Analysis

  • user interaction
    yes
  • max time kernel
    86s
  • max time network
    86s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 02:01

General

  • Target
    exposed-scan-1921737382.exe
  • Size 1.1MB
  • Sample261027-cftxzscd93
  • SHA256 df8f0bb5839b211f9b3a88805af3a5a84fbc8ca79eebb42ca2bf5d88d0bd2309
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 28 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 44 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\exposed-scan-1921737382.exe
    "C:\Users\Admin\AppData\Local\Temp\exposed-scan-1921737382.exe"
    1⤵
    • Checks processor information in registry
    PID:1476
  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4232
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:204
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2000 -prefsLen 27100 -prefMapHandle 2004 -prefMapSize 270279 -ipcHandle 2080 -initialChannelId {728ae84f-49ce-4758-9d30-80777e87b826} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:4912
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2448 -prefsLen 27136 -prefMapHandle 2452 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {2af740d5-7bac-410e-9b5a-311d79e7ec8b} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
          • Checks processor information in registry
          PID:5024
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3788 -prefsLen 27276 -prefMapHandle 3792 -prefMapSize 270279 -jsInitHandle 3796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3804 -initialChannelId {b95e78dc-961a-4bf8-8776-d6b040ea13b4} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
          3⤵
          • Checks processor information in registry
          PID:4124
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3976 -prefsLen 27276 -prefMapHandle 3980 -prefMapSize 270279 -ipcHandle 3996 -initialChannelId {cbc14f70-4af0-4f63-a486-3634b7b8c522} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
          3⤵
            PID:4972
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4420 -prefsLen 34775 -prefMapHandle 4424 -prefMapSize 270279 -jsInitHandle 4428 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4436 -initialChannelId {b01d5c86-7162-47ef-b258-86cabafbda57} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
            3⤵
            • Checks processor information in registry
            PID:2772
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4848 -prefsLen 35012 -prefMapHandle 4660 -prefMapSize 270279 -ipcHandle 4904 -initialChannelId {6255ec49-b208-4bea-b078-3fca2abe65b5} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
            3⤵
            • Checks processor information in registry
            PID:5424
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5112 -prefsLen 32952 -prefMapHandle 5124 -prefMapSize 270279 -jsInitHandle 5128 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5140 -initialChannelId {ac04e8b8-d8ba-4605-b784-91f1aa49f059} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
            3⤵
            • Checks processor information in registry
            PID:5484
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5156 -prefsLen 32952 -prefMapHandle 5160 -prefMapSize 270279 -jsInitHandle 5164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5168 -initialChannelId {fc4a6d2e-65b2-4376-8d84-07d479b8e684} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
            3⤵
            • Checks processor information in registry
            PID:5516
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5496 -prefsLen 32952 -prefMapHandle 5500 -prefMapSize 270279 -jsInitHandle 5504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5512 -initialChannelId {1f86a1ca-33c3-40e2-872f-8379c97aa212} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
            3⤵
            • Checks processor information in registry
            PID:5528
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6104 -prefsLen 33031 -prefMapHandle 6120 -prefMapSize 270279 -jsInitHandle 6208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6124 -initialChannelId {5969ecd8-2a25-46ed-8c57-2b1cfc58dd82} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
            3⤵
            • Checks processor information in registry
            PID:3192
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6092 -prefsLen 35143 -prefMapHandle 6160 -prefMapSize 270279 -ipcHandle 1648 -initialChannelId {912f62b5-3396-48bf-9f21-d9d848989bfa} -parentPid 204 -crashReporter "\\.\pipe\gecko-crash-server-pipe.204" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
            3⤵
            • Checks processor information in registry
            PID:3512

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            activity-stream.contile.json

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.contile.json
            • Size 4KB
            • SHA256 8a5c7c1a18c06c7c7bc83cae1a955562f00d755c92abab2815c5b45ca4be62d0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            activity-stream.discovery_stream.json

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.discovery_stream.json
            • Size 75KB
            • SHA256 b72a38f6e71730866221c4f217c7b8bf044511e0e6ceda516630be968579420c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            activity-stream.weather_feed.json

