a6c029ee9ea46517dc7f9303dfee84d96a6cbbee2f402ce0ca98fe3a4654367a

Analysis

max time kernel
150s
max time network
150s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
04-01-2025 20:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

APIHAX.js
Size

4KB
MD5

ccb5216c4273570f016416a3752766ed
SHA1

0e504823d2ef62b3543da8bce56b7f662a796f39
SHA256

a6c029ee9ea46517dc7f9303dfee84d96a6cbbee2f402ce0ca98fe3a4654367a
SHA512

534dd9ffe15dec98fce3999c7acf2bda5ff891892c09bf5cecd5efa10505dc3038c4279d853a2689b11708216ecc64c378fb34743c7f909ced6020c5a8071f37
SSDEEP

96:j6jMN4YpVFOUyydqPZM6h5R0xh+5mOXneNzaR/d3kZQCgC6/Fy6:jAqVFOfyiM6h5Rg+51XDR13kOCgC6/FP

Score

8^/10

microsoft defense_evasion execution phishing

Malware Config

Signatures

Downloads MZ/PE file
Detected potential entity reuse from brand MICROSOFT.
phishing microsoft

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\VSCodeUserSetup-x64-1.96.2.exe:Zone.Identifier	firefox.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Checks processor information in registry 2 TTPs 34 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3226857575-536881564-1522996248-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3226857575-536881564-1522996248-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-3226857575-536881564-1522996248-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\VSCodeUserSetup-x64-1.96.2.exe:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	3116	firefox.exe
Token: SeDebugPrivilege	3116	firefox.exe
Token: SeDebugPrivilege	2092	firefox.exe
Token: SeDebugPrivilege	2092	firefox.exe
Token: SeDebugPrivilege	884	firefox.exe
Token: SeDebugPrivilege	884	firefox.exe

Suspicious use of FindShellTrayWindow 63 IoCs

pid	Process
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe

Suspicious use of SendNotifyMessage 60 IoCs

pid	Process
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
3116	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
2092	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3116	firefox.exe
2092	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe
884	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3096 wrote to memory of 3116	3096	firefox.exe	100
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 1884	3116	firefox.exe	101
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102
PID 3116 wrote to memory of 4224	3116	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\APIHAX.js
1⤵
PID:2280

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3096
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3116
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2000 -parentBuildID 20240401114208 -prefsHandle 1916 -prefMapHandle 1904 -prefsLen 23839 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6884b0a-78f7-48be-b4d2-7f8dd75d445e} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" gpu
    3⤵
    PID:1884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2408 -parentBuildID 20240401114208 -prefsHandle 2400 -prefMapHandle 2396 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {258fefd0-78ee-4626-b6c9-4e5695f19502} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" socket
    3⤵
    - Checks processor information in registry
    PID:4224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1560 -childID 1 -isForBrowser -prefsHandle 1420 -prefMapHandle 1564 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {649910ff-466a-47c0-970a-0326df1dc523} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:1216
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3900 -childID 2 -isForBrowser -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f62c71f1-62a7-4913-a5d5-df3997f271b5} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:1464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4784 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4716 -prefMapHandle 4712 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {66ef8d41-d8ce-44d6-b7e8-dc61f3c9d9ea} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" utility
    3⤵
    - Checks processor information in registry
    PID:5676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5344 -childID 3 -isForBrowser -prefsHandle 5396 -prefMapHandle 5392 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {685579a9-1b77-456f-9d48-abc7ac5dfcf2} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:2476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5536 -childID 4 -isForBrowser -prefsHandle 5540 -prefMapHandle 5548 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fbd4b0aa-e523-4f03-83ce-1827996f8986} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:1996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5800 -childID 5 -isForBrowser -prefsHandle 5720 -prefMapHandle 5728 -prefsLen 27178 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {637109de-ac66-43ef-8735-33943a10b324} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:5644
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6216 -childID 6 -isForBrowser -prefsHandle 5056 -prefMapHandle 6200 -prefsLen 27257 -prefMapSize 244658 -jsInitHandle 1128 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f055e04d-8186-4f6b-b6b1-21fe004d6ea4} 3116 "\\.\pipe\gecko-crash-server-pipe.3116" tab
    3⤵
    PID:4304

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:5372
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:2092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1996 -parentBuildID 20240401114208 -prefsHandle 1912 -prefMapHandle 1904 -prefsLen 27782 -prefMapSize 244705 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89afa020-9af1-4335-b6c1-985d09c45bfe} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" gpu
    3⤵
    PID:5824
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2392 -parentBuildID 20240401114208 -prefsHandle 2384 -prefMapHandle 2380 -prefsLen 27818 -prefMapSize 244705 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c3086e3a-c6d5-425d-82c6-11f5f7ed77cb} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" socket
    3⤵
    - Checks processor information in registry
    PID:3272
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2608 -childID 1 -isForBrowser -prefsHandle 2820 -prefMapHandle 3152 -prefsLen 27959 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ddb2ef5-9705-4443-8a72-cda2adac1ccf} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:5660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3924 -childID 2 -isForBrowser -prefsHandle 3972 -prefMapHandle 3968 -prefsLen 33192 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {678988d2-df50-4a88-b7d0-40754dd387eb} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:1464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1752 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4860 -prefMapHandle 3632 -prefsLen 33246 -prefMapSize 244705 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {22133fe5-d04b-47ed-b2d8-bf5890200f6a} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" utility
    3⤵
    - Checks processor information in registry
    PID:5156
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4868 -childID 3 -isForBrowser -prefsHandle 5260 -prefMapHandle 5256 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab67ed42-3c87-46b7-bf5f-2c3b89938105} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5384 -childID 4 -isForBrowser -prefsHandle 5392 -prefMapHandle 5356 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e827e532-7779-4afa-9656-dad07f9ea3d1} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:3412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5588 -childID 5 -isForBrowser -prefsHandle 5600 -prefMapHandle 5604 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d121ec21-e599-40fe-a856-c64612e0fff2} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:5952
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6216 -childID 6 -isForBrowser -prefsHandle 6196 -prefMapHandle 6192 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 920 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {35e8a14d-a73b-4389-a769-db8ca8e6d463} 2092 "\\.\pipe\gecko-crash-server-pipe.2092" tab
    3⤵
    PID:5268

