c5e51ffca4f9f02635e147dc6c5a91834bbd3e5dc5b1484f4be13e71e94d1ee3

max time kernel
1025s
max time network
1041s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 11:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

86e66533b6d473aa0d752abfef78a5bd_JaffaCakes118
Size

617KB
MD5

86e66533b6d473aa0d752abfef78a5bd
SHA1

7e1e2aa08fdb01f6f27ee91f04222090513e1b95
SHA256

c5e51ffca4f9f02635e147dc6c5a91834bbd3e5dc5b1484f4be13e71e94d1ee3
SHA512

c62afaa2dbaf7c68dcc06dd22fe22ede32bb7f3cd43d5cfad3d96780dc03d5133c4c186f1987e1f3237d37a0f2f191b38cdccf168d71e7051838f2fc1a02ddbd
SSDEEP

12288:MYZ4Uva3rlN9XHeboL4FVst90FEjxuvb5GJ+bKKLdM/4z:MEATYsL4FVs70FKi58+b9

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 15 IoCs

description	pid	Process
Token: SeDebugPrivilege	2896	firefox.exe
Token: SeDebugPrivilege	2896	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: 33	3812	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3812	AUDIODG.EXE
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeManageVolumePrivilege	4684	svchost.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe
Token: SeDebugPrivilege	5956	firefox.exe

Suspicious use of FindShellTrayWindow 11 IoCs

pid	Process
2896	firefox.exe
2896	firefox.exe
2896	firefox.exe
2896	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe

Suspicious use of SendNotifyMessage 9 IoCs

pid	Process
2896	firefox.exe
2896	firefox.exe
2896	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
2896	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe
5956	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 232 wrote to memory of 2896	232	firefox.exe	97
PID 2896 wrote to memory of 2316	2896	firefox.exe	98
PID 2896 wrote to memory of 2316	2896	firefox.exe	98
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 4284	2896	firefox.exe	100
PID 2896 wrote to memory of 3120	2896	firefox.exe	102
PID 2896 wrote to memory of 3120	2896	firefox.exe	102
PID 2896 wrote to memory of 3120	2896	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\86e66533b6d473aa0d752abfef78a5bd_JaffaCakes118
1⤵
PID:4616

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:232
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2896
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.0.1823284134\1326150360" -parentBuildID 20221007134813 -prefsHandle 1856 -prefMapHandle 1848 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f5adeb8-c4e4-46d1-9c5f-bbdd1d0c0f6a} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 1944 245b3ed8158 gpu
    3⤵
    PID:2316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.1.745522474\636241180" -parentBuildID 20221007134813 -prefsHandle 2336 -prefMapHandle 2332 -prefsLen 20785 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70bc2715-e217-42b4-9343-1d47b712a952} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 2348 245b3a43c58 socket
    3⤵
    - Checks processor information in registry
    PID:4284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.2.1542162289\1915058170" -childID 1 -isForBrowser -prefsHandle 2956 -prefMapHandle 3100 -prefsLen 20888 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f73bf729-7ebd-4f6b-b80f-f960044ce013} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 3172 245b3e5d358 tab
    3⤵
    PID:3120
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.3.1495654569\36533734" -childID 2 -isForBrowser -prefsHandle 3788 -prefMapHandle 3784 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {987766e6-bd8e-4c53-9bb2-b1b0522e0017} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 3800 245a025c158 tab
    3⤵
    PID:4004
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.4.1185575503\1651049991" -childID 3 -isForBrowser -prefsHandle 4332 -prefMapHandle 4304 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6ea1d86e-b3c7-4c11-bb78-7bb232dee5b5} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 4348 245b95ae358 tab
    3⤵
    PID:4372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.5.642185051\676714135" -childID 4 -isForBrowser -prefsHandle 5036 -prefMapHandle 4568 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e542f6a8-cd62-4833-b7de-65131befa750} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 5064 245a022d558 tab
    3⤵
    PID:5248
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.6.1643775849\1669870021" -childID 5 -isForBrowser -prefsHandle 5216 -prefMapHandle 5220 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6413c83b-481c-40b3-8274-aec253a5f2b6} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 5208 245ba5ebd58 tab
    3⤵
    PID:5256
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2896.7.528049912\1836478912" -childID 6 -isForBrowser -prefsHandle 5412 -prefMapHandle 5416 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c260d53d-b23e-495d-84de-317aa0a33663} 2896 "\\.\pipe\gecko-crash-server-pipe.2896" 5404 245ba5ecc58 tab
    3⤵
    PID:5268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    PID:5940
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      4⤵
      Checks processor information in registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:5956
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.0.620898300\758279694" -parentBuildID 20221007134813 -prefsHandle 1780 -prefMapHandle 1772 -prefsLen 17556 -prefMapSize 230321 -appDir "C:\Program Files\Mozilla Firefox\browser" - {306f6ad5-96a8-498c-ad5d-dab6defb73b6} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 1852 1c524bef058 gpu
        5⤵
        
        PID:6092
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.1.1891335854\1781097865" -parentBuildID 20221007134813 -prefsHandle 2052 -prefMapHandle 2044 -prefsLen 17556 -prefMapSize 230321 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7a8f30a-cf61-4d15-a7cd-ab2b7355a1fa} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 2064 1c524a4de58 socket
        5⤵
        
        PID:2572
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.2.1719748188\90356053" -childID 1 -isForBrowser -prefsHandle 2972 -prefMapHandle 2908 -prefsLen 23692 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c003a7cf-ab42-42f0-9c1c-f4d9962c3a26} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 3552 1c527383058 tab
        5⤵
        
        PID:6016
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.3.716268803\1520972035" -childID 2 -isForBrowser -prefsHandle 2892 -prefMapHandle 2608 -prefsLen 23799 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a29807a2-a46d-4fcb-8e25-b7d34636e656} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 3872 1c52a0abf58 tab
        5⤵
        
        PID:1184
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.4.851764373\146467149" -childID 3 -isForBrowser -prefsHandle 4040 -prefMapHandle 4044 -prefsLen 24882 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ddc4c63-c5be-4e75-a236-1c65cbb969cd} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 4036 1c52a567858 tab
        5⤵
        
        PID:5544
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.5.1031240936\474006830" -parentBuildID 20221007134813 -prefsHandle 4508 -prefMapHandle 4504 -prefsLen 25936 -prefMapSize 230321 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0b5728e8-0bb0-4e96-ad6c-462abfd29695} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 4380 1c524f8ce58 rdd
        5⤵
        
        PID:5408
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.6.586721939\1678568768" -childID 4 -isForBrowser -prefsHandle 3592 -prefMapHandle 4076 -prefsLen 31491 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0d63eb34-ffe1-41d5-85c4-c50beefd876c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 3696 1c51212fc58 tab
        5⤵
        
        PID:2940
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.7.920618271\1889472104" -childID 5 -isForBrowser -prefsHandle 5368 -prefMapHandle 5324 -prefsLen 31934 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4691ee22-c2cd-4800-9931-031680333a6c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 5332 1c527025d58 tab
        5⤵
        
        PID:3120
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.8.1326939050\383706378" -childID 6 -isForBrowser -prefsHandle 5088 -prefMapHandle 5280 -prefsLen 31934 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c698da1e-e300-4bd1-a8c3-d9c95126a451} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 5172 1c5270e9f58 tab
        5⤵
        
        PID:5248
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.9.137062144\1318837963" -childID 7 -isForBrowser -prefsHandle 4720 -prefMapHandle 5592 -prefsLen 31969 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7293c0ba-b5b2-41c9-8c0d-a0e39a813212} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 5480 1c52aa51258 tab
        5⤵
        
        PID:3112
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.10.662458918\1919716387" -childID 8 -isForBrowser -prefsHandle 4652 -prefMapHandle 6276 -prefsLen 32161 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe0ecb2e-5e9d-4ed1-abce-e3e9a7ea28e8} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 4696 1c52e58f058 tab
        5⤵
        
        PID:5792
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.11.854454808\1165657392" -childID 9 -isForBrowser -prefsHandle 6196 -prefMapHandle 6264 -prefsLen 32161 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c6ac407e-8049-41dc-a046-03148406d89d} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6256 1c5303d3e58 tab
        5⤵
        
        PID:4768
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.12.2110091691\172556913" -childID 10 -isForBrowser -prefsHandle 6464 -prefMapHandle 6468 -prefsLen 32161 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {779b6b86-fac6-4426-a1d3-58f76f7b4711} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6452 1c52cb21758 tab
        5⤵
        
        PID:4828
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.13.1284743987\1029116300" -childID 11 -isForBrowser -prefsHandle 6828 -prefMapHandle 6824 -prefsLen 32474 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b4ec6f37-3966-4c4f-88bc-72051748071a} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6836 1c52e6aa358 tab
        5⤵
        
        PID:5820
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.14.195034650\2043639780" -childID 12 -isForBrowser -prefsHandle 9272 -prefMapHandle 9240 -prefsLen 32474 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a69162b-4fc8-436c-bdbb-019e7b099d68} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9368 1c530b9f258 tab
        5⤵
        
        PID:5360
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.15.1582103359\527653314" -childID 13 -isForBrowser -prefsHandle 5492 -prefMapHandle 9544 -prefsLen 32474 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {68141062-86fd-432c-b6c3-2b26e6ef6d5b} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9548 1c5310bf658 tab
        5⤵
        
        PID:5832
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.16.158557270\1151539741" -childID 14 -isForBrowser -prefsHandle 10736 -prefMapHandle 10740 -prefsLen 32474 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {daf3737c-8da5-4cb2-a115-65f5d2f99a2c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10728 1c530fca258 tab
        5⤵
        
        PID:5584
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.17.1402247490\555733980" -childID 15 -isForBrowser -prefsHandle 5332 -prefMapHandle 6444 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6ae3acc9-2e6c-403d-a937-569fa17c0aff} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 5084 1c51216ae58 tab
        5⤵
        
