Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    899s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/10/2026, 19:07

General

  • Target
    https://document-lvrx.onrender.com/
  • Sample261020-xsrcvav15l
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 28 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of FindShellTrayWindow 15 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 55 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://document-lvrx.onrender.com/"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4248
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://document-lvrx.onrender.com/
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3752
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2016 -prefsLen 27099 -prefMapHandle 2020 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {2d9de866-9a9e-4027-8a61-cf1715663287} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:448
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27135 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2408 -initialChannelId {b7f53fe6-53f3-4580-b5ec-fe1ccedd7bc6} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:956
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3828 -prefsLen 25164 -prefMapHandle 3832 -prefMapSize 270279 -jsInitHandle 3836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3844 -initialChannelId {0013cad1-7823-4b25-9d69-944fc09b6dad} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:3548
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3988 -prefsLen 27276 -prefMapHandle 3992 -prefMapSize 270279 -ipcHandle 4060 -initialChannelId {fbf0e3ea-c13d-4290-b0c8-faf251fc62f9} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:2696
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2712 -prefsLen 34775 -prefMapHandle 2716 -prefMapSize 270279 -jsInitHandle 2868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2672 -initialChannelId {f2c75406-a516-4e3e-aca3-31c55f4533ef} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:228
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4780 -prefsLen 35054 -prefMapHandle 4796 -prefMapSize 270279 -ipcHandle 4932 -initialChannelId {f0dccf3d-c91c-4589-b548-2404f7fc203f} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:2304
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5144 -prefsLen 32942 -prefMapHandle 5148 -prefMapSize 270279 -jsInitHandle 5152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5160 -initialChannelId {c6d239cc-0940-4bcf-bfb2-099e2023d3fa} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:4120
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5188 -prefsLen 32942 -prefMapHandle 5192 -prefMapSize 270279 -jsInitHandle 5196 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5200 -initialChannelId {ed0a0a66-3bce-4ffd-8b1e-f68cabc9a1cd} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:1644
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5560 -prefsLen 32994 -prefMapHandle 5564 -prefMapSize 270279 -jsInitHandle 5568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5152 -initialChannelId {28ac99c0-0758-438a-b85e-43c5e80712e7} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:3916
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5948 -prefsLen 32994 -prefMapHandle 5952 -prefMapSize 270279 -jsInitHandle 5956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5964 -initialChannelId {952ef56b-b18c-4cce-9c6e-5d8ec1013d9a} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:4448
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2880 -prefsLen 32994 -prefMapHandle 3260 -prefMapSize 270279 -jsInitHandle 2876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5976 -initialChannelId {513ca052-bda2-4857-bcf4-529fe2c3e339} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
              3⤵
              • Checks processor information in registry
              PID:1648
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6388 -prefsLen 35106 -prefMapHandle 6392 -prefMapSize 270279 -ipcHandle 6368 -initialChannelId {aeeb14a6-c0e6-464b-98fc-a33e110cf1a7} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
              3⤵
              • Checks processor information in registry
              PID:3492
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6460 -prefsLen 35106 -prefMapHandle 6464 -prefMapSize 270279 -ipcHandle 6472 -initialChannelId {ebd2acc1-8d50-4cdb-aa7c-60ab4533eaa0} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
              3⤵
              • Checks processor information in registry
              PID:1112
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3356 -prefsLen 36808 -prefMapHandle 6728 -prefMapSize 270279 -jsInitHandle 3152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3128 -initialChannelId {812204ee-4703-4129-9387-1e24dc9adcf6} -parentPid 3752 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3752" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
              3⤵
              • Checks processor information in registry
              PID:5384

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              activity-stream.contile.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.contile.json
              • Size 4KB
              • SHA256 7ea3437be9a40f11a8169fea93d4c5a040b02fde631766cbdabf6da25171282b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.discovery_stream.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.discovery_stream.json
              • Size 75KB
              • SHA256 76d5235549095fe0e291ab61e048177907550339ec5a51c1ea1e9964b06db5ed
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.discovery_stream.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.discovery_stream.json
              • Size 75KB
              • SHA256 f0b7ccc871b7c9eb9c7abdfe4359aedf5691d116de70715bf3e2995023d8b0eb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.personalization.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\activity-stream.personalization.json
              • Size 1KB
              • SHA256 f47b7f472edc26c70d0dadf94a73563cf6f38fb3507639f001478a7b286101cd
              • MD5 SHA1 SHA512 TLSH

