Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    900s
  • max time network
    786s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/11/2026, 04:38

General

  • Target
    https://silentnet.st/static/css/style.css
  • Sample261110-e9nn6sgv21

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 19 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 39 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 58 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 37 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://silentnet.st/static/css/style.css"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4152
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://silentnet.st/static/css/style.css
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4940
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1964 -prefsLen 27097 -prefMapHandle 1968 -prefMapSize 270279 -ipcHandle 1912 -initialChannelId {5ebc3ab3-e37c-4229-b7cd-ccf6f355b1aa} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:4120
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {fdc59923-4c65-4b9a-a471-1fd1ecc986a4} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:4944
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3864 -prefsLen 25164 -prefMapHandle 3868 -prefMapSize 270279 -jsInitHandle 3872 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3880 -initialChannelId {382cba24-9f03-4732-845b-b06b95b5f2f2} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:248
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4036 -prefsLen 27274 -prefMapHandle 4040 -prefMapSize 270279 -ipcHandle 4124 -initialChannelId {172b4c17-d2bb-45e9-8c0a-b03636714e13} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:5748
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2908 -prefsLen 34773 -prefMapHandle 2628 -prefMapSize 270279 -jsInitHandle 2776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2928 -initialChannelId {24a69993-56ce-4917-a488-643eca1f104c} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:5376
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 1284 -prefsLen 34903 -prefMapHandle 2768 -prefMapSize 270279 -ipcHandle 1540 -initialChannelId {9be3b22c-487d-42a9-aa15-c342bca1d792} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:4888
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1276 -prefsLen 32952 -prefMapHandle 4516 -prefMapSize 270279 -jsInitHandle 3084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4508 -initialChannelId {297619fc-99ae-4355-ac6d-8656d7122032} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:1224
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5476 -prefsLen 32952 -prefMapHandle 5480 -prefMapSize 270279 -jsInitHandle 5484 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5492 -initialChannelId {7da3a39d-d1e4-4800-927f-defb8a13c8e4} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:5316
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5820 -prefsLen 32952 -prefMapHandle 5824 -prefMapSize 270279 -jsInitHandle 5828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5836 -initialChannelId {427df0fb-52a1-4495-9599-52fa13a92f11} -parentPid 4940 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4940" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:3240
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k GPSvcGroup
          1⤵
            PID:264
          • C:\Windows\system32\sihost.exe
            sihost.exe
            1⤵
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4328
            • C:\Windows\explorer.exe
              explorer.exe /LOADSAVEDWINDOWS
              2⤵
              • Boot or Logon Autostart Execution: Active Setup
              • Enumerates connected drives
              • Checks SCSI registry key(s)
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              PID:1308
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:2408
          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
            1⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:2640
          • C:\Windows\System32\SecurityHealthHost.exe
            \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
            1⤵
              PID:4916

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  activity-stream.contile.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.contile.json
                  • Size 1KB
                  • SHA256 e421cd9e3cbbd6d055872b6e89e64b8444eb6e1edba908fe8f64386d18a1841e
                  • MD5 SHA1 SHA512 TLSH

                  activity-stream.discovery_stream.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.discovery_stream.json
                  • Size 75KB
                  • SHA256 5cb30b3947586cb6e8118256466444af601b285260086c7c39dd7970a5a676fd
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  activity-stream.discovery_stream.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.discovery_stream.json
                  • Size 75KB
                  • SHA256 417fc4f14a8d2634edb4e4de94ce92703d9f16b60dd3a73b339bb12664057f57
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  activity-stream.personalization.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\activity-stream.personalization.json
                  • Size 1KB
                  • SHA256 043b672b70bcd8f7c7b58c79792a1d18786f97b90519080f1191d62aca14744a
                  • MD5 SHA1 SHA512 TLSH

                  20327

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\cache2\doomed\20327
                  • Size 12KB
                  • SHA256 ef254ff7eba41053ad7c31b9bb4310f13e5ff67692e867b15ff84b4be1ac78ac
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  21731

