Analysis

  • user interaction
    yes
  • max time kernel
    543s
  • max time network
    546s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 13:00

General

  • Target
    sample.html
  • Size 229KB
  • Sample261107-p82vhsfa52
  • SHA256 9640c262de971ac1b18d1879a4fccca33cba187708911b4e25f8e4be70751a1d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 14 IoCs
  • Suspicious use of SetWindowsHookEx 43 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\sample.html"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5948
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\sample.html
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3436
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1940 -prefsLen 27019 -prefMapHandle 1944 -prefMapSize 270249 -ipcHandle 2028 -initialChannelId {c1b6af9d-d91f-4970-959c-16dd2fc133bf} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:5848
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2412 -prefsLen 27055 -prefMapHandle 2416 -prefMapSize 270249 -ipcHandle 2244 -initialChannelId {d995b92d-7dc9-4b17-84f5-011e24ed30ef} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:5544
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3868 -prefsLen 27245 -prefMapHandle 3872 -prefMapSize 270249 -jsInitHandle 3876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3884 -initialChannelId {ee7cdae3-36fc-4fca-93f0-1c0fc4372735} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:5460
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4084 -prefsLen 27245 -prefMapHandle 4088 -prefMapSize 270249 -ipcHandle 4172 -initialChannelId {40547607-2584-4fd4-8a95-d53b925de93a} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:5032
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3444 -prefsLen 34798 -prefMapHandle 920 -prefMapSize 270249 -jsInitHandle 1188 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3248 -initialChannelId {be5d0309-c4fd-48f9-98c4-570ca19039d3} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:1916
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 1616 -prefsLen 34851 -prefMapHandle 2600 -prefMapSize 270249 -ipcHandle 3252 -initialChannelId {1b7dc2f6-ca0a-4e87-acdc-3f50206bbc3e} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:5640
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5452 -prefsLen 34903 -prefMapHandle 5184 -prefMapSize 270249 -jsInitHandle 5456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5464 -initialChannelId {9e8993b4-c4e4-43ca-9197-94534ab81d19} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:1288
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5792 -prefsLen 32888 -prefMapHandle 4916 -prefMapSize 270249 -jsInitHandle 5568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5536 -initialChannelId {3513abf2-8e5a-464c-91a2-7639dfebf63e} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:2024
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5552 -prefsLen 32888 -prefMapHandle 5548 -prefMapSize 270249 -jsInitHandle 5544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2856 -initialChannelId {04909dc0-abed-41de-b94c-7c0f3ddae9d9} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:2036
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6136 -prefsLen 32888 -prefMapHandle 6140 -prefMapSize 270249 -jsInitHandle 6148 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6156 -initialChannelId {5edf1075-03b2-45d3-8de6-5a0b36db7fdb} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:4196
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6620 -prefsLen 36902 -prefMapHandle 4452 -prefMapSize 270249 -jsInitHandle 6728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6604 -initialChannelId {5eb67b92-1538-406c-863a-33002ea11dc8} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
              3⤵
              • Checks processor information in registry
              PID:2668
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6816 -prefsLen 36902 -prefMapHandle 6812 -prefMapSize 270249 -jsInitHandle 6808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6824 -initialChannelId {5181085b-2c4f-411a-9767-51e057e58e40} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
              3⤵
              • Checks processor information in registry
              PID:5576
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3972 -prefsLen 36902 -prefMapHandle 6452 -prefMapSize 270249 -jsInitHandle 6528 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2888 -initialChannelId {da1a9279-0c3e-4651-aaae-11fa3119f659} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
              3⤵
              • Checks processor information in registry
              PID:5448
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6340 -prefsLen 36902 -prefMapHandle 6352 -prefMapSize 270249 -jsInitHandle 1188 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3908 -initialChannelId {e1146982-90dc-4702-8362-7921b716f1d6} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
              3⤵
              • Checks processor information in registry
              PID:988
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7300 -prefsLen 40071 -prefMapHandle 7308 -prefMapSize 270249 -ipcHandle 7316 -initialChannelId {972d2f89-fde2-4da7-a8e3-0b3bcda07a37} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 utility
              3⤵
              • Checks processor information in registry
              PID:3188
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7348 -prefsLen 40071 -prefMapHandle 7352 -prefMapSize 270249 -ipcHandle 7360 -initialChannelId {053cfb51-730c-4cc8-b1b4-fd4f2aff1976} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
              3⤵
              • Checks processor information in registry
              PID:4496
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5532 -prefsLen 36902 -prefMapHandle 4460 -prefMapSize 270249 -jsInitHandle 6756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6304 -initialChannelId {0bf57ff5-ce7e-4d97-a9e6-8f3e11f33d37} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
              3⤵
              • Checks processor information in registry
              PID:5196
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7780 -prefsLen 36902 -prefMapHandle 7784 -prefMapSize 270249 -jsInitHandle 7788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6204 -initialChannelId {b0633688-ce94-4266-8e13-573dfc625d0f} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