        PID:1048
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.18.2130338736\302900588" -childID 16 -isForBrowser -prefsHandle 9624 -prefMapHandle 4788 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {60a7d625-e77b-440e-a4f0-9ebf3041e8d6} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8592 1c52d941458 tab
        5⤵
        
        PID:5436
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.19.1904689025\1382192896" -childID 17 -isForBrowser -prefsHandle 6872 -prefMapHandle 6288 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cb18e776-0b34-4ab8-84cc-6ecced98de6f} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6280 1c530be0258 tab
        5⤵
        
        PID:5884
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.20.1691899402\1337485887" -childID 18 -isForBrowser -prefsHandle 6376 -prefMapHandle 6380 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {89f1c8c8-0273-40ae-a6d4-333964bc360c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6388 1c530be2358 tab
        5⤵
        
        PID:3292
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.21.26013004\379767710" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 9664 -prefMapHandle 5196 -prefsLen 33279 -prefMapSize 230321 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {830d64db-f0e5-4252-b88a-fadd48e8afe7} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 4968 1c530be3b58 utility
        5⤵
        
        PID:5100
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.22.639918935\1974948081" -childID 19 -isForBrowser -prefsHandle 10068 -prefMapHandle 10140 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {42cad1fa-59de-4494-8d6d-5e46ad94188d} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10100 1c5336b9158 tab
        5⤵
        
        PID:5800
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.23.128628638\900542207" -childID 20 -isForBrowser -prefsHandle 10200 -prefMapHandle 10152 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {251cccb7-1f17-477f-b4b7-6c67b21afc50} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9924 1c531270258 tab
        5⤵
        
        PID:408
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.24.385884054\101875441" -childID 21 -isForBrowser -prefsHandle 9752 -prefMapHandle 9452 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7a61a11-5353-4c9f-9ea6-66ed284584a6} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9672 1c5338bee58 tab
        5⤵
        
        PID:2912
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.25.672429083\1712868113" -childID 22 -isForBrowser -prefsHandle 9300 -prefMapHandle 9972 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ff2f70fe-82b6-433e-84e4-a4384438a150} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9180 1c534356258 tab
        5⤵
        
        PID:1892
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.26.849957353\1350649455" -childID 23 -isForBrowser -prefsHandle 6704 -prefMapHandle 8936 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d76e456-17fa-41f6-a776-f96812d810af} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8944 1c51216fe58 tab
        5⤵
        
        PID:6528
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.27.1448722793\1126404714" -childID 24 -isForBrowser -prefsHandle 8980 -prefMapHandle 9584 -prefsLen 33279 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4458f50e-6415-4a3a-a186-9ba0b82ccfdd} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9076 1c530d24b58 tab
        5⤵
        
        PID:6536
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.28.1003536768\461106059" -childID 25 -isForBrowser -prefsHandle 10780 -prefMapHandle 10772 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8da95204-b8d1-4906-ad8a-6801b4f82d24} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9468 1c5351ae258 tab
        5⤵
        
        PID:456
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.29.1986850854\1334948505" -childID 26 -isForBrowser -prefsHandle 4232 -prefMapHandle 6892 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ae09205a-5234-4158-a7cb-f5061805d7e5} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 2944 1c535216b58 tab
        5⤵
        
        PID:1548
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.30.1531682121\141904537" -childID 27 -isForBrowser -prefsHandle 10116 -prefMapHandle 9980 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {712942c9-3932-4bfc-93f7-59e3868e3194} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9392 1c53531c958 tab
        5⤵
        
        PID:6148
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.31.1653250636\1774166029" -childID 28 -isForBrowser -prefsHandle 8432 -prefMapHandle 8436 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba09c40f-57fd-4159-b252-e417b654cdd4} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6296 1c5333b6258 tab
        5⤵
        
        PID:6784
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.32.1591003269\742783501" -childID 29 -isForBrowser -prefsHandle 8288 -prefMapHandle 8292 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4ae1f9bd-e814-4af5-aeab-b9803b3fb204} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8372 1c53593ef58 tab
        5⤵
        
        PID:6812
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.33.110212257\600967988" -childID 30 -isForBrowser -prefsHandle 8172 -prefMapHandle 8168 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a58fe04-b9d1-4ade-98ac-0835b8339481} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8180 1c53593f258 tab
        5⤵
        
        PID:6800
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.34.1056997129\249360420" -childID 31 -isForBrowser -prefsHandle 8208 -prefMapHandle 7948 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d8ebfba-aa89-41e4-8827-0655087c3a42} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8304 1c53531cf58 tab
        5⤵
        
        PID:6824
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.35.1341786776\236394195" -childID 32 -isForBrowser -prefsHandle 9108 -prefMapHandle 7776 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e0655529-9eac-4948-80a1-1a6936e8f25b} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7912 1c535c5ae58 tab
        5⤵
        
        PID:4400
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.36.206928180\2116850602" -childID 33 -isForBrowser -prefsHandle 7500 -prefMapHandle 7516 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c2bceebe-f362-4528-b469-5597bcee40d0} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7524 1c5360bc258 tab
        5⤵
        
        PID:2636
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.37.688884980\1244435875" -childID 34 -isForBrowser -prefsHandle 7488 -prefMapHandle 7492 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d4924f95-63d5-4a7d-adf9-3c52d262703c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7568 1c5360bbf58 tab
        5⤵
        
        PID:1900
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.38.1378654487\145006563" -childID 35 -isForBrowser -prefsHandle 7524 -prefMapHandle 7216 -prefsLen 33288 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2112af8-d78a-481c-af07-0298ff0be84c} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7128 1c533b46b58 tab
        5⤵
        
        PID:4292
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.39.1628934104\1880200905" -childID 36 -isForBrowser -prefsHandle 6508 -prefMapHandle 6636 -prefsLen 33297 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f83d2ac-afee-41e7-a9c1-2d6406934a29} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7012 1c535c82158 tab
        5⤵
        
        PID:7276
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.40.1550789529\79432260" -childID 37 -isForBrowser -prefsHandle 7156 -prefMapHandle 6340 -prefsLen 33297 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {213d8693-1c93-41a4-a6cc-1e6e3a648264} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 7576 1c5357b3858 tab
        5⤵
        
        PID:7940
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.41.1599805522\1197808846" -childID 38 -isForBrowser -prefsHandle 10976 -prefMapHandle 10980 -prefsLen 33297 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c4269895-e21d-489f-baa4-7cb880e70c5a} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10964 1c52af35958 tab
        5⤵
        
        PID:8112
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.42.1711356000\370192739" -childID 39 -isForBrowser -prefsHandle 8504 -prefMapHandle 2232 -prefsLen 33297 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {79eb7c39-d99d-46b4-9765-4bcf4fd2d81b} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10924 1c52b415858 tab
        5⤵
        
        PID:6528
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.43.1441478864\1380375869" -childID 40 -isForBrowser -prefsHandle 5700 -prefMapHandle 9928 -prefsLen 33297 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2fb1401b-e486-46f9-9079-4404ada5591a} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10876 1c52b1e4758 tab
        5⤵
        
        PID:840
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.44.906774552\1990552461" -childID 41 -isForBrowser -prefsHandle 8412 -prefMapHandle 8516 -prefsLen 33306 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4468a220-559a-4c3f-8c21-197737606ca6} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 8404 1c52e280158 tab
        5⤵
        
        PID:7772
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.45.1776101149\126581088" -childID 42 -isForBrowser -prefsHandle 9492 -prefMapHandle 10988 -prefsLen 33306 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e910d7f1-c2b8-45c0-92b4-f45040ca2cac} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 10408 1c52b555558 tab
        5⤵
        
        PID:7688
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.46.159813595\1715991846" -childID 43 -isForBrowser -prefsHandle 5648 -prefMapHandle 3152 -prefsLen 33619 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {da3c8a64-572c-4c95-b6c8-15094aae663d} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9160 1c52996c858 tab
        5⤵
        
        PID:4308
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.47.2040778423\1131053285" -childID 44 -isForBrowser -prefsHandle 8396 -prefMapHandle 8328 -prefsLen 33628 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0eb246d0-4096-4f92-a281-b9f926945f8f} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 6512 1c512167558 tab
        5⤵
        
        PID:5896
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.48.1307785717\874757471" -childID 45 -isForBrowser -prefsHandle 3152 -prefMapHandle 5648 -prefsLen 33628 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {932c7d34-1c0a-4bd9-a6fc-4fd0cea8d6f5} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 5712 1c524a47758 tab
        5⤵
        
        PID:1876
    - - C:\Program Files\Mozilla Firefox\firefox.exe
        
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5956.49.309313667\422976692" -childID 46 -isForBrowser -prefsHandle 7032 -prefMapHandle 7104 -prefsLen 33628 -prefMapSize 230321 -jsInitHandle 1200 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e086dab-7e34-4525-8cb7-718ed4f3a3d8} 5956 "\\.\pipe\gecko-crash-server-pipe.5956" 9360 1c512168458 tab
        5⤵
        
        PID:6564

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:4344
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  PID:5152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3996 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
1⤵
PID:4704

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x38c 0x49c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3812

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4008 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
1⤵
PID:4232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json

Filesize
102B

MD5
7d1d7e1db5d8d862de24415d9ec9aca4

SHA1
f4cdc5511c299005e775dc602e611b9c67a97c78

SHA256
ffad3b0fb11fc38ea243bf3f73e27a6034860709b39bf251ef3eca53d4c3afda

SHA512
1688c6725a3607c7b80dfcd6a8bea787f31c21e3368b31cb84635b727675f426b969899a378bd960bd3f27866023163b5460e7c681ae1fcb62f7829b03456477

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4s2odj76.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

Filesize
9KB

MD5
cec1aa16b40ea062cba7d9939c5e51b7

SHA1
ed3d8ba0f5866353448d539d7a0e65893e821aef

SHA256
6d1cd2671fdfbd85bbde8487fab7352ed399f4feb09460456163a46179e0983f

SHA512
fe37bc045b76b4a86f897beab3c1032417f005f0b9c4da16b129f6b1f4aaf920763e792c4b68cdd20aeb6f86b153bd04ca46883479e30804ff6a815b5ac673d8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4s2odj76.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