              23662

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\doomed\23662
              • Size 225B
              • SHA256 02effd12f85574b2aa5ceccb55c93cb6dcb64aad37834fba358e15fa3cc61733
              • MD5 SHA1 SHA512 TLSH

              817DC6F94BC3AFBF784F5B53F575E2E98D48BA82

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\entries\817DC6F94BC3AFBF784F5B53F575E2E98D48BA82
              • Size 16KB
              • SHA256 b423e3f94006117ff3e88a08e1f9736353e9aa041f56a64ad501f51718dca325
              • MD5 SHA1 SHA512 SSDEEP TLSH

              E9338C5CCF1E2FCF149487351399F198A4F9FCD6

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
              • Size 16KB
              • SHA256 b4ba2328492a8292e75cf2282e2f43aa54b2b21891bb891edf45081741aff180
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_arts_and_entertainment.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
              • Size 67KB
              • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_autos_and_vehicles.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
              • Size 44KB
              • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_beauty_and_fitness.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
              • Size 33KB
              • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_blogging_resources_and_services.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
              • Size 33KB
              • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_books_and_literature.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
              • Size 67KB
              • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_business_and_industrial.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
              • Size 45KB
              • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_computers_and_electronics.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
              • Size 45KB
              • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_finance.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_finance.json
              • Size 33KB
              • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_food_and_drink.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
              • Size 67KB
              • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_games.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_games.json
              • Size 44KB
              • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_health.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_health.json
              • Size 33KB
              • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_hobbies_and_leisure.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
              • Size 67KB
              • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_home_and_garden.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
              • Size 33KB
              • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_internet_and_telecom.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
              • Size 67KB
              • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_jobs_and_education.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
              • Size 33KB
              • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_law_and_government.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
              • Size 68KB
              • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_online_communities.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_online_communities.json
              • Size 67KB
              • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_people_and_society.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
              • Size 45KB
              • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_pets_and_animals.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
              • Size 44KB
              • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_real_estate.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_real_estate.json
              • Size 67KB
              • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_reference.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_reference.json
              • Size 56KB
              • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_science.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_science.json
              • Size 56KB
              • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_shopping.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_shopping.json
              • Size 67KB
              • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_sports.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_sports.json
              • Size 56KB
              • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_travel.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\nb_model_build_attachment_travel.json
              • Size 67KB
              • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recipe_attachment.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\personality-provider\recipe_attachment.json
              • Size 1KB
              • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
              • MD5 SHA1 SHA512 TLSH

              webext.sc.lz4

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
              • Size 106KB
              • SHA256 49105c9b6b37d47bd22c085e770ae774d4dc06cbc59e9a939ad21a75d5838b1b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              webext.sc.lz4

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\startupCache\webext.sc.lz4
              • Size 105KB
              • SHA256 3a6172de9d7f192e3914050ca87eec50c5275800414d2f8eb42f1f01e3ccf9f9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              9ddd62eb-9e91-4675-a56e-19b4168a9bb4.zip

              • Path C:\Users\Admin\AppData\Local\Temp\9ddd62eb-9e91-4675-a56e-19b4168a9bb4.zip
              • Size 3.8MB
              • SHA256 2fe9151f44f1da557deb1bb33c03984afd9f685a92960cd67c028be6c8e7be43
              • MD5 SHA1 SHA512 SSDEEP TLSH

              remote-settings-startup-bundle-

              • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
              • Size 575KB
              • SHA256 356da70b81f9f9c143bb8d243501f6cf16af2246a4d4176f37d3a0c2606bc98f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 21.6MB
              • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 11KB
              • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 502KB
              • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6824f4a902c78fbd.customDestinations-ms

