hxxp://epic-cashback[.]info

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 09:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://epic-cashback.info
Sample261002-k4tk5asajd

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	4956	firefox.exe
Token: SeDebugPrivilege	4956	firefox.exe
Token: SeDebugPrivilege	4956	firefox.exe
Token: SeDebugPrivilege	4956	firefox.exe
Token: SeDebugPrivilege	4956	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4956	firefox.exe
4956	firefox.exe
4956	firefox.exe
4956	firefox.exe
4956	firefox.exe
4956	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4956	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4152 wrote to memory of 4956	4152	firefox.exe	87
PID 4152 wrote to memory of 4956	4152	firefox.exe	87
PID 4956 wrote to memory of 2708	4956	firefox.exe	88
PID 4956 wrote to memory of 2708	4956	firefox.exe	88
PID 4956 wrote to memory of 2708	4956	firefox.exe	88
PID 4956 wrote to memory of 3376	4956	firefox.exe	89
PID 4956 wrote to memory of 3376	4956	firefox.exe	89
PID 4956 wrote to memory of 3376	4956	firefox.exe	89
PID 4956 wrote to memory of 3376	4956	firefox.exe	89
PID 4956 wrote to memory of 4040	4956	firefox.exe	91
PID 4956 wrote to memory of 4040	4956	firefox.exe	91
PID 4956 wrote to memory of 4040	4956	firefox.exe	91
PID 4956 wrote to memory of 4040	4956	firefox.exe	91
PID 4956 wrote to memory of 2248	4956	firefox.exe	92
PID 4956 wrote to memory of 2248	4956	firefox.exe	92
PID 4956 wrote to memory of 2248	4956	firefox.exe	92
PID 4956 wrote to memory of 4584	4956	firefox.exe	96
PID 4956 wrote to memory of 4584	4956	firefox.exe	96
PID 4956 wrote to memory of 4584	4956	firefox.exe	96
PID 4956 wrote to memory of 4584	4956	firefox.exe	96
PID 4956 wrote to memory of 5484	4956	firefox.exe	98
PID 4956 wrote to memory of 5484	4956	firefox.exe	98
PID 4956 wrote to memory of 5484	4956	firefox.exe	98
PID 4956 wrote to memory of 5484	4956	firefox.exe	98
PID 4956 wrote to memory of 5520	4956	firefox.exe	99
PID 4956 wrote to memory of 5520	4956	firefox.exe	99
PID 4956 wrote to memory of 5520	4956	firefox.exe	99
PID 4956 wrote to memory of 5520	4956	firefox.exe	99
PID 4956 wrote to memory of 5528	4956	firefox.exe	100
PID 4956 wrote to memory of 5528	4956	firefox.exe	100
PID 4956 wrote to memory of 5528	4956	firefox.exe	100
PID 4956 wrote to memory of 5528	4956	firefox.exe	100
PID 4956 wrote to memory of 5536	4956	firefox.exe	101
PID 4956 wrote to memory of 5536	4956	firefox.exe	101
PID 4956 wrote to memory of 5536	4956	firefox.exe	101
PID 4956 wrote to memory of 5536	4956	firefox.exe	101