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\cache2\doomed\21731
                  • Size 12KB
                  • SHA256 75533eb43fdeda423e30ea579697d8e58bfbce36f1926c39bc5ee5935dae9ac1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
                  • Size 16KB
                  • SHA256 56b858fd013d2461eab26b86c9bd1cb5c424877f43d9909a86b8435d2b0471d8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_arts_and_entertainment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                  • Size 67KB
                  • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_autos_and_vehicles.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                  • Size 44KB
                  • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_beauty_and_fitness.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                  • Size 33KB
                  • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_blogging_resources_and_services.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                  • Size 33KB
                  • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_books_and_literature.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                  • Size 67KB
                  • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_business_and_industrial.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                  • Size 45KB
                  • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_computers_and_electronics.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                  • Size 45KB
                  • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_finance.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_finance.json
                  • Size 33KB
                  • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_food_and_drink.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                  • Size 67KB
                  • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_games.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_games.json
                  • Size 44KB
                  • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_health.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_health.json
                  • Size 33KB
                  • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_hobbies_and_leisure.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                  • Size 67KB
                  • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_home_and_garden.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                  • Size 33KB
                  • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_internet_and_telecom.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                  • Size 67KB
                  • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_jobs_and_education.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                  • Size 33KB
                  • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_law_and_government.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                  • Size 68KB
                  • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_online_communities.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                  • Size 67KB
                  • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_people_and_society.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                  • Size 45KB
                  • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_pets_and_animals.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                  • Size 44KB
                  • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_real_estate.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                  • Size 67KB
                  • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_reference.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_reference.json
                  • Size 56KB
                  • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_science.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_science.json
                  • Size 56KB
                  • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_shopping.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_shopping.json
                  • Size 67KB
                  • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_sports.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_sports.json
                  • Size 56KB
                  • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_travel.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\nb_model_build_attachment_travel.json
                  • Size 67KB
                  • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recipe_attachment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\personality-provider\recipe_attachment.json
                  • Size 1KB
                  • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                  • MD5 SHA1 SHA512 TLSH

                  webext.sc.lz4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\startupCache\webext.sc.lz4
                  • Size 104KB
                  • SHA256 4bdfb1d8ad88e8cfb720477d5f2d4c554322edfd54835255ec66b5ab8449a33a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  webext.sc.lz4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xoeudfhc.default-release\startupCache\webext.sc.lz4
                  • Size 105KB
                  • SHA256 e8ddbd5bbd5c9751f8d22f54eb49323cadbd2668fb3b0c4a2d87ea1ea364125f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prep_Activatable Class_Hermes_perf.cache

                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                  • Size 599B
                  • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                  • MD5 SHA1 SHA512 TLSH

                  c2c10fdc-5864-415e-9f79-ad1baa85db46.zip

                  • Path C:\Users\Admin\AppData\Local\Temp\c2c10fdc-5864-415e-9f79-ad1baa85db46.zip
                  • Size 3.7MB
                  • SHA256 6479f3065374bacf330a33964c82d8296a0e36b7aa1bac42fba594ad828c0a46
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  remote-settings-startup-bundle-

                  • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                  • Size 576KB
                  • SHA256 dde5c16c18b0d090820c155b00851564bfb0663d312c48d3ea4aff975526c171
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 21.6MB
                  • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 11KB
                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 502KB
                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  6824f4a902c78fbd.customDestinations-ms

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                  • Size 7KB
                  • SHA256 91c22fd8bc73f402c497148a8fb70b30fa0912ac41c984fbf65847ea4fbc234b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  addonStartup.json.lz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\addonStartup.json.lz4
                  • Size 4KB
                  • SHA256 ec5ff1f391c8adb32f16bb4d596f8f19a15234ac19866aed0f2558f6008c7cb7
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  bookmarks-2026-11-10.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\bookmarkbackups\bookmarks-2026-11-10.jsonlz4
                  • Size 859B
                  • SHA256 db3ca8835722e88a831aca67fc6d8e97624eb800a0938fb63c63e5891623943d
                  • MD5 SHA1 SHA512 TLSH

                  broadcast-listeners.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\broadcast-listeners.json
                  • Size 221B
                  • SHA256 c8ca74f2460f0ff1b5a2c9cf1065e3476c00383f56e97f34c4e0982be63261c5
                  • MD5 SHA1 SHA512 TLSH

                  broadcast-listeners.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\broadcast-listeners.json
                  • Size 209B
                  • SHA256 63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24
                  • MD5 SHA1 SHA512 TLSH

