 2KB
                          • SHA256 721223762d1c931d9b7614a933ce96e6be4699397000af5bbbd039c2dd7ad9e2
                          • MD5 SHA1 SHA512 TLSH

                          2351235742crdenv-oflai.sqlite

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\idb\2351235742crdenv-oflai.sqlite
                          • Size 48KB
                          • SHA256 15d4368f612c220846eb15903e6735eb10c5a55afa5dcf3fc38b0b1a6bcd8504
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          449403423sewg_asrto.sqlite-wal

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\idb\449403423sewg_asrto.sqlite-wal
                          • Size 12KB
                          • SHA256 39a43192c35818384f61f0f31f9fd5027f29409d0d4f382d251e162911896500
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          449403423sewg_asrto.sqlite-wal

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\default\https+++www.tiktok.com\idb\449403423sewg_asrto.sqlite-wal
                          • Size 12KB
                          • SHA256 436e532d0cca5c54702b663e75bec145989dc6db133ffe773a8d5d6983e31a66
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          3870112724rsegmnoittet-es.sqlite

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                          • Size 6.2MB
                          • SHA256 0c67706e6b5df9e8ba758d4657b1af706c7421b20e379088039406060fec2a9f
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          3870112724rsegmnoittet-es.sqlite

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                          • Size 7.5MB
                          • SHA256 119ea314b8e05a97185d352ee7b69eb5afd95b040c75742a9a6b74ebe17d7b5d
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          3870112724rsegmnoittet-es.sqlite

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                          • Size 7.5MB
                          • SHA256 c5a48c051cad91cabaecd38f0ef9fd4462cdb6249d67cb51f4ed5b1daf5b5b5d
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          3870112724rsegmnoittet-es.sqlite

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                          • Size 5.5MB
                          • SHA256 00dd69fe42825004f28f951e4d9fbca9ce40cb647c3a54bb25818af3bddd9ade
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          targeting.snapshot.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\targeting.snapshot.json
                          • Size 3KB
                          • SHA256 69305f608db7d78f75a93a93c5302b220f44ea46562910512625ed134ce902a4
                          • MD5 SHA1 SHA512 TLSH

                          xulstore.json

                          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ng7xsgm0.default-release\xulstore.json
                          • Size 170B
                          • SHA256 824b37fb029b3460c8dee14ac1afbbb0f2a5b90101a109ad3d824bc82966f647
                          • MD5 SHA1 SHA512 TLSH