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.weather_feed.json
            • Size 14B
            • SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
            • MD5 SHA1 SHA512

            30845

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\30845
            • Size 259KB
            • SHA256 f7b6369b0bfeb74ba4eb767f2cd437adea32842625a658d9c9b12c71acb387e5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3112

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\3112
            • Size 52B
            • SHA256 670f54e474791d4770ec2d1bc3679289d8f16982186a85f56f2e7b91149702bf
            • MD5 SHA1 SHA512 TLSH

            7799

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\7799
            • Size 256KB
            • SHA256 772bcc9cf6fee15815d54e06cfaf26c0b8d741df1e9bfb74b6087a8723aa514a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
            • Size 16KB
            • SHA256 c124dff2a4eb9c95fef17d55343b23da4f73727ab183eaa98d862f74b6cf6da5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0ADADB63FF4347BE8882A41CB30B8960FA6A87C7

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\0ADADB63FF4347BE8882A41CB30B8960FA6A87C7
            • Size 35KB
            • SHA256 910b954c844ea4449b3178d3c894b9f3acc2b3ae94c660310b1a019f9f1d9193
            • MD5 SHA1 SHA512 SSDEEP TLSH

            0F63C259D5494844D4D1A7505B734922B7864FE8

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\0F63C259D5494844D4D1A7505B734922B7864FE8
            • Size 20KB
            • SHA256 95a01eefd5858ab42ade7856f7bcec50fb742485050e5bf1cb08ed8efe9987dc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            1503BC19F6C874562210274BAF8ED37122E659F9

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\1503BC19F6C874562210274BAF8ED37122E659F9
            • Size 16KB
            • SHA256 5dde77eb179531ff4d6cdbf724e7383c9c20f1a2690775ef9b934a16a4b7a3ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            2DC0E4350FD5460CF25CDFB16D9006A594E7737E

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\2DC0E4350FD5460CF25CDFB16D9006A594E7737E
            • Size 41KB
            • SHA256 697c51998f4f3933b23cfa08326b49110fbe7eaf29622033662f2ce66c4f372e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            535D08385AEA2C1BB9F8B696556943FF03C311E1

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\535D08385AEA2C1BB9F8B696556943FF03C311E1
            • Size 42KB
            • SHA256 03cda94049d65e32874a49eb120ba06afca6ea5bd52bb4ca89b80e67216330d6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            680A03775E0E0A7DB9F8E8022B68BB639FC7B76A

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\680A03775E0E0A7DB9F8E8022B68BB639FC7B76A
            • Size 15KB
            • SHA256 9bcb77fbbdccb99a35a48368d6b4b1d67c9dee4f4da3d09de5fb652576c8a454
            • MD5 SHA1 SHA512 SSDEEP TLSH

            6CC2E4A56299A10D26809BDE44C8DE4503CAD158

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\6CC2E4A56299A10D26809BDE44C8DE4503CAD158
            • Size 66KB
            • SHA256 e2113b27fc7eeb53a1be19cb1b2574a723e6e4a7c6cf39d08cb8c735623cf0f6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            8AC7331B7F8184A188585070D61DE13E06B13F42

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\8AC7331B7F8184A188585070D61DE13E06B13F42
            • Size 11KB
            • SHA256 fc88bea460e6a53c4393b4eafcb30c7dbce9e5cbeb62b99de62cabe4937f31dc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            9C6ADA1FA823452BD18E41DB826E936A22C5F361

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\9C6ADA1FA823452BD18E41DB826E936A22C5F361
            • Size 49KB
            • SHA256 57280f12f2da6bdc0036dbcdd650886bf404a606424dfe4d6ca64bd51a816af4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            B20927B44F626D4070A5D355D5BAB451CA860DAD

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\B20927B44F626D4070A5D355D5BAB451CA860DAD
            • Size 13KB
            • SHA256 48f8b5f7dc1caeabe1bbfde42f6055e8c46950192e2fd6e80e65375df59f231a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            B3D0EC8D5ED0B304AEDBE85B9F37EDD57D51AA12

