e037a40b286d74be8b1f93e2e65ef44c6617f6b19f1315fdfa4ba5d122cb2dc2

Analysis

max time kernel
954s
max time network
963s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
30/03/2024, 19:19 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

build.rar
Size

8.9MB
MD5

02c722c759e43a68a0a43763b00a5447
SHA1

6afd4f1026e9e8253dadd898a4cd09c5494cc80a
SHA256

e037a40b286d74be8b1f93e2e65ef44c6617f6b19f1315fdfa4ba5d122cb2dc2
SHA512

ce5b9238d5459054e8b46b656eff19421b2eb84172f9b858f51f39e2f1e3528de1ab879215480c94a86e04c9794d695e66ac2ad441277c6be243681363b0a816
SSDEEP

196608:f7E7zgvm6QSI+SvLcVTCbsnGXWyQhmDsWQkfOOXsW59eh99:ji8vnj/5VuQGXWZJLjOc0yX

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1904519900-954640453-4250331663-1000\Control Panel\International\Geo\Nation	cmd.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1904519900-954640453-4250331663-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1904519900-954640453-4250331663-1000_Classes\Local Settings	firefox.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5052	7zFM.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeRestorePrivilege	5052	7zFM.exe
Token: 35	5052	7zFM.exe
Token: SeSecurityPrivilege	5052	7zFM.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe
Token: SeDebugPrivilege	652	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5052	7zFM.exe
5052	7zFM.exe
652	firefox.exe
652	firefox.exe
652	firefox.exe
652	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
652	firefox.exe
652	firefox.exe
652	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
652	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1572 wrote to memory of 5052	1572	cmd.exe	94
PID 1572 wrote to memory of 5052	1572	cmd.exe	94
PID 4648 wrote to memory of 2628	4648	cmd.exe	111
PID 4648 wrote to memory of 2628	4648	cmd.exe	111
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 632 wrote to memory of 652	632	firefox.exe	113
PID 652 wrote to memory of 3084	652	firefox.exe	114
PID 652 wrote to memory of 3084	652	firefox.exe	114
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115
PID 652 wrote to memory of 1392	652	firefox.exe	115

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\build.rar
1⤵
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1572
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\build.rar"
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:5052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3740 --field-trial-handle=2228,i,521073434451423547,2311651514500527526,262144 --variations-seed-version /prefetch:8
1⤵
PID:1272

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\[2] Build.bat" "
1⤵
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Windows\system32\msg.exe
  msg * "Compilation failed!"
  2⤵
  PID:2628

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:632
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:652
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.0.893224290\490382155" -parentBuildID 20221007134813 -prefsHandle 1872 -prefMapHandle 1864 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cf875ef2-802f-4cbf-b67b-49a7f029612b} 652 "\\.\pipe\gecko-crash-server-pipe.652" 1964 1bea1681058 gpu
    3⤵
    PID:3084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.1.940721984\435385613" -parentBuildID 20221007134813 -prefsHandle 2352 -prefMapHandle 2348 -prefsLen 20785 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {83a022c1-0484-44ca-b942-5f09801c6631} 652 "\\.\pipe\gecko-crash-server-pipe.652" 2364 1be93c72558 socket
    3⤵
    PID:1392
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.2.907022048\384420296" -childID 1 -isForBrowser -prefsHandle 3124 -prefMapHandle 3120 -prefsLen 20888 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {25310c0e-7345-45ca-b1fb-ce266548c4f9} 652 "\\.\pipe\gecko-crash-server-pipe.652" 3136 1bea45c2658 tab
    3⤵
    PID:2808
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.3.41247020\1236186475" -childID 2 -isForBrowser -prefsHandle 3584 -prefMapHandle 3580 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8b834291-8ca6-4342-b9df-11ddf1ff2103} 652 "\\.\pipe\gecko-crash-server-pipe.652" 3596 1be93c62258 tab
    3⤵
    PID:2316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.4.1152581093\1113296518" -childID 3 -isForBrowser -prefsHandle 4600 -prefMapHandle 4596 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d2b98aff-6792-43e2-9a56-7af572abf374} 652 "\\.\pipe\gecko-crash-server-pipe.652" 4612 1bea654ee58 tab
    3⤵
    PID:5300
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.5.1643648464\227512670" -childID 4 -isForBrowser -prefsHandle 5092 -prefMapHandle 5072 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ca9c9c92-af89-4814-bb3b-3ed5d1931053} 652 "\\.\pipe\gecko-crash-server-pipe.652" 5124 1bea6aec058 tab
    3⤵
    PID:5624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.6.476402324\1357114875" -childID 5 -isForBrowser -prefsHandle 5272 -prefMapHandle 5276 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d259ff3b-a54e-4dcb-9cda-b4922552d835} 652 "\\.\pipe\gecko-crash-server-pipe.652" 5356 1bea6aec658 tab
    3⤵
    PID:5632
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.7.1216401487\341209323" -childID 6 -isForBrowser -prefsHandle 5472 -prefMapHandle 5476 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d4a460d-da1a-491c-a9b4-8eefa7239d84} 652 "\\.\pipe\gecko-crash-server-pipe.652" 5556 1bea6aec958 tab
    3⤵
    PID:5640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="652.8.100856890\1408561796" -childID 7 -isForBrowser -prefsHandle 3012 -prefMapHandle 5876 -prefsLen 28149 -prefMapSize 233444 -jsInitHandle 1384 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f580015f-2d05-4ed0-a124-8fb816b23dec} 652 "\\.\pipe\gecko-crash-server-pipe.652" 5256 1bea9648b58 tab
    3⤵
    PID:2388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4896 --field-trial-handle=2228,i,521073434451423547,2311651514500527526,262144 --variations-seed-version /prefetch:8
1⤵
PID:3112

Network

DNS

209.205.72.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.205.72.20.in-addr.arpa

IN PTR

Response
DNS

218.110.86.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

218.110.86.104.in-addr.arpa

IN PTR

Response

218.110.86.104.in-addr.arpa

IN PTR

a104-86-110-218deploystaticakamaitechnologiescom
DNS

69.31.126.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

69.31.126.40.in-addr.arpa

IN PTR

Response
DNS

58.55.71.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

58.55.71.13.in-addr.arpa

IN PTR

Response
DNS

43.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

43.229.111.52.in-addr.arpa

IN PTR

Response
DNS

86.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

86.23.85.13.in-addr.arpa

IN PTR

Response
DNS

18.31.95.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.31.95.13.in-addr.arpa

IN PTR

Response
DNS

9.66.18.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.66.18.2.in-addr.arpa

IN PTR

Response

9.66.18.2.in-addr.arpa

IN PTR

a2-18-66-9deploystaticakamaitechnologiescom
DNS

content-signature-2.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

content-signature-2.cdn.mozilla.net

IN A

Response

content-signature-2.cdn.mozilla.net

IN CNAME

content-signature-chains.prod.autograph.services.mozaws.net

content-signature-chains.prod.autograph.services.mozaws.net

IN CNAME

prod.content-signature-chains.prod.webservices.mozgcp.net

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

shavar.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.services.mozilla.com

IN A

Response

shavar.services.mozilla.com

IN CNAME

shavar.prod.mozaws.net

shavar.prod.mozaws.net

IN A

52.25.97.240

shavar.prod.mozaws.net

IN A

44.239.148.246

shavar.prod.mozaws.net

IN A

52.10.78.57
DNS

push.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

push.services.mozilla.com

IN A

Response

push.services.mozilla.com

IN CNAME

autopush.prod.mozaws.net

autopush.prod.mozaws.net

IN A

34.107.243.93
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN CNAME

prod.remote-settings.prod.webservices.mozgcp.net

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
if-modified-since: Fri, 25 Mar 2022 17:45:46 GMT
if-none-match: "1648230346554"
te: trailers

Response

HTTP/2.0 200

server: nginx
content-length: 25665
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
via: 1.1 google
date: Sat, 30 Mar 2024 18:55:45 GMT
age: 1575
last-modified: Sat, 30 Mar 2024 15:57:13 GMT
content-type: application/json
last-modified: Sat, 30 Mar 2024 15:57:13 GMT
content-type: application/json
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221711814233344%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221711814233344%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1711756863815

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1711756863815 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/url-classifier-skip-urls/changeset?_expected=1701090424142&_since=%221606870304609%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/url-classifier-skip-urls/changeset?_expected=1701090424142&_since=%221606870304609%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1711574102228&_since=%221661199890666%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1711574102228&_since=%221661199890666%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1711547229147&_since=%221662648201700%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1711547229147&_since=%221662648201700%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/sites-classification?_expected=1544035467383

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/sites-classification?_expected=1544035467383 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1702403047185

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1702403047185 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/top-sites?_expected=1647020600359

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/top-sites?_expected=1647020600359 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-devices?_expected=1653469171354

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/devtools-devices?_expected=1653469171354 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-default-override-allowlist/changeset?_expected=1710168995103&_since=%221595254618540%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-default-override-allowlist/changeset?_expected=1710168995103&_since=%221595254618540%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1710766850143&_since=%221661199949574%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/main/collections/search-config/changeset?_expected=1710766850143&_since=%221661199949574%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1711814233344