              3⤵
              • Checks processor information in registry
              PID:3036
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7944 -prefsLen 36902 -prefMapHandle 7948 -prefMapSize 270249 -jsInitHandle 7952 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7960 -initialChannelId {09123d44-c205-49d6-9028-f388438e9591} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
              3⤵
              • Checks processor information in registry
              PID:3244
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7276 -prefsLen 36902 -prefMapHandle 7280 -prefMapSize 270249 -jsInitHandle 7808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8140 -initialChannelId {cbf82fb8-b27e-4c3f-a989-69a2cdf3f3f2} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
              3⤵
              • Checks processor information in registry
              PID:5152
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7840 -prefsLen 36902 -prefMapHandle 6960 -prefMapSize 270249 -jsInitHandle 7172 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7064 -initialChannelId {5c7bba3c-19ba-449a-beed-a60a3e1f3ff5} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
              3⤵
              • Checks processor information in registry
              PID:4876
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5376 -prefsLen 36902 -prefMapHandle 7488 -prefMapSize 270249 -jsInitHandle 7660 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6272 -initialChannelId {05aae8e4-7118-4b6e-bcf4-4c399c25a554} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
              3⤵
              • Checks processor information in registry
              PID:4972
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7712 -prefsLen 36902 -prefMapHandle 6192 -prefMapSize 270249 -jsInitHandle 6816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6804 -initialChannelId {60f33a40-6477-431a-a1b7-41cc7ff14279} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
              3⤵
              • Checks processor information in registry
              PID:6128
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6220 -prefsLen 36902 -prefMapHandle 7788 -prefMapSize 270249 -jsInitHandle 7784 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7688 -initialChannelId {f8c8e69b-a76a-4a03-9477-3e21bd16a4ca} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
              3⤵
              • Checks processor information in registry
              PID:5884
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8472 -prefsLen 36902 -prefMapHandle 8476 -prefMapSize 270249 -jsInitHandle 8480 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8488 -initialChannelId {404d69a9-5c7d-438e-bad0-13dcbb8d5ecd} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
              3⤵
              • Checks processor information in registry
              PID:936
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6232 -prefsLen 36902 -prefMapHandle 8404 -prefMapSize 270249 -jsInitHandle 8408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8600 -initialChannelId {d1a4b18d-7a96-47f7-bf6b-e18f51eccf5d} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
              3⤵
              • Checks processor information in registry
              PID:2920
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8132 -prefsLen 36953 -prefMapHandle 6056 -prefMapSize 270249 -jsInitHandle 6252 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3964 -initialChannelId {aac34360-cc3b-4e3a-bc1e-6afdf161ee1c} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
              3⤵
              • Checks processor information in registry
              PID:576
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8604 -prefsLen 36953 -prefMapHandle 3452 -prefMapSize 270249 -jsInitHandle 8400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8364 -initialChannelId {4607eefa-ed5f-4568-a876-11a926c75fad} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
              3⤵
              • Checks processor information in registry
              PID:3948
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9104 -prefsLen 36953 -prefMapHandle 9108 -prefMapSize 270249 -jsInitHandle 9112 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9120 -initialChannelId {0a426c97-0d22-461e-8748-44e06516d33c} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
              3⤵
              • Checks processor information in registry
              PID:4652
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8436 -prefsLen 36953 -prefMapHandle 8668 -prefMapSize 270249 -jsInitHandle 8808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8748 -initialChannelId {9493628b-eb8d-41d3-8b0c-8ceb9b23c17e} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
              3⤵
              • Checks processor information in registry
              PID:3204
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8580 -prefsLen 36953 -prefMapHandle 8464 -prefMapSize 270249 -jsInitHandle 8792 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8780 -initialChannelId {4b149322-0ed2-4f7c-985b-75bc406085a8} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
              3⤵
              • Checks processor information in registry
              PID:1468
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5856 -prefsLen 36953 -prefMapHandle 6752 -prefMapSize 270249 -jsInitHandle 8416 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8020 -initialChannelId {9fdbfddb-390e-4039-aa52-b52099d2ee7a} -parentPid 3436 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3436" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
              3⤵
              • Checks processor information in registry
              PID:2552
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k GPSvcGroup
          1⤵
            PID:4796
          • C:\Windows\SysWOW64\DllHost.exe
            C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
            1⤵
            • System Location Discovery: System Language Discovery
            PID:484
          • C:\Windows\system32\rundll32.exe
            "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,Control_RunDLL C:\Windows\System32\main.cpl,@1 ,
            1⤵
              PID:5628