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:5404
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1992 -parentBuildID 20240401114208 -prefsHandle 1908 -prefMapHandle 1900 -prefsLen 27782 -prefMapSize 244705 -appDir "C:\Program Files\Mozilla Firefox\browser" - {40ba4de3-f1da-44a1-9ebf-29b91399f917} 884 "\\.\pipe\gecko-crash-server-pipe.884" gpu
    3⤵
    PID:2468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2384 -parentBuildID 20240401114208 -prefsHandle 2376 -prefMapHandle 2372 -prefsLen 27818 -prefMapSize 244705 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9cea6807-56dd-4cb7-a5d1-d90c92259903} 884 "\\.\pipe\gecko-crash-server-pipe.884" socket
    3⤵
    PID:2224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3048 -childID 1 -isForBrowser -prefsHandle 2976 -prefMapHandle 1564 -prefsLen 27959 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dfbfa094-ca60-4f4a-87f8-136046c5e7ff} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:2704
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3068 -childID 2 -isForBrowser -prefsHandle 3568 -prefMapHandle 3564 -prefsLen 32308 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8b7ba0be-8aac-4859-862a-a829422a6dc9} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:4616
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4680 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4672 -prefMapHandle 4668 -prefsLen 33246 -prefMapSize 244705 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39a5a6cf-0cef-48d4-87a0-ac31c7be01a1} 884 "\\.\pipe\gecko-crash-server-pipe.884" utility
    3⤵
    - Checks processor information in registry
    PID:4512
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5084 -childID 3 -isForBrowser -prefsHandle 5076 -prefMapHandle 5044 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53186d73-13f2-41d2-a5e4-93c72319be9e} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:1896
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5256 -childID 4 -isForBrowser -prefsHandle 5268 -prefMapHandle 5208 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {67999604-36f3-4d41-9f49-14570d255c39} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:5908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5452 -childID 5 -isForBrowser -prefsHandle 5464 -prefMapHandle 5408 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bb35cc2-4c31-40bc-8e01-4405294c979d} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:5468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5908 -childID 6 -isForBrowser -prefsHandle 5900 -prefMapHandle 5892 -prefsLen 27044 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ea3d0de1-492b-427e-a7d9-5f8fcb6172a3} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:5344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6160 -childID 7 -isForBrowser -prefsHandle 6152 -prefMapHandle 6156 -prefsLen 27831 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bb84c080-c66c-4d00-ba58-1fd51f219d7f} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:2040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6292 -childID 8 -isForBrowser -prefsHandle 6300 -prefMapHandle 6304 -prefsLen 27831 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8655ffb5-15ff-4d57-8f65-1e14fe5ee11d} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:1284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4432 -parentBuildID 20240401114208 -prefsHandle 3600 -prefMapHandle 4620 -prefsLen 34421 -prefMapSize 244705 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d37e7062-1319-46e1-85ef-2fdb60cfe76a} 884 "\\.\pipe\gecko-crash-server-pipe.884" rdd
    3⤵
    PID:940
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5392 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 5444 -prefMapHandle 5572 -prefsLen 34421 -prefMapSize 244705 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {12f61260-4c0f-4f1c-afc7-f625b7ae0165} 884 "\\.\pipe\gecko-crash-server-pipe.884" utility
    3⤵
    - Checks processor information in registry
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5496 -childID 9 -isForBrowser -prefsHandle 5596 -prefMapHandle 5604 -prefsLen 27831 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {04db1e7a-5030-41ea-b444-29851d329651} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:5136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6812 -childID 10 -isForBrowser -prefsHandle 6792 -prefMapHandle 6788 -prefsLen 27831 -prefMapSize 244705 -jsInitHandle 1044 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a519f564-7fcf-494d-916b-f36034d8be2c} 884 "\\.\pipe\gecko-crash-server-pipe.884" tab
    3⤵
    PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\activity-stream.discovery_stream.json.tmp

Filesize
22KB

MD5
fbf770b4a3d41c15dcc88bc831214abd

SHA1
2c9dda1bb3a3b4cd3db30dc223ba649059be3798

SHA256
8399f37f9a9df3c34fb37d9d19a8bbbc8a563440c7771aced43ff4516ba9679f

SHA512
cc0e39390815a15070bca5c3b921543dc59b476f2b578becf800d5fb445fbe4b952277b5fc2a8b19b7a4a64294b39128b4ef7a8d3dfa88fafcf4b24d3ae0c46c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\activity-stream.discovery_stream.json.tmp

Filesize
19KB

MD5
e1be54f9e866c348a8481c0c3aeb1820

SHA1
603a31d5cc1abdc2b7d4b870f8072d79d067221c

SHA256
e540138c9c2ca1cb3cb94570f0dd4c7209d565fbab873a796689f572f708da99

SHA512
929170ef376159b3657840cf8f10a144fbdb8c0bed9ebdd29f2efce68dfdbb2654e2c5e63f197d00a9b1f93b4ee7adc089e2e2bda63e144ebb3c1304dabcd58d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\0496E33B07BB9340090B6FF9A653DA5443DBD403

Filesize
224KB

MD5
85509d4ef07d4621bd9a7192ca59c617

SHA1
fb8cd7144c07d42540c37ba623606dda5b93e420

SHA256
1a0bba195eed927f204da3e7a74db9f867f72624d5afc4d862155382b4152d5a

SHA512
b7ba7f3a5b00001e62792d518e2ba705187011cdcb0f8e7bdde2f2f32b04313c7c8818f26f37ae41c4088c6563acf02d5c16d27f5cd276a054023c1c990e9feb

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\0C0E12ED83B149D6A68D87C705EAEF00394A7588

Filesize
22KB

MD5
9a4f20f73ac28c3dff3a31a663db8f44

SHA1
c9f49c45954b909290cb5a2bd324fc6b056f8979

SHA256
b76ad40191d23bfa34636ce7fa1ef5e091471e72833aa52c52bb7ae58740a100

SHA512
f4b2290b6d71f03f142c4497ed55ab74ff75edb84a796dcbde11ccd1aa4bbe5b5f5f1a3e27bd11452c53b3a82d3763b45513aefdc8d8e46f8e7df4404e0bf179

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\0C0E12ED83B149D6A68D87C705EAEF00394A7588

Filesize
61KB

MD5
624317d9f39e01e972093b67591ee6cc

SHA1
cd5119f218a1dd6348280d4004713737c177ee2b

SHA256
43578271630179b28634d5c0c46789e169f65648b3bab01e341bd2e7e58a2c7c

SHA512
47d14e1a597d9c847f05a817dfe5000008da0afd9ed4b609172528f3a4c49aa385f4e624c7173e0e01786a2e455ff75d039b882b1cc098f6e99c5314275179bb

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\1028C0594A2905A51C9BE4B9198A912DA5F01823

Filesize
49KB

MD5
412ceb61e0f976938554b7de80b15abd

SHA1
894be23d6ed7a7e1577d559a91076f2dd0bf2ec0

SHA256
cd4ae6f61a50d145c17345febc19ab9e7fb93eeaede95877873a79db81813595

SHA512
01ff0cbe3576ffc65082c4afa2c5d581c9dbfdbc76001de06c45defd581e2d7d382024e46ddfa09fe99ae3613284049bd3ee13cc7d03eeef381a92cc8ae21134

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

Filesize
9KB

MD5
c15d44cb5efc125b3f30c2fa172f6ccb

SHA1
27739cd4f461aca685eb0d494eac33d619ae57f5

SHA256
a70d8054e0ea23036c758c272baa62f42d38a885cfd9f2f9629c16e76827e40b

SHA512
7b1afe77c7d9dcf1169dd7e0a4720ec4b6491dcc4416a24083b75c39b6ecd86dc21d4aa25943cdd67add1972feb7ff1a4676e6e634f8b9325cc481d84447540d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\424F8E534138F7B1667C4D37547769BC4BBB45C1

Filesize
9KB

MD5
06eb261b1257b73428bffded9116edc1

SHA1
449e7df55969077b534ea295795d80292e494f3b

SHA256
fda81b6f4aa17b7d7fe47bddc61b6368340e2e59d3762b4cbf679d75d651a649

SHA512
2634ccdc559033fea856d00214eed47612765f262115aa01acce853a3596c1f0e70ca01698e76f8bef3faba200bcbb57efb05d73280a2d6a9de8cf49defce7e9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\435623B5BBE6ACA092334CF6B1AB39D241E1BA78