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
              • Size 14KB
              • SHA256 88ad66947604cd93ef3693a7cd0c9c1036b2ada2b188186c530c67333753bdfa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              addonStartup.json.lz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\addonStartup.json.lz4
              • Size 4KB
              • SHA256 43be1aa8d0c8108955d564963ab352b3ef74cbc05c3508f6728155c738f8de4b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bookmarks-2026-10-20.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\bookmarkbackups\bookmarks-2026-10-20.jsonlz4
              • Size 855B
              • SHA256 dff29cb64b174e7bdc0e0e8eed2f000d9007112db15988a8b210154df2d4f544
              • MD5 SHA1 SHA512 TLSH

              broadcast-listeners.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\broadcast-listeners.json
              • Size 221B
              • SHA256 57ad8c4cc7a0cb5ad68ddcb790a404f0ae8d34c8d98eea30a34a16005fdd1a90
              • MD5 SHA1 SHA512 TLSH

              broadcast-listeners.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\broadcast-listeners.json
              • Size 221B
              • SHA256 3c1b65a1f277780c97bd23d0d50466cc5c4c3ce292e7aae549580cecaa730e4e
              • MD5 SHA1 SHA512 TLSH

              store.json.mozlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\crashes\store.json.mozlz4
              • Size 66B
              • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
              • MD5 SHA1 SHA512 TLSH

              data.safe.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.bin
              • Size 93KB
              • SHA256 9e4e29455e9bee17c91f5e7700e8f2425c842779e86bbc52a34d4e3a068ea731
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.bin
              • Size 30KB
              • SHA256 10dc27b79a444173eb7236b401acba9e7cc5c187534a9a5ebad7efa2f950c36f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 93KB
              • SHA256 f36010c335b513870b776a2ca1ea39f485c723e9f54d3cc788131bace3dc3855
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 93KB
              • SHA256 33e5f6ea9656825a4971a8662302a086932ecbeb1149db2689eeffd0bbf16179
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 93KB
              • SHA256 f90cff5786114f0f38d8aaebeb3e6921702d3be6c3dd25b53b090e4931258e6b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 30KB
              • SHA256 a321e3e22a69fa0cb0a21250e7169b999d466243caf072d9befd99dfe0a40ffc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 30KB
              • SHA256 ac352d04609ddba1db015b98d5ce2bc2344e80ce7c3ded9c8459937d8e68cc3d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 5KB
              • SHA256 f19d8c5e3506e9e5c39e32a29c53d0856e986f4e9b3fe6fc9fd9fdcf6a6076f7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 7KB
              • SHA256 584ad7f037da18c02c71cca05976047df7d1436a059c13473631484fc2778fe6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 6KB
              • SHA256 06744fb9a72eda1a481e688e2c4c178348925c2f1b99b1c496d6f02eb668becc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\db\data.safe.tmp
              • Size 3KB
              • SHA256 995cec295c5ba02da4c4123ad95ae94c86a68e327e0bc17134d1979cf61ea488
              • MD5 SHA1 SHA512 TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
              • Size 1KB
              • SHA256 6ab9f82ff50b438b0a4371c48c52d62f34fcbadfb3fa8be8183ac1014476f270
              • MD5 SHA1 SHA512 TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\events\events
              • Size 2KB
              • SHA256 e6582467a206e5973ed40b82aad4657545e06f63cd20825f5972178c1db6c9d5
              • MD5 SHA1 SHA512 TLSH

              512aad6d-ab91-4d4a-a6d7-dcef26012988

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\512aad6d-ab91-4d4a-a6d7-dcef26012988
              • Size 883B
              • SHA256 0d003d2ac4b87d75db13299bc1b5c6563e865baac581b4a8b7f7d895c1f43bb6
              • MD5 SHA1 SHA512 TLSH

              634f4e02-ef3e-451d-967d-1d16768a69cd

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\634f4e02-ef3e-451d-967d-1d16768a69cd
              • Size 886B
              • SHA256 8cd55aec91d31245149f6b4d90a7c3c6925a673a81712800f7df9b99feb0ff93
              • MD5 SHA1 SHA512 TLSH

              940d99c2-5ab8-4dc5-a9a1-fd55bf0ddcd4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\940d99c2-5ab8-4dc5-a9a1-fd55bf0ddcd4
              • Size 2KB
              • SHA256 718e7fa8380c0f7963e7fb6148770cf3cf9d75b87ceaf6d03851c7a3da87c479
              • MD5 SHA1 SHA512 TLSH

              bab2808d-b53f-4418-926e-8860264c1ce9

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\bab2808d-b53f-4418-926e-8860264c1ce9
              • Size 235B
              • SHA256 4d9cc8d867bec57c5657e013312007295c5d70880522f2eea66673e360427cc9
              • MD5 SHA1 SHA512 TLSH