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  activity-stream.contile.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.contile.json
                  • Size 4KB
                  • SHA256 819e0dacab9b66de90ad9f0fa097a3f33470f6a5e2486825f1d061d18a6306d3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  activity-stream.discovery_stream.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.discovery_stream.json
                  • Size 75KB
                  • SHA256 b0666b5de23e3f830f17e0f277adfc8b518a403ab7cf4e4d3ade2441aef6354f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  10867

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\10867
                  • Size 252KB
                  • SHA256 8e8fa4696c670177468f42eec13fd4213610be063805eb6b8e9db73e546a744c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  11268

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\11268
                  • Size 7KB
                  • SHA256 1e4ab591f7c51aa086fb6218b31bec7c7bed1f0c7215c866c0931df2eb96ac4b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  11644

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\11644
                  • Size 6KB
                  • SHA256 7374daafe602d2e55bdc111e805e4fb1ceef1ae084b8d6658307b0904fbca0ef
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  1256

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\1256
                  • Size 6KB
                  • SHA256 d136c9207dad51f35cea98ed326f38a3167941395ede9e2156552469bb1591ea
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  13973

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\13973
                  • Size 229B
                  • SHA256 88958a97965950c6cbb9ca8533b35fa6ff4b9f3d0d3388a6c6b3645cac84e31b
                  • MD5 SHA1 SHA512 TLSH

                  14206

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\14206
                  • Size 6KB
                  • SHA256 9a9cb7d63b43e2941ba0147c17ebe17d5dffb4b21f70a04a9d408859d5e9ae76
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  1656

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\1656
                  • Size 256KB
                  • SHA256 c70df675ee67e7b0749ecb2a0e214c6200a9a5a2d3e0e4417401569e3f254ba9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  17584

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\17584
                  • Size 6KB
                  • SHA256 f69336818007aba9e4461258f0d6875401d0b0b5c75b61832fe0a209694f0b65
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  17808

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\17808
                  • Size 6KB
                  • SHA256 cd35b1b196b819afadeeb019cce71b6d14b880611899910f7877dabdeabbf758
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  20737

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\20737
                  • Size 6KB
                  • SHA256 23481b0d6d017043e039bf65faea565c1b89f63fc2b0530e61c18e00488f898b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  22768

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\22768
                  • Size 6KB
                  • SHA256 fccb0c66c73c26c157dbf6ffc81a0acc2064954ef975c7264a2a04f43a782865
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  25065

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\25065
                  • Size 6KB
                  • SHA256 5dc998a33c7fb909591f52b6429f17d56930cfbc32df5972af8b569b607f8de8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  25300

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\25300
                  • Size 7KB
                  • SHA256 11f452e7531f55b1639dc54f6fc0457a543b1d10ea37de93571a45630b22f4f9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  25540

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\25540
                  • Size 7KB
                  • SHA256 e0de461cb924c817acb7538335a146a0073a6a47a3bed14ea7562e1715eef206
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  2827

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\2827
                  • Size 6KB
                  • SHA256 dce361ef284298e5adbb8195f289c06cbdbdc5a5af4f2c5146bd9cd6e19471c6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  29300

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\29300
                  • Size 6KB
                  • SHA256 5625863efed062e480001fc2497611297b88eb7bcdef8908ec19c486932caa33
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  30785

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\30785
                  • Size 52B
                  • SHA256 a36b08d251d39bce45b7ead1ec024ef0992de1fcad14fb7651acdc3935008051
                  • MD5 SHA1 SHA512 TLSH