                  store.json.mozlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\crashes\store.json.mozlz4
                  • Size 66B
                  • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                  • MD5 SHA1 SHA512 TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 bdfd9b49232c9b6d2e91429b7bf3fc9885b5abf63775b5fcfe1fb99855006f56
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 30KB
                  • SHA256 732c19361e594c08eaace293c8b3e0fca217a9f85081c2219b254444451cf51e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 30KB
                  • SHA256 2251b371ce2a68fae1f81a311ca98f8b2fa30ac6bdac3b49c311ea297c80b939
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 3474f2d331f224b67512864fc187b95dfe2ddcbad4e7176e547ef6fe8e645001
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 30KB
                  • SHA256 ca4f8093b5e60380bc0b09154a4e051e5011838617c0e094d9a6b8b8f99c1a2e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 30KB
                  • SHA256 0cb53f05181c76c9824b384ef1a335f3ef45809448d15998043ad112d0dd2c7b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 5KB
                  • SHA256 d6b359f895e610e9291ead1af26f71461dba8d7dcf225def8f5c6a86b8814801
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 30KB
                  • SHA256 c3beee5eb3224182d2c084f687576b7cd1fe23a02ca195d04b7afeda1c22c9c6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 baa4f2a7a49016446b246984a398aef4b49ed362858dff31c308c552ebe8c75a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 19d69545c500cbd95bf58dd7c8cc5e0ee7082ad2f4f1ddaab09a8aedae7cafcd
                  • MD5 SHA1 SHA512 TLSH

                  1a8911f3-238d-4888-afad-5b24c8c9e15d

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\1a8911f3-238d-4888-afad-5b24c8c9e15d
                  • Size 235B
                  • SHA256 f63e50f75d448fd3ed1a7fb6dfe42d2ffe7fbb9359e664d97e2d935235f689f2
                  • MD5 SHA1 SHA512 TLSH

                  606afd74-bd61-4612-9fa5-9e303a2ad7c7

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\606afd74-bd61-4612-9fa5-9e303a2ad7c7
                  • Size 16KB
                  • SHA256 a3d0d832ee30ca5be48c69bebb5db6a0ea61812e676e3f2a0a881fb681415c07
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  7592da4d-d5b1-47e5-ac12-ad9a57e1a407

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\7592da4d-d5b1-47e5-ac12-ad9a57e1a407
                  • Size 2KB
                  • SHA256 f1ba11defaa683b0e853629d22d9b2b353800471bd4b064c78d4125e62fb35a3
                  • MD5 SHA1 SHA512 TLSH

                  7f660d71-16ed-47ad-a3ba-db613de69573

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\7f660d71-16ed-47ad-a3ba-db613de69573
                  • Size 886B
                  • SHA256 5194e257e7f9a84cdb32ad4435998b13c39e771b2a012c9a2974ef770f041f8a
                  • MD5 SHA1 SHA512 TLSH

                  85bfab8f-6684-4a61-a4c0-927c433d39e1

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\85bfab8f-6684-4a61-a4c0-927c433d39e1
                  • Size 280B
                  • SHA256 be81b9e2ad6a6c3136d1000acf3628ddee589f716427f40bb3d53d015b1d3b37
                  • MD5 SHA1 SHA512 TLSH

                  8b0b9ccb-d10a-4bee-83c7-c0dd3d4fc26b

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\8b0b9ccb-d10a-4bee-83c7-c0dd3d4fc26b
                  • Size 235B
                  • SHA256 87c47861ad593917112c8b61d2f45267647f7a3ecfcbd3f00f887564fde96caa
                  • MD5 SHA1 SHA512 TLSH

                  8d375914-1c96-4a70-bfae-8973819f18b2

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\8d375914-1c96-4a70-bfae-8973819f18b2
                  • Size 1007B
                  • SHA256 7aa777af1a466183eb1fa7dcb3f180398625ee23f6babc9317c71038a0668cd2
                  • MD5 SHA1 SHA512 TLSH

                  a2bca1a4-de1f-499c-b384-647aae22ff32

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\a2bca1a4-de1f-499c-b384-647aae22ff32
                  • Size 4KB
                  • SHA256 66dc9dcb6c19678d5d6c28679068f89a4dead86b006d4abaad1a0cf5261a29ab
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  fd431c7b-b269-4584-9bf2-bf2481494a3e

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\datareporting\glean\pending_pings\fd431c7b-b269-4584-9bf2-bf2481494a3e
                  • Size 883B
                  • SHA256 718fc4930c5f0864d71a1d577b5d1812b3b149e121a8010854a4ca5b0ea7b08c
                  • MD5 SHA1 SHA512 TLSH

                  extension-preferences.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\extension-preferences.json
                  • Size 942B
                  • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                  • MD5 SHA1 SHA512 TLSH

                  extensions.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\extensions.json
                  • Size 14KB
                  • SHA256 a2e21f6b1af114d61328e7decb2a1b15d63ce8587e88f19a3b4a1f892427f15e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                  • Size 1.1MB
                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.info