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://epic-cashback.info"
1⤵
- Suspicious use of WriteProcessMemory
PID:4152
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://epic-cashback.info
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2028 -prefsLen 27100 -prefMapHandle 2032 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {7be8079f-78f4-43ae-88c7-7cbe2bea1a68} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2504 -prefsLen 27136 -prefMapHandle 2508 -prefMapSize 270279 -ipcHandle 2516 -initialChannelId {376adfc5-04de-4fc9-b9dc-ac6666a43638} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3788 -prefsLen 25164 -prefMapHandle 3792 -prefMapSize 270279 -jsInitHandle 3796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3804 -initialChannelId {2c835fb5-4c89-4e5f-bb65-7efc6ae9957f} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3976 -prefsLen 27276 -prefMapHandle 3980 -prefMapSize 270279 -ipcHandle 3788 -initialChannelId {9b8ae3e0-1722-4664-b63f-759dc589ebbe} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2248
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4340 -prefsLen 34775 -prefMapHandle 4344 -prefMapSize 270279 -jsInitHandle 4348 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4356 -initialChannelId {75394a6f-72d5-4f8c-b682-dca9791cd22f} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4584
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4972 -prefsLen 35012 -prefMapHandle 4976 -prefMapSize 270279 -ipcHandle 4960 -initialChannelId {16e9c96e-be26-40a8-9990-8bce88958415} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5208 -prefsLen 32952 -prefMapHandle 5212 -prefMapSize 270279 -jsInitHandle 5216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5224 -initialChannelId {b8fc4b6a-3ab9-4a12-b0c0-84a3f9150385} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5236 -prefsLen 32952 -prefMapHandle 5240 -prefMapSize 270279 -jsInitHandle 5244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5256 -initialChannelId {1179c5ed-05d9-4d09-ad51-94257e7be6e9} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5616 -prefsLen 32952 -prefMapHandle 5620 -prefMapSize 270279 -jsInitHandle 5624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5632 -initialChannelId {35dc9cb1-d1ce-4ea3-ad29-d801a1170d15} -parentPid 4956 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4956" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.contile.json
Size 4KB
SHA256 dafc0bd32326c7ecb59c59a9f290ad2cf1faf414917ff8d6fd8e7bb2421c46ba
MD5 6b2c0278b7c0ee6043e31d632a2c4825
SHA1 b1f0075934b1cf968202b4552d8e7ff7bff5aaa8
SHA512 33fa0a90a46e6cd594ebe3ed5e7134558167ca3fa16450124479caeb4cbe0a4e4bad1aff5b4b2d843a901e7be88994389328810972ab438d56c8f01ea41638a3
SSDEEP 96:TtTnkMOQ6m+mpe/+UNh8ryuFnXTATJmD5QUT+mRI/lz:dkM96Fm4DNKNFDwJ4emRI/F
TLSH
T19891C74FD93884261331EAE45D0F26CCF013700A9EF6D6DCB16E9C6252AC7E990DBC89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 7837e4c688d2e085f7957f23c302d6f2dd3ecf0de0854cd808a70bd790237375
MD5 5ab05e15531e2bc5ae2f0719535a1556
SHA1 b87badf57ddbbeb99990520bc061aad71de8fd25
SHA512 42b462ef2f5c791035f2feeb9cd05cb13c2b883546c6786bc8c1c32e50fe300966e7089703e83b16ecc191cfa9a503a6eae949bb7f7bb9987278dd59b927f480
SSDEEP 768:1y1FKDQsDVfhTrxC3mvi+G/fG51Cioe+8h0g/q1+GXUK2Fot7OOrJn9GPD:0LKlnC3Beos1h0crGXUKOUED
TLSH
T1807309A396E8B1FB1F9137C72C0FB95B62E5019AE34502C9ECEDC91C81DD654123E6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14263