Filesize
11KB

MD5
673d239b2d45d49286be8cffb5d254fe

SHA1
7daf46500df466e221fdd4e0e87a1d70a126342e

SHA256
943470110a15f7ee7b3571281a1063626a9b54a9e50fc7495b9f9cabc531624c

SHA512
22a97a0731b6058e011d9f4e8220a183a7a4a7e0a58bc1e32f7b44bdbebe903f446653052c91dab34263a2561aee9f6f9e9cca30a22acd2c8e5e2272fa94d477

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4s2odj76.default-release\cache2\entries\E66F5AA5E3C285C270CF84BD11111C74D38F245C

Filesize
13KB

MD5
de80eaac942ff84e722d4af2008241ec

SHA1
58a61de603d8f2407a4f03374ad417ed2b06ba9c

SHA256
699588e7088dfd09fe2acf9035eff95fbb70c3f5205165f5f336df8aa3959dc7

SHA512
96e9736185f25bec6138597bf4e33b1dd7e4e89a47bd8e155074a0f26eda5a56a20ad8d677427cea07dabe663cb1af0acd916903db4167021c250cb020141dd4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4s2odj76.default-release\startupCache\scriptCache.bin

Filesize
7.7MB

MD5
dfb48432fd1dab350519a364a8edda64

SHA1
8f7f6114f3821e2e63ec6ed78cad41208b0d88d8

SHA256
b2ada89a76e88ffa4e353e8fc5450f137b08f692fe71f681aac9e2e9cc287051

SHA512
3fd937f8f03d2a2e02412f835e8427d2a3f4769f9fec88bf19b0aaa895740bf900676b2de115866adf3e530884399accb521fc908eeedbf42a6d5dd66c5790b5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4s2odj76.default-release\startupCache\urlCache.bin

Filesize
2KB

MD5
52108c87dcecdfc3307911e304c903e3

SHA1
909d29792263fccbc01a85624ec9b736ba9fc906

SHA256
7f80308eabbfe640e1baf5e4ba66f62a9b334dd5882229bad818720c8d42dbeb

SHA512
5c553b6c9b3955d46491f3961078e04717ec3ca7a855e20feace77cf5c3343fbdb2bc6e126b2a297573ef2054689d405b16b999b2035498e1d8ef745119a9790

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\activity-stream.discovery_stream.json.tmp

Filesize
25KB

MD5
4686dc88a39f61217e10809de4cbd07c

SHA1
7f00a4ccaf43374ba675e7b6d221c98f33b9dd47

SHA256
db4f3c960d9a6ff4e52fc5bc04ee758c4308b6685a6928a83c74bec8a983a8d5

SHA512
ac251f16ca3851caa0380eecd7ea740516cd1463f4fb252f5f97d458d9200f49a257cfae032d6080116e386080b16f3c9c4efbf6a4c2cc58d69e5384386ab4b2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\10450

Filesize
9KB

MD5
1fdd2c33df5429cb33123ae374d07381

SHA1
37649703035d6d882cef4f0b31ba348e840906ae

SHA256
bc0637ba26a6ca49a34d740c8d7f30bcabd7b32f659d71e216ac4a2c409e2dfd

SHA512
f3b352ce196b69c6dd5aec8b89b2fbc892c31455dab3b11e4ddfc29ab61c4e5de636cf6b20a8c61c4758f975b3ee68a6e72b937eaf270d15a9a0d9b95b1b4be9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\10986

Filesize
21KB

MD5
d6dff21f629e89323205928654d94a53

SHA1
8d4aab1e97dfde220233b34535314acce87ed1f9

SHA256
947c50b758aec06c12d1d0c87aa0a9da2e121c4d26729b74a40cea3dd39f6239

SHA512
dd06ad4075bc1f26ef750f5f0b66d07d606e4a6fe835a6fb3cd874141f15dc94bcc719c63c4b404a0bc16ead61472d52ebab1a616d2d9b4854e5c9e80999ead7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\11820

Filesize
6KB

MD5
e3bee162459816a1fa95dc01dcd93e40

SHA1
b9e0408745d468066c04ed6a3f60c46569a47ee7

SHA256
9d64a8d3c8d2f5fed9a24765a3d0840b2adaa0eeb0492b5c394da9f44fa51ebe

SHA512
eb379e095f1a8895bf652ac519b682730e1c553a2bc0ec0977be63e0bf2be64c9b37fff30d5bcc76a8bd5aeecd57ad06fd1f80839a05d7499731eeb818f887c7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\12839

Filesize
7KB

MD5
cf4b8bbbb906e855f2b35767d0f65bef

SHA1
779180cb8c2c5d978ea7d751c70432619062b409

SHA256
37ee0a7793292b247f65a3323d73e7465593c548c7092198a5d4a8d92bd452fb

SHA512
465fa0950f3160d4ed0d0ece48554a5d318fa84c5f235254c8f03efda33e367d7944dcec76025954c90a2613e5b80a42058c8e6d89d1fc7029823d25bdd9355f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\17739

Filesize
10KB

MD5
8958ae9815a695991404f33ae8c18956

SHA1
59de8a0213847bca4fd12275980673dcbd8b124d

SHA256
76bfd8ccaed783425a9c9ecaddfd38456af1e52a15c056030b166544f0dd2b64

SHA512
2cd1071de3bb56fbda80cd53f7317619ff7b8bed9dda9f37e36dd481d31207227a1850a2da974eb3767ef6bafc809f7da414ce6b0ad64c856af8a3da707a34c7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\2302

Filesize
8KB

MD5
473ad421b400537793294972bdb572a1

SHA1
4fd0819459fa58cda59a59cfef464ebe22cbcbf3

SHA256
2129d2163f54f1eab84945e14235802208c6a26a6a6a3e3075652152db5b8e26

SHA512
3bf4ed3f1e45cadca24f33b44834a7dbfe5872cc98672c7b69cdf5575dc8864d6404292cd3258283c98c39c3e5d1429f04146c2f61c41a7f61d9c86513c8c45a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\23502

Filesize
12KB

MD5
6717ba10e144c33ebdaaa3e1dc9937b7

SHA1
82f4995b3322a3e3045761f433777c38c1c569c3

SHA256
88837fcf50bfd745ce72f2e0fe1d75efd821064d48000b0042d2161e47fd427e

SHA512
b35fbc23266c1958ec37cd0707843dd13023a743713f7e7ecee3764f3a9fb5711a7ea4c7863ac93b35909abe4c654bf008341bc6f7fb8e02e3737ead5bacef5a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\24418

Filesize
10KB

MD5
7b0fc294b6df5a0dd734b0280b6fc80e

SHA1
5b12f4d95ed7e33f2abdb5a2e74f26d7d72b5ffc

SHA256
169bd425f169dfadba48801d7fae400829ed06c23aaea57fe6fb2607d8e949b6

SHA512
54ccb7d7fe9f626ccdb92beb64eccb07d7cfbfb6f68b2a267155173f4162a7168d7a1fe8338e78135665ca83a2b31431376f369702b8874254b1b0074c25ddfa

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\8306

Filesize
7KB

MD5
5a58b63d8ce79fa67567ea4cd73cd0d7

SHA1
3fd874d8d99b5b220236c660cf44705b0ef308c4

SHA256
d7a6d8dca8615ade1f3f7b1422bb5ef907b9850ad49a36e439002ba044aef2b9

SHA512
ee0d14238f0b14316051fce41f4a9bab02a9a73aaebf135d06de14cb1cfb06df7ea8cf41ba27cb24d9d3718a410468e46068972e1c63d8d258118ec746dff968

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\doomed\9900

Filesize
10KB

MD5
5d6fdc00a7bee35f4f8a6c36cf416f26

SHA1
03b6b7d42506c7d9c97e1281aeb32735b0b20d94

SHA256
77bf72cbcad00f35a6687b1c4381f15b27ce9b82538162f8fae1599d92a62861

SHA512
14302cfb9fd2c18b5899f032e0d2e04daba63b2f6f46a0bdd4b3c531fa8d6ee5dc296757721867c0eb2a50e06e1fb4f11428a6004ef2d3d7aa48284ad083a997

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\1526506645F9D052D89467B0CDBF6A7769AE1D56

Filesize
16KB

MD5
98bd23b0c20479f703a2fca4bf8b5a7f

SHA1
c77fdf003d6a9501a58cf253c24527a0d4453e9c

SHA256
e6bf43dead58d4b3da9c5a05fe4650bcc7a8b02b54a1c3cf35fc93523ae0d66d

SHA512
cedc43918362af54f461e030437b5f2b05df603dd2544901e8ad919d5177440445e13bac03944a12f21f81bebc5078c8ebf9e1303a9624d985e58fe5f98b8a91

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\1C70D6A153D454B6CC2ECF81DD72F647C8C6114E

Filesize
23KB

MD5
4a9ce53d6b166f7a91d757fd5c38b3bc

SHA1
dd3bd7e7a5008d253524f2404adcd8aa0f448452

SHA256
55f399672d185df25eebae3bc46c48048ae7ce235b37ae1ab9fd6c2e5b8bb86b

SHA512
129a2f604757352c3e0486db98ed117c3161f519774e1382efc087b77384f6dbaa511e7ba7cdcbf1036a844bbec4c975ff8eaa24261b209355f1f770266931bc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\21B58AB6946BFD50A3AA1B32432386197E82AB1B

Filesize
25KB

MD5
181c32d27509d836696035d1ed2d65db

SHA1
36cef718380dde029e1ebbe97b1bf99f32ea8e85

SHA256
db9ec1e4ca5a320d4c98c9d15a5d96102d9144ce7d447cd9aa65382fd6f6160a

SHA512
4799e91f5247995ce7b5fed9d8b81f0304dcda931408e00356926b8a267632dc5dc4e90f4618e6c1601d285fac3ef5ad03531e9777343940e6ddff4fa4d97f4a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\2D317633B6AB6DB87480E82C0B3EAF5AD2AA9F10