Filesize
1.0MB

MD5
f4c2bbdda57262e2a2eedc0707d6a84d

SHA1
b287acc705ff09f33519ab3c19173cebe98284a1

SHA256
4f65db232fe9280b40a509da7265616bcd51b1da96e9c08ec7ff8a62a54b830f

SHA512
486c5d76631147e4f8b885c71f5ed683e88b0209db970dedf482bad9880215d8d12a62ce0fe27e73d93c54f6b61e4840ee3513734c196d0891d8aa792625600b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

Filesize
14KB

MD5
b0b3bc80e6d04c199f8d1c6f888f7151

SHA1
3450d2cf94a885b7a0da2b71844c83217d000499

SHA256
ef1b50d1905a6b6f6783edd176f5f700551bbc4ecbdcced953f5a586c3ce22cd

SHA512
48707b3a0ecaf185c3e6b5a180f6b75fc9981adceac6aaf75003a65d4cadf20ccfa3e5e92eb20fb47e96a2d6bd950fa8da0dd7268981494b06415df6d3fe0bbc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\7650BE2FD20FA2EED398F010E8A05DB0368C482E

Filesize
1.3MB

MD5
9bc0bbd4eadad97f98b426e88658c27b

SHA1
4f990862a5c0ac05e4347b1da1f9e59e0137882f

SHA256
dccc9f3a868c0ef661f554b811ab12453a1996987e7327598eb138c79a8e9945

SHA512
41e9bcb6a9d9b0725512921d3becdbc6b0556232936d0bf69a67087a2ad78e5c0a466dbcbf6e6df2dc1b7c8eb567bcd9c879298ed5c81e94056739391adb4b3c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\8540EC873F08CBAD5DF5121BD3BABF95624B4A14

Filesize
16KB

MD5
334c0b4ccbd2605aa3f0fa3160d3e177

SHA1
7a3dd1ae4fead7f72c549465dcb124cb1c2740cc

SHA256
65db245c9acc31643e814bee0f238c3f15fd1a23c809230d9ff9c279c2023b66

SHA512
5584cd2a19e7c36ed21423bf93a56e924ba5baccdb4fca23dee0896fcf97cdc31308ba4770640cf45f11654f4a0b5e89a18fd08b5cae4553128595af82477f52

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\8C0875EB41190C30BEF515076283291AA30F1C57

Filesize
292KB

MD5
69514d415e05015920b77fab2c6ccb7a

SHA1
76de75e51b020b38f6eaaca79af9a80dc9145391

SHA256
f706d880fd0ff92002f17723ec4d94a2519e91ff79a4d330523f8a1f61fa0f3e

SHA512
c0eddcf487baa1f9ebedfd3bd736b19bdd731cf9f6e38ccf74e8853785063a484690b131a68b079646544649fb64113f599e7c8d5c9b9d4c21e5560436a10c1e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\92F4D5A4F9CED6E2E644D803AEE3647A0EA4D984

Filesize
13KB

MD5
8b19d3e0b9697a02d51d23a0dfd4a3d1

SHA1
b0ad95e7eee377f8e5c29912646c3c914be6fa8f

SHA256
336baae7aeebdae3eb158ca777bd3388c7268454b5a9602f9419799f1cbe104d

SHA512
8cbb3b043c3ebc2637774592f7f5f8d07fe6eefa197c0de47f03185ed7a742d6dae911e9465a25d1798f16b429ecbde18cf909b5489c37e4f17c952b5527cc1f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\94F72B6F2D0DC3ED340D601AFA278D214906FBC5

Filesize
9KB

MD5
2dcde5da58de1723ef4ac1655244db7e

SHA1
350598f98fcba9decbc15ab9a9e958bd221fb5dc

SHA256
a347f9ff20bc3cd3e17e15df17f77a8e3414a98699be54cd0299c19e46432017

SHA512
8efe9f6adbfd7d52126038c25db2b916b629966e8cbcd3f6d4fb67c61eb107bd6c44de1a5e5c018dd7211637d7251e0fd57d25ab0162c9119ce476e4f2124c61

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

Filesize
23KB

MD5
069de2e6e402ca2ceea00da22408d17e

SHA1
bc97882815af9d2fa7116c5da40542d5375cd59e

SHA256
dedd9625debde06618181497afa9e48ff25e6e11550ec072a6b6f9a0e4d99ce2

SHA512
3ad566fb14b249118a914ac18d1cba9348eb0f76242f62805a803e2e067904cd5fd8eeffcbf764cdc9b4735773fdaf972da33884c3b71a4397eab735446bf5cd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

Filesize
24KB

MD5
6735bcef946c23000b7f658b04d7488f

SHA1
66c093e563d31a690bc6e70c5eb4974d3cdd5c5e

SHA256
3a798b74fc7a153af906669804bbef49719425297d7eb241ae82a2b304cb3e07

SHA512
6a280262944cfc5acc82d2ed4f9985f58f3f36f265ca61cc4769f946c798943192632efcd78d446d86c8b1be760add4df4ca89305ee8837067bed81289e75c93

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\A9FB5E6047697568641592A7A75CA6ED3DBF5590

Filesize
9KB

MD5
3c384ed06ec01fff48d288769fa43ce2

SHA1
f8789a21eb80e3e5d14e5acb6a3e8102cfc2892f

SHA256
179db393b60c67ca75ac624a100ecaec70d1063860be9373be493958822fc148

SHA512
303d6c3cd9d37e53a8c5b038e5f77705b03d10b68f65cb05369c432822338f12db3e820e51fb178890cfe66893c72f572fa9e3a19f0c6753cefa15d514398864

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\B12380E59E366D551CA91542483B50A71D3DB16C

Filesize
224KB

MD5
0e7f9ebb06f5aaedd24cbb3e73d96b0e

SHA1
095c8f0fda684b8edcfb1b46f3767867c5c9d7c7

SHA256
b6f7f105e01f33c067184b1621ec6b33048bbc52926d8fc3593f2f2770928e01

SHA512
221fada3c33fbeff3febc5d89236b26da646dbc2b7a4106aa67aad4220ab7bd7c59e155777781cac9caa942261318e67863d986728cffd5d89e0c2697d24e32f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\B12380E59E366D551CA91542483B50A71D3DB16C

Filesize
224KB

MD5
f3fe2e00853d963af79a7c4be5879660

SHA1
ac6bed24b8e37931b0da6c144b76fa177dede35b

SHA256
f2ff6dfe524ec1cfb028ea5a328ad2a6d1f538f084bb72085b5821f549c75092

SHA512
c1d9e50031737ecb6194f7fc5502db79fcf8bef18c1c93dcbf152a728d480546842a98089d50951d20aa2566762ffdaf1b0529fc938c3c545a0921205cb1c950

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\CBC29A4096AA94E6825DCD53DCE0814E150DB428

Filesize
15KB

MD5
9b6f953a63d10af76ee493b81a50b903

SHA1
6d626c70b8153074634ceb82cf09220c51121510

SHA256
aed2b88278ef8087eb8bdbeef3cd8963387b0b21b9c6d8676214a3847a7bc199

SHA512
fd1c95f39c15af0dbe595692b53c25d169ed1c4418b8bc53de804d52258d824a2c591fb39c614f3bbae785758fa20f14b127bf606a1ab368cfe15111d7a06a36