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\14263
Size 12KB
SHA256 4831369862d5e66f91334e11c476dae6130864621a03e0daabd317b875aad132
MD5 97257b3ba6730f2a352cc189da912a85
SHA1 d4deb65603724eff549bb6e791cb60f6b2df85ff
SHA512 fe3cfe8883c0753382628f705b34a27b8a1da129cd5111c6469e774403062c17fac3f1ed0efdd18e7e53d0a2b21ef941a1d70131a2884118e55f5b47d02fa9c3
SSDEEP 384:BHTsSpde+Vsj8wkac8Woh1B9M0lpDIID2UW4UW9:BHTDrecsjBkaBxh1B9pD8K7
TLSH
T171429EB3AF91547C0D81A4E3E96D69990D14E343EADAA0F92D083A46D4C11ADF8FD1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
Size 16KB
SHA256 25ade34515d9cfb0bc3c73a05cce3284e8a74c4c390aba8ac7c0369e2000ced6
MD5 137acb4ad4f457d3f2be1cd83afa434d
SHA1 6c49c5b91b6cf8080daf661d3740703236cac998
SHA512 2cec5f042d766060a6672fdb35a1fb35ac5074236edf03d8121f32d5537e889b5423fdb2188911f38a5300ad0c47ebdd2f9e6c3038d68017f5ab8afddf29811e
SSDEEP 384:HalwSiO024YPWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA9L+0S+De:6l8ZYPWTToXJWTTogB7S/AmVAf+hRMkK
TLSH
T179728E7D8F013CAC265790E8C8B943558D18B6A7DFF5C06D269C3E09CA84A1A71F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 422f65b45e28f013a6f728b9c57f56a650bcabe888fb11ced5d0c19b84ec5414
MD5 d2de7322d909c3610707c6cd7cf136d6
SHA1 7d72ddce990905f38b841e274bdb965b8456504e
SHA512 fefdd2ec8d548d23294bb754940837e59b7ce3aa8fb48532106cd0e8cba8612b8d81b16598ac02225dbe70d27c15f6c1c324b795d1cdcb7b43ba9551501573e7
SSDEEP 1536:jTrlisenQbMDNR97Itc0ALa1cy3qEyNF5ToX5NIkYrF2d1qKqe5KEODwGbwxFO4i:j3l2Itc0N/3qEyDwNgUdAesXlbz7daG
TLSH
T171B3BFF6DBA28D7D55FFC4296BC2C43EFD262400B3A33009DA23175562C6FB466B9648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 054332a4588c55a385df6260cadf16aeba84c7a22ae3010b60f6e09dca19ecd0
MD5 c5e2ba6f095063cff12c92090448b0d2
SHA1 ef970208a418af9c04e777050af0f525d1718f73
SHA512 e8cdb63f05336c8148f003d894be3e7686b7f81a41693f604aa467ee5abee99d69f1f03412aa6a388b0fe079c7b2032acdb5e151828af72ddcd3beb839ab17a8
SSDEEP 1536:XTrlisenQbMDNR97Itc0rJexjjdUpEGsXa69V5fuSrF2d1qKqe5KEODwGbwxFO4n:X3l2Itc0FeddUpEGZsfUdAesXlbz7da7
TLSH
T13BB3AFF6DBA28D3D55FF842D6B82843EFD262400B3A7300ED923175462C6FB466B9648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CIU07OU18FRCIC1P354P.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CIU07OU18FRCIC1P354P.temp
Size 5KB
SHA256 2ebe102a021d94e0a31ef172e012c4b3a314ec10d1679bef9bf8b15c94f5af3d
MD5 504c44d188186547d65d2787b081c33a
SHA1 1be1f51fedf4ab5b0c34f2981ec12f07838f05fe
SHA512 e37767e8da1cc8cbefca164f4c0c91df8053368ea4221cbaf53637ecf9e65f202f98530d4b1b0ad9f712a1619580232ed46886ab997d856863a83dfb1255dd76