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1711814233344 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/intermediates/changeset?_expected=1711810623303&_since=%221664891823141%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/intermediates/changeset?_expected=1711810623303&_since=%221664891823141%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/onecrl/changeset?_expected=1710189695302&_since=%221658781354245%22

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/buckets/security-state/collections/onecrl/changeset?_expected=1710189695302&_since=%221658781354245%22 HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://firefox.settings.services.mozilla.com/v1/

firefox.exe

Remote address:

34.149.100.209:443

Request

GET /v1/ HTTP/2.0
host: firefox.settings.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
GET

https://contile.services.mozilla.com/v1/tiles

firefox.exe

Remote address:

34.117.237.239:443

Request

GET /v1/tiles HTTP/2.0
host: contile.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN A

Response

contile.services.mozilla.com

IN A

34.117.237.239
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN A

Response

shavar.prod.mozaws.net

IN A

52.25.97.240

shavar.prod.mozaws.net

IN A

52.10.78.57

shavar.prod.mozaws.net

IN A

44.239.148.246
DNS

contile.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

contile.services.mozilla.com

IN AAAA

Response
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
GET

https://push.services.mozilla.com/

firefox.exe

Remote address:

34.107.243.93:443

Request

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h4fBDe1g4FLDVWxwcnmQow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

Response

HTTP/1.1 101 Switching Protocols

sec-websocket-accept: HmxV7GctGSqrdyoflwHK+XMWrxg=
date: Sat, 30 Mar 2024 19:21:35 GMT
Via: 1.1 google
Upgrade: websocket
Connection: Upgrade
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN A

Response

autopush.prod.mozaws.net

IN A

34.107.243.93
DNS

autopush.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

autopush.prod.mozaws.net

IN AAAA

Response
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
DNS

240.97.25.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

240.97.25.52.in-addr.arpa

IN PTR

Response

240.97.25.52.in-addr.arpa

IN PTR

ec2-52-25-97-240 us-west-2compute amazonawscom
DNS

99.56.20.217.in-addr.arpa

Remote address:

8.8.8.8:53

Request

99.56.20.217.in-addr.arpa

IN PTR

Response
DNS

chromewebstore.googleapis.com

Remote address:

8.8.8.8:53

Request

chromewebstore.googleapis.com

IN A

Response

chromewebstore.googleapis.com

IN A

142.251.36.10

chromewebstore.googleapis.com

IN A

142.251.39.106

chromewebstore.googleapis.com

IN A

172.217.168.202

chromewebstore.googleapis.com

IN A

172.217.23.202

chromewebstore.googleapis.com

IN A

216.58.208.106

chromewebstore.googleapis.com

IN A

142.250.179.138

chromewebstore.googleapis.com

IN A

142.251.36.42

chromewebstore.googleapis.com

IN A

142.250.179.170

chromewebstore.googleapis.com

IN A

142.250.179.202
DNS

chromewebstore.googleapis.com

Remote address:

8.8.8.8:53

Request

chromewebstore.googleapis.com

IN Unknown

Response
DNS

10.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.36.251.142.in-addr.arpa

IN PTR

Response

10.36.251.142.in-addr.arpa

IN PTR

ams15s44-in-f101e100net
DNS

aus5.mozilla.org

firefox.exe

Remote address:

8.8.8.8:53

Request

aus5.mozilla.org

IN A

Response

aus5.mozilla.org

IN CNAME

balrog-aus5.r53-2.services.mozilla.com

balrog-aus5.r53-2.services.mozilla.com

IN CNAME

prod.balrog.prod.cloudops.mozgcp.net

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN A

Response

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

201.181.244.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

201.181.244.35.in-addr.arpa

IN PTR

Response

201.181.244.35.in-addr.arpa

IN PTR

20118124435bcgoogleusercontentcom
DNS

ciscobinary.openh264.org

firefox.exe

Remote address:

8.8.8.8:53

Request

ciscobinary.openh264.org

IN A

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN A

88.221.134.209

a19.dscg10.akamai.net

IN A

88.221.134.155
GET

http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

firefox.exe

Remote address:

88.221.134.209:80

Request

GET /openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

Response

HTTP/1.1 200 OK

Last-Modified: Thu, 08 Feb 2024 02:25:35 GMT
ETag: 85430baed3398695717b0263807cf97c
Content-Length: 453023
Accept-Ranges: bytes
X-Timestamp: 1707359134.18771
Content-Type: application/zip
X-Trans-Id: tx89667e5f00694599a075c-0065c59860dfw1
Cache-Control: public, max-age=103632
Expires: Mon, 01 Apr 2024 00:09:13 GMT
Date: Sat, 30 Mar 2024 19:22:01 GMT
Connection: keep-alive
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN A

Response

a19.dscg10.akamai.net

IN A

88.221.134.209

a19.dscg10.akamai.net

IN A

88.221.134.155
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN AAAA

Response

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:869b

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:86d1
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN AAAA

Response

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:869b

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:86d1
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

142.250.179.174
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

142.250.179.174
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN AAAA

Response

redirector.gvt1.com

IN AAAA

2a00:1450:400e:802::200e
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN AAAA

Response

redirector.gvt1.com

IN AAAA

2a00:1450:400e:802::200e
DNS

r3---sn-2oaig5-55.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r3---sn-2oaig5-55.gvt1.com

IN A

Response

r3---sn-2oaig5-55.gvt1.com

IN CNAME

r3.sn-2oaig5-55.gvt1.com

r3.sn-2oaig5-55.gvt1.com

IN A

74.125.4.195
DNS

r3.sn-2oaig5-55.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r3.sn-2oaig5-55.gvt1.com

IN A

Response

r3.sn-2oaig5-55.gvt1.com

IN A

74.125.4.195
DNS

r3.sn-2oaig5-55.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r3.sn-2oaig5-55.gvt1.com

IN A

Response

r3.sn-2oaig5-55.gvt1.com

IN A

74.125.4.195
DNS

r3.sn-2oaig5-55.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r3.sn-2oaig5-55.gvt1.com

IN AAAA

Response

r3.sn-2oaig5-55.gvt1.com

IN AAAA

2a00:1450:4009:1::3
DNS

r3.sn-2oaig5-55.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r3.sn-2oaig5-55.gvt1.com

IN AAAA

Response

r3.sn-2oaig5-55.gvt1.com

IN AAAA

2a00:1450:4009:1::3
DNS

174.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.179.250.142.in-addr.arpa

IN PTR

Response

174.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f141e100net
DNS

174.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.179.250.142.in-addr.arpa

IN PTR

Response

174.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f141e100net
DNS

209.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.134.221.88.in-addr.arpa

IN PTR

Response

209.134.221.88.in-addr.arpa

IN PTR

a88-221-134-209deploystaticakamaitechnologiescom
DNS

209.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.134.221.88.in-addr.arpa

IN PTR

Response

209.134.221.88.in-addr.arpa

IN PTR

a88-221-134-209deploystaticakamaitechnologiescom
DNS

195.4.125.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

195.4.125.74.in-addr.arpa

IN PTR

Response

195.4.125.74.in-addr.arpa

IN PTR

pnlhra-aa-in-f31e100net
DNS

195.4.125.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

195.4.125.74.in-addr.arpa

IN PTR

Response

195.4.125.74.in-addr.arpa

IN PTR

pnlhra-aa-in-f31e100net
DNS

249.110.86.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

249.110.86.104.in-addr.arpa

IN PTR

Response

249.110.86.104.in-addr.arpa

IN PTR

a104-86-110-249deploystaticakamaitechnologiescom
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.251.39.100
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.251.39.100
GET

https://www.google.com/search?client=firefox-b-d&q=nodejs

firefox.exe

Remote address:

142.251.39.100:443

Request

GET /search?client=firefox-b-d&q=nodejs HTTP/2.0
host: www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.251.39.100
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN AAAA

Response

www.google.com

IN AAAA

2a00:1450:400e:811::2004
DNS

100.39.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

100.39.251.142.in-addr.arpa

IN PTR

Response

100.39.251.142.in-addr.arpa

IN PTR

ams15s48-in-f41e100net
DNS

100.39.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

100.39.251.142.in-addr.arpa

IN PTR

Response

100.39.251.142.in-addr.arpa

IN PTR

ams15s48-in-f41e100net
DNS

35.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

35.36.251.142.in-addr.arpa

IN PTR

Response

35.36.251.142.in-addr.arpa

IN PTR

ams17s12-in-f31e100net
DNS

131.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.179.250.142.in-addr.arpa

IN PTR

Response

131.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f31e100net
DNS

131.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.179.250.142.in-addr.arpa

IN PTR

Response

131.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f31e100net
DNS

firefox-settings-attachments.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN A

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

225.162.46.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

225.162.46.104.in-addr.arpa

IN PTR

Response
GET

https://contile.services.mozilla.com/v1/tiles

firefox.exe

Remote address:

34.117.237.239:443

Request

GET /v1/tiles HTTP/2.0
host: contile.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
DNS

75.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

75.159.190.20.in-addr.arpa

IN PTR

Response
DNS

9.228.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.228.82.20.in-addr.arpa

IN PTR

Response
DNS

41.110.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

41.110.16.96.in-addr.arpa

IN PTR

Response

41.110.16.96.in-addr.arpa

IN PTR

a96-16-110-41deploystaticakamaitechnologiescom
DNS

206.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.85.13.in-addr.arpa

IN PTR

Response
DNS

100.5.17.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

100.5.17.2.in-addr.arpa

IN PTR

Response

100.5.17.2.in-addr.arpa

IN PTR

a2-17-5-100deploystaticakamaitechnologiescom
DNS

119.110.54.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

119.110.54.20.in-addr.arpa

IN PTR

Response
DNS

firefox.settings.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox.settings.services.mozilla.com

IN A

Response

firefox.settings.services.mozilla.com

IN CNAME

prod.remote-settings.prod.webservices.mozgcp.net

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

35.34.16.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

35.34.16.2.in-addr.arpa

IN PTR

Response

35.34.16.2.in-addr.arpa

IN PTR

a2-16-34-35deploystaticakamaitechnologiescom
DNS

136.111.86.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

136.111.86.104.in-addr.arpa

IN PTR

Response

136.111.86.104.in-addr.arpa

IN PTR

a104-86-111-136deploystaticakamaitechnologiescom
DNS

33.66.18.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

33.66.18.2.in-addr.arpa

IN PTR

Response

33.66.18.2.in-addr.arpa

IN PTR

a2-18-66-33deploystaticakamaitechnologiescom
DNS

24.66.18.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

24.66.18.2.in-addr.arpa

IN PTR

Response

24.66.18.2.in-addr.arpa

IN PTR

a2-18-66-24deploystaticakamaitechnologiescom
DNS

aus5.mozilla.org

firefox.exe

Remote address:

8.8.8.8:53

Request

aus5.mozilla.org

IN A

Response

aus5.mozilla.org

IN CNAME

balrog-aus5.r53-2.services.mozilla.com

balrog-aus5.r53-2.services.mozilla.com

IN CNAME

prod.balrog.prod.cloudops.mozgcp.net

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

aus5.mozilla.org

firefox.exe

Remote address:

8.8.8.8:53

Request

aus5.mozilla.org

IN A

Response

aus5.mozilla.org

IN CNAME

balrog-aus5.r53-2.services.mozilla.com

balrog-aus5.r53-2.services.mozilla.com

IN CNAME

prod.balrog.prod.cloudops.mozgcp.net

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN A

Response

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

location.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

location.services.mozilla.com

IN A

Response

location.services.mozilla.com

IN CNAME

locprod2-elb-us-west-2.prod.mozaws.net

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.24.13.216

locprod2-elb-us-west-2.prod.mozaws.net

IN A

44.239.120.226

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.41.233.141
DNS

location.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

location.services.mozilla.com

IN A

Response

location.services.mozilla.com

IN CNAME

locprod2-elb-us-west-2.prod.mozaws.net

locprod2-elb-us-west-2.prod.mozaws.net

IN A

44.239.120.226

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.41.233.141

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.24.13.216
DNS

locprod2-elb-us-west-2.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

locprod2-elb-us-west-2.prod.mozaws.net

IN A

Response

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.24.13.216

locprod2-elb-us-west-2.prod.mozaws.net

IN A

52.41.233.141

locprod2-elb-us-west-2.prod.mozaws.net

IN A

44.239.120.226
DNS

locprod2-elb-us-west-2.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

locprod2-elb-us-west-2.prod.mozaws.net

IN AAAA

Response
DNS

locprod2-elb-us-west-2.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

locprod2-elb-us-west-2.prod.mozaws.net

IN AAAA

Response
DNS

216.13.24.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.13.24.52.in-addr.arpa

IN PTR

Response

216.13.24.52.in-addr.arpa

IN PTR

ec2-52-24-13-216 us-west-2compute amazonawscom

20.231.121.79:80

46 B
1
13.107.246.64:443

46 B
40 B
1
1
127.0.0.1:55403

firefox.exe
52.25.97.240:443

shavar.services.mozilla.com

tls

firefox.exe

2.2kB
3.8kB
10
11
34.149.100.209:443

https://firefox.settings.services.mozilla.com/v1/

tls, http2

firefox.exe

18.4kB
1.5MB
273
1174

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221711814233344%22

HTTP Response

200

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1711756863815

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1683667257606

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/url-classifier-skip-urls/changeset?_expected=1701090424142&_since=%221606870304609%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-telemetry-v2/changeset?_expected=1711574102228&_since=%221661199890666%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-compatibility-browsers/changeset?_expected=1711547229147&_since=%221662648201700%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/sites-classification?_expected=1544035467383

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?collection=partitioning-exempt-urls&bucket=main&_expected=0

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1702403047185

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/anti-tracking-url-decoration?_expected=1564511755134

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/public-suffix-list/changeset?_expected=1575468539758

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/pioneer-study-addons-v1/changeset?_expected=1607042143590

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/top-sites?_expected=1647020600359

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-providers/changeset?_expected=1647549722107&_since=%221621943542621%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/doh-config/changeset?_expected=1651753780606&_since=%221621943462970%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/devtools-devices?_expected=1653469171354

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends?_expected=1659924446436

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/addons-manager-settings/changeset?_expected=1688747728721

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-default-override-allowlist/changeset?_expected=1710168995103&_since=%221595254618540%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1710766850143&_since=%221661199949574%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/cert-revocations/changeset?_expected=1711814233344

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/intermediates/changeset?_expected=1711810623303&_since=%221664891823141%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/onecrl/changeset?_expected=1710189695302&_since=%221658781354245%22

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/

HTTP Request

GET https://firefox.settings.services.mozilla.com/v1/
34.117.237.239:443

https://contile.services.mozilla.com/v1/tiles

tls, http2

firefox.exe

2.1kB
7.8kB
20
19

HTTP Request

GET https://contile.services.mozilla.com/v1/tiles
34.160.144.191:443

content-signature-2.cdn.mozilla.net

tls

firefox.exe

2.6kB
16.5kB
27
32
34.107.243.93:443

https://push.services.mozilla.com/

tls, http

firefox.exe

2.0kB
4.8kB
12
15

HTTP Request

GET https://push.services.mozilla.com/

HTTP Response

101
127.0.0.1:55409

firefox.exe
142.251.36.10:443

chromewebstore.googleapis.com

tls

2.1kB
8.3kB
20
23
35.244.181.201:443

aus5.mozilla.org

tls

firefox.exe

1.9kB
5.7kB
20
19
34.149.100.209:443

firefox.settings.services.mozilla.com

tls

firefox.exe

1.0kB
3.9kB
11
9
34.160.144.191:443

content-signature-2.cdn.mozilla.net

tls

firefox.exe

1.9kB
10.3kB
19
22
88.221.134.209:80

http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

http

firefox.exe

2.9kB
467.5kB
56
349

HTTP Request

GET http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

HTTP Response

200
142.250.179.174:443

redirector.gvt1.com

tls

firefox.exe

1.5kB
8.9kB
15
19
74.125.4.195:443

r3---sn-2oaig5-55.gvt1.com

tls

firefox.exe

33.0kB
8.7MB
699
6250
142.251.39.100:443

https://www.google.com/search?client=firefox-b-d&q=nodejs

tls, http2

firefox.exe

1.9kB
7.4kB
16
20

HTTP Request

GET https://www.google.com/search?client=firefox-b-d&q=nodejs
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

369.9kB
3.9MB
3432
5822
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.1kB
3.9kB
12
10
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.0kB
3.8kB
11
9
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.1kB
3.9kB
12
10
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.1kB
3.9kB
12
10
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

firefox.exe

1.1kB
3.9kB
12
10
34.117.237.239:443

https://contile.services.mozilla.com/v1/tiles

tls, http2

firefox.exe

2.1kB
3.6kB
18
19

HTTP Request

GET https://contile.services.mozilla.com/v1/tiles
34.149.100.209:443

firefox.settings.services.mozilla.com

tls

firefox.exe

2.0kB
1.4kB
17
15
35.244.181.201:443

aus5.mozilla.org

tls

firefox.exe

2.1kB
1.5kB
18
18
52.24.13.216:443

location.services.mozilla.com

tls

firefox.exe

1.8kB
4.3kB
15
15

8.8.8.8:53

209.205.72.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

209.205.72.20.in-addr.arpa
8.8.8.8:53

218.110.86.104.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

218.110.86.104.in-addr.arpa
8.8.8.8:53

69.31.126.40.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

69.31.126.40.in-addr.arpa
8.8.8.8:53

58.55.71.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

58.55.71.13.in-addr.arpa
8.8.8.8:53

43.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

43.229.111.52.in-addr.arpa
8.8.8.8:53

86.23.85.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

86.23.85.13.in-addr.arpa
8.8.8.8:53

18.31.95.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

18.31.95.13.in-addr.arpa
8.8.8.8:53

9.66.18.2.in-addr.arpa

dns

68 B
129 B
1
1

DNS Request

9.66.18.2.in-addr.arpa
8.8.8.8:53

content-signature-2.cdn.mozilla.net

dns

firefox.exe

81 B
235 B
1
1

DNS Request

content-signature-2.cdn.mozilla.net

DNS Response

34.160.144.191
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239
8.8.8.8:53

shavar.services.mozilla.com

dns

firefox.exe

73 B
157 B
1
1

DNS Request

shavar.services.mozilla.com

DNS Response

52.25.97.240

44.239.148.246

52.10.78.57
8.8.8.8:53

push.services.mozilla.com

dns

firefox.exe

71 B
125 B
1
1

DNS Request

push.services.mozilla.com

DNS Response

34.107.243.93
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
161 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