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\CE30F9E7CB4E0D8AEB054228E581960CC2812E48

Filesize
15KB

MD5
9daf020e4090d5a9225f688c7fb60031

SHA1
1b031c0cdc62d8b1c79dc4d8ad6dc6c6061e2fce

SHA256
4485d11de354b9b123630072faf7039fc78ca8ac5f158fe3542ccd293160f9f4

SHA512
718718a49b8429d9f1eb23b41a3d614134220e868a3f197b90f16b78d183a1cd60c46fac29221969b15db812572bb3b4459ada0627828f9094c88a34a5259b70

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\D8C2CFE0485DFC922614553B1999E8CE09530D68

Filesize
23KB

MD5
0bed40493e1b4cba3e6d3d321aceb6d5

SHA1
771e172cd4d7c8cfe71e1328d360b2aa5c13aee0

SHA256
88f46b29883ba85b9c81a474a8d3946b393d5c9372a562a1175ca788600b18e3

SHA512
1826847546dee9662153327f90b9441230a116e296c65414488f82dfae1605be14956b2605306046c6d5f18f70add2de0e6ddd073685b87b8ad2286befc9264e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C

Filesize
298B

MD5
e738140533af47b0c301a4318d631597

SHA1
0e3605fd11e620be98be6ea97d290917d396be1f

SHA256
3883e69a6c63b691f6e701ae9a8a3cab453b817e110d27aa33a31a2ed938ea04

SHA512
053473ff00f7834c0742e77c8ff4eb891e807441cda7083e47f5625d6a8998527074bed01b4feda50751c59ee321c49dd9d0ce8b3b55a12e29b9aefdd39ceca9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\F21F53293B85556D4D7282B4E507DC37E6D6037D

Filesize
9KB

MD5
c1d117cfd1f5bdd6cc15c3c7d0e8c044

SHA1
5f88cd39e1824ce60c7401a61cfd48fbbfdceda9

SHA256
a5315050f78bb45281f4e3530d7bd1abbba23b65a56ecb8dfc185dc0085b1383

SHA512
7ac3f85ea47361169fd9c694d7296d4b81c92dcb5023ae8f34dc64e49820c69469f7a590344f93123fcd9cb6809b9e0a891787c8354de5bb6d453b110a89aaea

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cache2\entries\FD3C8B7B2C5FC530AE8D3FC8050677579C3D2E17

Filesize
10KB

MD5
db4f37fdef528d610c302ef20eaab1cf

SHA1
7a53589d33965f805193259fa3f694fd523094fc

SHA256
2e9587aec38326758ef76b9509a5fa97f6d1feadfd183b1709e4697ca4e3b9cc

SHA512
39e4a13e3e4c62292eea2440b3948ede4aa98e16251b6c7ede170c48192a7a6a9481d83139db2bcdd2a2caf425085f1e43834d319e342b97f3fd53c30dfea17f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\scriptCache-child.bin

Filesize
469KB

MD5
548fd2001a067c9fea9453e7a51ae080

SHA1
9ea13cbd97e46f0235dc45a57d03dff824892c8a

SHA256
93907df64cc317113b0933101e6a6014eb3cb4e45214f7a672773d365af65c6e

SHA512
ab7a996e5b0291ea24839ff0181926f385433220d0fad11dda275c7a5bd51a7ff1b3505474f315e7793e7fd9b8ee50505532615651e50b1a2f4f824b7548b824

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\scriptCache-child.bin

Filesize
705KB

MD5
19bcb67b36d0284fb32873aad9382b44

SHA1
c2ce4e7798ff2373b2b576ded609847b5a472a70

SHA256
df3d383cba8360899ab4f9799f60b21d13514f32d5c5676a94fa985b501377ff

SHA512
0c19153c37e4fbeda74b0e32786a6fe99b2fab6c9691843a569f8613095e72b9d8c5a1128dcdfbc6c236dce4e5a514dce3c96ec17f22d4643120c7e00723fd1b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\scriptCache.bin

Filesize
8.9MB

MD5
29d23c66b9a584e1e697121bb02f68bb

SHA1
f42123753d3798ec0f84786028ae6ee3538c9121

SHA256
dc18d462c90430fb3e01279ad3516b13e4b7f31012c57dff798771adc19c90bd

SHA512
7757ff7b3c7dfa01a8af43533d529ca6f1340feae664872dce4ce94aa5ad79c90e65901b60a330176939a1f1abf2ea6fe6ec60cb3c9167c8ac305297e157fbe2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\scriptCache.bin

Filesize
8.6MB

MD5
42ef850edbc139a84e7e3b20653f072a

SHA1
8f4865cac36ba29890d1d0bbec93d36393d545c4

SHA256
4770d7a9a2fb83641bca7ba915eadd15fd6349d4a0fe3e37627550453feb08e5

SHA512
aceaca216366d624744005c55acc2c11c065bdf54c309358973d9cec1fca7f9cd9b12573c2be7487dba3e5147ef8b01ccf9237492bf8086deb3799eceab217f6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\urlCache.bin

Filesize
2KB

MD5
930354b4ff3a5286f801a94c5cdbeea2

SHA1
bca3c7ee21b1134ec7c418eca5663bd26081a817

SHA256
e3675b2baa8332e4d1b6e2e3f37671372350a571694731656ec8b074817cdacb

SHA512
4b391d697da0d38935c2fe4c832393c45e854f2bd4e26f224f558bc2c3a5f411cea9534289ef3d2909156a1144555b9eef6ea0bc11000e52dedc707031524344

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\urlCache.bin

Filesize
2KB

MD5
4b1a4e4cc24c61a127e76f3fea31a988

SHA1
7aa676bec3bb6d4888ad228824736619ef874b9b

SHA256
ce1aea94cd89c61376aa93ee4aff43a72f0784065b478b16868ecd4de6e5df62

SHA512
4977ff12665145338e172f1d6f5c94148e60781668158261e7e216e5b360cf244452ddd00aacedeeb0611819d66dd76991776f22177673be4cdb8d2319309d3b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xne5uxr5.default-release\startupCache\webext.sc.lz4

Filesize
107KB

MD5
2eaf490f6d925488da3adb362ab976b6

SHA1
957919594928cba01592ed915cf58b445f9305bc

SHA256
87874e5f2a38cad55c76ba7455673d36f681bd22475aa4e91ea4cc9a1428ff33

SHA512
56c5afe0348f1e22ebd737e9a95f7fb768772fdaff79c45ee97867f8abc7021151b714e3350c4f38e105d7f7a69a44958a681d9317383822a5756e83cf4452a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\AlternateServices.bin

Filesize
10KB

MD5
96c869f4058ab4ddce32a2751e964098

SHA1
2c1993ea5814b0cb208451ed548ee808822435bf

SHA256
ff3db8b74ea6b413187b2754fa66c723b97862dc86b94346e8c11705a0654cb6

SHA512
f084f35e07f1b9950804ac54514664e0eda57427333bf4a43e5a85cc78b082d2b94cdd409540468cfaf40d77571be0e3a34b6579809d0c4893ebed3e7de57813