SSDEEP 48:OYdiQJ5Ugdwf3zGjdiQJ/6BdwfxGNdiQJ/adwfTk:o6sN6/H56/3w
TLSH
T1B1B1EB014BF609A6F4F39A3236317B436377FC05664B562E82C662990A3276045AEFE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\addonStartup.json.lz4
Size 4KB
SHA256 0caa4ceab735f390e18bd0bff41bb13a1756b2fd16a687d654de79253d6cdd43
MD5 5e15fde1cd4a98a622444324522f3311
SHA1 5036c038d08dbce47ef18db4ffaf6900673682b5
SHA512 b726ba85f85f162ab0512895a8c0cf8ba0d42b3f6384bf87f62244d4dfeafd282adf40198defe80f27adef7c4884539786ba2f8592eceb4d275f2dd081850627
SSDEEP 96:dU55sWNNd2xWNhD4fMgGvmHQ0FVO1u+8TXqYjE2IXR1:dW2xohD4rGvmHA8Ti2a1
TLSH
T113918DB5D949FFA5FE37C08698D97F31D2DA5A7420AD9431F06BB2054CA0BE26786300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\addonStartup.json.lz4
Size 4KB
SHA256 02faa477971ae1e9826ba2e161f3bd19616fe71a0dc7cc5d550fd6684d219cf0
MD5 997902f86942013e5cf8c0767d6db228
SHA1 bfdd420d1b42427cd7d029cba50a60ee9d934e9f
SHA512 60c0cb3c4816a73129dc0dc4f9ee7053da949042abff6d784f1ef389c88d9d86a6853c9eec8f67d99e5b7593b39dd43e1932b853b8208c1cd1e84fb7b6cf254e
SSDEEP 96:NJm4sHNw6M2xWGhD41MgGvmHhF+rUe1LnOYvhQhIRhN:N/52xxhD8rGvm6AAnHUuhN
TLSH
T16BA15B7AD642EFA1FD22C04358E97FB2E6DAAB7410A9C4D4F1AAA1294D64A735704240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 36450b10b8db772a5372d59296a1b3887d95d3eed00a2641ecc6423a12700c9b
MD5 7537debc36bab05790abf4e165bd8e29
SHA1 66b0ee4c946689fd3d508d8e953bd5370bd38721
SHA512 914ff7d0db7d75cd8281bc3e21c676ae4b8c089227a7096b81bd5bb9c3c4ca9e2804dbab2e3753bb2eca2d55d51928ce83b7b6b710c4284773cf8031609131f6
SSDEEP 192:IOv5zboPHZHlyjsyC1d66JozGzgCl6mc0dz:zbo/ZHlyjYd66JozGzgC1jd
TLSH
T101E11E68E628863FC808037BDCA61F414F39389AD84E3F1975AD651C2C5B2DD768E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 bfc5a3d831009f111aca7292eb1002f2ec94e35c68419e9c74e216cdcd6a9255
MD5 47b1d3e171c4af6059e906006e46f59c
SHA1 db777ba6a8022c72c74b8a825f7f81ae09ee62e6
SHA512 c6ddf4317e2cb9e1fbbb939abf128f0c542cededfa2ab6a4014f7bad668ef4df479185263b1b4e51df3ab8ca170cf04ab0d6149ab30ef4a1bb041a3ac451f84d
TLSH
T14561C858F229863FE445423ACC971B411F347452E8AE7F2A34ACA18D1E5B2CE768D07D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f5bd8326787aaa07f5275ab2e447f33ce374862aa68b267bf27c0f9f014b597c
MD5 e6b1a502ba9f89644b2e66f97723e6b6
SHA1 f1d77b8f31e421006f541ff44c3d51da4e1ed0fe
SHA512 57663c5edd2397fc2ea50d1d58c47541a583b2547e346041975446927cc81e7dfb9f271569fa3c2789b84ff09ef7cd516abf3d11eaa7a4d14d61bd8c5ad43ffc
TLSH
T1B9217CAD3AF84D2AA8C7E6DC7581018E93E58E0B54871C435D12DF8CCD81AD932BE97D
MD5 SHA1 SHA512 TLSH