34.149.100.209
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
110 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.149.100.209
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
90 B
1
1

DNS Request

contile.services.mozilla.com

DNS Response

34.117.237.239
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
116 B
1
1

DNS Request

shavar.prod.mozaws.net

DNS Response

52.25.97.240

52.10.78.57

44.239.148.246
8.8.8.8:53

contile.services.mozilla.com

dns

firefox.exe

74 B
155 B
1
1

DNS Request

contile.services.mozilla.com
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
153 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
119 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

34.160.144.191
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
86 B
1
1

DNS Request

autopush.prod.mozaws.net

DNS Response

34.107.243.93
8.8.8.8:53

autopush.prod.mozaws.net

dns

firefox.exe

70 B
155 B
1
1

DNS Request

autopush.prod.mozaws.net
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
131 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:92a9::
8.8.8.8:53

240.97.25.52.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

240.97.25.52.in-addr.arpa
8.8.8.8:53

99.56.20.217.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

99.56.20.217.in-addr.arpa
8.8.8.8:53

chromewebstore.googleapis.com

dns

75 B
219 B
1
1

DNS Request

chromewebstore.googleapis.com

DNS Response

142.251.36.10

142.251.39.106

172.217.168.202

172.217.23.202

216.58.208.106

142.250.179.138

142.251.36.42

142.250.179.170

142.250.179.202
8.8.8.8:53

chromewebstore.googleapis.com

dns

75 B
132 B
1
1

DNS Request

chromewebstore.googleapis.com
8.8.8.8:53

10.36.251.142.in-addr.arpa

dns

72 B
111 B
1
1

DNS Request

10.36.251.142.in-addr.arpa
8.8.8.8:53

aus5.mozilla.org

dns

firefox.exe

62 B
180 B
1
1

DNS Request

aus5.mozilla.org

DNS Response

35.244.181.201
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
98 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net

DNS Response

35.244.181.201
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
175 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net
8.8.8.8:53

201.181.244.35.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

201.181.244.35.in-addr.arpa
8.8.8.8:53

ciscobinary.openh264.org

dns

firefox.exe

70 B
286 B
1
1

DNS Request

ciscobinary.openh264.org

DNS Response

88.221.134.209

88.221.134.155
8.8.8.8:53

a19.dscg10.akamai.net

dns

firefox.exe

67 B
99 B
1
1

DNS Request

a19.dscg10.akamai.net

DNS Response

88.221.134.209

88.221.134.155
8.8.8.8:53

a19.dscg10.akamai.net

dns

firefox.exe

134 B
246 B
2
2

DNS Request

a19.dscg10.akamai.net

DNS Request

a19.dscg10.akamai.net

DNS Response

2a02:26f0:a1::58dd:869b

2a02:26f0:a1::58dd:86d1

DNS Response

2a02:26f0:a1::58dd:869b

2a02:26f0:a1::58dd:86d1
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

redirector.gvt1.com

DNS Response

142.250.179.174
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

65 B
81 B
1
1

DNS Request

redirector.gvt1.com

DNS Response

142.250.179.174
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

130 B
186 B
2
2

DNS Request

redirector.gvt1.com

DNS Request

redirector.gvt1.com

DNS Response

2a00:1450:400e:802::200e

DNS Response

2a00:1450:400e:802::200e
8.8.8.8:53

r3---sn-2oaig5-55.gvt1.com

dns

firefox.exe

72 B
118 B
1
1

DNS Request

r3---sn-2oaig5-55.gvt1.com

DNS Response

74.125.4.195
8.8.8.8:53

r3.sn-2oaig5-55.gvt1.com

dns

firefox.exe

140 B
172 B
2
2

DNS Request

r3.sn-2oaig5-55.gvt1.com

DNS Request

r3.sn-2oaig5-55.gvt1.com

DNS Response

74.125.4.195

DNS Response

74.125.4.195
142.250.179.174:443

redirector.gvt1.com

https

firefox.exe

3.2kB
9.5kB
7
10
8.8.8.8:53

r3.sn-2oaig5-55.gvt1.com

dns

firefox.exe

140 B
196 B
2
2

DNS Request

r3.sn-2oaig5-55.gvt1.com

DNS Request

r3.sn-2oaig5-55.gvt1.com

DNS Response

2a00:1450:4009:1::3

DNS Response

2a00:1450:4009:1::3
74.125.4.195:443

r3.sn-2oaig5-55.gvt1.com

https

firefox.exe

1.8kB
6.5kB
5
8
8.8.8.8:53

174.179.250.142.in-addr.arpa

dns

148 B
226 B
2
2

DNS Request

174.179.250.142.in-addr.arpa

DNS Request

174.179.250.142.in-addr.arpa
8.8.8.8:53

209.134.221.88.in-addr.arpa

dns

146 B
278 B
2
2

DNS Request

209.134.221.88.in-addr.arpa

DNS Request

209.134.221.88.in-addr.arpa
8.8.8.8:53

195.4.125.74.in-addr.arpa

dns

142 B
220 B
2
2

DNS Request

195.4.125.74.in-addr.arpa

DNS Request

195.4.125.74.in-addr.arpa
8.8.8.8:53

249.110.86.104.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

249.110.86.104.in-addr.arpa
8.8.8.8:53

www.google.com

dns

firefox.exe

120 B
152 B
2
2

DNS Request

www.google.com

DNS Response

142.251.39.100

DNS Request

www.google.com

DNS Response

142.251.39.100
8.8.8.8:53

www.google.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

www.google.com

DNS Response

142.251.39.100
8.8.8.8:53

www.google.com

dns

firefox.exe

60 B
88 B
1
1

DNS Request

www.google.com

DNS Response

2a00:1450:400e:811::2004
8.8.8.8:53

100.39.251.142.in-addr.arpa

dns

146 B
222 B
2
2

DNS Request

100.39.251.142.in-addr.arpa

DNS Request

100.39.251.142.in-addr.arpa
142.251.39.100:443

www.google.com

https

firefox.exe

18.2kB
100.3kB
46
112
8.8.8.8:53

35.36.251.142.in-addr.arpa

dns

72 B
110 B
1
1

DNS Request

35.36.251.142.in-addr.arpa
8.8.8.8:53

131.179.250.142.in-addr.arpa

dns

148 B
224 B
2
2

DNS Request

131.179.250.142.in-addr.arpa

DNS Request

131.179.250.142.in-addr.arpa
8.8.8.8:53

firefox-settings-attachments.cdn.mozilla.net

dns

firefox.exe

90 B
177 B
1
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net

DNS Response

34.117.121.53
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

106 B
122 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.117.121.53
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

106 B
199 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

225.162.46.104.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

225.162.46.104.in-addr.arpa
8.8.8.8:53

75.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

75.159.190.20.in-addr.arpa
8.8.8.8:53

9.228.82.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

9.228.82.20.in-addr.arpa
8.8.8.8:53

41.110.16.96.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

41.110.16.96.in-addr.arpa
8.8.8.8:53

206.23.85.13.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

206.23.85.13.in-addr.arpa
8.8.8.8:53

100.5.17.2.in-addr.arpa

dns

69 B
131 B
1
1

DNS Request

100.5.17.2.in-addr.arpa
8.8.8.8:53

119.110.54.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

119.110.54.20.in-addr.arpa
8.8.8.8:53

firefox.settings.services.mozilla.com

dns

firefox.exe

83 B
161 B
1
1

DNS Request

firefox.settings.services.mozilla.com

DNS Response

34.149.100.209
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
110 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.149.100.209
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

35.34.16.2.in-addr.arpa

dns

69 B
131 B
1
1

DNS Request

35.34.16.2.in-addr.arpa
8.8.8.8:53

136.111.86.104.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

136.111.86.104.in-addr.arpa
8.8.8.8:53

33.66.18.2.in-addr.arpa

dns

69 B
131 B
1
1

DNS Request

33.66.18.2.in-addr.arpa
8.8.8.8:53

24.66.18.2.in-addr.arpa

dns

69 B
131 B
1
1

DNS Request

24.66.18.2.in-addr.arpa
8.8.8.8:53

aus5.mozilla.org

dns

firefox.exe

124 B
360 B
2
2

DNS Request

aus5.mozilla.org

DNS Response

35.244.181.201

DNS Request

aus5.mozilla.org

DNS Response

35.244.181.201
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
98 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net