Filesize
105KB

MD5
b0a041dfe69548eac9ceba97f2eed093

SHA1
0be0e315cd45d63666696e4091da8bb52d896371

SHA256
ec974516c80e2763fbe149a6ce36ab64706989b40f65268857458fe03310cc69

SHA512
5c07f48cdb2251dd86c39200e217b6a79be522215003c96181d7d70f1965efe206c070a2e301e2f64e4a3fbc6bf43bb85e767e4d038fe9d1be627a36dc7b1136

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\3AA72C24945226263A5C99BDEE26174B27FADAA0

Filesize
33KB

MD5
2307d42347eda7daa564a3d17d68d2cb

SHA1
1d671e57b925d62952dc2cfa2f4a47d9320d7fde

SHA256
2472e1c49491db160f390b6d104d02164824c7a174d9d0a761256d87749f5a9f

SHA512
b0574b5deb11e3b15dae2378c315548b65473beb3e7032946a809a0a9245ac5cfdaba5ecce0d7815c3526f69bd393abf516a92f5e16ffc786bd810b4bc543e1d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\48222CB5AE185205E4672CC057840C2208B33CDB

Filesize
34KB

MD5
552f5ecff6e84a9350e96b37c3af618f

SHA1
2f90751632d624cc268f5134a71ed1f419a28707

SHA256
c84b256e0eadddb16b53d16b338a2776550ca46b98cf177a97dbbc80575d4a47

SHA512
86ee8b36d71133b383113b23d78225e9534196c92d0eb23b4a415eb5f289659e2cfcadd7059a658e0594b2dcc777af4ab30045b95aba246e9dd440b4d6c467bf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\525341AF43EDC4F81C77DFD4BB32B9136AE69162

Filesize
74KB

MD5
7dd66e96f08bf41574e8d78ee434a09a

SHA1
2c1c39b54d6eb229ef34a3d1e70754ad5fd8abdf

SHA256
144b4be0ba436e5b7785059d00ba1680ea84e61061fc81188023d83858ce353b

SHA512
26a953fb74da162d62e25ed69a59785a1af60cb96a3e6d19064edcc62dbaecbb8022d94ddf891771835a789f4f842d68218c74bc06b79a2b48ba313dfa136413

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\62B433917F4558D2DF7B51047200ACC5F73B3459

Filesize
14KB

MD5
e8d2d718be00265545b147d1e3713541

SHA1
223c4c3113099cd0e144f5dab670f23f19aa7116

SHA256
799fea16091d15578bd6b98c16eee1e25477fc846027c952011c8141eb033104

SHA512
2bc2e0b41a07e60bf78899673904cf6fc0bd8b3861478bb0c3ef11ea382e9b2ecc1845eac63091b9386ccefbc1f8c3dd9ff86154c6eefcdad0644fc4f13f8624

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\633B9C8B662B7B828FFC2AAEB494EA7CC73F7F32

Filesize
1.8MB

MD5
3841f057cbde392c10aed855bb352076

SHA1
6e073f83b02eee6fd4182a4073d59f8ded04a2d5

SHA256
ce96027799e6cc2cb288227ffc1e8b9631b57996737a60ee7bf01ead3769483d

SHA512
0b71c61b9c8867711a2f788f7aee8b257eb777ae02799bf1a11f772e28e703b776d36ba022883dfc755eebb9afef55cb179f92deec7795d1ea3151e3da38a199

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\85D836EE75E9E037DB175619C0B0443BC46F2EAD

Filesize
192KB

MD5
d2f14767ea5269cf8ca346eb18e5c336

SHA1
b628142f023be1e0ca3b35ba7ba2e6fa1397f54d

SHA256
96172f74acacee6dde567ec1877fd12af3432b7c85ecb7e373099c661b3aff5b

SHA512
eddc219591b686d34dd38f89ca9137df0345d2b53d1384fd01652e0ea761192c4ff687aacdc3146f562c510de33cc16a7c288191bea3f4f7dd3b1763108d7429

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\8F71B3F6E8F492A0C59973ECE6813DA05BEA70C6

Filesize
116KB

MD5
f048b132747d9ec81c5b405c0cb96b55

SHA1
80475e9ee94e103b90b03bdda59f6c8f21b77bb2

SHA256
da93dbf04c43ea88db5c90f439204057e572e54c70dd42d4bdb7bd4df59b3155

SHA512
a715022fe151ec5a365c829faff7e6c86abeb6031b54066fda5240fa432ad85273f37eb6293a66069e49d626580423c2c7d0c98f64b529a1b141657054f788be

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\9C07B9686FC40A1E92DB54F8AD126A170FF57B73

Filesize
26KB

MD5
70be4e1195e140a39cce312d1fabceb0

SHA1
18954ca7b370d77388b1da7b6f4931527d13e90e

SHA256
8fa178116dd28f2fe677a0a973fe115f992140f930a36b7443b9c8d3a4da6ad5

SHA512
31998d9e8e704ceea045a4f53c718eaf639869d9de2bb1bef36dd47ae1886bc30e82c444bd2b7ba4033e1666c8b5d27201d6ffba07244853c01f9555a49a252d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\B34C1EC5A6A21310567DFB47B8C6B2F3BD8513FB

Filesize
89KB

MD5
71c8f08da6b3b492e6e22e8735908d7a

SHA1
b7d08eada3a728c3468474d9b081c16e3dff388a

SHA256
ebda55636ee94f70679d4611565405bf6048e0f8c9ec900e214b97eb152c0c1f

SHA512
a075f063d7bb7efbd4c1cb75ecd9512a47c4497e5c96d2c4365be57fc78382905d0b8e7398282b01927fa220d1274086e12ae1e04e6ba6a75d9158a1746eec48

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\B6D4B5A3057CD6164DA5452EBD29BE80299BE9D6

Filesize
258KB

MD5
0b4cac846eb76856c2b0854588cf6034

SHA1
0f955d699dc158928459e0614e13d1ddf8d0b78f

SHA256
745f25e615e7d0ad5ed7f30c105617691a6ab230bdb2449f5f2a4ee3825b003c

SHA512
2f2c9f52b4d09cc21227f8012daa1a2fe560b786fe1bdccbccaad2d522ab2570b3ea5bed62b5595719f4db3996c7b414999ce950fb01cde72d32ba1484795f16

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\B9464C98BB681B14BE7774A768D7BA9418C02BE2

Filesize
24KB

MD5
58663ab96ea4dd81087759fbfbae147f

SHA1
dbe57b5209287c1dfd552bbc64a04a910f6ca25e

SHA256
4d8f5a438cceb7a6a2b6f57f58fa66e4aad88b56c59f41143b74eac5af6e8f0b

SHA512
54d9f103275423ec0e4e490f00a6ef7a83599294cbcbbf81529ebb497f964534542fad0f331d234962e9651e5d5bea601d8f166d526806e514405b2b47d0020b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\BC475542496437A060D757ECA826B837EB3DCCCB

Filesize
64KB

MD5
30c72eaa382d07ee7db49c28def46366

SHA1
62b480341de4899dd90d95f66901ee7eafe3b44c

SHA256
07c1124acbb3f82737849aa4fe8e1a32b465b519195247762154ed283f9d0384

SHA512
a55b459c4876bccc44b87cd37b52a0371a243e2e6ee15a5e14901110762adce6ddc3946df61391b0c443cdc34d891851f38f75d69b9568034c208ac30164382d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\C2003944CAE39A12F1A349DAAC890AB13A913E52

Filesize
26KB

MD5
2215b91b39a00d1bcb115f36b25af337

SHA1
56d9989f15fc7792fcb74bd4e220286d4607358b

SHA256
16aeb9a7f4868cd151b6d9f278c9ab8f78b256a44b5fe187e348832f366e16a2

SHA512
5233336be5939fd0098297324e325e1251d53fa135bd8a4e80a3b3d57e0a9c789b90cf5aefe49e8f0a7da85917412e44ee87d51dec3282db8ff36491368bbc50

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\D4724526939FADE93087033F174BAA8989E05F0A

Filesize
123KB

MD5
c2ffceadeb89b7314cc405b461f229ba

SHA1
93a025cb376e724180ac82cd00233b846e8637bf

SHA256
5482c9837ca3a3f12fdd613a15a2004aa25d11bbfd2b1aee388f3630c81a022c

SHA512
202995a006bf503f24b43e16ef863e057a4f48b716db0ec6949e73100e52883d7d1ceeb82b49c2fcf7a8baf42ab46234f3fbb74a82f4b7859cf5d693deaa6917

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\E634B97AB2F7E891689E51A4D2093B1BA672AF4D

Filesize
261KB

MD5
1554d84f165251c98bf7d7d8f30c82d4

SHA1
3aa1af1ab5846217483cd06af4886a5870278dff

SHA256
0892815701f779173423d580f3f1f188d5e09d5c72ce96ad18b4f1f2fdb6820f

SHA512
675e8fb1c96d50a9a60e7d7b5698fbf5988028be2309ba9b8c1ac723093eeb8d8c116629302be33be44b199883201a43044525949921afe67fbba5c0ee1f410c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\EF687AB036DDB1D1639E251A23B190A9AC299E59

Filesize
29KB

MD5
47993bc015a521af0adc7455ddc0c82e

SHA1
a0fec3e787e23ef461b0bfe8bbcd6fa4a854d6f8

SHA256
7513094930a82b7388805d27fa3991a79a6227b2c4b939169ef701a369d50380

SHA512
af95d6da402ba7e5c571754295ceb78ffd932defffb35e2f272fbecf77f29302636331fb9c70541708d6cc22c9ba859df1bff3d9dd137e7d3130ab1bda164d41

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cache2\entries\F62619216E8511B927EFC158271BF150D8F0700D