Submit Download

1c944164-45e5-4df0-9071-6e25a988aaa7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\1c944164-45e5-4df0-9071-6e25a988aaa7
Size 235B
SHA256 3bb3451e063af1e417f3fd1a9f3d480ffe9987462845f603714ba71a0e837b59
MD5 20d327052219616bedef64b1a4afe38a
SHA1 d1d3520dd5cd60c6daec10912ac47b6d3ce73e5f
SHA512 577faf5abff44bc40ecc38c4ec2511b474a807fff873f3648df374dea216b8955084750a7997ec49e31ffec3cd49b1653ba3f55be132313c58735c9d054e5ed1
TLSH
T13DD097902898AB1D48145F03B1A06CC230484C3720A09810E97104BC8AF8ACD01A282B
MD5 SHA1 SHA512 TLSH

Submit Download

4d14c1ed-69d8-4d61-bdbf-63653e37b88a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\4d14c1ed-69d8-4d61-bdbf-63653e37b88a
Size 883B
SHA256 252f573346d6acdb472356efe7da4b7a113cc6bb5c0c68f65f5f468aaa572392
MD5 b39246f2e21e47169d68b75c706d7268
SHA1 f184d9d0c10224d0eba0fccf6022399761306f7f
SHA512 0a41e0f2633c979d7209e8f13d09d850fa531e2984a250a2194f9583730b3c45a24eed6ac4455bed82419d1810b7eb3df5e2dacfce58e80204e56439094a33f6
TLSH
T1F4110041E67178B3CD2CC35BC8953B028BF43823D0CA85143EB5AA040CAF91ED367607
MD5 SHA1 SHA512 TLSH

Submit Download

991b6b19-9e1d-4127-80d1-0e08d3bcd4bc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\991b6b19-9e1d-4127-80d1-0e08d3bcd4bc
Size 15KB
SHA256 645639967de97af79db352a62dc1ab51463436498ab41f654cd6cfef56bfa642
MD5 943f943e183c98bd9ee4b54442afd8b8
SHA1 932a4c11f237304372561c4ce96f85cae7296baf
SHA512 10f593b267b2680bd12cf035363d8b8f710d1b93b0a8a5f16958a3170042e77c886e7b775767fe3f91910d50704fb0ccf53b5d08f8c54934384a7ddd511966ac
SSDEEP 192:Fz+0n6HA8P7cF+aszE+pQSiRcKzfCuNkzYlHKVSZmRWabvZOFb4AQILqyHJ3EjBH:Fq0AA8P7coI+aSiRcKzKuN2PiH4/d
TLSH
T16462C9566470597A8691E368D4E87FC3E2F618CF4C029FCE9BE47E0869EF06E1127847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aade0f23-cc67-4f90-8b5b-72e98e4aee9c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\aade0f23-cc67-4f90-8b5b-72e98e4aee9c
Size 235B
SHA256 4f6447b057064a16798cf72111719977758d5d292cfb19894c0ebd00a262b6e2
MD5 376c53f912228879a7eac1dd84b289ac
SHA1 3416ecd8ce245d4148855f0cdde71447eeff79de
SHA512 765def666e07a9d3b95daca9163442022cf3d39341cae72ce03852e1b141c1124a146b4b1656ab4f8ae9efb8b3ef17d4b1150f07b55adba5be806ce0e5b461c1
TLSH
T147D0A7D028986B6E18141F57F4E06AD631D84C3724A55820DAA659789EF99D8816281B
MD5 SHA1 SHA512 TLSH

Submit Download

db212b4d-d7f2-4c43-ba73-a4d020abba53

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\db212b4d-d7f2-4c43-ba73-a4d020abba53
Size 2KB
SHA256 13cb6c470844bb0591e51c482c7f1de4638705406a9aa15850e853001aad6ff2
MD5 61b1f30891635fb044b120e8db1a1f19
SHA1 8811d00cb2d70b07993f2cd349e3794709f53529
SHA512 da7dc8caccd940ea27ae45920133fbd9ad8994313ce2a60a0d717b2f1b0db2870a621eabea42dc73cb99c1e40bbeedee7e49888b877a6d1ccd319edc734049b6
TLSH
T17B41605876B89CB79CCBE14DD181238E53B08A4310CA18436FA1EF0CCDA765D237A52B
MD5 SHA1 SHA512 TLSH