DNS Response

35.244.181.201
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
175 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net
8.8.8.8:53

location.services.mozilla.com

dns

firefox.exe

150 B
350 B
2
2

DNS Request

location.services.mozilla.com

DNS Request

location.services.mozilla.com

DNS Response

52.24.13.216

44.239.120.226

52.41.233.141

DNS Response

44.239.120.226

52.41.233.141

52.24.13.216
8.8.8.8:53

locprod2-elb-us-west-2.prod.mozaws.net

dns

firefox.exe

84 B
132 B
1
1

DNS Request

locprod2-elb-us-west-2.prod.mozaws.net

DNS Response

52.24.13.216

52.41.233.141

44.239.120.226
8.8.8.8:53

locprod2-elb-us-west-2.prod.mozaws.net

dns

firefox.exe

168 B
338 B
2
2

DNS Request

locprod2-elb-us-west-2.prod.mozaws.net

DNS Request

locprod2-elb-us-west-2.prod.mozaws.net
8.8.8.8:53

216.13.24.52.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

216.13.24.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\f97d9gc7.default-release\cache2\doomed\37

Filesize
9KB

MD5
e5a3cadd4c45a10a1c9edbc837c931e2

SHA1
5d73925d85bade1fcff0bdab20bc7c2730a6b324

SHA256
56b3cb82d0acc5ccbd049a501798083dd0b1e521b5711e5d63a74187223b8598

SHA512
e09cd2c81cc2294bc451daae674c052af0ab892d3272fcff2d8c2ca4b367ea2a05c156545fca9fa7d5a7b82ec1d1aed5130bd1f510e72ffa6c298bda3a0e5931

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\f97d9gc7.default-release\cache2\entries\A72798DEF4F924983D5A0DB82D383C613B515FF2

Filesize
13KB

MD5
70532dd430a38fd0b48792ee4f202a9f

SHA1
67a8ce5f72a865e6246379b2163c470ad1284701

SHA256
b825a2b6337e0d7065e3e7e66e7a4e64c605ee70c0a0912172ef65f625c5c4ce

SHA512
a04e2e65596ec6cef26bf94f41232197a942dafe1f5316fee56f73e70508d1b460d5e61150c50f0e4c0d054923945e30727db9e247a380431ee6bdeab4380f88

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\f97d9gc7.default-release\cache2\entries\DE23CF9E01AA6278843163311B343B07086E02FC

Filesize
207KB

MD5
a695e5ef00b908d7fae391aa6ecc3ded

SHA1
6aa3530052dcf6516de3c0506c4628d288040d0e

SHA256
030e6fd73871f3ec7bd29970d2f736174980ed663cf6e6dfbf0892d68a2d0f20

SHA512
6be732ee5c973e5d78b60320001b88ccff223eebe8c222c35eb3f5941d232123eea8130c11271baa9785bc5305ec5f1f0fe7ed303137624e7886855ad1ecfdc3

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\@babel\helper-validator-identifier\LICENSE

Filesize
1KB

MD5
b1d0cd283a346e919abb3beeb018279d

SHA1
578785efdec6fa01dae357fb1e7675ccac00861e

SHA256
117da2af0d4ce0fe1c8e19b5cff9dcd806adf973d328d27b11d4448c4ff24f76

SHA512
29844c3773154ee8b2e579050c77793e74261da427b77cf5ea7b010de3f167d60d9aaec8165b25a41065477508fb3be56c47a6ce8c0e61e2a297d6b4664398c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\@nodelib\fs.walk\LICENSE

Filesize
1KB

MD5
580f1c3c6765fecfdb93bdf4e068d952

SHA1
5dc937a8eea3b2c0a0642549a96bd7ef5f5a851a

SHA256
9363d160bf41d46d83901a5d24fc3fe2094c2afc17b4a2378914b273977ee2de

SHA512
925cb3b6d777eb613d8a7a455365f48e467e91a599f8f84311725f3207ee5832b00b87429b09466ddb030ac42358f52cb6cbacb36122cdcaa3799359b36429f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\@nodelib\fs.walk\out\types\index.js

Filesize
77B

MD5
8963201168a2449f79025884824955f2

SHA1
b66edae489b6e4147ce7e1ec65a107e297219771

SHA256
d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230

SHA512
7f65c6403a23d93fb148e8259b012d6552ab3bff178f4a7d6a9d9cec0f60429fc1899e39b4bca8cc08afc75d9a7c7bfdb13fc372ca63c85eb22b0355eb4d6000

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\ansi-styles\license

Filesize
1KB

MD5
915042b5df33c31a6db2b37eadaa00e3

SHA1
5aaf48196ddd4d007a3067aa7f30303ca8e4b29c

SHA256
48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0

SHA512
9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\color-support\LICENSE

Filesize
765B

MD5
82703a69f6d7411dde679954c2fd9dca

SHA1
bb408e929caeb1731945b2ba54bc337edb87cc66

SHA256
4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b

SHA512
3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\is-docker\license

Filesize
1KB

MD5
d5f2a6dd0192dcc7c833e50bb9017337

SHA1
80674912e3033be358331910ba27d5812369c2fc

SHA256
5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3

SHA512
d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\micromatch\LICENSE

Filesize
1KB

MD5
0f64900f8f30e53054962c9f1fc3205b

SHA1
6210a5e4e9224b4fc8ef250fe227311daa2bc5ac

SHA256
35bdd8a44339719441900fb50fbefc5e2dca1ca662cbaed7a687de842c8b70f2

SHA512
72392bccd8964c88ec8aa3d815746a2b6a4466d9c7ca8f428d7d0f3e2bb11674ef494ca335c8b255eee5825c087a77bb45a5d60025f318b78a64e19beccd23c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\minimist\LICENSE

Filesize
1KB

MD5
aea1cde69645f4b99be4ff7ca9abcce1

SHA1
b2e68ce937c1f851926f7e10280cc93221d4f53c

SHA256
435a6722c786b0a56fbe7387028f1d9d3f3a2d0fb615bb8fee118727c3f59b7b

SHA512
518113037ee03540caae63058a98525f9a4a67425bd8c3596f697bed5ae1d2053fe76f76b85a4eefb80cc519f7b03d368cf4b445288c4ca7cacb5e7523f33962

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\CONTRIBUTING.md

Filesize
1KB

MD5
08365b138b43284489ecfbf6efd44a25

SHA1
1b97e91ac67fcbbd711dedd3b5c388c08489eeaa

SHA256
56e4e12a6934a2c4d36c7bf893f4d8aefa6c96f9ffcec357dfa6476e36c4f1f5

SHA512
85494ca6582db6aa3679f532c540f2075516628c02abd6fc827369cf8ec1f2ac66092ff815406d4670c7a33cadc62f34c2c478136953656ce85a7d5755f8c31e

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\GOVERNANCE.md

Filesize
5KB

MD5
70b44945cec4643ca805d87f673fbd34

SHA1
f30fd9ba0fa4f12c900d1b7bb248aa568a72cc3c

SHA256
7a521e462d1c6f3b599c44637fb337bbf969dda311510a87236ec539a415331d

SHA512
586f0f2a46ae29e8dc0b5931e144d3b7536057cb0a6d2ecfc72544c5048a1fc9417d14fbdb45f33e21eef99a2a0e302a3c74d2f8e360573544c8328593053daa

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\LICENSE

Filesize
2KB

MD5
a67a7926e54316d90c14f74f71080977

SHA1
d3622fac093fe1cbcb4d8e8d35801600b681fc45

SHA256
ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54

SHA512
e61de704d5a76afd66b5d9b1c78f0a5afe9a846686ca2fb28c814a4a60dbe82a190ed4a6a2f31e09bf6d695b8ec178ebea9804593029c58c1b1bedd793324d13

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\README.md

Filesize
4KB

MD5
b74798599e79e7156cf3e9b564ad343d

SHA1
52403774755feda6c34189fc2dc756e37c8c00aa

SHA256
93e374225fa62e8b1423059092bd614b6fe837315f3c10688362f20dfe2c54a4

SHA512
5b60d33e0dc4da9b45e24e3c4b9e1d986ef5035d9553a76fb398a1fa734e213a7004d284f8ba8a54379dcfb079ed5059b0e6c915997ed98c09dacce28aa5a5c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\errors-browser.js

Filesize
4KB

MD5
d86574a5b6f48686bcd88be75575a5e1

SHA1
2d9dbcf11e8b3d3a084bd408abfdbda5ad21f762

SHA256
346033597378d23e59068d120d6257f7cd85ae88c40b1f85c3329cece0d119c4

SHA512
8dfd61578f9defdd32ad7e726fe645075189425dc083735fe71d160239f4e56bb4c8b8bba1151b24ab4eed2fe07a80d0e342e36e173b82c99428428f0eee57eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\errors.js