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\AlternateServices.bin

Filesize
12KB

MD5
b29148d4ca77286788e27c9a9d3ccb40

SHA1
9623713d9a2a09cc341941abe855dcbd56f3e8ff

SHA256
79361c5203381366e18ac3c607bc39cea567ff738c1fab94ee434085488f5e9c

SHA512
46405985ff8679b4e606f2fc59dcb7be05e73cbc270f2b34484599bf216b6ad792492cb75e8e7223dd8fa79677d8eaf91433bafda234f9d5b99966477735cfcf

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\AlternateServices.bin

Filesize
7KB

MD5
eb47b82880dd94123bc32859c14ab5d2

SHA1
a0ce87f0e3c48349ddf3dddd61851abe815ac7d0

SHA256
067c1f5fae8581842fad38ed24650bf644bb00576a960fca684fe89b66fa4679

SHA512
b09d1be50b58acbd304b5c1e52f459d4e60aca002eda7671a07d854c86d36da97ce5d350451308e91a159b232e4a50de1657cc3f1e1e01a2f54c08090cbcf2f4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\AlternateServices.bin

Filesize
10KB

MD5
18f7a2321e199ca0b3c81efcc61fd52e

SHA1
47051c98402be12bbd31dd407c074a694bbcd358

SHA256
9e09ba85d6e0d9ef368039b6b62f392eba761a309fcde767ea043baa94cf7f58

SHA512
9ecb1bfdacf03249641c029bacbf360304bde9692ffe9fd673d6f027b55cc5029cc21754b1f65162aa43036386b6b242d11604d4be95f91ee6dd9a47cdcf4823

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\SiteSecurityServiceState.bin

Filesize
1KB

MD5
55af38a454473647f7ce8ef45ddf4eab

SHA1
e20a88f61082caee3ec9f353c7fdc11582133736

SHA256
a8b97be06eecf1d6106aaa9d1cf003990747d6d9595044e6bd96a29e49820940

SHA512
f8a59be03ce2c8e4c4a836a16d7dc7996d6a9b9b73d7045569d8bcc69b2a8595e5dcc0259c97c1fd317d78d0f2fee20a6914f4440a3379380a146e6ea794be6b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cert9.db

Filesize
224KB

MD5
87a65ba4016455f70ddbd39333763ee8

SHA1
1fe47d7e5b908fc082a92da3220dbc459384a6ce

SHA256
c06b4ace7b776eda61ecd3c0c2ede304f1c6f5be80be26a450813c0eed5dc24d

SHA512
d252189a10c273450afcf7e3f3537cf141836570b682b7cbe5df2472a9bf88bc53cffa3384c0d222102a73d7311469b2bb549b2c2d7ef61d35f76b9389e1e826

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\content-prefs.sqlite

Filesize
256KB

MD5
b41ed219e2c8dac47f2701562d092621

SHA1
90d507eae3ec943a121dbe5a080412e40470b54f

SHA256
cfed019635a1e14f74ae78f2c03fb96b40ac3da37b67489bd98c144afc200f1f

SHA512
5c6027ec701055efb3b6c055727af5ed261e8f1d5ba954e64e8a34e5c791679b1e4a6ef49896ab8089ec151fd758ba41efc7333611af42b851606a0544a9b947

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cookies.sqlite

Filesize
512KB

MD5
2f304c1145590a9cae80b2836b8d7aab

SHA1
edb1c4d2f2cf60e5276995d862f44ea4e49506dd

SHA256
30ab08d8d9cb67ad8c659a1b8bda53e03c49937bd55c1db628164e98e2f16e82

SHA512
dca074f88da53aea731f418114d916248dba2606084b0e75d8efc42cb2f7809b713b89112dcd8269647c52d70efcee6298b82666354b485fe482b2ed9fbc0189

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\cookies.sqlite

Filesize
512KB

MD5
e6c4f9a51ad379684848ab8409b1d8f1

SHA1
d9ebd3ea91f498259840e7501f5cfa0d5e84f72a

SHA256
ff20727ef91167c598ea09c517d2801531558bc3a8f351113b77f72a0e579ebe

SHA512
8f496a52ecf0179404ce4be0c26f16b2c1cf6da464110eac4637a499d8cfe70091b441ef0d0889ad6fc00333d5c7e636fe10d72a0ef81d1dc266700d3cfc5c2a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.bin

Filesize
45KB

MD5
d703b79412a992945f6b57c8a8292c7b

SHA1
628e1688462676d6a4c8e407b810071a37a6d999

SHA256
3316b10970619d9528cd15071ddbbfd161731636bba98a017c4261d71904fea4

SHA512
cdf4056b80f56b9d8e132f01831c732b9ee816fcfa7568958115e57b7e31dc4299b5800312b02b6367750cdb4bce76ed2dda5e5ad9ad99ffd81050bed87299ba

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
304f10ab5f7da44e2bfdd7355acc2739

SHA1
790a7b388480a104d1488359c964c52fa1be1c43

SHA256
bcf54fcd0c7df7bb858e9879ca760f4e52ab4c0638ee4f5198604b94b381bfb6

SHA512
542ae4217aa4f4fac704147661f7279e249d1bdcc776ef709f3696a370ce3e1db4332df2dc924506422d23de3105e47f8b0bc0cfcb82a5e658b6a029bba67434

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
6KB

MD5
6a6851fa4890e1d52114d2f7d5cf15d7

SHA1
f15dbcbf57b3c5b04a993aeb35f47ce9e5b6755c

SHA256
1c59c9e5968bd9d3aef153f14f3ae8e5c7e2ee3fd2b99bfd08e81644546e0016

SHA512
718ac477d8571f174cd33c46a877121e0727b5f2512ad6bc81c277403e955c4be546bcbbb6bdcefccdfb0bf5a470863effa4763c6349e6bcefae47003bb4946d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
44KB

MD5
4563870596370dbf51cc9480c93dc60c

SHA1
95c6a283d4971776910d6a0fadbb6b5d192edd59

SHA256
1e6c894ec6f52b9af1f02a04323e75d46f45ad55dc9189570247207b18982c69

SHA512
b599e1946584b5fb507b91bea262a905933460f48d9ebd7de5f5302ce200c2ffb0db8a9803c3eaacf47be38a41dcb6dbfac3ccc9ceccce3eb03b5af97f7e9af8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
45KB

MD5
e8ec3905bc0082916dee71317ec3262f

SHA1
6ca2379bcb5b8342615c33b21eddccf54ea27ee1

SHA256
9965d0f82e7df99e5bb7a8c6428b60e28b29373ea1a591c6e2dd06f5d0c18d2b

SHA512
bf7cac0cbbb783353682808ff07eec1b3d620a4fcfd744d73137aa0ec1cb36898c76f59830499c8bbef1517c46962b18037cdd87abfd819d7408fd7053a00bf3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
24KB

MD5
9c15fa987cb5642b5e066028fd98cf92

SHA1
543e35fd006558cec90203b83ea1c4801033eb26

SHA256
dbb650a8dfd2ec1ac7b2099952b219c911e18785c9b34692f381b81c17959dcf

SHA512
c1730f99934cd4e11a571a531786320e479f489fc6e1228f9e217ffc90ad659c754411fcbcc051e6c1b6c6da7cc26467843b0d2cb49d6640ede124f555ca83dc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
34KB