Submit Download

e1b40d7c-6a3d-4b8d-8385-4d594b091f6c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\e1b40d7c-6a3d-4b8d-8385-4d594b091f6c
Size 886B
SHA256 1b51a44b699228d6b7f806f0e0dce0f05988abd61f8ddc0bec19da5e5a5d41b5
MD5 318b8ace38aa7a99579999cb20e70ef8
SHA1 cb7c6a43dea0d3577dc5e1ab9b116109e6bccb16
SHA512 d6489079029cd0510727d9bdfee8499ef81b3e139e4ce6679bc6aa4265d456fb7f10af28a5eb3cf675f22a28759a607ba659da9eeba1b4b3cfac0913ced7c31d
TLSH
T16211DC41D62179B2CD2C934BA4E27B0286E42463D0CD49187EA55B180CAF51DE3A6606
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extension-preferences.json
Size 942B
SHA256 cf91c5fcebee0d71d0d20ec46579b48dac36dac9f7282050c722a145290a6686
MD5 049e3f74f928fcd7fdc29233b7326c88
SHA1 a99947bcaf045b7bdea588d5c76c3407f1ebfcea
SHA512 362cce92211768838d31b556e22e7810357b52caebefacee6ba05228fcc4dccd813bc40a19bded3ac3a8bf886bb7310ea7fd46cce5f599de9891df53813558b6
TLSH
T14311F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extensions.json
Size 14KB
SHA256 b03b35c68cdc22db5c819f8c505a972e8832d130bc0e034bb0bd71527cb697b3
MD5 a703452cf7b0d35730edf2668d284723
SHA1 fc4b2c23bee560c937481e88471c953b86c7a5c3
SHA512 aa9a306ac7b5033f1bffe9d6d9332a9d077a695985c46f20656530a603a367a9bba8c58c44a17797257bb80017dcf589dfdbd49876b1ef4fe845d67c30ea584c
SSDEEP 384:XkI4vMUmldvS8dhWA94zs96oxL4Hb9L4PdL4HXL4HoL4HC:0I4ERf3Xp486y454V474K4i
TLSH
T12262421545048EB8298FA79BAA367E01C37D473B60845C78F4DD8FC802FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
Size 6KB
SHA256 f0f9b1d96e47999a42229b65d2ec76eb2806236593cf56ebcc9c6edb2e2eb3fb
MD5 0246b4fec5445f4bac096c990b964c0a
SHA1 0b6bfb23266de556bbf00a1b9e90b3985d20ae65
SHA512 967c43dec81e2beded6e7b64b46a3af4adbda384f3d310a404306c5b9ade7d0b20144801ea651aab40e7587c6e8be08e09b3dbb27503ead48d87fd79774262e4
SSDEEP 96:xH5UTUGqGqFf38t01zSws0cSSlSdv9j/n2RHKpBw88n8L4cnEVoR:XBRFf38t0Bs0cSS39KpBw88ZG
TLSH
T1A2E1207895488B7F74B637ACAC6488316AB2017BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 2a5026d9a997bfddfc2fef0185a040d99d3a756e9482f7a3e54c267e8bc6c654
MD5 86b92212c75407126b5a0b5d1dc2c1e7
SHA1 5ad1e5176e3536f71df52e5823e0c5a6da22d9cb
SHA512 89261fd798f8c45c9ddefc997c8f18603295568a51bac660477dea5980bb89285abe13d2313cb8cd35485434ae6534aec7c6adb54cc65189732ded619d321536
SSDEEP 96:xH5UTUGqGqFf3GZ1zSTSSlSdv9jg8n2RHKpBw88D8L4cnEVoR:XBRFf3GZSSSFj9KpBw88FG
TLSH
T14DE11F7890488BBF74B6376CAC6888315AB2017B77BF68D750B55484011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 2fb28aca086bb4560d9d248994f68bffe965e2f82b9c9554f895317e7b75d706
MD5 be1fdded9c67448f25511964808a4116
SHA1 93919ce70df063836ae37531c51befd621e7f4a2