                  3999

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\3999
                  • Size 7KB
                  • SHA256 8880bd72bc6c0e39cc47a6fe8d493ca0a64fcbc103821dad4287d97d5579189b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  4746

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\4746
                  • Size 6KB
                  • SHA256 b3016118a26605896496f7fa5da66a09984232bb96f8a2e9be8c30180d9c5d35
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  5023

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\5023
                  • Size 6KB
                  • SHA256 cd7a209d41d7f408ff7a29e0ac3b78ed02f34f47169433ef718fa3887ae1ba3b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  6180

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\doomed\6180
                  • Size 252KB
                  • SHA256 55166dc6821e032f3fea7c99c92dcf6cc55fd26b39883355d958b0964c8c82ec
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
                  • Size 16KB
                  • SHA256 dbe6062dfa45448588c433bb83de2b5c39ac127415ac01ed60395fa2bdf082cd
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  4C4B12AD56328456FF980B18A05C7DE25B898C57

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\4C4B12AD56328456FF980B18A05C7DE25B898C57
                  • Size 37KB
                  • SHA256 0b43699014a84e35509c1fbbd7fbd51a7a4432febf902bad64ec986acd59145a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  675C8C1C29DF82081CB75CCF1CACF3CC29E832BE

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\675C8C1C29DF82081CB75CCF1CACF3CC29E832BE
                  • Size 63KB
                  • SHA256 765662770149b1856b51c4966feda1889b6807bcbdd0e20d11b3e80adbffc28e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  67CFA59EEF04E7BEBC789984604E0D7884E27439

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\67CFA59EEF04E7BEBC789984604E0D7884E27439
                  • Size 45KB
                  • SHA256 22a0bf6c917cfe4f0b713b218679d485cc8eeda55d902033e14ee3a97f2187c1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  99C518C5074D8B7B8E7C4BF5E60A8A0CDF82281C

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\99C518C5074D8B7B8E7C4BF5E60A8A0CDF82281C
                  • Size 30KB
                  • SHA256 ff43e16c812b3a15102b59b13bf5d67bf1a7971070d033b6413a49dce4bb767c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  BB38F11263A27285E88FF2B0699E3ECC96BB4790

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\BB38F11263A27285E88FF2B0699E3ECC96BB4790
                  • Size 15KB
                  • SHA256 a706c94abc5724afb6bf85218cbfa4e3078eae224437c834976641d7e4d14e89
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  DF9C2F64DE858672749721C1F688EB8DC4D3B4F6

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\DF9C2F64DE858672749721C1F688EB8DC4D3B4F6
                  • Size 354KB
                  • SHA256 2a9016475abd6176516d8ebef4c1bac0102601dc0e3d11b463e1a9f4eb8cb990
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  E96CB31B6C99D2256A80D7AE3596268C6D91A9AC

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\E96CB31B6C99D2256A80D7AE3596268C6D91A9AC
                  • Size 35KB
                  • SHA256 51d4f1a20753da5978d6985933a5191396bbdc0e1f3a478554993a11092b7d20
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  V6cAkeP6QqR_18VWmqg62tylz+XMTiqv1MRKEOrMSKw=.ico

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\jumpListCache\V6cAkeP6QqR_18VWmqg62tylz+XMTiqv1MRKEOrMSKw=.ico
                  • Size 15KB
                  • SHA256 368683abcb559bd1a3ad2e5d5550cc7edc577494ef01608c2fd3941009e36463
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  webext.sc.lz4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
                  • Size 105KB
                  • SHA256 baeadeb638e76f82138fbe7c836082914540d9862e2a9fafb4d95d471093aa3a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  webext.sc.lz4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
                  • Size 106KB
                  • SHA256 bfdb403d5389ca7a6fce3478b3729e456d4a973ef0b1e84528528276210d9874
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 21.6MB
                  • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 11KB
                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 502KB
                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  6824f4a902c78fbd.customDestinations-ms

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                  • Size 7KB
                  • SHA256 58dda35fb16b2220029ea96392317b9049be26a1c4bec705c9c18a6e63e3adfd
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  B7UEVFQQJZQN112G7Z8B.temp

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\B7UEVFQQJZQN112G7Z8B.temp
                  • Size 20KB
                  • SHA256 c71e6c525f6721522ee76c5e7e7e9976af79f096afa121c032bbd8e24d2fae64
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  HHH88X9QIQY290EG5KJO.temp