Filesize
3KB

MD5
548cc34803fb38415a833ae633b73048

SHA1
c12a741abe200aacc443f40633d398f1369739bb

SHA256
7028cca95b2f124345bd5b816e0d8184e7b7d208fe0aa76eb38df43e8644fd03

SHA512
db6acc32fc19eef87ae6ee900b7284cf686d9eb980c9a8a188353652dbe6e516b59962d5c5b98c4c631de06d1e55d53ffdfd72722d77089f91713b5e6f9eb56d

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\experimentalWarning.js

Filesize
460B

MD5
ca7fa51ebed78cb79b54099bf75d5662

SHA1
e3f0fbe7c78388bbf9f0e4d97ab318a852df082e

SHA256
5f9beff594347ba6765b806ec36e25699be1407627e2ee91be5d609e40baacb8

SHA512
9f587a44a76130befd8acb440c18b0176a3c5a403765c85fdc3aa56dd68ff060988b1830b97266171dae2a26cdf42f873092a6e648d37fdebda3ba87ab00b784

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\_stream_duplex.js

Filesize
4KB

MD5
3e7b822c399acb53abc5b0a031277e4a

SHA1
57e5b8d44c5f6c083810abb4639a5d2684369cb4

SHA256
e2e55263df344f33d016a3e051de1a86e2206989a2162951e651e5557665954c

SHA512
2da2217f7e735185130e977a3847b3c0f91277a054158cad8b0c0432c590b792a175f329286d4c67b9e98738ca3d7d25a0452e93ebc631048cbb3f32635931c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\_stream_passthrough.js

Filesize
1KB

MD5
03079912917033cc780db259ec6dd815

SHA1
0b7ab4aaf1a5034c444971dda33dd85175bf3b7b

SHA256
af6250df6a49a0148eed8b5f2e28b2f692c3ffa9df538a59dc716a4bd10901e2

SHA512
1a487ae07412f5d5be9c092e958a76379fd0e15f45e8f7273acede692e91f26e2ef8d192dadcf8b11afa39eded68124adaa592fcd64d0e36131c855b9a600d8b

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\_stream_readable.js

Filesize
35KB

MD5
39e30df90f63a90f6d003c31738ec17c

SHA1
fe2d066c4943e19a77af1306b48e2801e56ec842

SHA256
9837de8cae91f9a80da75368855b45c3ada9a858983355fd873d8885cab1c5ab

SHA512
4fc65ad2eaf6bd4aec41698599437cfd0740172a25eef3fc106c85c9b47e68b737e3982cb5d5fcff4aa8996529ab7bfd02567a6ba6ea79043b7e0d45ffa07e72

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\_stream_transform.js

Filesize
7KB

MD5
f88b61a833f9fed00f17a4a0352ae99e

SHA1
1ff98cf12e4bc54a554e251b47039b5e1e16b466

SHA256
a2f6e6d17a74dfa75bc7b34b50546ebcb76eeb2f4aac6d1090f80915aee20342

SHA512
376dfd4f17c1bcdb9488f5ae3038cb6c0d409719818b0fa5ea3fe71cd11cb41afa1eb06fed3fd705da47c6a3742b0355e46242f224247a96f5757feb9a4d98f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\_stream_writable.js

Filesize
21KB

MD5
1997e9040e13749540039901789afac1

SHA1
2ea69c1e8e0c9fd0fb25a8e5ed398bd3803ccb7a

SHA256
0f3f2accecd343dfae91d7daa72f3ad125b6f139d5883ff51362042d8cb65cf6

SHA512
74c072d3160a8f0be3ac6434087c1faf7adef7271b1355e79fa2535e8b3ffede9b57415c3f295ed8f21532aa4be50bea668f0fd79572c1726b8c3d0fd5b42016

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\async_iterator.js

Filesize
6KB

MD5
da1df0ed0e055bd4d0867cb4109c8c65

SHA1
722f1aecd505d1dbd2c790855aa5442073ebd637

SHA256
56a7dde0d36ee9f55032df01e78229602c6afed6b6915362f33dc65bc0359972

SHA512
424f58a4f470d9844bdb5e116c88b780d6908370ec87a0920fdfcf08d369d112f7a6022de43fd52c138751217323f343a0acee36c61d395fc1dd685482750495

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\buffer_list.js

Filesize
6KB

MD5
5941a6c05d57bcf11a8a2e5ed7ed5583

SHA1
63024ca878bb415b3c33254a22aff1cb08d96063

SHA256
15b266db6ad5c6ee0309d13ed4ce137d8974d2fd236c1af7f3d602b7028a90df

SHA512
bb686b29c52c02f4aad72337ae6db160087ec11626c38b98b1a7d6e6131b96856cbfe3829e236f8e93f8cd648d70681df60a1165771b9748f4fc4cd34b46d2ab

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\destroy.js

Filesize
3KB

MD5
911f1b0a9da5646f070719a4b5155ed4

SHA1
4360512d8ccddc09d6a2af937c24d3293af7d928

SHA256
e1c1a185a2cc4bee2be5e7d33b5e294eb0fb55c1a47b61853a8c43e50cb822a4

SHA512
1414a8362c638244f3049055c7807dc0f452025c3d7329131c0506d84a6d35135e847ede2d72816d082090d505a7c855e1f56bc8123e1e7ed739c5a4e0577db1

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\end-of-stream.js

Filesize
3KB

MD5
e1cdad2418fe697448b02ebbcd9cf684

SHA1
5331e3e33c1c4f6113e2ee195606057985365b3b

SHA256
2c35cabc9b279cb81e73d0d14859b2056ea10d9688d16a12199d2ca9904b93ae

SHA512
63630cf251f4f3543e86296ceff044a960f8d37ac0592f0e06121f913494296748cba35e36a11d8f5968536a7e7cd7e0f13837e39a4839050d1f2df6d60388e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\from-browser.js

Filesize
101B

MD5
2ac62af594da915c368dd629992c488f

SHA1
2bea06bcbc5b65c53a72bb45d254edcaf19d15bb

SHA256
4b4404c7bd6f66a2175cb7a29c60ce4395c055775ec45eaa35af4357656f604f

SHA512
12f7b9a13387540ee91fee1e0e2608511a95d072ee7d072e635b5ccb6231e27e60e199589f02ffa49c1e654c49535fcbc93f17d305271768cc0fe2c1715c0a11

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\from.js

Filesize
3KB

MD5
4c81629d079da2d4b4d15f3d62df7ce8

SHA1
be965caf7212b5951cd7d6478e9c9eda9235dbf0

SHA256
b7b5815f476b47a23d094ecfa4f1c53beca69d4f5a42ed452d133b79a1bf28ae

SHA512
33e19535cdc017d74e704ea09b40040025a389ac5f173febd101a30b885429b63ef9d7f5985f26a580baa558f09e81c5d506f4f7d875fd9e8b12ba7e1509f122

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\pipeline.js

Filesize
2KB

MD5
95708e1741d7ce72561ddca9bf6fffe3

SHA1
eb07bc48f37c4ae097677c91ae592430d7518507

SHA256
6d51b72e1ae5ee0965f0f549e27ececdb4963605995ffad8b698d5359a9999c2

SHA512
1a09035f671703adcd2e5728378fcb0d6c2cab54597e433c9aaef0d0cbd52917b5ff644da8ad94c38b3cacd38ef62cf0ec2a0ea84ff570c273a613168a89c4fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\state.js

Filesize
745B

MD5
0306df5e76cad892f09d4c46fde02529

SHA1
10fdfeb79c0a4cd671b562744be948f789bc4d5e

SHA256
bf9c5ce1ccde2131d474422bef258dc968d6d19ccac72f9b178e8246faf0c9ed

SHA512
4a69284449be01d0d2b7b0118694e6b3190539fc533ff3bca5d6205e22e4683c0fc98796cf75a38b16c2b13df01f61ba7fefe7a8639b39b2186ed621554617ef

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\stream-browser.js

Filesize
49B

MD5
df20453c19af8406babdf987facd76d9

SHA1
0167a0dc72daab83989846563aae870f37549151

SHA256
72d46a15491627d8fb1489a47d03583cfe5c21902918016ab532b53e615e5a9a

SHA512
8004aca5efc10cf89bf41ecbb6586f9acd707ef3b789cc714043c48c0d47b6479d9d2c2fd9894aedc683edcb88fad8b28517d329417d6e2d0e2b639d964956d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\lib\internal\streams\stream.js

Filesize
36B

MD5
76bae0aaca4d9c61a71995751b67448b

SHA1
90b89ec87417d1301e7615a3ba50b04626c2796c

SHA256
1e7903927df33aadb3659ecce55266c9c851da65ce6c8b723a60a305c1c5422c

SHA512
9be70625af9c47a3772622031cdc4ada6e009d9ddf71f7409109ef6b6adfb444414630897eab07f77bd268f66c9462d199cb72934e0bb4fdbbe614f16bb3de24