SHA512 d689187a7d9f1d5a96cedfaa8c88c197e56daa6a87450ebc67066b1df0835004d3d3adf90bd4b0852ccd5cafe9980af720b28e03929152370621530e3f5984d4
SSDEEP 96:xH5UTUGqGqFf38t0ObzSws0cSSlSdv9j/n2RHKpBw88n8L4cnEVoR:XBRFf38t0is0cSS39KpBw88ZG
TLSH
T182E1107895488B7F74B637ACAC6488316AB2017BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 7KB
SHA256 55404aaba19afd0f647742dc65a953668884068640885094eb047116a7866fd6
MD5 eaadf478d105fb311fd9ccff79b6e37d
SHA1 365097528c586551f3e62558fe00daf7a152079b
SHA512 b3840e67a98d7d959cfaa29291462e5351cbbf1ade466b5e6964bfcb454362c2321e301a6b2e39236ad961d62ee581f87d91fe383474fb05fc2ab84117fda24f
SSDEEP 96:xH5RTUGqGqFf08t0ObzSws0cSSlSdv9j/n2RHKpBw88HU8L4cnEVoR:X8RFf08t0is0cSS39KpBw88QG
TLSH
T1E3F1FD789548CB7F74B637ACAC6448315AB2013BBBBF68D650B954C4011CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 d16087006d6087d22a7606ff16cd98c9b1de0cb6697a4d519c50c3cb77ba36c5
MD5 a847c5f9213d9a09b5f31b4439ec1e50
SHA1 f4e695745eb1470d6d1de16321361862ccf8d074
SHA512 b7cf892170d8e5bbadcdc2eedb4e16e1c4390400def73c233d2ecc378bf5d7b0cc879f103eafdc8a7a329ffe65275035801cd68c59d44b3b51f217a9bd2cf48d
SSDEEP 96:xH5UTUGqGqFf3GZ1zSws6cSSlSdv9jg8n2RHKpBw88n8L4cnEVoR:XBRFf3GZBs6cSSFj9KpBw88ZG
TLSH
T1CEE11F7895488B6F74B677ACBC6888315AB2013B7BBF68D750B55484011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\search.json.mozlz4
Size 327B
SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
MD5 240589068f063f8f706378168230e975
SHA1 9531374a22dea374d032f7484567fb1b201af87d
SHA512 6d04629da44769a64b8808d198f3b3ba6388a0cd5441269e35ca39e7595c4e9abd32618f76ff60b79df80732838ee2a67455e195a801a67334a592b6b6240da5
TLSH
T169E07D3E9C15A0B6C2AC0AC35F0F494A0F58583A9324AC8C90B49D91557FF9B5248E2B
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 cc94e16689b1c0db733e42e12c177fb20443084690baf033c2ca450bb13a60b9
MD5 e0f088677c41da817b3201b510ebc98a
SHA1 47f94601cac4dd9fa3b1ea8261a752bdb9675695
SHA512 f1feee9cf9866db73a9f62da4e48c571b7966f2ed5e50a3af132a4371924563e81b87cc6c6155e6fd471082863ec8a8dd6cc982d3da833452def2c98bda9e3ab
TLSH
T17021F8CF455D2DF0FE32D19B804647F5C22C346142A48CE1CB8D4F02065E54823DBA4A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 c5c59174d4b247a85232759e2b0817af685d70190bdf991246b1b9a6f55a1d46
MD5 db70c1e85207388e6b5c034b13d391c3
SHA1 3b50032e5cb570e4e8e2b20e4e8a6c239334520b
SHA512 ac005afd33c3568cba2696ad1b2f5c64b77611f641e41f808bd42233d95b3b829d63ec6d4cbc7d94edc01fa0fb2d55b6d6cdad38269d770a9beec1494ac0d2d4
TLSH
T10521F8CB459E2EB0FE32C197804247F5C22C307142A48CE1CB9D4F02165F14923C7A1A
MD5 SHA1 SHA512 TLSH

Submit Download