MD5
dfb6bb49760a77cd980e85318ab2dc4c

SHA1
9749106421d6ff4c1f141714195f4370aafba24d

SHA256
217f6db33c97d391cc6283c673438da6683a09e7015f9cadb4bdd3e5f8e48503

SHA512
f082d2a1a89e02e7d81f736ee2cca544fcf75d46241a973fa60de7ef2810470485865802671c6b0b8594b02cfc7b8776c61637fdd5b79e3bd700e6f2b99765bd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\db\data.safe.tmp

Filesize
35KB

MD5
d12878e201bfd901bbe00543eae1a5a3

SHA1
6283e6611b41a80e667d04a19d07418570750452

SHA256
57d607e29916f5fbcf190c892fc6d36a1b79d0cbe05b7ea8642d04f90792d952

SHA512
79e62dee8821b6c24eb34598311dbef6d6125d32a7416a7cf4eb746aea2bf7695af8d50d8936044d3b1e84ac6e9a136656162f19b90c66bde7ec4c7a332c3ae4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\events\events

Filesize
927B

MD5
e473c67e9eb30a2e91755b024c4b9f65

SHA1
70bb3069909183a3b55257826a8470605644a440

SHA256
968fae682e6b2cbcab153a1864ada0013372b537f1dbef7c14d9715150bf9090

SHA512
431ec77a839477b77c516a3a2d022c4f8e5f529e98b43bf70934e08eeb95af8a95b8239ee1e36bace8d4a7cd54339d65d024a54566777163fe6699ff3dec5479

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\events\pageload

Filesize
617B

MD5
9f2625c6f3394c611463763538077bda

SHA1
65e5b36d1132baca77f91338486f6d7ac4e67fa5

SHA256
bc2b7c81a1e1cb9f32da76f97cdd708336331ff141b27188e6e2f6dad2019418

SHA512
473d1ee145c21a1f9e7cc9e8c856f3837cdbe776052511ab1d5256aa0c3e8389519db9bf202370aff4e23421dc3b5765fdaa1d48e0bb899660db8560c55da215

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\43f34f06-6e0f-421b-8b7a-fec80cfef0d8

Filesize
1KB

MD5
05e6f1116b7f000b8b51ecf02b1b9362

SHA1
b6397eb485fdbc879151306d51152b70cd5e416e

SHA256
f059c5ea6d62079b89a2fca7428a6146ed9b580dedbe4e73644798c314f0d29c

SHA512
7fda0f62a978cc3e5f6537f32a18dcd30b7f9c4a15595843d97efec33a70c8264674d405eb49761453c5a12b3e6af125e5271c0aec81415d10fe1236546c0520

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\52ffc924-e90c-4c65-81f0-c4bc94df2bb2

Filesize
25KB

MD5
4edf8aa3fc9536c87c18699622055fcd

SHA1
772f0f4d54e94b49f3c51b3e6a40f64997794362

SHA256
a8efb680f7f0eaca3b5e1ee30895b93dfe307dfe96c5e38cd8cc82c2041926aa

SHA512
df70ebb39036c52de9199121e038a5c8c9b39338f827f459f1364731974565a41d2b67d73b6bb97a1bebd46043e00a5c2eb6b17e710bf9b5ee5fadc868c79cea

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\5bfe54e5-e145-49d0-95da-f158ad62aaad

Filesize
4KB

MD5
dbdc9cb493de1bc8043d4f4ede6a7cb8

SHA1
45da1a95ba6ca2dbc420695c31a146179d8dc2af

SHA256
0be0baff5a869493bbaf44c546d4bf63cd484423208540958ba34ed952b8aa08

SHA512
5a5418210b4a5f135b2e21a42e0f536b0709c6f28952b48d2ea25497d149e634275edcadddda90811725f1fce9f384d70cfda28f7389303e22bea00cf63b4985

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\5c631a9a-d189-4023-8255-164650286c86

Filesize
734B

MD5
ee9417f238463eb0b7814b0919390a3d

SHA1
e15f287cdfdc4161d25a0fe2c01ed478b39f07ea

SHA256
07d326c42d17e3fb2088786d40cb8ee05ee6da6382ef0297669953a785ad0ded

SHA512
0d9c0739d5f6a03ea6b10208d37a2997abb95fecc4db2d37aec450978694830176b5b3c536f5655da99d9cc3a36aad6d8bc0ef1b5ed1f8b66009ba333d57e87e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\a7ede7e8-b413-439a-8d59-162c7f726e2b

Filesize
739B

MD5
f48152f545d08110e1bc3decc94eda53

SHA1
c1d2ed67126859e46c0b79a7cefb1f73bfde8493

SHA256
54ccb9862d343957693976c10c4ca1fff12a0b04c69a1f1415378993ab1cc045

SHA512
fcae922155e112a7eb3cd175c4ea99d913e6b756db7c3587aae97e2c5a70fd2156d04da88035c28eb6c8b649e2f1234754facdfd6552b48efe2cb8eef6cb1cda

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\a804590f-b0cb-4669-8e35-939fee64d46e

Filesize
12KB

MD5
f7c4458410587efa106c6220cb515ae9

SHA1
a5d8e1c6bf21c1f05a24a5682f2fccc2786602e2

SHA256
f049a61498699952a54f43933e391dc7bbdb843b3cd141006c2d8db2da376c2b

SHA512
638e98371a171867e7f8731429e0cb5c1462d671e7beba3c4cd6f83c42caf1e8e44d6dc69a1bd5c74e8c2bccdda555bffdeb09bd5c79850ede0a5eb9b0eaa842

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\ae3a1cf0-4ab6-4501-9bb8-0a8537b150b1

Filesize
671B

MD5
895a61fdff4ab902b5ae56807c6e443f

SHA1
77089fb093fb4247c54b1fa59796126548ab220f

SHA256
cd35bee1713b8ea3383758acadd3cc8b76be23a656f13243d36fc3fe01acf284

SHA512
6afa3b9495ed308c1da399eb0d7f5654f835808d45832732f9655378efc476030ac7b964fe0d4407ebd4879e1f797b8cc6bb60a3494dfb0b027dee641d4551e6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\bd5e5ed0-7a6d-49d4-ad68-72212177ef09

Filesize
734B

MD5
85908ac4fd46abd5f81bebf4815e8787

SHA1
d9d7d6d78ad866f3c5d3a8e3aa6da6959b030309

SHA256
f18897c0ec749f7f64e08e8990c849640221e6d289279fc24c32ad600bfe8be4

SHA512
aad0147c341abdf44f78a698a3bcb2591905e6422f7fa397b22110abf0e442ce41023540da7ba97d4cd3575dbea943706ecaaa01c9903ac273ecb1a656a919de

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\c9331bc4-8c0d-4bd4-866c-6bbb758306c3

Filesize
982B

MD5
8e501318bea707b87f29d3a59a9f4ad6

SHA1
7ab2400d3e115c1591bdbe6d52a851f8b8b90168

SHA256
af286edb92b3ecb2085c6637c674ae49364267855b1fb9c160f5d6975f032293

SHA512
077ce519aba0206057e595ae939bac3ba335381503f1f952b7837ec708ebde9d4e662fcdebf79ad6ade8a61dc65e6c5f6860344229438de31cba9b643880323a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\d0635210-ebf4-45d0-9046-5d3e09227142