Filesize
14KB

MD5
b286f8c807f633704428a5dda5eb2e87

SHA1
d87a381dd94593b3aebb42f2a216b4a8f490239e

SHA256
1eef9084bd11d310a2f821d16a23789b746416b859ddb752e838ac5949eeefe5

SHA512
ab50f763cb11e54c0aad0867381551d3595a32e1e9aae0ce5effad54298279d08be03815b9aaad146fd58c3e5bc1c3fd47cc9ead71406c91317eda8d5ae5df9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
442KB

MD5
85430baed3398695717b0263807cf97c

SHA1
fffbee923cea216f50fce5d54219a188a5100f41

SHA256
a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

SHA512
06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
11KB

MD5
897163fa3c36cdd722b5807bb9f026fe

SHA1
055a698e350e3f037dcd2a5faa9c692e86c50189

SHA256
9ff0d41b33b411bce526652fb802873ba1a54da09d98d39ea58ae5f9faa2cfd0

SHA512
b25da2c9dfa6b55e4c8db37fd5264329f093e03127c68d590f832659eeacad2611e18ec809d613ddb87a0b114c515f797052ad268c6fb3e48a9de5f1baf723bf

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
15KB

MD5
78c619583a80353c2f0b94c50441f3d4

SHA1
ad9d74b5606055efb0e1849de098938e5aa38655

SHA256
2e442dd466dfa3e595d435b870045b0ac8726ff38875ee6f55da1c30c2d2d5a9

SHA512
e5580542bf72d358340bd43a2ef99bba563382b57b18996828864fd7cd5b67f7510b0224e030cca98ffe118d9fc385fc872051fb7ba8740dd00fc5b5d2e01155

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
16KB

MD5
ac3c08d0789fd9ea133e08aef925bf9a

SHA1
23eb4ba814cb786b10c884424ed5874148a8f592

SHA256
5666d4ad146f5617a307bfc5c07d8595f9cfa177eeec49a9436b70f8f93995ff

SHA512
bcb177f036b70c879e1310d755a4fbdd05cc96ca80acf8f01b76d396073a5ce720f9388c76c032b6814bf61871f9374a65c7cbf9a6eaf86476528a9a4a0496ae

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
16KB

MD5
0b5e1f575c0e00081e9e5d15e0c34b41

SHA1
c14f2db499074d08ebcb4cdca3fcadc34461afbd

SHA256
685bf9551d8260d3c0f8cff07e6ccfa821cedce957bfaf9cbd32e4f318f5f1f6

SHA512
5616ef2276b50bb6807cd8888ce0bec63099bd21df5359854f286528f5260540e70c3a204b47eb455643208717a33fc1b93f6c2ba9e36cf3a3f8b2c8a382f6aa

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
16KB

MD5
bacbbd561c676f3a02e0b80f0f9f51d6

SHA1
0c69fb560cbe83460ab4080b94beac356cd08eb9

SHA256
adfcdc65a577d8a1d708e4273b4caaf60730b4a1636ef978d19bef958e823495

SHA512
489c9ef7a284a09725cc5c6d78ae55a7117289e2257ad6aa2d1ae0ea96fa36b97f855d5533449a708754be6804096336f3a4e75766ce31d54d69d8f1c54f7da6

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
16KB

MD5
5891d20e6c3be0d12a0c3f3dc3dd19ab

SHA1
e5044f5e02ade2b3658fd7ae1d324def6e9815d2

SHA256
3be963ddbc4e660eb95d4265e2bf13a3250b84624e899fa8ab295b77d6dea860

SHA512
0f44b2964f00eef0523d2302c1536e57b68f6f68cb6e8c0bd04a3a3cb16c561558ac001fc1e2ccd1aa90c24fe5bf93d4b3d87477cb38971da0e04eec6919ac0e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\AlternateServices.txt

Filesize
163B

MD5
08980219a7f8c7426a6ffbe8adf86134

SHA1
44f452efabe9a52a17926201d04abb480f39a6de

SHA256
04fb53a5f7abc96cdbe854235d57ed9566eac3f5ba86f7ff176dc26e8651bb33

SHA512
f5f69e6410580c8f2b21a83890510ca7af1d0acd1100edf7aa3e45508ce5b9198c90b2a06704b441d52306036178f2fd06e4793ba07213a87018abef31ad82b1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\SiteSecurityServiceState.txt

Filesize
324B

MD5
6ab8277237c3e2e2f59728dec43542f5

SHA1
91be2c6a9bf4fa5bb18bf1e5e08398b4edc9760e

SHA256
386c22f03c5e111cdf506153f0a74f38da90d2eac72f8bdbcea104312084b5f2

SHA512
14e14b08eff1e9d44104abade5b0a722fc2edcf7f94c3a53228f7626e7411bcf2155d3facb44c3de08cde257bc197b4b67bf00dd6288b443be9fea9d2e87a1e1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\datareporting\glean\db\data.safe.bin

Filesize
4KB

MD5
ac927e332595b37699d02aedf354f455

SHA1
0d6970cb57fde7ae3ad5b24545db4a4c7dd0eb49

SHA256
0e3361f90a5c0121c94e0cd1694fae35851d80f427c40cb367b7d766d6fbee7f

SHA512
9671b5aead4f8aa39fc245cbc17d422434b0834070a507e5ef94039a159b87f2dbfc272235d5188c7ce79dc2534fad27c8193fef77446497945e31b38ca1f9f5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\datareporting\glean\db\data.safe.bin

Filesize
2KB

MD5
24b7fde76467d1caf51ed7ab3488e85a

SHA1
88ec91be18a0b32462e6cd02e3c49903af2c88ce

SHA256
d64955d8e3e166da9ff0ec1ca1119dd31cc3cd93f092ce02c2cda0a176f72add

SHA512
ebfa62b94ecbf01740eb68d1ec746614ae955fd68402f4149febe51913a2dcadc7140d6f996c26e4680a914cd7594153798b5807b525b213b318adf4332aaed7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\datareporting\glean\pending_pings\232ce37c-7c41-43f2-8434-a978754548c1

Filesize
11KB

MD5
17b2a3a381ed2e52cf6f9e36a4707d2f

SHA1
02970ecaef5b78617b24a5a3f3b91416e8b50245

SHA256
3a1fc1021f645be0281b37fc5435588f07efdf39c28bb6a223f287760b386d8e

SHA512
ecc694cc8d274742d2e67b15cabc589f92cf67c93e8e63b99bf14bbe4f3ef8c00298e871bbc620f9b7c9bddf6597e24b71811235248561ee8a1ef19b42e86b02

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\datareporting\glean\pending_pings\a48120ac-0fa2-4369-856f-7ebbd8b032fc

Filesize
746B

MD5
8511449da750b41b308f5d26771eb1a7

SHA1
321e2b1d05580ad02cf004bb30daa47ccab51aed

SHA256
d09af67e81a6bdcba3f8eec447f1fa2df5db0aca973ce890b3966f0218eb0f93

SHA512
6b8a08809de3f6d0216a7dd4f4545fad4e9039795d8ee9263e4dc2255a8fc4cb84f494683730aca9226ed3412b16eb7ddba609875ead25c34b238c78be8721b3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\prefs-1.js

Filesize
6KB

MD5
ab0e8d4530ac64f71c14425430e95c86

SHA1
a69697f8d1f645b03772b84a38a3dc7774e86682

SHA256
faeb9ca08c51fee89a81521565dd60fed543c80f07f9d999e1feb32fc23f9d8e

SHA512
b1d2cce8a1f8937d1bddff7241e52e3fbd1cde21f7167b9125a8ac0f0da9b9cd03b1518e723aeff7ebbd44b8207ea50f388e6c5a8a3b091a5ca32f3daa32cba6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\prefs.js

Filesize
6KB

MD5
357b87e5063a6f3f8d9505e96bfe0077

SHA1
077f9b16251001d501023cd123ab1161c1de2cd3

SHA256
46f8761a56c56f01af4d34b9d2feaf2403aac1fd80df05e97b073d528332d773

SHA512
5dd811719c8276844c94d0831e75256647d992f0ef35ec68bd18a4ee3761a5a20d4db5c8d2cc67005b72e427189fb58b685d51e0ce0f851fcd214ad2a4a957d5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\protections.sqlite

Filesize
64KB

MD5
deeced8825e857ead7ba3784966be7be

SHA1
e72a09807d97d0aeb8baedd537f2489306e25490

SHA256
b9f022442a1506e592bf51284091a8a7fe17580b165d07e70c06fd6827343a54

SHA512
01d303232d6481af322137b44fef6c2a584f0643c48bab2836f9fe3193207015da7f7514fe338500ae4469651e3d9618293858ae507e722198a249257677099e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\sessionCheckpoints.json

Filesize
288B

MD5
948a7403e323297c6bb8a5c791b42866

SHA1
88a555717e8a4a33eccfb7d47a2a4aa31038f9c0

SHA256
2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e

SHA512
17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\sessionstore.jsonlz4

Filesize
1KB

MD5
73f5dcab9d5f94ba5b8cde407aee69b0

SHA1
4efce5f85d91341b321660cc454b8143beca6a70

SHA256
65c3fa2370bebfa1bd97d620ad1f87041147c93f54e0355020aadb79cdf7b979

SHA512
05dfe8a742aae3d0f465dcfc57869be6345034120fc505b4a85fd3d2dd146d03cba9380bb1ca03f065ad5a27c36e8c3ce729e9fc7099b18f8707377aabcebeb8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

Filesize
48KB

MD5
be66575fe02ba9f149776c6c56942e35

SHA1
71022f26b84bbf50597d7a68ddf96654820fa1ac

SHA256
28f433d5b7f2c907e2ac00343c2d589268f7418d3eccc9cfd7ac8477b510e093

SHA512
94be64645184678b8670b0623cb365283974778cdf336c676df8ec2127727a26e030f5d0bcf944d3e403d251474ac46018b0dfb4a2a2fc038488260ea07407d1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4s2odj76.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
184KB