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\HHH88X9QIQY290EG5KJO.temp
                  • Size 14KB
                  • SHA256 807a30cbaec3b3f4a2ff1dbc8bcd410a44fb6a6758be9474c03b1f292ad7fbe4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  PLSCOBL2BEIRNQ128FYP.temp

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PLSCOBL2BEIRNQ128FYP.temp
                  • Size 20KB
                  • SHA256 06e77a1acd4922aced88ef2f3d73e326dd4aff3eeb1edd9907163c3811a3c9b2
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  AlternateServices.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\AlternateServices.bin
                  • Size 8KB
                  • SHA256 fe0d7b85b6775cd24c3c1cbdf2c90e6d473a8b5d5fc01d0b201d3c70ae9dbd74
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  AlternateServices.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\AlternateServices.bin
                  • Size 16KB
                  • SHA256 051e7bfcd344c0f0c05de56fa9cb88d2b80b7016e996886ebab7750e60068422
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  SiteSecurityServiceState.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\SiteSecurityServiceState.bin
                  • Size 1KB
                  • SHA256 075aa22a9f386df4d755542138c952006b61518dfce2eee1b21243c9366d172c
                  • MD5 SHA1 SHA512 TLSH

                  addonStartup.json.lz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\addonStartup.json.lz4
                  • Size 4KB
                  • SHA256 73d0014f4257d9074a882d6d23147ddc86218aeadee16ec5049353757867396f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  broadcast-listeners.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\broadcast-listeners.json
                  • Size 221B
                  • SHA256 1c3acb0074f2843bedd33fcc4c019fc20d2bc3f482d4dd39fedecde46b2c21ca
                  • MD5 SHA1 SHA512 TLSH

                  store.json.mozlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\crashes\store.json.mozlz4
                  • Size 66B
                  • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                  • MD5 SHA1 SHA512 TLSH

                  data.safe.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.bin
                  • Size 35KB
                  • SHA256 782eeaf54d9d04a767f72ed2c58302996d4aa40ff6d6f2e1d8e01c87fd3f93be
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.bin
                  • Size 69KB
                  • SHA256 947ff4d7517fb82d213cabc2609ae1cfe85e58360062b8d095f085b7ae3c561d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 35KB
                  • SHA256 9fc9f60f1b13d142d120412cadd802cc1b0a18d84cb85038b7ad1da925ed0dae
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 109KB
                  • SHA256 764e60a4ba733120e8bd6694bbbdd06cea57b283f7ccf8862c53fa843707cbd1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 54KB
                  • SHA256 b4e534027dc806c28eb7f865ade2d436dbac2eb8ec68296111ec155b3ea80792
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 54KB
                  • SHA256 dc535c2fd2506082a29c9eff76ffd96f6a3da8af733ff1e5d2b7bd1888c37acd
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 7KB
                  • SHA256 e213c8b5a47476a67986c1a0d00a25dd100c7f4c91c2a785258242e824bf36c0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 eeee5d93b3dbfa37429b684e8019be4c3c4143af87755f46b6f3bebcf2daca80
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 541389ea635cac636ee14189d8d6751298ac1cf79078f95bccfabf6d5e67459c
                  • MD5 SHA1 SHA512 TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
                  • Size 2KB
                  • SHA256 25ad69bbecd30cd6b18a54c8e5be7f8ef3c49dede047b61e71bc6d3d0386830e
                  • MD5 SHA1 SHA512 TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
                  • Size 4KB
                  • SHA256 39af1b1a4991624154946e9893fc869ba2c993822bec33aa7a21ced52fd84701
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3c27fbbe-f952-4b55-a2e3-ebb6cd40576a

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\3c27fbbe-f952-4b55-a2e3-ebb6cd40576a
                  • Size 235B
                  • SHA256 2b6cf49b288f6aef7155b04cf9ad04d046a1aaa73d7f2c4e644d1d2b9c93c61b
                  • MD5 SHA1 SHA512 TLSH

                  41d4fc9a-4b5e-4db8-b220-4d88757ea333

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\41d4fc9a-4b5e-4db8-b220-4d88757ea333
                  • Size 883B
                  • SHA256 04e273f1a2839b65cac06252dda053a17fc9389d922967cc18cc13347f01e365
                  • MD5 SHA1 SHA512 TLSH