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\B3D0EC8D5ED0B304AEDBE85B9F37EDD57D51AA12
            • Size 12KB
            • SHA256 303e61f0ee7653ceaf87cf3e2f4322c8405ad34082fdce27b624192487d03b1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            B61322F31DA44040F261DFDC7C28701D0CE9C1F5

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\B61322F31DA44040F261DFDC7C28701D0CE9C1F5
            • Size 15KB
            • SHA256 ff26886141910f65767e555bd18c06ebbf7a8dc2138f926544c38caee9eb2d97
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BC6FCABAD3E9A1B609F801F4AC2D6C3B1A73BA28

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\BC6FCABAD3E9A1B609F801F4AC2D6C3B1A73BA28
            • Size 15KB
            • SHA256 1b88982a6f473d3838ca4714ca96260250b7b54f5acf7a63a4a35eea14ca92b3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DD2A53AC5613A0EFF7665F3DF8A8D0A7192AB792

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\DD2A53AC5613A0EFF7665F3DF8A8D0A7192AB792
            • Size 34KB
            • SHA256 58053819c84bbba49bac84724100042915131cc83df03404ac23d4b5b7fad11b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DFC2483588B70269E820B83EFA2710A88E855334

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\DFC2483588B70269E820B83EFA2710A88E855334
            • Size 148KB
            • SHA256 51aabb0f0f7537645fd7970ebdb597f1a32479ce418540e9eaba17c5449461e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            E9338C5CCF1E2FCF149487351399F198A4F9FCD6

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
            • Size 16KB
            • SHA256 b6c3f4b103383bcd1b3eddaca8de1f9a5ea2e0bb279141efaeec8d1d3d216568
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EC21C5897315E520B841862FEAD65D7EEDE024C6

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\EC21C5897315E520B841862FEAD65D7EEDE024C6
            • Size 12KB
            • SHA256 4a3445e25a7d899bc0aebae390e924ca5ca10ec0e92d745000a66c033eef6eb8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            webext.sc.lz4

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
            • Size 105KB
            • SHA256 eecf82e36e9d065fdbffcfc9232aba894d889e89e1e20aba5fa34f9bc10efd7d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            webext.sc.lz4

            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
            • Size 104KB
            • SHA256 7ff9a0bd74dc307c72128e4cf4a631023944ec0ab9215a1ad19549ade56efbb6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tmpaddon

            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
            • Size 21.6MB
            • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tmpaddon

            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
            • Size 11KB
            • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tmpaddon

            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
            • Size 502KB
            • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AlternateServices.bin

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\AlternateServices.bin
            • Size 18KB
            • SHA256 244365af4c9aca9d4c46c417fee22961a312e5586472a7f6a85481b228e43efc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AlternateServices.bin

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\AlternateServices.bin
            • Size 18KB
            • SHA256 cb0273bb392b64f46c59655b1a0bf148b69361ae82b7ee0dd17b9068e1e2d443
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AlternateServices.bin

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\AlternateServices.bin
            • Size 10KB
            • SHA256 5b41356ed55149c45ffb6fde881f87f49625a6fa7db91ac1783fd81a46edd9e5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            addonStartup.json.lz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\addonStartup.json.lz4
            • Size 4KB
            • SHA256 7e709f6e41733200ba4d8624bc981ca784598240edaedf100eb092f88f613f8a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            store.json.mozlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\crashes\store.json.mozlz4
            • Size 66B
            • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
            • MD5 SHA1 SHA512 TLSH

            data.safe.bin

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.bin
            • Size 27KB
            • SHA256 87c77f5f788cbaea9a4a8cfae13a12ed24c1119a4496c161dccc9d80a77d3d88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data.safe.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
            • Size 36KB
            • SHA256 90a87deca365d08b9492eae87257870b5a56bc496a3294f1b13132cfd7d5f862
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data.safe.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
            • Size 36KB
            • SHA256 39bac793d59c860a0fbea6b1209feb940dc44a7d7e60e277b8f44ccb6c1fe322
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data.safe.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
            • Size 87KB
            • SHA256 4d26ce9df64b6d043bc52157fe2d00bf225ae49ce294fae0cdd0300c21f899a5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data.safe.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
            • Size 27KB
            • SHA256 723613a8e06a30262712906281366e0a0c6c69013a50a909b430c64fc907cccc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data.safe.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
            • Size 23KB
            • SHA256 87ffc70a0f54fdb91cc69c8f123c8c7d0fe57ae7e17cb8fddd3aa4690638d2cf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            events