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\package.json

Filesize
1KB

MD5
9c2127bf7f0075c3bf99edb27a77034c

SHA1
6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac

SHA256
469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69

SHA512
d00872ec72a9d21517524c1b20e4b224070ae811532175c3766a0178717cd5a8886eb930c5a8a0ba94fb96b319112479f5364f46708da66b2e819e691a890308

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\readable-browser.js

Filesize
488B

MD5
ea67eda027d1f8aa5078acdff67d3348

SHA1
696dd57f91137e8efe4cb6448fcf63f48b33c4d9

SHA256
c4ff3ea62ef65a2c68ea721dcbd58b621150660facd02be95ebfc556c4dd123f

SHA512
53306f43fb3cbcf6f96783d89a20a40eb18391b299ed7060274a4e75d830519fc30efb34cd3e8ef8f37e910e469aec8760c1edec4d37f20e07c6f6414d0027b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\multistream\node_modules\readable-stream\readable.js

Filesize
729B

MD5
f78ab238be23d4747a8bb44e35b6bc81

SHA1
857455f43161c4c63b67a42de981ef947385303c

SHA256
2944f1d3c8c5d5c5e07e7c30d6cbef5fc37440b7c73de47aeb37fa8424f04bf1

SHA512
b1413c818a305ffb1a4d249ecec9d011a1fd99ac43d6bfd05c4320251494272bbcf2bcc849e6a5c3c31adb725345556d3180a117d32011760981e267427c0ab5

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\npmlog\LICENSE.md

Filesize
798B

MD5
c637d431ac5faadb34aff5fbd6985239

SHA1
0e28fd386ce58d4a8fcbf3561ddaacd630bc9181

SHA256
27d998b503b18cdb16c49e93da04069a99ba8a1d7e18d67146de8e242f9a6d21

SHA512
a4b744c1d494fcc55cd223c8b7b0ad53f3637aac05fe5c9a2be41c5f5e117610c75a323c7745dfeae0db4126f169c2b7b88649412b6044ba4a94e9a4d8d62535

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\pkg\dictionary\async.js

Filesize
36B

MD5
f1ea4ea9321952a7e04f63f08a1d155a

SHA1
54bea56ca7ed6d96c4f536c8d3eba442ed452e40

SHA256
50f47736cfe04fa93ed474b6e86f229cb7fd2290033d1d78bc39c34a89d5608a

SHA512
6c65d7b9f516028086e316b1064e64ea7038566a2ae384bf276e9e227da577cda3e33ad40ab7dd59248c0f380d6e6b5fecfcb7794873e47b7fc85aa64ca0ab02

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\pkg\dictionary\negotiator.js

Filesize
78B

MD5
b51537d85d347435a2c1896687f196a1

SHA1
0feab7033768649144de9eb9079a070749123470

SHA256
56eccb3af60466e6cea8dc91b4e4eb9d082dbdf8782906759e5aad61f1e9477b

SHA512
1d1e854b8470f09872c21d2af542ea720996609ac27cd3a063610344f69e3e8bf3f3a8efb117fb86661f6b5c28e98ed7c6f99c34c612616a778e6b06a01f16fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\pkg\dictionary\npm-registry-client.js

Filesize
81B

MD5
bdbb5ecf771b274fe3f740bb73ef4b73

SHA1
57238f719aeed3695561c002ecb432503572f4d5

SHA256
17d52cbb41ff5e65c2ad5b712b4d95309744cbce50c222cdb40c11b0632f8d6b

SHA512
5833e2e67f8d8bed8c01f1cacbfa6b02bd0dc224222f6632366dc352f975b5087cda95a765d398c96bf6f3a8c9351955b23a39441426360fa9c997ba58f4dde5

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\resolve\test\resolver\dot_slash_main\index.js

Filesize
20B

MD5
0c1d9e1731bb3d71b0b7a15695bfab14

SHA1
db311f33466c97593aa59411fcfd87e8489d8f50

SHA256
6e66e366f0aefb84ad8110afcd9b2245702c643c831edf8316ff048fec739d2e

SHA512
45e19626ce38abfafe540dd1b108ef171a927b97bfa75fd3943f5f2670e2db6e58af7a33fd3caf0a75fb0e8fac0961928627b9abc743234de97c320b7dd09918

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\run-parallel\LICENSE

Filesize
1KB

MD5
fb42e5aa12bb9e365d38b4b5691d6984

SHA1
0b07e9e19edfdc78ee5954f0373459dbf7ba97f9

SHA256
d4c2065e2b936e62a4eb400efb4576edec9ca1388a9f78aa288e147275e7bc8b

SHA512
50e2ffc46c70b93c6c6b22749ced928305c2d7cda8d272d904e79a82094345ddb6addd5c26396eb60b65a5d13c49de3add40e52a34765456180f51b21ebed7a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\ssri\LICENSE.md

Filesize
755B

MD5
5324d196a847002a5d476185a59cf238

SHA1
dfe418dc288edb0a4bb66af2ad88bd838c55e136

SHA256
720836c9bdad386485a492ab41fe08007ecf85ca278ddd8f9333494dcac4949d

SHA512
1b4187c58bebb6378f8a04300da6f4d1f12f6fbe9a1ab7ceda8a4752e263f282daebcac1379fa0675dd78ec86fffb127dba6469f303570b9f21860454df2203f

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\supports-preserve-symlinks-flag\.nycrc

Filesize
139B

MD5
d0104f79f0b4f03bbcd3b287fa04cf8c

SHA1
54f9d7adf8943cb07f821435bb269eb4ba40ccc2

SHA256
997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a

SHA512
daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\tar-fs\LICENSE

Filesize
1KB

MD5
9befe7026bf915886cd566a98117c80e

SHA1
a95ab3a4b0e4bd978897f09b3b430a449da20a08

SHA256
3fe8d55a98dbf260eace67c00cf9bc53edb46234e840098a0b93df3096b97fb6

SHA512
b52ba143042812d6dd1031a12946afddb6e8f8ebbc7169c59c138d16aafc5e261aae92fe6b1ea94a3d80e39d2415c4b219710ef46939a2df135db24a0cf712fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\tar\node_modules\chownr\README.md

Filesize
59B

MD5
d9f96917a7cad57c9e1758e948f4afb8

SHA1
9311846d7edecf37eb87f6b561abce96c0c7c76c

SHA256
cafe18aeaf5d10a590bc8ffdcfb2f4e6120438a2364964aba4d8968693124984

SHA512
bea74d12294e9b9130aee336a53cf81ab61a5a018a982bf1b41c4b07b129bac0a6ae97daae6d095766c9689359b178b50b5479e9e291cf6abb0e24220bd8212f

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zECB3B00A7\build\node_modules\tar\node_modules\chownr\chownr.js

Filesize
4KB

MD5
227f54d2f419316fcf6b9fd1e1bf34aa

SHA1
0bedfd417b196606ff4b7d4c7ae6c9bb318f23e7

SHA256
529b285703d29b8ab31ead64bd1f64146bac12147cc09ceb4b25f0db87a12c96

SHA512
36dd24f1eb26f796ef841459850c4c8ba28296acb3570fe8643ae270384ccd721635ed728e20573cbfcb43ee49cef50cdede2699d4c7714798847be43a2d3beb

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
442KB

MD5
85430baed3398695717b0263807cf97c

SHA1
fffbee923cea216f50fce5d54219a188a5100f41

SHA256
a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

SHA512
06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
7KB

MD5
27cf9be124eafbc0e6959105090a0980

SHA1
d937e7c1915840514611eeb1a64a937b5e31cec3

SHA256
d28cd85c83fb602413d90bbfa22f4785df6f16515e3804c5216004380d69287e

SHA512
accf2a44c101e50d330d56331446250634c54d4c85e11d9675065d7f2ddb2c8bf1ea02f72992687733ec18f4cf5953058ccb8ed8b39de2228d50ed75314406cd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\bookmarkbackups\bookmarks-2024-03-30_11_47vPADsxW7vnEuNc4tFS3g==.jsonlz4

Filesize
952B

MD5
3fd2bbed04cf90d7d9119ee273e2f9f8

SHA1
08e8a10ab1ca13e0cffaeed7e20dd5ed8d9ec915

SHA256
0436d371f2a5372585dfe705739ca5e27c1b71505c97156927c516729102b972

SHA512
4b394a66dcfa18e65241a2b075b1f26cad902c30d23f4f289be68876ff113a3b77045e0488703ea5be8e2c2bcdd2a7f5cddb145c9b028edc0e9e84a8534489bc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\broadcast-listeners.json

Filesize
216B

MD5
e02ec2c8d2cd4e4ce9ecda6934e74183

SHA1
5dd14ab1f5d30cb1b2a31832e64b6657cfa00e05

SHA256
941cee081ee61861037d85cae880df4db43741a5756f30d2cb381e316b76d828

SHA512
a3691e77c8168f736592fc359c82dcc9c45455996f81d819a452904d20062472a8c2d5d5432a0afb94f8b2da3400e141f54dad5087a0ed566a4f69031c5b20d1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\datareporting\glean\db\data.safe.bin