MD5
b01efd0877d8bb4a5d754d6d5a5922cf

SHA1
6dfaecd4219afbb206185171c64c777e9c73ae21

SHA256
ef1ebedd446ce18b79317f09953ff8a6069f92749188b45945567c315388aa90

SHA512
6f5fce89b6dc7e6979fdb01493c0811bcd55cb945d7665cd9a23e93419a5aa28207b3f614461103f04b0406741e8020c35252fda5529e41e3e918e42fd89c086

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\SiteSecurityServiceState.txt

Filesize
496B

MD5
d9af0f4a6972ff80f8303d306b9e7a27

SHA1
14ddad77509a279c030f8cf0b284c0095cca6f22

SHA256
4b6101f2d30406c58c14d31b5a718a81dfd8a805212261ff247d2c6bf4d21c1c

SHA512
3bde153d80c681632d9d3cc1334bdcfa0cabbe49747c16201b646f17611f10a6b27016ec6e047d37127fc88e73d4fe1bd1650c0ffd1d61a3d46cf7075ead1f47

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\addonStartup.json.lz4

Filesize
5KB

MD5
544b53589caa0054844555a8bddf8497

SHA1
97e6a4233439d2cd2c53a9590851f69938dfe3aa

SHA256
c78911c6f587576fe253cdcd75719d3df3e889d90cb9de51634f4ea651a076e0

SHA512
c08307eeff3f28bd372f627fb8cc404f0be9297bc53454eb1f5d0400cfbfa15e1ee611d2ec49e62b099b84af1d12e545271661615178bc60b5bd15ab7f9fca59

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\bookmarkbackups\bookmarks-2024-05-31_11_8isp+gHyP3QyHg7eXV012w==.jsonlz4

Filesize
950B

MD5
4f250385aeaa84a357a344af5ad6354a

SHA1
4f1ca11ca083ed02b315c489223a20017a6ecbc4

SHA256
1496d4f20935c304d2e661264713fb152b1558850d404b59353a09e7f830c264

SHA512
16e9f6c632ecb3f96663d06f567445f294a0195a922e9e2105893550fba609767602cbaa87dd5380c5888274d7988b25e937335f58200e91db9cce6cc375c0e5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\broadcast-listeners.json

Filesize
204B

MD5
72c95709e1a3b27919e13d28bbe8e8a2

SHA1
00892decbee63d627057730bfc0c6a4f13099ee4

SHA256
9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa

SHA512
613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\containers.json

Filesize
939B

MD5
94a3843fad8c45c48b0e07342df3dfdc

SHA1
d55b650208bda884d573afebd90830a3f4d7c201

SHA256
854ff2076f71097b030c302a1ea71d8e851d2920b9ff5fc8dc8f16c91ba95b72

SHA512
4d2a6b2a223ad81bb97195abb27685cf88453caf5769de154b373486d5245f02e0c0f664281d8e3bb33bfcdf1d6f7b3d9602303864d4e56481382adcb0b932db

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\cookies.sqlite

Filesize
512KB

MD5
b5d185a9abf317df08b26b6a57dd4538

SHA1
c3e02ca773a74eadbb1556c05ee41942c1e889f5

SHA256
4c0e5837d320aaa1f0548e1e7ec98a97eb3489eca40fac5555351cfb3afa48b8

SHA512
8f2f3db5ccb97baac6d438963aca40b2d4f730ae83c7a5dfa9eb2da074d1e155c07d69ecae3b12932a3cadfbff7e8686b9eaee9b9f683dd1d5813e77485fe04d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\db\data.safe.bin

Filesize
22KB

MD5
c15e88e056239c8bb5dca2da6133ccf2

SHA1
689afa3ca327c5e6a3d0a93feabe0535fcfd714c

SHA256
f4b5ca153158e2f609a9fc951952eec73a0e9cc4dd27679faf1faf37d3ba8a53

SHA512
971362a62216d869f44ea87d79e1ba9f7a1ff3bd30bd3fbfc965f4ec925af9807551448bb9475ff67a9777dd6d8c82fe6887291ce3a93e02ef252044fb87c9f8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\db\data.safe.bin

Filesize
2KB

MD5
3629dba75e44fd4bb6821b88da0b7e0b

SHA1
5f045f53b0a8997f29d873a0c12b5f8d34e67733

SHA256
64d749d19740bfd653ebdbc181cbebbc7bf21888cb4049d1b21361da98b979df

SHA512
084dfab261597b6ac4ae99337e5766a07cec489b634cbff3e99f0bdee419aca468e48d4f49c813c346d3be7bdd33068162204803fe330c400a9a1979721cfe44

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\pending_pings\59c4a08d-0bf2-4efb-aefd-ee10c113def8

Filesize
1KB

MD5
e1ee1a820131e2c3380db7c5e4ba9882

SHA1
92f8a6d6ff5a15ad808ff78a748921088f03d9f9

SHA256
65e8381dc8e7538e892bccb8510d2ea9eee1ac6b224df8a56700468b8820a887

SHA512
89b112de2606a45bcc8eb96f35993c7f95f5b000cc5dbb37c99608b48b1c254226b8b89b299c670333a11af7bcb45d9f88148760a9b4350af5b1f5db8120833b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\pending_pings\8b3b6361-0b28-4056-9a50-b45b7bb4143d

Filesize
587B

MD5
b35ac94add1087ab77f766589acf23e2

SHA1
20e9a260b3ddb859ba12c99401019bc3201738f9

SHA256
7e842ba66d284847176f3cbb78da9b1cba499ea9904546d69ce020e10dae4c51

SHA512
4c431e8a8c1aa286b941060087e8786a212669afaeff9b063fac9cea74f251722bfb7b77945f954681a337e34baf3926e95fea35f42e2f6367ebf9c3517bd9d5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\pending_pings\a310e296-0c61-4062-b4ff-5bf95e871595

Filesize
656B

MD5
97b5d8d5bdde19fbad139239b25b3645

SHA1
c35c636f7d5c4de53df929aa8a0b8740378539aa

SHA256
678df90c1a17ee48deb2f30cefb3de15834a9d45f40d5a593d2e32410d3a566f

SHA512
2f016f5345f49606bbe4e136dc0d90408ffad21a395f0fc5a93bd6f8a3fa672481b2fe261e04eaef2671643d20b4776e5752a269a398620e1fa3fabf9a8c34fc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\datareporting\glean\pending_pings\f51667f8-7c11-4bce-86b5-0258f3e6149d

Filesize
855B

MD5
2af3b67dd042dd3b2e7e6a47cd5b2f33

SHA1
2cdce93d5a051bf7b2eca82d80a4b339682afc4d

SHA256
b8dd7f5762aeb9e4afaea36d866dc6133cd387e821d2115f04e6f81d76d11c35

SHA512
595c38fc010ab15c5f4e489874227020988da75b25f047b276a15a7e584fec3e1d222d2f02c9468927c112398ca5e262a9e7f7e5ea57f68605883d6002cad63c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\extension-preferences.json

Filesize
1KB

MD5
6f17b68e11c39bebb2a175630d77e346

SHA1
72ed7ba989c4922523f68744250b3fd6307e2e8b

SHA256
317f63e164d12e70370c17759e15d3bd5ce5ff2841a333d22decee4e4e58a718

SHA512
c1786f159eb3424530440e5f7c7fee8ed7f94b0805a8c08f82774ab93dd49186af766abeccfc16410e0d40542c4a824f3ef6b840a763b2911c5338d66f774cb9

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\extensions.json.tmp

Filesize
41KB

MD5
d40cdf1154f9543491fdb30964a7eeff

SHA1
61877783977b183c1ab3c32d5def318ce0b54fc9

SHA256
0daca7a737cd18facdea30d9d2c97d9f2a05c957a02304932634e29f6275649f

SHA512
91e6e3dcacefcdbbcdde82847775403cab1a25cb47492bd3976e61a95e5c8ced0d449e382e6304f0e5bd076e2f5103dd768d7585dd1776621fff32459add0508

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\handlers.json

Filesize
410B

MD5
e7a65c5ead519a7b802f991353c26d3d

SHA1
34cc3c1cf9bd4912dba5fa422010934e46419fa3

SHA256
0e5ce92485da953757f615bad034a43032b220da18f8165dd85347851b56b2d2

SHA512
2a6034449ba6f5da8a77870ae665064047cea2460aeb4c8c0b62b308a403fdd30648150209aecc31ab1e50b6d9d94a1f51d3d7d50bbf35ec1b742bff2dbe788d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\key4.db

Filesize
288KB

MD5
0412d4f1fbbc8a52195c0dd0c4526eb5

SHA1
8e3c27b0d10adf47213956a1b53a30488017a948

SHA256
e3e09a94b9254c4f8f1b0d17f07b14a4e3df56eb70f32b2ed72673c72430e190

SHA512
957faf91c2fcb46f7503e1046f45707a678d0b6eb15ad045f93030a0694eea79081e37e440a2e704ec1cc6cd946d6d3b7e4e897914d133fe551d7cfe42df88a6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
9462e665cacf43fa83a27e7dec8287a9

SHA1
57b416ff6f55290c5a1d12c86d9be82786db1721

SHA256
f79f84165c43a90456d2a520d3b38461d1a78ba8d97475a2f487411a9bdc07cc

SHA512
c4f79961a35593d40a9cd34bb809ea6faa8bfe4d98270ee369a219e29e9ac4da072a19b2cd6826e073d5fbb735d0116c88a0888465a2756523e9de78116abf7b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
6KB

MD5
c58d323c19a2491b0992a2c13b12f9ce

SHA1
36ed54277313f601629bcfb9f395165d229a3d09

SHA256
fe9e7c2e152d81e469eb3d47ccc08424ee5635784b861b3a3c64e4b0692937d4

SHA512
09e7c87bd1b64c1345a17ad5b9d96c7d4bd9e2352bb265bebf9986625fed5e27fd3afc8b5bdecd7a5516e908d9733a5dd79b042d2da4cb4c2234760d4c93951e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
3d5ddfcf19f7459bb0235d0b5dec6342