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
            • Size 9KB
            • SHA256 74c19c2fd35524638342d1f988902becd1e40ac034d287ec22f2bb0bd3647a52
            • MD5 SHA1 SHA512 SSDEEP TLSH

            events

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
            • Size 1KB
            • SHA256 ecf96442ed83470ef72e4bee37d4b17ac57477f3a57ca96cd69c872ef1852165
            • MD5 SHA1 SHA512 TLSH

            0dc83dce-35b3-4bf6-a2f3-200c1d6a8dbe

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\0dc83dce-35b3-4bf6-a2f3-200c1d6a8dbe
            • Size 8KB
            • SHA256 47c42b16abb8c1d2598044babfed686993e2430b08392a88a660f66bfad391b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            15440e70-bb76-4e69-86fb-393dc2f6a850

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\15440e70-bb76-4e69-86fb-393dc2f6a850
            • Size 871B
            • SHA256 731430e4705788b3d0b2c448f00f97903b560a0ebeb31f347b4aea893efb2c65
            • MD5 SHA1 SHA512 TLSH

            2ba455dd-1caa-4795-8b5b-1ae9d5a93474

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\2ba455dd-1caa-4795-8b5b-1ae9d5a93474
            • Size 235B
            • SHA256 deb3f3d84e8b20ce05f8d5162a7a65bdfdedcf2919d3aa5400d1a8625a9f86b1
            • MD5 SHA1 SHA512 TLSH

            2df12301-688c-4e5e-b504-38b3ec46c202

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\2df12301-688c-4e5e-b504-38b3ec46c202
            • Size 235B
            • SHA256 2206d1289250e789974e7da2588ea6fc3a300f097e33fbaab8e1b4d262f22618
            • MD5 SHA1 SHA512 TLSH

            ade9024f-5905-4c50-bb6f-b8ae36463c98

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\ade9024f-5905-4c50-bb6f-b8ae36463c98
            • Size 886B
            • SHA256 986571a48a0ad301f81ecdf06b996179757872dcdd474df276923fc395789fd4
            • MD5 SHA1 SHA512 TLSH

            c4fa7f86-d121-401e-8bc3-3b39e580b57b

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\c4fa7f86-d121-401e-8bc3-3b39e580b57b
            • Size 2KB
            • SHA256 b23fcdd1fcbe7c73e52883313ec5dba4ac114f4b4d5eb51f4445f0336a1e4e59
            • MD5 SHA1 SHA512 TLSH

            extension-preferences.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extension-preferences.json
            • Size 942B
            • SHA256 cf91c5fcebee0d71d0d20ec46579b48dac36dac9f7282050c722a145290a6686
            • MD5 SHA1 SHA512 TLSH

            extensions.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extensions.json
            • Size 14KB
            • SHA256 b03b35c68cdc22db5c819f8c505a972e8832d130bc0e034bb0bd71527cb697b3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gmpopenh264.dll

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
            • Size 1.1MB
            • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gmpopenh264.info

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
            • Size 116B
            • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
            • Size 473B
            • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
            • MD5 SHA1 SHA512 TLSH

            manifest.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
            • Size 1002B
            • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
            • MD5 SHA1 SHA512 TLSH

            widevinecdm.dll

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
            • Size 21.6MB
            • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
            • MD5 SHA1 SHA512 SSDEEP TLSH

            widevinecdm.dll.sig

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
            • Size 1KB
            • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
            • MD5 SHA1 SHA512 TLSH

            places.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\places.sqlite
            • Size 5.0MB
            • SHA256 d0007153592f8c3d35aafb279897a56d51b9c4b85b6fc95d55d93af0abb4db88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs-1.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
            • Size 8KB
            • SHA256 13fbe7947329bb72005724229a722c7b474eb7b385efc1dcaf42f037797fda79
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs-1.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
            • Size 6KB
            • SHA256 79b2acc1500a5e5f4271ea0b509f5360738420e3795277fe9e4c4c63c6b8a988
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
            • Size 6KB
            • SHA256 77b6390003b66f26b0d6ffcb03e386c93270ae82797106b1d8512ec26ef28b99
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
            • Size 6KB
            • SHA256 19f5a347432c8f0754d55187f8284f209648dddd38f81eaab20b3d4863210075
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
            • Size 7KB
            • SHA256 9ced462a13c08b3553ec4f70683daeb673387f94aa667d4e09bf4968f086674f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            prefs.js