                  43e924e2-4e9e-4eb8-97f5-14c184f60316

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\43e924e2-4e9e-4eb8-97f5-14c184f60316
                  • Size 16KB
                  • SHA256 c5f559074664fe79195263d74a8dd151fe8adde070c2b7b30a2da7130dfe48d9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  469631f4-9558-45bf-a529-e53287e4e679

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\469631f4-9558-45bf-a529-e53287e4e679
                  • Size 2KB
                  • SHA256 7bd31a24732861946ed11781cb08ad4948a95ea11f560deeefea790030fb822a
                  • MD5 SHA1 SHA512 TLSH

                  85c38c87-f775-44f6-9e33-ec0aac56eaa4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\85c38c87-f775-44f6-9e33-ec0aac56eaa4
                  • Size 7KB
                  • SHA256 f3fb51487ddc462c36e7d27c648922798c31d2af7c28df31bf52b59a3b85cef8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  8cf9afcb-19bd-4a71-9008-467991460611

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\8cf9afcb-19bd-4a71-9008-467991460611
                  • Size 886B
                  • SHA256 956c539895d145ff6c4fe2df4a07853b61d8419740c782c1f8b9ba3c5777b523
                  • MD5 SHA1 SHA512 TLSH

                  a465e334-d2c8-4040-b57a-c4807b84640b

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\a465e334-d2c8-4040-b57a-c4807b84640b
                  • Size 281B
                  • SHA256 cc043326a06997341707b7ef445b6b56285fb6e5242f662af49fa3913a2e31a1
                  • MD5 SHA1 SHA512 TLSH

                  b501f108-0eda-4abf-a0b8-4485dfc5a53e

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\b501f108-0eda-4abf-a0b8-4485dfc5a53e
                  • Size 235B
                  • SHA256 920071f3ef6dda3c6c71dd547c115cf794b13db3bf45521fbcadbd192282337a
                  • MD5 SHA1 SHA512 TLSH

                  e5005af5-72c0-4ee8-bbd2-7219f24bdf13

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\e5005af5-72c0-4ee8-bbd2-7219f24bdf13
                  • Size 1008B
                  • SHA256 6ad1f194b1df10ebea0b7fbda242b74c298a1d4fd6dabdc9dfc2294867f28b4b
                  • MD5 SHA1 SHA512 TLSH

                  extension-preferences.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extension-preferences.json
                  • Size 942B
                  • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                  • MD5 SHA1 SHA512 TLSH

                  extensions.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extensions.json
                  • Size 14KB
                  • SHA256 608115f77250171254420630f5a3ec02f1de543cf90ae13be8712a4cc9198cbd
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                  • Size 1.1MB
                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.info

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                  • Size 116B
                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                  • MD5 SHA1 SHA512 TLSH

                  LICENSE

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                  • Size 473B
                  • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                  • MD5 SHA1 SHA512 TLSH

                  manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                  • Size 1002B
                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                  • MD5 SHA1 SHA512 TLSH

                  widevinecdm.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                  • Size 21.6MB
                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  widevinecdm.dll.sig

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                  • Size 1KB
                  • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                  • MD5 SHA1 SHA512 TLSH

                  logins.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\logins.json
                  • Size 710B
                  • SHA256 d5d99f44360eb32c6dc15e9b5fe4b52ce33491a98f02a40a7ecf10440817e778
                  • MD5 SHA1 SHA512 TLSH