SHA1
b66ebd617b6477eb03cb4915b6b2d660083a7765

SHA256
9db8413657462c2b6dc3fc7fbbd3cb4d699a7f658793720d1da8a61db2118ce9

SHA512
6df10b484a9148465daa62c7bbd08f26abc53437cd11097702ae8dc40e4b41120c97f2505d758a25525d4fb9e187e7bca728f9325395c38f7efe86861d0faa46

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
5KB

MD5
d28cb92d1a1c30b06b03a2d7e32dc07b

SHA1
d7f58cf5d4ed09d30762dbcf133cde36c9bf3b26

SHA256
47ef8d70f15233e5c3aab17ec822acec64a91ed78b7f49b368152dc2f743362d

SHA512
5fab62e29da5a7b7b5234478fd4c7d17515ee2516b1f332a9d7636e8eca3b0464e4829b533634113b7f2d95ad9128ac521ed1a4b119d0c0c014326fa3b6f8ac7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
cb29a6b79cf594ceacc34e55e8341346

SHA1
c884b874bd37807f7e491179c6b47a25ee16158c

SHA256
10609f5c446c9f8cdcb66e5b869577e887b41bc636322c11b27d4777361afa93

SHA512
2b365ff67255e8475f0a5821dbb4a39e8076ee6689358cc46f7a158b526fe57e27f55830468c1ae7023de8da7b47f751d4664b0a4266da410c5e90191b048213

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
6KB

MD5
5f150c8dba6ff1358fd86f8fa38a019a

SHA1
4d79bc45679de96fafe644138122c62e5c23f8ed

SHA256
0ef35c2a798a0f6a097c2058e6158f551f7100de334bbd2688b6cbc02da7ebdf

SHA512
d0428c67a901a0a1b12b29caf1aba7bb5d506f5e13b41393a983f782982fe5d0e2c65ba291064836a873a4be1acb59c53f4afbad08dfba5c69d02d9da704af09

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
48b33a0904c694f014a5745ea6d9c42c

SHA1
5b975401870b2dd4550b9cd57bb6f037214a1e5b

SHA256
b95a0da672598de49d77e328f28945d6db6b1d9733273e5a6eaeaa65aea0064f

SHA512
01e3610dad9763ea0035e42e20d3a089cd9c6b4831d4b516bba1a94ccc931958a7e49071044941ea84f0a8ccb793edb7973b634c716a8526906c3aac5f8cb6d4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
bec72562008a1679eaaae6b16d2f0f0f

SHA1
12171c689b206965c74a73beb0904828d6a45f26

SHA256
9baffc41ea775ecd89ef69cdb20f790384bf936b2c629d744f726a7f11557fb0

SHA512
b54afbc75c9841d284016516ea44b415e26e2fa519e35433faf774f1d633a3a2103d906212539c5f56ca33843cbf2ee642d7430032d49f1772edc4f5136167da

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
8KB

MD5
dcfac3d850ed5dfaeb89dbbaf238c34e

SHA1
ee89feea22344843298f88c613067b6b07bec060

SHA256
f6a7ee6491e08c82c5bd94524f0452f77ff99c9616d59e23f77a6d5e6d4fa0b3

SHA512
ed7ab070f496a7489a3b17979dd5b155b7ecdd4e6c4bc47022afd5ea8095def4cb0dbe1a2caad246375c1bb88cec9da1998d3ea90b228427c14564bfa9713678

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs-1.js

Filesize
7KB

MD5
36a33a6ad0696e342ad12f0877ad692c

SHA1
673cd3fd0c1567d66f25463d19da143a4adb0a10

SHA256
8495f34fc214fff40fbe7a4d5bba2024f5631ea020b258ec7d49fda246a536d9

SHA512
6f4b3e235304777c2fa04c06f1ad5528faa0562051c392859ea78cce59484a12963991e3963fe1cf975d4647bab5db9e912f6da48d0ac9e836ea0d625d192ccb

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs.js

Filesize
1018B

MD5
7a323e57ba5fd11c41e1efdb1b407770

SHA1
a30faeaaca569615c84b7e44afc51826057e0135

SHA256
88c432452edaaece8f9553ba84600973b826074e6870aff9fd48b1cd21f8651a

SHA512
da45d71b737d2e4c668298a89e489841db79b977e5e0afaf4aa22a2672899089396309ee9d047f13d438bbd1973a32cb85affa275790edf1f4331ae4069fa599

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs.js

Filesize
2KB

MD5
84c85330f28a00e030196f741c5cdd4e

SHA1
1081b6e03db15595575291cad54312d14715ac70

SHA256
e7726ab4d9e41f01b6fecdee883143ec666e9272eb959e9ceea8a101da9b85d3

SHA512
1bf7b1d1cc8fa9a183d88f11cb261c849a84c5c86415513e25b9308e0f342ccf75eaed4ecdc163d5a0009793d3e3a437b2efaa0050ca4ee2178da8bf5193ad71

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs.js

Filesize
4KB

MD5
6b9c2f81dab11a1bd9dfa29776fad1fb

SHA1
83d60b05d5ceddc683beef22cff368eb73fe7ee5

SHA256
bf45f66d4a57cd8622f3e91f99ae871053424493b3c6ef7db840826209eaae5e

SHA512
0a314e6dc41f17bd1fb075d2b1c805c75014b7d7c2590e7a36c87a8db7a374aae07703cb591d9104f790411508d012e63a4b74efe31bb75516726a88950af104

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\prefs.js

Filesize
6KB

MD5
0f9a16eb81562b6950d37def7add2367

SHA1
46be3eed735bf23ef7592f74a8d2a20f444a04c7

SHA256
481931b2aaf578bae33ec612ff9ebe2fb70933c6ba7e8c207cba7f298dbe938d

SHA512
68ee5946175bc71df76d3dee4f0dfee055dc7b630530b2726b1f8624d3bc9ecb4bf13c03c534995c5417a7d3bc85ea7aeb468255bf7bbee54d300b28cb2cb241

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\search.json.mozlz4

Filesize
291B

MD5
8eacaddb23a32317d540053f212571b5

SHA1
44a35efc4fb1591048c618c02ee3ba58f7dab5cc

SHA256
927f4ab39b925da636b897890ca6880eecccd5304dfbe07b38fafe99f22e35a1

SHA512
e60890810e5f36e6fd2122d60e805e3736b4e4dbe62301dbaef57953047c90847c01df72bdf7cac75c0b26e4361f90c43b273d5b1025320f16da5b27ffcb81f3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionCheckpoints.json.tmp

Filesize
53B

MD5
ea8b62857dfdbd3d0be7d7e4a954ec9a

SHA1
b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a

SHA256
792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da

SHA512
076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionCheckpoints.json.tmp

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
2KB

MD5
06666018129dbc8e65decea3ff6081c0

SHA1
8251fe5f395b796f193573c6f440ddc1b9a65596

SHA256
fa81af61e4307947a63ba88ec8c0408a0c357b9856b154a91e8d06429120bc4f

SHA512
4f4e7f6c0e02c544e917faa822f9860f7fe48ee1e2c785f5dcddf77f079243974bc9d2db333b282712ae8842b1bec545eaa1646e42c6ac6cc80ee110e74d8d52

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
7KB

MD5
bd972f85f3cfc6e645e03e712b678a9c

SHA1
eea63f6e4f47dee6032f4a444f710fb387687118

SHA256
5106c7c5e7561b0d42fe2a8962d2512709b29d6c1888f7f7ad59a6b36458ed78

SHA512
b9733559b2fbace25980457b704b72dfad7d03e4bd5aaae00fa55e53c9c4fd891af54ff33f844288c9405509e995cd9166634470a7468e6e59076eb66449e755

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
7KB

MD5
7441223b675f3e18626bbf2dab9545eb

SHA1
09dc690cfeec5ab86233a3d45b59244374d54222

SHA256
2ebb695521e686279bac24f9fd75689e4a90615ff0fd6bd6d12e50090adaa42d

SHA512
736fb7a26141780e6630392f1bad07ae53630e5b2a9beb863cf34e9beccdb2f2351ecf325721ce63bbd16385393fe2aa27fef4b2141428e3aba613de5a345ae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
10KB

MD5
5f47000ea24be9331b1c6b4f2250dcfa

SHA1
ff380c651c65e9a6986e741011ec9d52c8f438d8

SHA256
73d61dcce97b6c5eff6cec8d1222986b1690fcb73fff61c862d9479fb8451bc3

SHA512
fcbd83803f4027e81b22e20ef061a5e78c2d48c28f10ceb062a549b0a9dd96d0ab5a9b3c5e06024daacbe07eba8ca3f75520384918e9fa948689e663f37c29ac

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
10KB

MD5
ceb778bc5c0714a8ba65e032a0f54ee1

SHA1
a753802da0bf9f635527e44370dee62ff5e20323

SHA256
a7b08e0150436d756a0e6ee3ebd8dfbb5aeed1be3ed73f7103a24c0631a001ca

SHA512
bb71e46ddbcedb02b629d011b9d700171c7ffcd7a17c333395e012de935fc39c99b680413f172dda4aa318122e14d0d3648637d02a50bd2d1bbd1be0a6563d8f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
3KB

MD5
272a9d1eb6a39e136c1654622eece4b0

SHA1
406563c38015e3d6b97e3188b0b6699684658472

SHA256
b03db03df07a5110951d23a33c2891673e73615175ca738635c658b2fc43570c

SHA512
6b42bd185255102cd4dece569522902dc81d2403b1e50ad4e4f95e86257b112c823c8da887a16110a5996c77d4793474648ba9903db58d901cc4b9ced3c2c79b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
11KB