Filesize
2KB

MD5
15b880ec1a4f6939c1ea8231125bfe28

SHA1
7e54dbce185feea4c675f4c7f8e2b1bf19fb3a4c

SHA256
2f11f6b7a18d2709edf57f813ccdc0ffb821b1f2a0bd5617417bbe399fb0eedf

SHA512
75218866ed9a294c71737c12a29124c258873443f2ee7e19093a203f52d62b55b3d4083ecc563768638d01c14e6601b91b541cb5922ca4e6a06c4227b34e057f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\datareporting\glean\pending_pings\a8834679-c8dd-48d0-8556-4b20dbed3b08

Filesize
746B

MD5
79ba185936c5a9f8d3345eb0677f8417

SHA1
3a82c1bba2023322487e5133cdc152567c8903b3

SHA256
12de83ee3de6cd6212fe21f111accedc7a3cca09deb06d876b88f710e29d52a3

SHA512
73e65805d4e41241662178de2dd33343de41df1f6e5ac34f88ea2ffc267702cba1f10d17b7ebe62f49e486feab17d6f2288c6e3bd822fdd9e83c46e7b169ca68

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\datareporting\glean\pending_pings\b81bc51c-6d73-415d-84c1-b0ba99d38028

Filesize
12KB

MD5
466c6ac0afed9997a7204f5bd5a6e54c

SHA1
99f00005478b878bcd77a28d01ada01e8060d4ad

SHA256
5fabc9b00f2689996aa0222649c16dbf1497956935a24144df56f3ade14907ee

SHA512
a53ca405f3761cc4f3d722209c172abb2c3b9fd0fcc74cab8c72c85b4908afcb63daeb90e243f4572e445d47ee94f312c3624740fc0846ce86466614f0783753

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\extensions.json.tmp

Filesize
34KB

MD5
332c1905c827a1149533b778ad159b3b

SHA1
b6595e56083344c96ef13a2c9226c41396a446e7

SHA256
26dd33aed7680cab632f492a16f9d6dca307048a055b1333e17c63fa316c5328

SHA512
806aa07785d8d1fb8aa76368e04ccd4d74f9304706527b1167ac1fbdb06a9d7a4100677f572c6a244026abaa32762d420486db4e8beb9b4f5ae1f061a0547026

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs-1.js

Filesize
8KB

MD5
aff60732477440d04e1397580e0f33a8

SHA1
a8b408e8f9249c4856e63f52ed5efc4ba915808b

SHA256
8265036477bc9e35ff5a557b2ea66193ea6806cb99050e4f41162964dc88fb70

SHA512
b233317593d0f1e2aa7f1fa3acf6b96ddd765a5ec9386e7c7d33755a166d4c6d27903e96f134fe43a7a72cbf1a49f84fc199d02e550766a8522289e0a1a7e382

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs-1.js

Filesize
7KB

MD5
1ae90534cb5ae87593fb6843e04e637d

SHA1
a43c0447827e9a628bea582d0f3c0309da708a56

SHA256
e58c6972b262402aea03133be14f0870f498073eb38dcc1cff3899531031af90

SHA512
68f9c692febce7121677b7ef5a226dcdb77f021787452e96d5018f8e9aa93e2fd6f29cbe1e0d9282a1cfb43c3d35f1981254c0f6c06fc873d2bb823f57efb4ed

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs-1.js

Filesize
10KB

MD5
3f08ac2831c3316c80cfc56994753187

SHA1
1dd854ac6771120273e4f3b379be93ed3ef955a6

SHA256
e17394e4c40a5144b8b6e646e1825a982a3d29c61dbd552e830d901343cd6e3f

SHA512
5afbf97b1ca8c8a5f4307ac48d3451b26eef724bd3aef2d5b219bde24c7fe3f57a9633583fce3b458bfd1dbd98f5c3eeceb9ddbdfba99debe6b98d031b6fdfe7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs-1.js

Filesize
6KB

MD5
8cf28c615eef21d81f99f540dc67c15e

SHA1
4c735ff89a9bc53806ad68c5841aefcd4f749130

SHA256
83f6dd03e6457aa4ea741fdda0558bc6ddb120f0dd45bd9d7975c954fec5c6be

SHA512
6ba19737c964efcb0387fc87b9bf35bb2f76fb6f21a4c83c5fc4c2b627e722ee5cabb41d91d8e276982468fc3b71a820c385c4a3274ef1c60c9910aa70a11147

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs-1.js

Filesize
10KB

MD5
37b48d4c88628bdac76fcd1fde2fa63a

SHA1
d0567619434314334f1a02c469503268e4f158eb

SHA256
87dc97bf85288abbb2384e561dd5a2b1bd03b441f02ad17860711085b39f28c0

SHA512
00326d20e088e7aa84ecbe60fa8c6ed75954f54318e67ac36da15410a82b4f4338d53bafb3af21b065326ec6717dd10938e68842f0a836019543c3998751bc21

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs.js

Filesize
6KB

MD5
7cb615dd1066afd9df9e54768c107dd9

SHA1
e6843a796e40465da5d8ffcb81554bea48596899

SHA256
51214c032d30dc9bff6db645aab7b9434c21383ffac490fa748e902b112bec01

SHA512
d27246b6a16837cd0ad0384c1c8720ffa5049dc0e7ae4fe26f3044bcbefbcaaf353ebbeb6dc443b0c106e41326aef28af2e9a6b59000c0463cd975f8fc07e0a5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\prefs.js

Filesize
6KB

MD5
a29f152e37580fa5e6602b4be7d0a18a

SHA1
500661a5c0a5e166aa7df1a5d3b9e9e15623f1ed

SHA256
ee289f10a4437ed9d95ae726581784e372b02674d0852e787ee6f0a0522c5cb9

SHA512
7bd3301c824a6bbe05e8f41115a4ceaafbc7bdc66347ad2410fb699dc0efb086ad5b294d1c9ddcb0150f8f6495364e9edab885a6ff78a379d804f7ad3763c0fc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
3KB

MD5
159cf7d11e12569c34a77586a0a9eaa4

SHA1
b0b5150ab2eb988c5ba3d041363aa9bf0d6f18c7

SHA256
b552fd03c2b2be144aaf8f482dd11a8ed75c6cf5cf916cfc3f4ebe7ba7293ae5

SHA512
68ceda4523f8ee2419a86e6a3c78ea4cf769d71114eb7d2e306f5a41b3da442d9d17cd0707bcb1728d7bb4888a562e59bd8a0442bf5771d2a1ba0189e6667519

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
cc3775ee1d1ea19393b1a07fb8f0e3aa

SHA1
d2fe0a0b45b87453d29a73a9244dc5fe6212c13c

SHA256
e3ee3bbf516669a119a24a247e099dcf2cc26229539edf9c7feaef02366120b7

SHA512
1a8558e4b7f75072ca305dc703f70b47208246d06403bcbb04d5cf9b1ea99c9cb877e116c38ba17f586f78f482ec48aa14ed1579971f1a18a61d482484cad6df

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
4KB

MD5
c67aa1064e6820fc795bce23e4db295c

SHA1
5c3a7828243c750183399a64b601c70109fab64c

SHA256
e8cee9cbd0c31d716220be5ddfb13b9f593f3676bf35c17b0f2c1497b514e9f9

SHA512
618b3e42c59df46e229ae9986fac4a39225544ce7b63965c73d64f1479107463753144088bccec5e234edb7638f67988b6c105ea7c0491e85a8cb80de63b22c3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
1.5MB

MD5
ecdddde3fc137c60da15a51376c95f14

SHA1
d9c4fcb400399e121dd8766aed828de99041c718

SHA256
e420699d5e38434cea2e113fbd93027f166e50bd43852c12df0c6560d4c76053

SHA512
576de93382d1b12c38287eedbf823b709b3685738d215e1ac2ae5b0e6a056ee8f3af52a48679989127fb0ac272dabfa6807d45f3a7d8e877c3a1a205146fe99d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\f97d9gc7.default-release\targeting.snapshot.json

Filesize
3KB

MD5
66bf08fd6aa8a3e3c5cd2e3494e9daae

SHA1
b0d35f95f6bc54438107a1a758c5189fdb0efefc

SHA256
ac168a1ea8fa001c23ce2200e891e07b8223446c7c8b257e12a61dd05a5c90e0

SHA512
d56943aab30aaf0ba766b2db00c6990f07b0e0bf9333e05998aef3436e88e18315c8581bbcd99ebff94c61bdafbe20cb1aa5dc66a6f72a4e1dab7a9b0516c9eb

Download Submit
C:\Users\Admin\Desktop\[2] Build.bat

Filesize
480B

MD5
552e7248b4953b77a80cb3100beaaefb

SHA1
837843b6d1297505d4aacb1e544995d5add3a385

SHA256
f5d6e1f0adebbf5655c85bec4e970175d5abc4c2494aced7f8791c88ffb19709

SHA512
648a483e59b12abcba56975ff061465ef8e0f86ca2b1c158e170adc34de1e7ab0c46e739197e671568f3841c8f12fd6ae8c6a1e76f69e70fcb60cb1da68cfcab

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request