              de6c134a-9ddc-4f0e-b6c9-40577a518c40

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\de6c134a-9ddc-4f0e-b6c9-40577a518c40
              • Size 235B
              • SHA256 dccd61958ceb8ef21afae285278b184ce33367e858fc7a45120d8016b873a259
              • MD5 SHA1 SHA512 TLSH

              eb37a5df-bd6c-489f-b98b-84576078e6a8

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\datareporting\glean\pending_pings\eb37a5df-bd6c-489f-b98b-84576078e6a8
              • Size 16KB
              • SHA256 6e58335dede809f8ec8e0eba52117c5bacdae6ee9370e9aabaab12c67a3340c7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              extension-preferences.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extension-preferences.json
              • Size 942B
              • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
              • MD5 SHA1 SHA512 TLSH

              extensions.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\extensions.json
              • Size 14KB
              • SHA256 1bd3c9439f541730fff0ee4184f8f9a962578891df325cfd0b17e6df2181e32c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
              • Size 1.1MB
              • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.info

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
              • Size 116B
              • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
              • MD5 SHA1 SHA512 TLSH

              LICENSE

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
              • Size 473B
              • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
              • Size 1002B
              • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
              • MD5 SHA1 SHA512 TLSH

              widevinecdm.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
              • Size 21.6MB
              • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
              • MD5 SHA1 SHA512 SSDEEP TLSH

              widevinecdm.dll.sig

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
              • Size 1KB
              • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
              • MD5 SHA1 SHA512 TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs-1.js
              • Size 8KB
              • SHA256 b737e937792a3edeba941573b62bd736f0db27954ffdeae55935401b94898132
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
              • Size 12KB
              • SHA256 1a5e20c8c7f811a4339a5b8264fa00159b68c04ae300ba9decbb6ce0a91f55ec
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
              • Size 6KB
              • SHA256 43e8d83a959366ed1c09026131d3ada8a4f2f6ff08b53db08f3f602987be24d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
              • Size 6KB
              • SHA256 2961b9e1748478e329e8ed1f681d070c538fe13ef2e6b8c541bf87fdcd141d26
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js
              • Size 6KB
              • SHA256 422b43f7cd0979315816c90690112b1a7a9fdbc9cbdebf67896667d377d63d0e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              search.json.mozlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\search.json.mozlz4
              • Size 350B
              • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
              • MD5 SHA1 SHA512 TLSH

              sessionCheckpoints.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
              • Size 90B
              • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
              • MD5 SHA1 SHA512 TLSH

              sessionCheckpoints.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionCheckpoints.json
              • Size 53B
              • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
              • MD5 SHA1 SHA512 TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 2KB
              • SHA256 bad54a5fe7dc2bb114e6d47ca445c9b017d1447662b3d65f4b02e7be1b91dc06
              • MD5 SHA1 SHA512 TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 1KB
              • SHA256 a61db81ea28410cd09037ab4f8d6c9f63efc172f597dd2e27e693db35219a133
              • MD5 SHA1 SHA512 TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 8KB
              • SHA256 db7c60dd7b75fad4230f4f7ff468493f28e7285bd80fd9e29e19d0d14a81d634
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.5MB
              • SHA256 b6f96920ce817bd32acdb5d8dda4fac588d39e31b71fbcdcb440224f2c1eec7c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.5MB
              • SHA256 c04a7c5724ee5d10ab59fa46a44ad1100cdf1c06718e044214c3510ea5a36a6c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.5MB
              • SHA256 239f1408e7ca4de806bbf9e8753dee18f262283b0ad7b5cdb0efd2e664b22b4c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.5MB
              • SHA256 76d98958374437a84b932eb921edce7fa812b426205cc7240297f2e760ac3719
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.5MB
              • SHA256 21bfaa137501f176af338e27a99b0b92fdd9534a28bb14b3732d508cc1f342f8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              targeting.snapshot.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\targeting.snapshot.json
              • Size 3KB
              • SHA256 b26c62522998eafdebe3a009b647b05de96f0e9cc5675af8f90b8be7c59f31b0
              • MD5 SHA1 SHA512 TLSH

              xulstore.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\xulstore.json
              • Size 167B
              • SHA256 c1bed5f53e44f988d50469fe36ee52ab0bfe2215cc126514ad06b5c0c28dfd87
              • MD5 SHA1 SHA512 TLSH