MD5
d23c9541099739b4d7178355aeb72a4b

SHA1
19188333ced08de1151e1bd73a2093fe92fb34b9

SHA256
30dc4645da2217bc9a22c24908f742da2e03e70c76b830bdb805afa4a5bb99ae

SHA512
2bb223149bbd0dd3d180c9c90a46e243bbea67225ff7e3b590f85473852d7293cc4c6a8ab467cd4c6411402ca7962e903c09c10130390dbb9d4f0c6ff3c835e6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
7KB

MD5
1b76df6e2a7ac3128026111fcdf439af

SHA1
f6b9224fe6b025430bf7ffb6961e5968bcb4aea5

SHA256
3cfdc2b4683b3d65e9b6263aac68d699e68488282bc3ac84a2bded4cebf5e7da

SHA512
49e2ccde79b8aba5b779f370783951601a97bdbffc74ee0cab557046b8d4c72f4f84f15cf21e1aa4ed9dc9cc39b34a42f6ce66bf5e12499a50efd89405048f91

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
7KB

MD5
dbf4c5a701da4c13b8bf158e566756c4

SHA1
f71bd1f96838ccae893e0be1e4997f74442556a3

SHA256
126a7b865ab0f126fd3d3863ce5a462e9e0d503ac06bf028a9c4b63dcd500d47

SHA512
11c93b1dc9e00770b6e9f9eb48ca10accd60ed1b5aad373a3d59908c63f168f826bbcf1441342d69ee3ed450f1043ea66378e290efa8f04ac9712675a12af30a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
9KB

MD5
7f70875b272783ff44b387d7c8b7c4ca

SHA1
cf8d14427fca3cb0d95a86e85c98f2b89ce2dbc9

SHA256
7a4b82e0d72b0d282229401c0a7c4900b15fbd812dbfdc32d755897e2b7a5a44

SHA512
3ed8f8cf99f2f41080f63cff587ad664d291dae9bfdda4ec99f2e890fb5fe15fa52848a67cf2ec402e444326a30cc5ae1698b76360ad8a3f5d8168fc820cb864

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore-backups\recovery.jsonlz4

Filesize
10KB

MD5
63352544558899f60142836d9e0ff2c3

SHA1
ca9759cd34af9643f9f879e5032a8f7e3260f6d8

SHA256
28c60341b109fd406118dfbdb84cd7dfe1b46a95a6b5643a87af86dd9fb64013

SHA512
a3ec71510b653255db4f64f7cfe17dd6c10d4371489f6fdcb610d654638c36333726b817cb7b8a9b1a32e375d89131cf798cd48a11ac87a3b30fbf9d3e39a94c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\sessionstore.jsonlz4

Filesize
266B

MD5
4fdb7f9a51ba177262d07d38c0238915

SHA1
f12c5a74467bf624164ac77ab7af517ce46ace8d

SHA256
a641f5701e0ccb2fc22a9f4323c96d899db4397fc08c63fc5de852d9aadca9d7

SHA512
fd0e72672b280e9f362cd8ba4a81c795fd741163020cd2c62a104c3f8e006883ac592951db85f364f3fece2d9af386f635b93ced301e12b4418e1e0a7fdd9c09

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\shield-preference-experiments.json

Filesize
18B

MD5
285cdefb3f582c224291f7a2530f3c4e

SHA1
f816c3e87aa007b6e6d31eb6a4618695a7d83439

SHA256
704d28223a4320a853df4a19d48c7015cf79d56a5317cc3475b6305fa43dcc05

SHA512
8f1decf1e4b5755fce8f165daae115f45d6890985c9c4bbb33a6f724cbfd26db75f6da06f9ef675de20fe755da9b7f55e5ee37124296a12a520a393da159bd58

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\storage\default\https+++html5.gamedistribution.com^partitionKey=%28https%2Cpacogames.com%29\cache\morgue\148\{7ec2d43c-adbb-48de-b649-70c6aa6bf194}.final

Filesize
759B

MD5
531324c3c48565f6fa8b6a330a50bc14

SHA1
0c7be1dff9868976c2766a7e51e71de4cdbc224d

SHA256
872e8252836d53ff0ef6f514bff85d9e8758a8826da6b53d584d5841ebe799ef

SHA512
82511afc584ec2a35dd12730a7b38c79733d8c2d4c1e193cae612785411efb6dacb8ffe5a7ee9418239fb09cc5cd14946dc7051a80019534ea2d505035ee9841

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\storage\default\https+++html5.gamedistribution.com^partitionKey=%28https%2Cpacogames.com%29\cache\morgue\78\{e6122dfd-67f7-45d4-8427-f1a40c09674e}.final

Filesize
296B

MD5
6d03767bca2ed9b33a38f75193ec582f

SHA1
9297eac2fcfafdf72366a43293e4a684dbbd6523

SHA256
45de0a9e4bbc4692522eb8d8639145d3a95c611d711e9b81d59e77e3ee25cc2d

SHA512
e657f5106ea4e17f75a5e58091c8b58139f54de30e09ec8d92fcef502d9a55c4518d083656ed7b2484a90e6396830555cdff8a53aa8b476e118d906024b0b051

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\storage\default\https+++www.pacogames.com\cache\morgue\29\{2977dd95-c883-4e83-bf4b-8ee45503e81d}.final

Filesize
94B

MD5
4515205d2ab3e4349c2d62fdc3d3512f

SHA1
aa73280406bb4ea1d813f8caad1c670a63666f57

SHA256
03dbd63a45d50663c7f8e4da746bf0170970b274b9f5b73481d5181a1a2ce605

SHA512
89292f1a39d8f39db031625e47856f93ac1f4780cd2ae6a6c1dc6dd76c97004929345ce519059252b69d21b02f9fb811e0319857d48d8c3d7bce5e7479e7a15e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\targeting.snapshot.json

Filesize
4KB

MD5
90757a7e32a9c5ee72091ab203569ae1

SHA1
b1a544e0a3a905728d57b6c0f405542bd74cb01d

SHA256
59d78975d445c6cf0bf061e62c83f8b7b64eaa6557d1f320fcebfb17756449ce

SHA512
27cd9d7eb377e65ecba152683a9dc7a47eee83347ae606f6f57a32373eddf6ed7e5269188b3fbc67f69e058b2a32860ee0f8c503d68dee0524864fa69e7d21db

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ei3gysi8.default-release-1717156314600\xulstore.json

Filesize
143B

MD5
9cbbccce242faa1d8b0e9b96bbf0605e

SHA1
6eb6ff4f444cbb2f8cfefef89aa6b77159737749

SHA256
f41667796ba912ce6ca827127d1c6004b11feb463e6776504547ee326e71d3e4

SHA512
e04b8c246f33674aae9008e066baf546d414d8b098446514c635fdbb1387231670be24b6c8b7f3c0be41ad6a62711bfd605d850598c9cff4cb1c06aed4961beb

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\profiles.ini

Filesize
329B

MD5
923e1c793975826354f6dd43bfbabe46

SHA1
cc3b01a6052362ef20a76171e43333a6b22c1115

SHA256
3184d86fe9bb1dd43440038d86b22324d97d97b6fccac51b47cdef384f9ab58d

SHA512
df1588fcf4b93ea0d5a67178e466d12098f9b32bc348825d26118b84dd3f93cda2f377e86b6ff939d99c36dbfcb17f2c60255ec3bcdb341ba9be82fcf862b8fc

Download Submit
C:\Users\Admin\Desktop\Old Firefox Data\4s2odj76.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite

Filesize
48KB

MD5
3d3516f9cf1dd5564ddd0c5f04ce6a18

SHA1
a878ca228d90864aff9cd263a0638128afe3f23e

SHA256
1b1553e8f19f2981f6e3992367a699427b00f23ee5c9aa6ad1710917abc9a3d4

SHA512
ff60ae8a8b89929ef0079a6c34c0b70cae72cb1ccc0e3976ffab9759abc118b91a7de196f7f04d5a0ac98253370f38527115b3c9858f636ca7f0e6fb9e773207

Download Submit
C:\Users\Admin\Desktop\Old Firefox Data\4s2odj76.default-release\targeting.snapshot.json

Filesize
3KB

MD5
ab1dffa34c491cfec881e4f9264012b1

SHA1
bfe178396ef632a778dc4a75d71a081cf5284716

SHA256
a913e02edc8936c38eaff72598d4016b3e63cd0452eb77e5ff8986711cd92118

SHA512
3e64ade1f593ec6f9d826ded9084e2b584b36086643e1d818d498c1a1e3d2586942c1f8ab4623277e7e8394e68e7e9632ce2cc0e015b8c631a1963f0dd408b8e

Download Submit
C:\Users\Admin\Desktop\Old Firefox Data\4s2odj76.default-release\xulstore.json

Filesize
120B

MD5
05e1ddb4298be4c948c3ae839859c3e9

SHA1
ea9195602eeed8d06644026809e07b3ad29335e5

SHA256
1c2c5d5211674c3c8473e0589085499471399e53e9a85d7dd3b075fef6cbb6be

SHA512
3177b48cd0c877821419d7e5eb247a4c899bc37258994f22257ceaafefb316e6f5959faae02e380e432d7752f0218d45d56d6878c1e751d201d9fdb3ff98612e

Download Submit
memory/4684-1422-0x000001B2DA870000-0x000001B2DA880000-memory.dmp

Filesize
64KB

Download
memory/4684-1440-0x000001B2E2C20000-0x000001B2E2C21000-memory.dmp

Filesize
4KB

Download
memory/4684-1442-0x000001B2E2D20000-0x000001B2E2D21000-memory.dmp

Filesize
4KB

Download
memory/4684-1406-0x000001B2DA770000-0x000001B2DA780000-memory.dmp

Filesize
64KB

Download
memory/4684-1438-0x000001B2E2BE0000-0x000001B2E2BE1000-memory.dmp

Filesize
4KB

Download
memory/4684-1441-0x000001B2E2C10000-0x000001B2E2C11000-memory.dmp

Filesize
4KB

Download

Resubmissions

Analysis