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
            • Size 7KB
            • SHA256 69faa89bb7ad50e15ed404bb3ca995eeaa5c5d4797f5ee875a4fc1c5ffc0588e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            search.json.mozlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\search.json.mozlz4
            • Size 327B
            • SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
            • MD5 SHA1 SHA512 TLSH

            sessionCheckpoints.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
            • Size 90B
            • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
            • MD5 SHA1 SHA512 TLSH

            sessionCheckpoints.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
            • Size 53B
            • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
            • MD5 SHA1 SHA512 TLSH

            sessionCheckpoints.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
            • Size 122B
            • SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
            • MD5 SHA1 SHA512 TLSH

            sessionCheckpoints.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
            • Size 146B
            • SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
            • MD5 SHA1 SHA512 TLSH

            sessionCheckpoints.json.tmp

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json.tmp
            • Size 288B
            • SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
            • MD5 SHA1 SHA512 TLSH

            recovery.jsonlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
            • Size 3KB
            • SHA256 dc31d033dddd8aef1bfb427ab1fada52f549bea5bbe6d6daf572c47413d1d053
            • MD5 SHA1 SHA512 TLSH

            recovery.jsonlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
            • Size 2KB
            • SHA256 4d81f49f1f989cc34bda82b265223df1a0358fd26551daa9df5174c5816ab05f
            • MD5 SHA1 SHA512 TLSH

            recovery.jsonlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
            • Size 2KB
            • SHA256 83784976fa2acb15e4a4b6d8f1d9cd366fbf89ba64db8f9d3084ac96bbfb6160
            • MD5 SHA1 SHA512 TLSH

            recovery.jsonlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
            • Size 3KB
            • SHA256 9f88becf5c0e3b11dce8b8c27c77b9974b75669f36859b76a78e5cdfd6f2870f
            • MD5 SHA1 SHA512 TLSH

            sessionstore.jsonlz4

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore.jsonlz4
            • Size 3KB
            • SHA256 9674c65012f51cacb384ae7b919c4f0536b719c3519864956557e0ba881e1ab8
            • MD5 SHA1 SHA512 TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 5.1MB
            • SHA256 21c39f87105382ad37680ac7109bfccb9d038e5880902f4a5d416a4e81d9563e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 5.6MB
            • SHA256 bd88bca40c385432494ccbea06bce002a0310714119557582e024310ed708e95
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 7.5MB
            • SHA256 26355e81575ef5bdf7443c91955746e531b88ce56d2aba1d04a088e5ac492432
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 7.5MB
            • SHA256 3459a38a76532c2d8cf4092ceeec32fa90a7f53eddbdf437dab032c0ba1ee163
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 7.5MB
            • SHA256 726b4f187aefc4e5f2911f9a12d7a2731e65b1d2c96a9e22e9e090fdf5ddb6f3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 7.5MB
            • SHA256 ca1923fe0ffadb7662b47b1485aa35a0df50f538d511970338a089476fc1c82e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3870112724rsegmnoittet-es.sqlite

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
            • Size 7.5MB
            • SHA256 a17a87a05e48ba29af06dd3de3800ef133d66f8e5c913073ff2a663012acb32e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            targeting.snapshot.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\targeting.snapshot.json
            • Size 3KB
            • SHA256 95140d550a04c2fb01f62e5512bdcd83338f3929ad68533791a9132f05f9465d
            • MD5 SHA1 SHA512 TLSH

            xulstore.json

            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\xulstore.json
            • Size 2B
            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
            • MD5 SHA1 SHA512