                  logins.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\logins.json
                  • Size 748B
                  • SHA256 478eb8b67fc4a60aea495eb97fa3431f13cabf616dc9bc6aa81084eae0025f23
                  • MD5 SHA1 SHA512 TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs-1.js
                  • Size 12KB
                  • SHA256 38f00dd2e35e2c39661c00bd41abe41baa2c9d97abcca46a16146b527276447a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs-1.js
                  • Size 6KB
                  • SHA256 a3a0bc4a2fb305af877096de329e8965c81dd3065532e4072645983a2462dc9c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 6KB
                  • SHA256 6b7035c36e86a64aaa29c8dc61ec1430d1d153de4c56e943c9a7298ebc29ba26
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 6KB
                  • SHA256 c4a47df5572a44a11ac58d947dc4382d8dc17cfb10081c8988b6064ac978bdc3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 6KB
                  • SHA256 9194ddb045b497652d37380032fb631a57792e66e220d5350454b7fbc44d3286
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 7KB
                  • SHA256 5d32a771757a70ea6a3bf139f6679b7bf111e5076d01cab892971c2562768379
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 12KB
                  • SHA256 c816d08f18114c0a4d7a6b2d01cf55051997ac480a9a711fc49c9c84c3c0dbc9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
                  • Size 12KB
                  • SHA256 5363f9e4eb33b46c361a3b408cbb9648b0c104d1dc804787cca489be452d9189
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
                  • Size 53B
                  • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                  • MD5 SHA1 SHA512 TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
                  • Size 90B
                  • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                  • MD5 SHA1 SHA512 TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 25KB
                  • SHA256 3ff9ebe6d46617019c95adc7bfcd79f26828c6597d7327b0519b3e4fac41453e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 30KB
                  • SHA256 6f0566dee7c77faba3a9a0ab96a70820ad2bed041904de7ad6dc0e7f585a782e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 32KB
                  • SHA256 04eaae63b73647a3f15ed491f24564ab8b4c6566ca6bf9e0f926caee8d06474a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 34KB
                  • SHA256 d364d6a6e5ddbbb7c32b8f66d4b51d9fb3de55950bd0812a6d312cbd29a5eaa4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 32KB
                  • SHA256 fe3283a5292e6fa3b4988eeffbe370dcddf68a66ca5b41538b626fff2bf22af3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 37KB
                  • SHA256 111c05412c11692e33363daf3382c412b1449ac73cbda1bdea1df70a696edb1b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 34KB
                  • SHA256 8b7a7b4862cbf6854fd3441d38f874bf7a860419cacbc8e86ac7deaf0e13e4c6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 38KB
                  • SHA256 467c122d11414ccdda3981dcf168fd2ef165d49f80a2af5a5ece51270a23179c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 38KB
                  • SHA256 954564c7a2c061893c3592b0db9bd910f4fa5bb9a0f059275d82562da32318dc
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 83KB
                  • SHA256 b761aa431e18a0ed81b7b0bf854b15a697778ae517bbcfa0f1691dcf5aa0beb1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 38KB
                  • SHA256 1cb284f8b9a26dfd004e376179873af0f948e29f293b11c1f4ae857cc03c023f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 25KB
                  • SHA256 5478249830356bdda11e4588a489f8acca61d324eb3c53d226732e2768a2ec7b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 25KB
                  • SHA256 6400188212168961153054938e71465f325308123eae0a813ff8c7ad1cd4bb61
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 32KB
                  • SHA256 de85586cd427b7a68ab987cba692185bb5bbe8f06f0057a47e860ab171a40d37
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 25KB
                  • SHA256 32204d925d64ef9e18210e3cdc5aa6cf5200fcf27604fa600a992781ca706bdf
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  .metadata-v2

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\default\https+++dashboard.work.ink\.metadata-v2
                  • Size 56B
                  • SHA256 a46832e0954a271e830eeac08249a6a1e4b15b9c1d3ccac2f74e1353fa41fb86
                  • MD5 SHA1 SHA512 TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 7.6MB
                  • SHA256 2e240ecbb593fd7462657760ef9110205b0c037de98c4f4a1fbc71c39e99e176
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 5.5MB
                  • SHA256 8da74ba553cc1cca0b8544d6af24c3931b0cde437539dc2817bbeb04a91aab92
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 7.6MB
                  • SHA256 3991463d2bceccaf2addb07676db398c5d0bc1cf3cfd60f11f22e10009501074
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 7.6MB
                  • SHA256 3b5722f6750cc5c1f2de625976869271c771ff8aa5281c251c522784b4c6118e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 7.6MB
                  • SHA256 9882a74a044eb085a3b7098aaa9391bbd3e8a94ce266b8ca5cfb8bd5238412a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 7.6MB
                  • SHA256 1380c6a78d02a198dbc0fea58ab1b84559dd5821ae53874de8784bb5a7df0e01
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  targeting.snapshot.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\targeting.snapshot.json
                  • Size 3KB
                  • SHA256 5c418a780e53b9d078a16e8323575487a2b9a9d57a275cbb334e70feadca0f62
                  • MD5 SHA1 SHA512 TLSH

                  xulstore.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\xulstore.json
                  • Size 167B
                  • SHA256 a261f6c4c1f49fbaac01d6d7437da1149f9b03588d54b2fd860fdfe969596115
                  • MD5 SHA1 SHA512 TLSH