Filesize
1KB

MD5
56eacf87150f6ca39f6bd4b1e331b4e9

SHA1
12d37eebe711bc5199768929f6739ce507522a96

SHA256
8e71f1c54a0a39a236a85baae767e1a35a5d1fa7880babd6036ee4d4e3ae2e5d

SHA512
cbb05aba50d6910bd00d0d0a171c02d4290b64e42c10cb75903b233e43d64a8521e2ca090475e5cf2fdc9b0c7d72dfee582a9751833d4a5c8e556f417145ca62

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\datareporting\glean\pending_pings\dbe67837-49fe-4e6d-b857-21b788ce9ccb

Filesize
1006B

MD5
bfcd3a6326f9884fb5728ef14a682462

SHA1
db615188771a27622379a945e03e35afc337528e

SHA256
88d36a850602430539fa740ef65bf783e0bc29fd856bea8b1b6de459fc083c2c

SHA512
5caab72143292ffbce615632ab8d01cc49bc9e67e77d3b38dad83afe804a1e1850d63e14a0bade22a3ebfc934967f0314dafb5090fd648256d1f4521f3d1a1d0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\favicons.sqlite

Filesize
5.0MB

MD5
d6d32b58fed648abc7b5797bd448123a

SHA1
7acd88ec13fa59044edcdc3ae8214935cac671e9

SHA256
c463711256373bfc94be504de6cc4458263e85b93a98bcfb040557933b04f924

SHA512
9bf396ad260324e81d950e0742f965ac10d1a03e108f8422a5c4881cae9009549d83a14ab67941d3a3b1fdb5e0c5423be920d43900ca37fd787d8480b1e50fde

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\formhistory.sqlite

Filesize
256KB

MD5
b0ea5b6e3f5e1cd970348326a67b3c51

SHA1
f2e47f89a26b9c1ac6b3d8f37c0662013f4e2746

SHA256
23c7517c5bd614a66247a7d68336a1863b122accd9603dbdfde6ea1430051974

SHA512
670c34d3a46a8c29bb4b629fbeed568011b6802d6f111c0f19314e7db15b380a368ce82141ac250d3df621a436ea7f377f9fcb05875b65959cc192242d6db3b6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\permissions.sqlite

Filesize
96KB

MD5
de5b51d9943b9d97ebf11e019c3262a5

SHA1
490c42816ca7ebec1264630338e77b97bcd51b81

SHA256
cfba6f666173b6ddbb33f8b7710124a6f1793ed7dccbc653a1f2dc43f5a39148

SHA512
0c6be09c265abf20ec2412ac9a948b127ee7a0dc6d7243cc2ef45cb82ca83ac8493a6d5ca47708eefbd517cd000f3d66073b3bae133c915d8e56f1a1605ea337

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\places.sqlite

Filesize
5.0MB

MD5
d6c89cb561b859bd5d75f20eb05f9899

SHA1
b91048adf987af0c3be097ae4b910199a6be05c8

SHA256
c7d9f8b800f23885385f38df40c46a04b7c00eaa6fe5c9712f21cdba7303b684

SHA512
c3d10789044380692419fc4bcca3b0e664ed8bcda92426627b000cbd05e789c1ca8dc17a4a8443595a753772427206b2eb8bf6afd4e8b06e4a9635c10f43f087

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs-1.js

Filesize
10KB

MD5
e8e2f8ee885147ac7a7f90a5d8d8f77d

SHA1
ee52720c6751bbb54c98c4239ed2637849add03f

SHA256
b2dd28ae81503c6349aa772631131a3aff46453223ceb430bd0c5fa346f40433

SHA512
10ad895b81b76379d77e39c6a73658f9a92f924986cebeefb6af8e94440437bf24be8d491f5b35fe07fa344bddabdf0d127fdcae3ce010336be472f10791e13b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs-1.js

Filesize
10KB

MD5
d34f98c465652cb1b0f98687a11403c6

SHA1
71323d354f0800ca2678258944008dc8e94b918c

SHA256
4e3eae8283ef328c43eebcaf0435831c3883d0e571a3c0b12a6739a0882bf730

SHA512
81a36bc49f579c53132f986f16d499cf13c1b36d08ff483ee8a5c6ba55070c9859ec59e6fe01f74be851c2be6da72abe24a7f16004283b30eae466d3df664b45

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs-1.js

Filesize
10KB

MD5
6e05e2eab6eb53fa50b6b66f399e4ad2

SHA1
f588b6fb82f585d218bbe7f3cb6203a8f9037127

SHA256
a3a5b6fe33cf20b5b3154e1d6b3fbe1e536abcd9df4a91347debf2ce1a456feb

SHA512
7f97c003402b64aa042d1f7a4ff592f48566de8781ca759f77d7307beb539cee6019a2d79c10830797e546fd6d01d417aa4e44384fe1597868c06b8d832541d1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs.js

Filesize
10KB

MD5
4c7a19defaba08213f331b049adbb09f

SHA1
98012d6a7eb884a29734259b0131876e335e4ebb

SHA256
f0eeb0efa07a1ad0f93ce286eac68870a9978f0799090e81b7ea9ffbb88ebf7f

SHA512
c751bdcf367c6717a31ec2aeb981d58e8bf3940ec8fe3606d579f00b0f06429d018ce38bfca6ab2a871b633c6ef91d317cf96c55dc0edba07b09e38b60b9df88

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs.js

Filesize
10KB

MD5
ff218a42f2a5792eb36ea6371a9da1aa

SHA1
52d676f4302032fe6f480d51f5bb4183206eded4

SHA256
ac8163159cf63b3965df648ae12829a6f8388982ba3e57d4fd22102ab6596348

SHA512
021644adf42124bc55b8a22ceeb0d657a9818c2f640ee3d21f6166cc10505e72c42e0e468b6affa507b1523c0b57294b552c6052d95914518c89892b42c386a8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs.js

Filesize
10KB

MD5
ede3393bb5d326e97d7ddd841aa373ee

SHA1
4abadf17629ab30ecd2a686293740b2aea0b776d

SHA256
4b38876a926489209815c38acb66fcc839656a9dae44c29f282a15e4d48517f5

SHA512
35de63dbd5c82f93f76ff27217dec669ddd0487edb38ae172b504878d56017161042c048f2194709e806926d896628c8c697185483471e4c5eb09609858ec6e5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\prefs.js

Filesize
10KB

MD5
014082d52d92ac69a2bd495417e58ca1

SHA1
1cc8ee768a3a22bcaa2a025b63214422f5d6331b

SHA256
53fab96d159a394fd81f6b2a178692300b86b5bb6b6be0a30cbbbb3fbada2273

SHA512
f404730712755dd0c5a5b711b2df0b40b55c26868bd2da4f72353c83373019dce32bba20df1833e80ec564d89fba891a461be9eae334019c39be96fc6109f5a2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\protections.sqlite

Filesize
64KB

MD5
76786a4c0dd19d88d6d3ed95a293bf2f

SHA1
b0d6d676127a7694fc6e71ee57fcc2ffaa621ff7

SHA256
1a2564c1ba20b8038d35c2319258d94dc15d97914dcf753b31c48b79940dfd31

SHA512
8cd3298e2ebba763d3c80ac4b17e44af7eb63b46304967d0c6316d314baf8611c05f7b9979c2c5c329ac167aea0246e8c9f057ffbb272481c13fd5e4b4bcb2d0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json