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                  • Size 116B
                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                  • MD5 SHA1 SHA512 TLSH

                  LICENSE

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                  • Size 473B
                  • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                  • MD5 SHA1 SHA512 TLSH

                  manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                  • Size 1002B
                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                  • MD5 SHA1 SHA512 TLSH

                  widevinecdm.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                  • Size 21.6MB
                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  widevinecdm.dll.sig

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                  • Size 1KB
                  • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                  • MD5 SHA1 SHA512 TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 6KB
                  • SHA256 1495b348f43b9a0402cbb52be1a545cc854f95680a8ceec0151fd0b36dca9316
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 7KB
                  • SHA256 9e9192936342fdd98b42581926642ea14ab1695dc7ae75d75479e46aef8ffb50
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 6KB
                  • SHA256 d318ecc1e5bea380ff59682bb0ed76fb619e8058311b0b7b9540fb482d17dad1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 8KB
                  • SHA256 916fed4d190d532eefc4bd378ed09cb1d92c28176f16253e5e6e8b7804eb1679
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 8KB
                  • SHA256 7954b4d9c3fc43e042b204f957a6859ff6137b4deff64990df3a6d8287249d48
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\prefs.js
                  • Size 6KB
                  • SHA256 5913c46ecb2e59ef89300f4573e14069350118b486ab7f4de4e8760b03f91c2b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  search.json.mozlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\search.json.mozlz4
                  • Size 350B
                  • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
                  • MD5 SHA1 SHA512 TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\security_state\data.safe.tmp
                  • Size 273KB
                  • SHA256 3cf79ed073e746d083f1f9061636c95fd9bade43d7e52a1856cc0d4612601473
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionCheckpoints.json
                  • Size 90B
                  • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                  • MD5 SHA1 SHA512 TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionCheckpoints.json
                  • Size 53B
                  • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                  • MD5 SHA1 SHA512 TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 152KB
                  • SHA256 6c3e2d76a461be91b2b7a965baf6c2d255c629b1486862aeb78cf4ef6796fcc0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 152KB
                  • SHA256 31034c87679c5e8fbe1c4b3484a3ce77b62c28b0f29432a8b50c1303545ffc0f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 14.4MB
                  • SHA256 42d4a6ecb59cf13873efeacd3ab3c610f054df7a51cef567c7d24eabda058ae1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 5.5MB
                  • SHA256 f08d78e83b0ea4a40cc3b96d5c524bb277423d48b2979463dd8d7498fa0a1549
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 12.3MB
                  • SHA256 c9b68ca4d58f22f95640de03bd856b074534c61b51dec868836b2d59599e6dfa
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 13.3MB
                  • SHA256 581d1dc3104dd893dde936eadb6f07e17e9ca6d633fd64d5e5f1ae286d659cd6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 13.6MB
                  • SHA256 99d73784839c608241eac9f937b8fb6746b46bfefc8af10ea377cafd430d3bbc
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  targeting.snapshot.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\targeting.snapshot.json
                  • Size 3KB
                  • SHA256 0972f2e12b4ccfb674cd7a49d48fef521520dd84ab1bb6a3f9c47e3d568cd144
                  • MD5 SHA1 SHA512 TLSH

                  xulstore.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xoeudfhc.default-release\xulstore.json
                  • Size 167B
                  • SHA256 a261f6c4c1f49fbaac01d6d7437da1149f9b03588d54b2fd860fdfe969596115
                  • MD5 SHA1 SHA512 TLSH

                  memory/2640-616-0x000001D2946B0000-0x000001D2946D0000-memory.dmp

                  memory/2640-605-0x000001D281EF0000-0x000001D281FF0000-memory.dmp

                  memory/2640-800-0x000001D2DD090000-0x000001D2DD82C000-memory.dmp

                  memory/2640-609-0x000001D281DF0000-0x000001D281E10000-memory.dmp

                  memory/2640-604-0x000001D281CD0000-0x000001D281CF0000-memory.dmp

                  memory/2640-595-0x000001D2801E0000-0x000001D2802E0000-memory.dmp