Filesize
146B

MD5
65690c43c42921410ec8043e34f09079

SHA1
362add4dbd0c978ae222a354a4e8d35563da14b4

SHA256
7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d

SHA512
c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json

Filesize
228B

MD5
a0821bc1a142e3b5bca852e1090c9f2c

SHA1
e51beb8731e990129d965ddb60530d198c73825f

SHA256
db037b650f36ff45da5df59bc07b0c5948f9e9b7b148ead4454ab84cb04fd0e2

SHA512
997528e2ecd24a7e697d95cd1a2a7de46a3d80b37fd67fac4fb0da0db756b60a24648b7074255dc38f7651302f70894a53c3d789f3d7cd9f80fb91bd0cade4be

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json

Filesize
122B

MD5
99601438ae1349b653fcd00278943f90

SHA1
8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9

SHA256
72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a

SHA512
ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json

Filesize
53B

MD5
ea8b62857dfdbd3d0be7d7e4a954ec9a

SHA1
b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a

SHA256
792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da

SHA512
076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionCheckpoints.json.tmp

Filesize
288B

MD5
948a7403e323297c6bb8a5c791b42866

SHA1
88a555717e8a4a33eccfb7d47a2a4aa31038f9c0

SHA256
2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e

SHA512
17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionstore-backups\recovery.baklz4

Filesize
6KB

MD5
c5f8127a3e727cdf7cd2286f1647ab69

SHA1
4dfd91c5dec6d91f9888f8ccde0b4b2fd5ffd45a

SHA256
ee5c47b31e1753fa8db651f126cb0c23011c3fe3d371a3e08e011586e16b94f6

SHA512
5e25e0b36d338f3efbfb341be58456916cd44a7f4f02944d7b623a5b8dbe877436cb06d41567edad72ce735cd7b70f6acb74ea456c447ddcc442d14c19c8b3b7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionstore-backups\recovery.baklz4

Filesize
5KB

MD5
6ceff0aeb7fdadc5552d8c07f151e35a

SHA1
eeeaba5f744be6086836edac0a3a7df772338612

SHA256
5231769ae32b971922562111e2b536a20bf2715ac2e6d3aaf4b4c476fc1da490

SHA512
b43bcb48f2bc3c4e2975f91fc1041979aa90b7850b873b873ece7a4ac41156590552480daa7df3fad541a9ada27f936abc58d4840e0aad31190d136c509d7640

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionstore-backups\recovery.baklz4

Filesize
48KB

MD5
b4dfc1ef5a44991a2add69808b121299

SHA1
0b9a18fa75c3a33dd26b8e70262735acac5c49c4

SHA256
81b3c9405792524a38c122e3d6d5e20580b103c5bde25c9b73946ea70e3f9b26

SHA512
59f3d465ec8ee11124f11dd22ef6db45b91604830bf0b46ee9267f8f232099a45649fb69e377bc6c2942551c139a272f10cb50d8306b3a68352b65ce5d5f718d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\sessionstore.jsonlz4

Filesize
4KB

MD5
35ef2d65d8d68bba5fa38b61a6220ebb

SHA1
9bbe45b19b3b110a6187029666bcbaefaa7023c1

SHA256
17a15e2ef6dcec83371acfbaf13b194ca10a36cc400a510dd2ce327be10c40e4

SHA512
f69e6cb5904e33b8ff998db8bd86590e9e8dbc086cc023df2e3897c51262556c01e5ea1af9f05f917e66f9a95f7fe88c099ca12675c92ffc52275aec540ec32c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage.sqlite

Filesize
4KB

MD5
a45ff37fc818b281871e87f435ad5e10

SHA1
c9f4fbe355111a20044747c47957cb51e3b0585d

SHA256
bf5bf125ccb555ada88e04123b176d2dc406be62e669bf7a38117827d49a9abe

SHA512
91999d61cf372df16519d50ea10421bd60960ae93fcdf0b498cb255f2e931b84a1412de8103a8a960af5ab0c804c2c9f329b494010f131d9a201a69a2a22b927

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage\default\https+++www.google.com\.metadata-v2

Filesize
52B

MD5
30ba9a32bc16656777f6e81f6aa4cd8d

SHA1
cf9a633ff468658272af698f87a284faa144ee72

SHA256
cafabaec57e9b0903f99ee19c2ef4360c032ad31d84ac29cf8a3a2eafe460118

SHA512
a7257e7ef530d2a215a335e93786bb0f02cad8466f487c23ca9a67d6dff18d39768731f780a6ee1a58f634c719946a4cef68b9b9dbe9c5de3256432ba1de6479

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage\default\https+++www.google.com\ls\data.sqlite

Filesize
6KB

MD5
354662112c8fae9897f5f9bbea3ef792

SHA1
5f933be78bc2c190c33632526d4a15936efa19a5

SHA256
4d135b47aaf2988abb88b7546dfcf3e0f45f175aa7ef2a9268e345a3196a68a5

SHA512
81e2631e9c75d87b3545ba6b87d01381ba739752d808a79d03b98910df9d2be85bb670e7bc6f2f63d42d7d32f9c1c979095d9af109eb6e91b597a2db95490c4f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage\default\https+++www.google.com\ls\usage

Filesize
12B

MD5
4c428e195a2fad0b912480f1aaa48bf3

SHA1
52a8ec75e9ebe26a80438cfa5b234ccd96f24621

SHA256
330e0baa0683f9a1187cfcee449c80c8d142c70ed58f6ed5bff634f23f399a8d

SHA512
795d309afb1c8bd2bb3ffa40ad5632fca3a1a8926143a1592a051ec8667bddcb21d0540fd33a898e4f28bfd65e13ae96693d96b11c13adcae09ff1f415a13ef2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

Filesize
48KB

MD5
94f4ad9b45b9c4eb0378ce5a3f71f1bd

SHA1
8e6d102fa16530da99234b915c93592335209020

SHA256
9117fa637d5ab686cc5b0b7db4d73ebdb05487556a3e0b0c63f68d76c2c24c2d

SHA512
2b826bf2584951c77b489b3bf1217b5695a5d6e371fac5301fc913cbc2aabc3a6c7c2dbff64138e8a2f6e3f531fc47bbfe3c4b4c23010b57792f09b7fcde1788

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
624KB

MD5
dbd25499d9b4d00bc3449a8d45e5820f

SHA1
62abecf2f83b8380d646e0e20c6e96c873fd4734

SHA256
4cffe58b33fda07d66b9ec36d5bbf8ce2f087751dadf0add843280a886312c3f

SHA512
a796e98556f5f63cf9c8401b4628614dff21247f75453e522b3b0e5709f8a80a114abccc22ac7b8ee7ff5ffdd92735c77d30ddf1e56beb36cc5ecf28a8e57532

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\xulstore.json

Filesize
120B

MD5
8d689c06cb844185099c0398a280537e

SHA1
57073c7526ec37e94bb9db44fedc6d50276f7a6b

SHA256
96729e9b38f216605ff10715f96f364be32f02e2de23ede7e74b78244605124d

SHA512
3c7df326c695143915df1068cb2c0f58e93e4881b2c4d94b33948b80e954fbd4cf944ae53b4d15002b79fcdb8e88f8e9cf4c89ca50f56b7cfd8a13ea7dd6fff8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xne5uxr5.default-release\xulstore.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit