Malware Analysis Report

2025-08-05 21:12

Sample ID 240410-xzannshb35
Target MBSetup.exe
SHA256 74b0bf9c17091ab1c6c61af0aefbc599f1ecc0fff6dee0144a3dfd5cd1f5e18f
Tags
discovery redline zgrat infostealer rat spyware stealer upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

74b0bf9c17091ab1c6c61af0aefbc599f1ecc0fff6dee0144a3dfd5cd1f5e18f

Threat Level: Known bad

The file MBSetup.exe was found to be: Known bad.

Malicious Activity Summary

discovery redline zgrat infostealer rat spyware stealer upx

Detect ZGRat V1

RedLine payload

RedLine

ZGRat

Drops file in Drivers directory

Reads user/profile data of web browsers

Checks BIOS information in registry

UPX packed file

Accesses cryptocurrency files/wallets, possible credential harvesting

Downloads MZ/PE file

Legitimate hosting services abused for malware hosting/C2

Drops file in Program Files directory

Checks installed software on the system

Executes dropped EXE

Enumerates physical storage devices

Program crash

Suspicious use of AdjustPrivilegeToken

Modifies system certificate store

NTFS ADS

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Checks processor information in registry

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-10 19:16

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-10 19:16

Reported

2024-04-10 19:47

Platform

win10-20240404-en

Max time kernel

1524s

Max time network

1587s

Command Line

"C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"

Signatures

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\drivers\mbamtestfile.dat C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\mbamtestfile.dat C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3540 wrote to memory of 3360 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3012 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3012 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 3252 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 1380 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 1380 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3360 wrote to memory of 1380 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\MBSetup.exe

"C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.0.1199631431\311463652" -parentBuildID 20221007134813 -prefsHandle 1716 -prefMapHandle 1708 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5c133697-7274-4bea-b9b0-3d8e3595d16f} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 1796 209b24d9958 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.1.715959697\1721751552" -parentBuildID 20221007134813 -prefsHandle 2140 -prefMapHandle 2136 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {75eeeb0d-40ff-4a71-924b-6a2d7b3ed81a} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 2152 209a7472558 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.2.1245744743\1818344023" -childID 1 -isForBrowser -prefsHandle 2988 -prefMapHandle 3004 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {643d8381-d07d-4d3f-897d-e9691996a9de} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 2780 209b245f058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.3.552857092\1101177578" -childID 2 -isForBrowser -prefsHandle 3516 -prefMapHandle 3512 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {18cd31f4-624b-4a07-9911-29be22206e12} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 3444 209a742d858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.4.162301372\686543595" -childID 3 -isForBrowser -prefsHandle 3884 -prefMapHandle 3524 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {72627712-32b6-4c2c-8575-5cbfa4078661} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 3892 209b7b18b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.5.1053495656\1630273479" -childID 4 -isForBrowser -prefsHandle 4880 -prefMapHandle 4892 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9cf3fd83-f946-4e7f-b498-a0d54b0d8fbb} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 4920 209b85c2e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.6.1956506675\1957555489" -childID 5 -isForBrowser -prefsHandle 4904 -prefMapHandle 4900 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {697abd7b-13f1-4602-97f6-ba0b867843ec} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 4944 209b8b4a458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3360.7.1395309235\2135693558" -childID 6 -isForBrowser -prefsHandle 4944 -prefMapHandle 5248 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2099b48-db04-4705-bcae-bf1c9ca1dd30} 3360 "\\.\pipe\gecko-crash-server-pipe.3360" 5156 209b8b49258 tab

Network

Country Destination Domain Proto
US 8.8.8.8:53 api2.amplitude.com udp
US 44.226.6.28:443 api2.amplitude.com tcp
US 8.8.8.8:53 28.6.226.44.in-addr.arpa udp
N/A 127.0.0.1:49802 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 54.245.32.185:443 shavar.services.mozilla.com tcp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 8.8.8.8:53 185.32.245.54.in-addr.arpa udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:49808 tcp
US 8.8.8.8:53 53.121.117.34.in-addr.arpa udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 ciscobinary.openh264.org udp
NL 2.18.121.73:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 73.121.18.2.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.201.110:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.201.110:443 redirector.gvt1.com udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 r1---sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com tcp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 166.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 16.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 44.240.83.117:443 location.services.mozilla.com tcp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 8.8.8.8:53 117.83.240.44.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.237.239:443 contile.services.mozilla.com tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\pending_pings\4db73c5f-928c-4293-b502-cb1faf22e421

MD5 1af2ac1a5ee6f9a257ca986992449588
SHA1 64d94e5afdb0f261951dcbd1f5cf87dc6c5da50a
SHA256 6b9690fbecf0d93bdef9b83abf43c068857c03ddeb711f6a8ed8a59f0509b60e
SHA512 6d69b0670d6f7b0e0bc899b6a1d2a573ed5d728b5e2cb3fa3bb1113105672e7186a2148f98d7aabc3c6ebc43bd3fc0e1b2cd8e684f69aaa7e7ea795cdf98e8e3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\pending_pings\6119f649-596d-4bce-b320-7bc7044fc3d2

MD5 095c204b1ff63639309aefe28ec9e03a
SHA1 cfe389b0413e2a2fb622ac6757f9c5d7245e5b12
SHA256 5a453332e1a758744c5cb9d9a68a507d400dbdd03229ebe9265b2602ce5055ca
SHA512 6d5b19d3b7a7b4859081e33e6a12e75612f41d3e58c7e6cb10bb734390ddabfbafba3447b215f373645709b1555bdd85056476768e221fddbe4747e1d1ce0833

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\db\data.safe.bin

MD5 86c8b040427843ae9c601351c1345822
SHA1 1f0630ae00aba64df59a5a4ded04f2ce15b4dc33
SHA256 2bfeb6c46bc68d69e624e9a67393e83c53805bde5fc9527ed080a0cd91017360
SHA512 c7d4bf9e5f8ad6160ed36de5b4ba47054cb5c483a209cf3ade3daf7236a357422f5650bb48d65e9c1c2622c2f023b0ded4bdf6f7543ba4a8cefbea70ceac13b2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

MD5 c460716b62456449360b23cf5663f275
SHA1 06573a83d88286153066bae7062cc9300e567d92
SHA256 0ec0f16f92d876a9c1140d4c11e2b346a9292984d9a854360e54e99fdcd99cc0
SHA512 476bc3a333aace4c75d9a971ef202d5889561e10d237792ca89f8d379280262ce98cf3d4728460696f8d7ff429a508237764bf4a9ccb59fd615aee07bdcadf30

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 85bf17aaec32ae68a980f8c06a49e377
SHA1 1856ba65e41d35e248197ca50e7843a49699a6be
SHA256 04fc19e65e8ba0ecd2c6585ac9db07f7897aaa8e65d516545f1ae071c36a3cfb
SHA512 8464f76f78d1bb93b0cbfa05e83f6ae7f4b169353d0d2871bd2d618d928c2c55a29d6b52b0b7beed4ee9189b35d3d31ec236aa5e2e4c8300b91442ece939037a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C

MD5 f6165601a0e6a678cf1807a0efd9027c
SHA1 1edd5d5008469249cb299abb417f63bfa9fef7e8
SHA256 9c1e7d335ac100c8bbeff341caf2525982c3b7fc87d113bfeedab45d7f5cab64
SHA512 df879b434c02ba792697c7110c0e20d3c9a7b6c6ba1df3e57ab1b0f3dc2bbe6e229cd340cb34e9b2e35645753106d571692bd6ed7b3fe7987a69b6b97fe4734a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 fd55f36f176d743ab7013b8da521cb65
SHA1 d0cacc9fe5f8a448fbec36fca43cf95ea02a106c
SHA256 8009e6114618aee7bc604bc3e67b14d667682d8ae224d7d137a3072d3ff0cc69
SHA512 e2753c966feb1612efa0375b435ad266fac56240ff7cb4badac6a5b8c8d0ef8ed3f88e76825772bb088f4c606fe0db0ae73e9505260ab910be0d0eb677369828

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 2c34857944757a75709e583c992dd46a
SHA1 2c6102419cdcd7550aabd6605736c41ecd77f59b
SHA256 ea04f500a3cb40d151221fd3f6dbce6d65dff00011d57ae7f52d8360badac88f
SHA512 607bc623b69d7441604bb94b0c9362d746d885fbabe993b2c562602a4f22da2d168890b56d50c845518f0da9c696a092949d675fb65570b73d60e0df0c93b09c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 f8c53769265a36f3c243a9d34934c2e8
SHA1 88bb74bc8e5d59353b52d6f7756f5738d782c811
SHA256 6c0d9d85f02e4e9dca918b62644e6b10789827086215f24853b60be677b9b63e
SHA512 0e597419a20f5a65198bc4aa89b68f78dcfaf6c9812b2b006d83633ce168cf01266920a6a47fd59cbb15578e2688507dcc51968c28786ab7483f2d6619316d4e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 aebd7732944d2a0c1080d7d3bb300c73
SHA1 be85e1890cf9d43a198b662953e609ad2c738258
SHA256 b66a5573202b73e22497a6b52ddb59d1b67b1685d9d821e78b13f485c1cd017c
SHA512 d5601a45996124c39af7ad632f350f991158f433c5766a5965b991341fa929e3a921cb97ebb237281039f40bfbd98ab4a708c4150dfc18d8e9fa8463f7dd23c5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\broadcast-listeners.json

MD5 00c3e3efda1ee565df083ef12fd866ec
SHA1 e260e7dc9fb717f6512dbb7d87c1ca32f21246df
SHA256 79593892142cebe2dcf4c559a34d05a9773387d0daf5b4d786d97c8ef27a6ea1
SHA512 b1faab06ddb61ad54736c681efa6f3a9f5cb0ac92f03355d03bd18a4a3897968ba472a058379268f68dcc889f6d7233d4984c4db2d4c1f670b7863fbc7544fd1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\targeting.snapshot.json

MD5 f80303eb90d836b29d173f4af0d3d06f
SHA1 6d6a336e1f2e2ea0f196f74b736d0c550572f467
SHA256 64ff06ec310eb9681324d03fbd39df9fe1114d5a0cdbc7428f8e36f228604640
SHA512 1d4a7ab4c310dc342813ea7e074e2dc3fb6b3666c57d4c3127aeca620469b7755d343fc08d905ad6f5f722223618b19df25c9b34869cb0c0e42f46f8adcd7be4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 329f99b9e9aa477d6f540a1330b4a6f8
SHA1 0ec24550e7ac85c87f0760e46cda3825cf12b1eb
SHA256 5ab69bd05cc4a06a12c0e80c104e57c1b35db65d038068295d57eae5ba72705f
SHA512 b6fc74ba37fb74be18042979e3277c53aecb085dd38b939f0c2b87a572233e98c1f5e3ef8997832cebb351fb63280b73472f5e118f0afe6ea18366fc43033245

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\bookmarkbackups\bookmarks-2024-04-10_11_fHex2gcaYrcM3bB6rAfVHg==.jsonlz4

MD5 06d87d126355fd690e457ce18b4778f7
SHA1 3de1658c09f3729a9ef1e86d20a4379192b125b3
SHA256 d7f1acf55995a0c37cee175af46bd974fa2bb09f2905e9001aeaf604166b7294
SHA512 78ea844adc923e9d7383c4c2c2566aa99097542d69ad04655398dae6ae4e7b9b63037c5c5a7776e939f6337f216e5e906fac5f3faef5bdad8302b117ee653eb5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\979581C3E304E73A28C04371AD0D7425356D6BDF

MD5 3d2017f929ff41fa0517a895ffdfbbc6
SHA1 1873c817430bc04fc896799052306c8f5d91a388
SHA256 964d3bade1edda46c462010a12e93c0c227d60a56bc23b6f00dd12af6768ef7a
SHA512 aadb6af847c81c87329fb6c05d86b6d752087bffc9c2d0504d01dc0dfaf91452f641d1bb112349efd2c4393e4921ee7f8012f684a05a4e79009d3ac724301845

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 458639b6cc1d221796352fc21a1cfc36
SHA1 630e8c607514930ae2b4768f9666cf8336d13ce4
SHA256 57d3271a56740fcd21c43ec586af2aaa0d340803c3b03a417eb636149f0dfd91
SHA512 e40e16c5e7e25bc3ba1689f6bd4fa284673a60bcfdfe726e5ed47b8875ecc5677c10ebfb6e83fb9a8fc4016841d21be28286a474723c0fcce82a0a031f723dcd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\extensions.json.tmp

MD5 5ebd0622338bda931843fbee29c374d8
SHA1 04e73b6e8cdc0f56e5faa396ec1db543621f0d8b
SHA256 97a2a6dac05273711c0717e0cb8d04763691ac175c675760b5db81d332c31289
SHA512 213155fd8a53bc7b5c40940cf4f3cb400cdde4218893b4d31a8f8262ad8621af2fb738014402333c1c220b6692683c3f47e7dc56a13290adcbdd32c62f29cd52

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\28458

MD5 d01b54159ba6643419c8cd605ce8a7d4
SHA1 f6aa277f90a795928559e5b4192840b09cfe899d
SHA256 7634278154016d28c4c011fc8b12fdf74f5580874e77a02df395b5ff75648d08
SHA512 d2c67e8bbac585dc92b522a321e88094c9a4eebab7766a789e9a5b6685ccc83a719f137776d85593345703b555c346cf80c7da570e3bf16c3f428969efbc4698

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-10 19:16

Reported

2024-04-10 19:33

Platform

win11-20240214-en

Max time kernel

952s

Max time network

954s

Command Line

"C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"

Signatures

Detect ZGRat V1

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

RedLine

infostealer redline

RedLine payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

ZGRat

rat zgrat

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\drivers\mbamtestfile.dat C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Accesses cryptocurrency files/wallets, possible credential harvesting

spyware

Downloads MZ/PE file

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A sites.google.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\mbamtestfile.dat C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\Downloads\Nexus\Nexus.exe

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2567984660-2719943099-2683635618-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2567984660-2719943099-2683635618-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F1A578C4CB5DE79A370893983FD4DA8B67B2B064 C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F1A578C4CB5DE79A370893983FD4DA8B67B2B064\Blob = 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 C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\Loader.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\Nexus.7z:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\MBSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
N/A N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Loader\loader.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Nexus\Nexus.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3992 wrote to memory of 1636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 2180 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 2180 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 2788 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 2788 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1636 wrote to memory of 2788 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\MBSetup.exe

"C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.0.1586543487\1823532834" -parentBuildID 20221007134813 -prefsHandle 1796 -prefMapHandle 1788 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c1806e1-efe8-4bda-94e5-a2b080b362d2} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 1884 1ae377b9258 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.1.257184874\1772371084" -parentBuildID 20221007134813 -prefsHandle 2248 -prefMapHandle 2236 -prefsLen 20783 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9885b3a0-da25-4729-b777-1d1fb14e0aff} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 2260 1ae2b76f858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.2.382688385\901511061" -childID 1 -isForBrowser -prefsHandle 2960 -prefMapHandle 2860 -prefsLen 20821 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2dd69375-0942-4f8f-a500-0054e2d48403} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 2872 1ae3ca9de58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.3.1775904999\1989971426" -childID 2 -isForBrowser -prefsHandle 3440 -prefMapHandle 3436 -prefsLen 26064 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b3927950-7201-4acd-83d7-1c7ef2ae6c2b} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 3452 1ae3a0fbe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.4.2027284594\780182928" -childID 3 -isForBrowser -prefsHandle 4500 -prefMapHandle 4496 -prefsLen 26123 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {299354d9-d06b-4cc7-a2d6-c8aeae9f492a} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 4508 1ae3e5d6758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.5.1659233134\1106986088" -childID 4 -isForBrowser -prefsHandle 5032 -prefMapHandle 5036 -prefsLen 26202 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e8457a15-6dc9-4a52-8905-3d1c814ddc31} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 4904 1ae3ca5b458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.6.855273071\1859527450" -childID 5 -isForBrowser -prefsHandle 5152 -prefMapHandle 5156 -prefsLen 26202 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ae5c30ba-33a8-4438-95c3-5aff6c526992} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 5088 1ae3ca5c658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.7.992994097\1500653481" -childID 6 -isForBrowser -prefsHandle 5352 -prefMapHandle 5356 -prefsLen 26283 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cab9b3ed-fdb2-4601-ab48-b252ede38869} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 5344 1ae3e5d6a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.8.1072072103\849161068" -childID 7 -isForBrowser -prefsHandle 5800 -prefMapHandle 5808 -prefsLen 26283 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bca8751a-cfc4-4036-a267-8a307376e059} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 5784 1ae40efee58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.9.2043595522\1431196538" -childID 8 -isForBrowser -prefsHandle 5780 -prefMapHandle 5192 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {994c8a0d-dd6e-48b3-9ece-661f836d61ca} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 4216 1ae3ca5de58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.10.1838711596\1906513441" -childID 9 -isForBrowser -prefsHandle 6028 -prefMapHandle 4592 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b79779a9-8721-4396-9e68-880a73033b66} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 4660 1ae41716758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.11.557500542\1648627769" -childID 10 -isForBrowser -prefsHandle 6184 -prefMapHandle 6188 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5663d930-c0b6-4ca2-80c5-e3a5130ec696} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 6172 1ae41718b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.12.1483594690\1006406106" -parentBuildID 20221007134813 -prefsHandle 10120 -prefMapHandle 10124 -prefsLen 26723 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9bd2c047-b046-4ad3-a88e-336ce82c81b0} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 10112 1ae41fa7a58 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.13.718046597\324656520" -childID 11 -isForBrowser -prefsHandle 9988 -prefMapHandle 10084 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4439aac1-b06c-457b-9752-fd318467d68d} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 10148 1ae420d0b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.14.1676784286\2052415904" -childID 12 -isForBrowser -prefsHandle 9796 -prefMapHandle 9780 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd9622d6-6b53-4874-a7f6-b99ea19151fa} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 9864 1ae42352158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.15.444716951\1686072444" -childID 13 -isForBrowser -prefsHandle 9808 -prefMapHandle 9804 -prefsLen 26723 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e0a36742-2375-4c61-bacc-4d9975779cef} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 9752 1ae42351258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.16.108976973\1707227059" -childID 14 -isForBrowser -prefsHandle 9396 -prefMapHandle 9404 -prefsLen 26775 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3d6b8605-287e-49c2-8fad-e356531ed67a} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 9388 1ae424c2b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.17.166878840\1198103219" -childID 15 -isForBrowser -prefsHandle 9100 -prefMapHandle 9096 -prefsLen 26934 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7fc5661-0f67-413c-ad57-5a53ee27e53c} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 9516 1ae42f6a458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.18.1539271413\1706775108" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 8736 -prefMapHandle 8728 -prefsLen 27145 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9071754-f259-4c6a-b8ef-f583fcb068d5} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8744 1ae4069be58 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.19.1233199003\655548982" -childID 16 -isForBrowser -prefsHandle 9300 -prefMapHandle 9308 -prefsLen 27145 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c1c0c30-5996-4565-af36-68976e8e9c5e} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8784 1ae43a09f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.20.2121509629\652507619" -childID 17 -isForBrowser -prefsHandle 8560 -prefMapHandle 8556 -prefsLen 27145 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {61d58331-3923-4b33-8e45-f7a641474f30} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 10288 1ae41e03b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.21.1322397430\215912452" -childID 18 -isForBrowser -prefsHandle 8400 -prefMapHandle 8396 -prefsLen 27145 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0792a94b-911d-452d-9465-bf84f0025149} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8404 1ae42b86c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.22.550724567\498325968" -childID 19 -isForBrowser -prefsHandle 8196 -prefMapHandle 8188 -prefsLen 27145 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {27a87815-744c-48e4-9607-8fab85f3fd4b} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8204 1ae42b87258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.23.807569160\1372066518" -childID 20 -isForBrowser -prefsHandle 8460 -prefMapHandle 8464 -prefsLen 27357 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d4e2e2bf-ae82-47f8-be29-2c6e4dc7282e} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8436 1ae42b86958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.24.1227696225\1044577199" -childID 21 -isForBrowser -prefsHandle 8628 -prefMapHandle 9228 -prefsLen 27357 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ead23f6-a812-40f0-9e53-98c5c8468109} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 9200 1ae42f3f258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.25.1649317923\1856664424" -childID 22 -isForBrowser -prefsHandle 8464 -prefMapHandle 9456 -prefsLen 27357 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ebf1ada2-dfd5-411c-a7c6-7aeac67c7c35} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 8456 1ae4523c558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1636.26.1569930063\1785818264" -childID 23 -isForBrowser -prefsHandle 6064 -prefMapHandle 8448 -prefsLen 27357 -prefMapSize 233444 -jsInitHandle 1076 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d63b84a1-7257-43a7-bb7a-1f10f37a569b} 1636 "\\.\pipe\gecko-crash-server-pipe.1636" 6356 1ae454ad958 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Loader\" -spe -an -ai#7zMap23013:74:7zEvent2903

C:\Users\Admin\Downloads\Loader\loader.exe

"C:\Users\Admin\Downloads\Loader\loader.exe"

C:\Users\Admin\Downloads\Loader\loader.exe

"C:\Users\Admin\Downloads\Loader\loader.exe"

C:\Users\Admin\Downloads\Loader\loader.exe

"C:\Users\Admin\Downloads\Loader\loader.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.0.102093031\1597744296" -parentBuildID 20221007134813 -prefsHandle 1660 -prefMapHandle 1652 -prefsLen 21494 -prefMapSize 233863 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7755558a-c5bc-4101-b39f-3fc006cdfaa0} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 1752 178272fbe58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.1.278664021\1667073618" -parentBuildID 20221007134813 -prefsHandle 2084 -prefMapHandle 2072 -prefsLen 21494 -prefMapSize 233863 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {aa778033-f973-4017-866b-05248bc1f182} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 2096 1781b4d9758 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.2.584404596\669418204" -childID 1 -isForBrowser -prefsHandle 3112 -prefMapHandle 3108 -prefsLen 21955 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {121a90e3-1949-4058-b0db-31cafbbcb2b3} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 3236 1782b03e958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.3.2131224889\1327550716" -childID 2 -isForBrowser -prefsHandle 3484 -prefMapHandle 3480 -prefsLen 27133 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6ffea47-d78d-48bc-884d-725ba013b537} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 3496 1782d24ef58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.4.713251913\80649224" -childID 3 -isForBrowser -prefsHandle 4148 -prefMapHandle 4144 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ca06e55-3ba8-4c95-8f7f-3199fc1d24df} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 4160 1782db2ab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.5.1810931529\870504275" -childID 4 -isForBrowser -prefsHandle 5020 -prefMapHandle 5036 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a2c78fde-a626-4557-8fff-d817963888ed} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5048 1782db28758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.6.1558742472\355391644" -childID 5 -isForBrowser -prefsHandle 5192 -prefMapHandle 5196 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {582df3f2-8ffb-4bf7-929c-abf40c47bf75} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5184 1782ec38258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.7.1057586101\728494426" -childID 6 -isForBrowser -prefsHandle 5380 -prefMapHandle 5384 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {915da0c5-3052-4ac0-8ef5-98deb5978e7d} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5372 1782ec38558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.8.143627647\2080904996" -childID 7 -isForBrowser -prefsHandle 5232 -prefMapHandle 5224 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f93947e0-3201-40a1-9c68-d2ca9dbe4fd9} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5064 178311b7358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.9.223969630\1441391475" -parentBuildID 20221007134813 -prefsHandle 4296 -prefMapHandle 6140 -prefsLen 27192 -prefMapSize 233863 -appDir "C:\Program Files\Mozilla Firefox\browser" - {13f4dced-06a9-408e-815d-6999717797ae} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 4288 1782db2ab58 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.10.232960464\139471462" -childID 8 -isForBrowser -prefsHandle 5168 -prefMapHandle 5064 -prefsLen 27192 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cd4b89ce-37b5-4e79-a325-ff8e0d74b273} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6148 1782e6b3558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.11.1817646867\1071142855" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5096 -prefMapHandle 5092 -prefsLen 27201 -prefMapSize 233863 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {02d532de-1f8a-4734-a9de-3b1b62ce183b} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5084 1782d412258 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.12.854880221\137752980" -childID 9 -isForBrowser -prefsHandle 8080 -prefMapHandle 8084 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {09b28f2e-1c8d-4490-ae22-925fd051de58} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9872 1782fa05058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.13.1153986474\187477721" -childID 10 -isForBrowser -prefsHandle 9672 -prefMapHandle 9668 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0df6a788-1d5c-4c39-a852-a245ba4620ea} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9680 178310e8c58 tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004BC 0x00000000000004B8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.14.22327130\1141970234" -childID 11 -isForBrowser -prefsHandle 7836 -prefMapHandle 7840 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f19f3835-1055-4bcf-96e7-1dece037b7ac} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7828 1782e6b5058 tab

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.15.579916357\1703135837" -childID 12 -isForBrowser -prefsHandle 6220 -prefMapHandle 6216 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {da7a8070-9e60-4d9e-9638-8382df3d6a0b} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6208 1783199a758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.16.2101074828\541081403" -childID 13 -isForBrowser -prefsHandle 6236 -prefMapHandle 9568 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39980369-8d46-4dd1-ac75-25edff31ec1c} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6220 17832119958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.17.1037003301\311578857" -childID 14 -isForBrowser -prefsHandle 9852 -prefMapHandle 9860 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6f96b7e-57fa-40e9-a054-7ef3141c50a3} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9724 1782f5f7858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.18.149034143\1007950784" -childID 15 -isForBrowser -prefsHandle 9656 -prefMapHandle 9872 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {10d8ad67-f9af-4d9d-a825-f55fb0ed6347} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9836 1782fa04d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.19.816850112\1126353138" -childID 16 -isForBrowser -prefsHandle 6372 -prefMapHandle 6388 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ce1736ba-2bcc-4023-b1a2-5484c74c527e} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8036 17831463d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.20.549398379\832330132" -childID 17 -isForBrowser -prefsHandle 7736 -prefMapHandle 7720 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ecb0107-d5e0-4f75-b9f8-e1e70c71fe2e} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7748 17830985458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.21.1128436421\1742515261" -childID 18 -isForBrowser -prefsHandle 9200 -prefMapHandle 8820 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a012796b-1606-497c-85a8-bacdc9801d58} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9532 1782d0fb758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.22.1755772394\1855984416" -childID 19 -isForBrowser -prefsHandle 8052 -prefMapHandle 9876 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fb366ff4-fe39-4fed-a484-51e2086215dd} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7736 1782fa58458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.23.901365634\1411275717" -childID 20 -isForBrowser -prefsHandle 4768 -prefMapHandle 7996 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5bdeda53-d77b-4b4f-9ca7-322fdfcc884a} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6228 17831920758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.24.1059682752\824096470" -childID 21 -isForBrowser -prefsHandle 7996 -prefMapHandle 4768 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {046e7d49-2076-435d-b9e9-cf2836ec1b53} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6228 1782d191758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.25.1177991952\973912161" -childID 22 -isForBrowser -prefsHandle 5992 -prefMapHandle 8204 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {71baa841-dceb-46e9-83c4-b87f4cb0f769} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7976 17831eac558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.26.757961946\2071273057" -childID 23 -isForBrowser -prefsHandle 9732 -prefMapHandle 4820 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {683f1b77-40a6-414b-a2b5-12785a065b77} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 4840 17831ee0f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.27.165330911\838626963" -childID 24 -isForBrowser -prefsHandle 8996 -prefMapHandle 9008 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {11632a2b-e509-4795-9eff-2c8ed343e2c1} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8084 17831edee58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.28.1735912492\1124378921" -childID 25 -isForBrowser -prefsHandle 8416 -prefMapHandle 7740 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9e372f4-3788-49c8-9978-6ef2c60821c9} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8532 17831265e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.29.1092522923\118839210" -childID 26 -isForBrowser -prefsHandle 7680 -prefMapHandle 9576 -prefsLen 27201 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d77783f7-64fd-4bdd-8a24-fa185658cf54} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9408 17832bd5c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.30.460368241\652778413" -childID 27 -isForBrowser -prefsHandle 5968 -prefMapHandle 6120 -prefsLen 27685 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {47e10b07-80d2-4e19-bcd9-b9cf8d81f213} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9316 1782e764958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.31.1294258944\1362214534" -childID 28 -isForBrowser -prefsHandle 7636 -prefMapHandle 7584 -prefsLen 27685 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {23e9ac6f-585f-4faa-9e48-3956c6ee4c48} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7632 17830984e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.32.292343600\806821729" -childID 29 -isForBrowser -prefsHandle 8688 -prefMapHandle 4228 -prefsLen 27685 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dfd6536e-d856-47e3-b74d-b6e17534c872} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8660 17830a2cd58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.33.1781670425\1183789821" -childID 30 -isForBrowser -prefsHandle 8688 -prefMapHandle 8468 -prefsLen 27685 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {90c71162-0a8f-438d-8910-503598b05191} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8660 17831998b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.34.1667658814\1721609870" -childID 31 -isForBrowser -prefsHandle 8592 -prefMapHandle 8988 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd7124c9-5470-4e8d-9216-0e4f8da79fa2} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7784 17830e58358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.35.136926411\86372473" -childID 32 -isForBrowser -prefsHandle 5496 -prefMapHandle 2392 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {676ebc65-0c5f-4df2-a6da-97951dd401c3} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8116 178310e8c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.36.2123405793\1119391889" -childID 33 -isForBrowser -prefsHandle 8496 -prefMapHandle 9328 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c4a8191-8575-40f9-8c71-ab619a232d6f} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8856 178314c9358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.37.1623445783\1108205883" -childID 34 -isForBrowser -prefsHandle 5924 -prefMapHandle 4944 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c3776dfa-c716-426f-80b2-abb12ff0e3ab} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6036 1782d131858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.38.241426367\1063112478" -childID 35 -isForBrowser -prefsHandle 7712 -prefMapHandle 6180 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a0c44cb3-b00a-4efc-b136-8f3a51c02328} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7808 1782d190e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.39.1976038319\776969563" -childID 36 -isForBrowser -prefsHandle 6124 -prefMapHandle 3928 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fbb2af05-635d-48de-b4ab-2c704fe19e50} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7908 1782ec37958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.40.1990829935\1988209452" -childID 37 -isForBrowser -prefsHandle 7600 -prefMapHandle 8916 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {00fc04e3-8bfe-42f8-8f82-1303220ef251} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6036 1782f561658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.41.87373109\2073920564" -childID 38 -isForBrowser -prefsHandle 8816 -prefMapHandle 9676 -prefsLen 27694 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {850a6612-1ebc-450a-a119-d48b22e5989f} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9328 1782d131858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.42.1096053998\319612660" -childID 39 -isForBrowser -prefsHandle 5992 -prefMapHandle 4612 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e008b76-8bf5-4ae6-93bd-43aad600c7bb} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8096 17831b50e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.43.1823148182\1029652124" -childID 40 -isForBrowser -prefsHandle 7328 -prefMapHandle 7272 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa8db915-9aec-4125-90ed-348967b3e986} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7540 1783032ed58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.44.806141949\376557216" -childID 41 -isForBrowser -prefsHandle 5400 -prefMapHandle 5572 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {775c9a25-6045-4770-bbcb-71918f65e3a7} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 5320 178314ca258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.45.273205144\965632202" -childID 42 -isForBrowser -prefsHandle 8416 -prefMapHandle 6296 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d17e575-b066-4bee-a774-b009e4e09d04} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7724 17831b52658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.46.678926814\1236775804" -childID 43 -isForBrowser -prefsHandle 7392 -prefMapHandle 7380 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f4061e3a-acf0-426e-ad26-47a8877982e2} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 9524 1782d134858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.47.521776710\121223174" -childID 44 -isForBrowser -prefsHandle 5400 -prefMapHandle 6204 -prefsLen 27703 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {aa3418ee-f71d-4224-a6e2-508854a007f1} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7032 1782fdb3858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.48.15754427\527603056" -childID 45 -isForBrowser -prefsHandle 7036 -prefMapHandle 9016 -prefsLen 27712 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {18483759-817b-491d-91ab-a66d85c4f191} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7116 178314bc458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.49.737428469\640151618" -childID 46 -isForBrowser -prefsHandle 9388 -prefMapHandle 7432 -prefsLen 27768 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f4244da4-a83a-4ab4-85ad-fec3623b26d4} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8604 1782e762258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.50.124586545\1248918290" -childID 47 -isForBrowser -prefsHandle 4768 -prefMapHandle 5356 -prefsLen 27768 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3eeaebe-7d80-4e6f-b21d-4ad180261dcd} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7768 178310e8358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.51.1139115479\1067427898" -childID 48 -isForBrowser -prefsHandle 6388 -prefMapHandle 7192 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5ac52318-fef5-409f-989b-b1acd3bc76cf} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8456 17833f2fb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.52.2036892095\518967403" -childID 49 -isForBrowser -prefsHandle 3160 -prefMapHandle 7880 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {06accaff-3b5f-4469-97e3-a456f6ea9216} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8640 1782d24d458 tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004BC 0x00000000000004B8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.53.769845259\1189977355" -childID 50 -isForBrowser -prefsHandle 7112 -prefMapHandle 7160 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2798e63b-9eb9-425d-827b-96a5523ce7bc} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 7164 17831aaff58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.54.1957406509\436838418" -childID 51 -isForBrowser -prefsHandle 5136 -prefMapHandle 7224 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1902439a-061c-47c6-9711-2a5f5a160c6a} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 8628 17831aade58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.55.973732955\137609516" -childID 52 -isForBrowser -prefsHandle 6788 -prefMapHandle 2768 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffc498af-c20a-4530-a958-a628af5be5df} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6908 1782d191a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.56.1062510744\455087376" -childID 53 -isForBrowser -prefsHandle 6344 -prefMapHandle 3012 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a27c47af-514b-4f0d-95c6-c56456577c2c} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 6348 1782d137c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.57.1856022279\119210386" -childID 54 -isForBrowser -prefsHandle 9904 -prefMapHandle 9900 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {aa8f620e-022f-4c25-88b4-a3f070a925ac} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 4608 17838bd8a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3916.58.1494217939\495631847" -childID 55 -isForBrowser -prefsHandle 10016 -prefMapHandle 10020 -prefsLen 27920 -prefMapSize 233863 -jsInitHandle 1352 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c36c41e5-3fb5-443f-8e63-df1aa23a19fb} 3916 "\\.\pipe\gecko-crash-server-pipe.3916" 10008 17838bd9658 tab

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Nexus\" -spe -an -ai#7zMap28843:70:7zEvent2764

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Nexus\READ ME PLS.txt

C:\Users\Admin\Downloads\Nexus\Nexus.exe

"C:\Users\Admin\Downloads\Nexus\Nexus.exe"

C:\Users\Admin\Downloads\Nexus\Nexus.exe

"C:\Users\Admin\Downloads\Nexus\Nexus.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2336 -ip 2336

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 2684

Network

Country Destination Domain Proto
US 8.8.8.8:53 api2.amplitude.com udp
US 52.37.125.87:443 api2.amplitude.com tcp
N/A 127.0.0.1:49744 tcp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 44.239.14.124:443 shavar.prod.mozaws.net tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
N/A 127.0.0.1:49751 tcp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
GB 216.58.201.99:443 id.google.com tcp
GB 216.58.201.99:443 id.google.com udp
GB 87.248.114.11:443 edge.gycpi.b.yahoodns.net tcp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
IE 54.170.61.180:443 prod-rotation-v2.guce.aws.oath.cloud tcp
IE 54.170.61.180:443 prod-rotation-v2.guce.aws.oath.cloud tcp
GB 87.248.114.11:443 fp-ycpi.g03.yahoodns.net tcp
GB 87.248.114.11:443 fp-ycpi.g03.yahoodns.net tcp
GB 87.248.114.11:443 fp-ycpi.g03.yahoodns.net tcp
GB 87.248.114.11:443 fp-ycpi.g03.yahoodns.net tcp
IE 54.170.61.180:443 prod-rotation-v2.guce.aws.oath.cloud tcp
GB 87.248.114.12:443 fp-ycpi.g03.yahoodns.net tcp
US 152.195.53.200:443 consent.cmp.oath.com tcp
GB 87.248.114.12:443 fp-ycpi.g03.yahoodns.net tcp
US 152.199.23.180:443 opus.analytics.yahoo.com tcp
NL 104.97.14.235:443 hb.yahoo.net tcp
IE 188.125.72.139:443 geo-atsv2.media.g03.yahoodns.net tcp
US 8.8.8.8:53 geo.yahoo.com udp
US 8.8.8.8:53 bats.video.yahoo.com udp
US 34.95.69.49:443 i.clean.gg tcp
US 34.95.69.49:443 i.clean.gg tcp
IE 188.125.72.139:443 geo.yahoo.com tcp
IE 188.125.72.139:443 geo.yahoo.com tcp
IE 188.125.72.139:443 geo.yahoo.com tcp
IE 188.125.72.139:443 geo.yahoo.com tcp
GB 87.248.114.12:443 bats.video.yahoo.com tcp
US 34.95.69.49:443 i.clean.gg udp
GB 87.248.114.12:443 bats.video.yahoo.com tcp
NL 104.97.14.219:443 hb.yahoo.net tcp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net tcp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net udp
GB 18.172.153.4:443 sb.scorecardresearch.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
DE 18.156.195.47:443 c2shb-oao.ssp.yahoo.com tcp
US 34.111.85.214:443 m.hb.yahoo.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
US 23.53.113.84:443 e9573.g.akamaiedge.net tcp
IE 212.82.100.137:443 ds-global3.l7.search.ystg1.b.yahoo.com tcp
US 8.8.8.8:53 214.85.111.34.in-addr.arpa udp
GB 142.250.180.1:443 pagead-googlehosted.l.google.com tcp
NL 185.89.210.122:443 ib.adnxs.com tcp
US 34.98.64.218:443 us-u.openx.net tcp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
NL 213.19.162.80:443 pixel.rubiconproject.com tcp
US 23.220.112.27:443 cs.media.net tcp
IE 52.211.171.137:443 ap.lijit.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 178.250.1.7:443 ssp-sync.nl3.vip.prod.criteo.com tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.49.148.3:443 ads.yieldmo.com tcp
IE 52.208.188.224:443 rtb.gumgum.com tcp
GB 142.250.180.1:443 pagead-googlehosted.l.google.com udp
DE 18.159.11.249:443 match-eu-central-1-ecs.sharethrough.com tcp
US 34.98.64.218:443 us-u.openx.net udp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
US 151.101.1.44:443 api.taboola.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com udp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.1.44:443 api.taboola.com tcp
US 35.244.232.184:443 metrics.brightcove.com tcp
US 35.244.232.184:443 metrics.brightcove.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
GB 142.250.178.4:443 www.google.com udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 151.101.2.27:443 manifest.prod.boltdns.net tcp
US 151.101.2.27:443 manifest.prod.boltdns.net tcp
US 35.244.232.184:443 metrics.brightcove.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tsdtocl.com udp
US 8.8.8.8:53 137.171.211.52.in-addr.arpa udp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 27.112.220.23.in-addr.arpa udp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 234.112.53.23.in-addr.arpa udp
US 8.8.8.8:53 3.148.49.52.in-addr.arpa udp
US 8.8.8.8:53 224.188.208.52.in-addr.arpa udp
US 8.8.8.8:53 249.11.159.18.in-addr.arpa udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
GB 172.217.169.70:443 s0.2mdn.net tcp
NL 2.18.121.79:80 a19.dscg10.akamai.net tcp
US 151.101.2.27:443 manifest.prod.boltdns.net tcp
US 151.101.2.27:443 manifest.prod.boltdns.net tcp
IE 188.125.72.139:443 noa.yahoo.com tcp
IE 188.125.72.139:443 noa.yahoo.com tcp
IE 188.125.72.139:443 noa.yahoo.com tcp
GB 172.217.169.70:443 s0.2mdn.net udp
GB 142.250.178.1:443 cdn.ampproject.org tcp
GB 142.250.178.1:443 cdn.ampproject.org tcp
GB 142.250.178.1:443 cdn.ampproject.org tcp
GB 142.250.178.1:443 cdn.ampproject.org tcp
GB 142.250.178.1:443 cdn.ampproject.org tcp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
GB 142.250.178.1:443 cdn.ampproject.org udp
GB 216.58.201.110:443 redirector.gvt1.com tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
GB 87.248.114.11:443 bats.video.yahoo.com tcp
GB 216.58.201.110:443 redirector.gvt1.com udp
NL 213.19.162.21:443 tagged-by.rubiconproject.net.akadns.net tcp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 72.246.173.47:443 eus.rubiconproject.com tcp
NL 213.19.162.27:443 beacon-ams3.rubiconproject.com tcp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com udp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 104.97.14.224:443 a162.dscg2.akamai.net tcp
NL 213.19.162.90:443 token.rubiconproject.com tcp
NL 213.19.162.90:443 token.rubiconproject.com tcp
US 35.186.193.173:443 cm.ctnsnet.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
NL 89.149.192.200:443 rtb-csync-euw1.smartadserver.com tcp
NL 213.19.162.80:443 token.rubiconproject.com tcp
NL 213.19.162.90:443 token.rubiconproject.com tcp
US 35.186.193.173:443 cm.ctnsnet.com udp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
NL 145.40.97.67:443 prebid.a-mo.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
IE 212.82.100.137:443 ds-global3.l7.search.ystg1.b.yahoo.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 20.26.156.215:443 github.com tcp
GB 142.250.200.46:443 apis.google.com tcp
GB 142.250.200.46:443 apis.google.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com udp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.111.133:443 camo.githubusercontent.com tcp
US 185.199.111.133:443 camo.githubusercontent.com tcp
US 140.82.113.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
N/A 127.0.0.1:51323 tcp
N/A 127.0.0.1:51339 tcp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 216.58.201.99:443 id.google.com udp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 142.250.187.238:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.187.238:443 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 74.125.175.105:443 rr4.sn-aigl6nzk.googlevideo.com tcp
GB 74.125.175.105:443 rr4.sn-aigl6nzk.googlevideo.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 74.125.175.105:443 rr4.sn-aigl6nzk.googlevideo.com udp
GB 74.125.105.6:443 rr1---sn-aigl6ns6.googlevideo.com tcp
BE 142.251.173.84:443 accounts.google.com tcp
GB 74.125.105.6:443 rr1---sn-aigl6ns6.googlevideo.com udp
BE 142.251.173.84:443 accounts.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
US 173.194.57.200:443 rr3---sn-q4fl6n6d.googlevideo.com tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 142.250.187.225:443 yt3.ggpht.com udp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 216.58.204.78:443 youtube.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 216.58.204.78:443 youtube.com udp
GB 142.250.180.14:443 consent.youtube.com tcp
GB 142.250.180.14:443 consent.youtube.com udp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
US 173.194.141.135:443 rr2---sn-q4fl6ndz.googlevideo.com tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.201.99:443 id.google.com udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 142.250.187.238:443 encrypted-vtbn0.gstatic.com udp
GB 74.125.175.135:443 rr2---sn-aigl6nzr.googlevideo.com tcp
GB 74.125.175.135:443 rr2---sn-aigl6nzr.googlevideo.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 74.125.175.135:443 rr2---sn-aigl6nzr.googlevideo.com udp
GB 74.125.168.105:443 rr4.sn-aigl6nz7.googlevideo.com tcp
GB 74.125.168.105:443 rr4.sn-aigl6nz7.googlevideo.com tcp
GB 74.125.168.105:443 rr4.sn-aigl6nz7.googlevideo.com udp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 172.217.132.38:443 rr1---sn-5hne6nsk.googlevideo.com tcp
NL 172.217.132.38:443 rr1---sn-5hne6nsk.googlevideo.com tcp
GB 142.250.179.230:443 static.doubleclick.net udp
NL 172.217.132.38:443 rr1---sn-5hne6nsk.googlevideo.com udp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.103:443 rr2.sn-5hnekn7z.googlevideo.com tcp
NL 172.217.132.38:443 rr1---sn-5hne6nsk.googlevideo.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 74.125.168.135:443 rr2.sn-aigl6nze.googlevideo.com tcp
GB 74.125.168.135:443 rr2.sn-aigl6nze.googlevideo.com tcp
GB 74.125.168.135:443 rr2.sn-aigl6nze.googlevideo.com udp
GB 74.125.168.170:443 rr5.sn-aigl6nzl.googlevideo.com tcp
GB 74.125.168.170:443 rr5.sn-aigl6nzl.googlevideo.com tcp
GB 74.125.168.170:443 rr5.sn-aigl6nzl.googlevideo.com udp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
NL 209.85.226.42:443 rr5---sn-5hnekn7d.googlevideo.com tcp
NL 209.85.226.42:443 rr5---sn-5hnekn7d.googlevideo.com tcp
NL 209.85.226.42:443 rr5---sn-5hnekn7d.googlevideo.com udp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
US 173.194.141.40:443 rr3---sn-q4fl6nds.googlevideo.com tcp
US 103.224.212.210:443 gamenigma.site tcp
US 199.59.243.225:80 77026.bodis.com tcp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.16.226:443 partner46.googleadservices.com tcp
GB 172.217.16.238:443 www3.l.google.com tcp
GB 172.217.16.226:443 partner46.googleadservices.com udp
GB 172.217.16.238:443 www3.l.google.com udp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 142.250.200.33:443 lh5.googleusercontent.com tcp
GB 142.250.200.33:443 lh5.googleusercontent.com udp
US 199.59.243.206:443 click-euw1.bodis.com tcp
US 199.59.243.206:443 click-euw1.bodis.com tcp
US 104.21.87.219:443 easygamestab.com tcp
US 104.21.87.219:443 easygamestab.com udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
GB 142.250.178.4:443 www.google.com tcp
US 216.239.36.181:443 analytics-alv.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 216.239.36.181:443 analytics-alv.google.com udp
BE 64.233.166.156:443 stats.g.doubleclick.net tcp
BE 64.233.166.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 156.166.233.64.in-addr.arpa udp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 muddy-art-95d0.innover.workers.dev udp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
US 8.8.8.8:53 addons.mozilla.org udp
GB 13.224.132.29:443 addons.mozilla.org tcp
US 8.8.8.8:53 addons.mozilla.org udp
GB 13.224.132.29:443 addons.mozilla.org tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
GB 13.224.132.29:443 addons.mozilla.org tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev tcp
US 172.67.195.151:443 muddy-art-95d0.innover.workers.dev udp
US 8.8.8.8:53 151.195.67.172.in-addr.arpa udp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
SE 142.250.74.163:443 id.google.com udp
SE 142.250.74.163:443 id.google.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com udp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 142.250.187.238:443 www.youtube.com udp
GB 142.250.187.206:443 play.google.com udp
GB 173.194.183.199:443 rr2---sn-aigl6nl7.googlevideo.com tcp
US 8.8.8.8:53 rr2.sn-aigl6nl7.googlevideo.com udp
GB 173.194.183.199:443 rr2.sn-aigl6nl7.googlevideo.com tcp
GB 173.194.183.199:443 rr2.sn-aigl6nl7.googlevideo.com udp
GB 173.194.183.200:443 rr3---sn-aigl6nl7.googlevideo.com tcp
GB 173.194.183.200:443 rr3---sn-aigl6nl7.googlevideo.com tcp
GB 173.194.183.200:443 rr3---sn-aigl6nl7.googlevideo.com udp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
NL 172.217.132.202:443 rr5---sn-5hnednss.googlevideo.com tcp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
NL 172.217.132.202:443 rr5---sn-5hnednss.googlevideo.com tcp
NL 172.217.132.202:443 rr5---sn-5hnednss.googlevideo.com tcp
GB 142.250.179.230:443 static.doubleclick.net udp
NL 172.217.132.202:443 rr5---sn-5hnednss.googlevideo.com udp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.103:443 rr2---sn-q4flrnle.googlevideo.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.187.225:443 yt3.ggpht.com udp
US 216.239.36.181:443 analytics-alv.google.com udp
US 104.21.87.219:443 easygamestab.com udp
GB 142.250.178.4:443 www.google.com udp
BE 64.233.166.156:443 stats.g.doubleclick.net udp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
NL 104.97.14.200:443 a1799.d.akamai.net tcp
IE 212.82.100.137:443 r.search.yahoo.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 87.248.114.11:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
IE 188.125.72.139:443 geo-atsv2.media.g03.yahoodns.net tcp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
IE 212.82.100.137:443 r.search.yahoo.com tcp
US 34.117.237.239:443 contile.services.mozilla.com tcp
NL 185.66.140.187:80 fns4.com tcp
NL 185.66.140.187:80 fns4.com tcp
US 8.8.8.8:53 use.fontawesome.com udp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
NL 185.66.140.187:80 www.fns4.com tcp
US 172.64.207.38:443 use.fontawesome.com tcp
GB 216.58.212.202:443 ajax.googleapis.com tcp
GB 216.58.212.202:443 ajax.googleapis.com udp
US 172.64.207.38:443 use.fontawesome.com udp
US 23.220.113.86:443 cdn2.unrealengine.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
NL 185.66.140.187:80 www.fns4.com tcp
DE 18.195.23.231:443 kinations-mouring.icu tcp
US 172.67.138.52:443 lockingsuccess.com tcp
US 172.67.138.52:443 lockingsuccess.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
GB 108.138.217.17:443 sdk.lockertools.ai tcp
US 8.8.8.8:53 29.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 17.217.138.108.in-addr.arpa udp
US 142.202.240.70:443 onlyredirect.io tcp
US 142.202.240.70:443 onlyredirect.io tcp
US 18.119.63.136:443 ws-us2.pusher.com tcp
US 142.202.240.70:443 onlyredirect.io tcp
US 34.230.254.185:443 clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com tcp
IE 34.241.40.98:443 ogmobi-elb1.go2cloud.org tcp
NL 34.91.234.242:443 mr.macgsapptrck.com tcp
US 23.22.19.167:443 www.getgx.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
DE 3.124.70.174:443 www.opera.com tcp
DE 3.124.70.174:443 www.opera.com tcp
BE 104.68.66.120:443 e11604.dscf.akamaiedge.net tcp
BE 104.68.66.120:443 e11604.dscf.akamaiedge.net tcp
BE 104.68.66.120:443 e11604.dscf.akamaiedge.net tcp
BE 104.68.66.120:443 e11604.dscf.akamaiedge.net tcp
BE 104.68.66.120:443 e11604.dscf.akamaiedge.net tcp
GB 142.250.200.46:443 www.googleoptimize.com tcp
GB 142.250.200.46:443 www.googleoptimize.com udp
US 151.101.1.140:443 dualstack.reddit.map.fastly.net tcp
US 8.8.8.8:53 static-cdn.hotjar.com udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 alb.reddit.com udp
US 151.101.1.140:443 alb.reddit.com tcp
GB 13.224.245.61:443 static-cdn.hotjar.com tcp
NL 104.97.14.240:443 snap.licdn.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 151.101.1.140:443 alb.reddit.com tcp
GB 163.70.151.21:443 connect.facebook.net udp
GB 18.245.253.99:443 script.hotjar.com tcp
US 13.107.42.14:443 l-0005.l-msedge.net tcp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 99.84.9.52:443 vc-live-cf.hotjar.io tcp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 61.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 240.14.97.104.in-addr.arpa udp
US 8.8.8.8:53 99.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
NL 185.26.182.111:443 net.geo.opera.com tcp
GB 142.250.180.2:443 ade.googlesyndication.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com udp
GB 142.250.180.2:443 ade.googlesyndication.com udp
US 204.79.197.237:443 c.bing.com tcp
US 13.107.253.64:443 part-0036.t-0009.fb-t-msedge.net tcp
IE 68.219.88.97:443 c.clarity.ms tcp
US 52.224.31.34:443 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 34.160.90.233:443 versioncheck-bg.addons.mozilla.org tcp
US 34.160.90.233:443 versioncheck-bg.addons.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 142.202.240.70:443 onlyredirect.io tcp
US 142.202.240.70:443 onlyredirect.io tcp
US 52.224.31.34:443 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 172.64.207.38:443 use.fontawesome.com tcp
CA 15.235.9.150:8443 tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.194.137:443 code.jquery.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
GB 108.138.217.119:80 d3f4u3khr0ycep.cloudfront.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
CA 15.235.9.150:8443 tcp
DE 18.158.174.162:443 a3.pubguru.net tcp
DE 18.158.174.162:443 a3.pubguru.net tcp
US 172.67.218.34:443 rbx.how udp
US 172.64.207.38:443 use.fontawesome.com tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
NL 104.97.14.217:443 a1831.dscd.akamai.net tcp
GB 142.250.178.14:443 www.youtube.com tcp
US 8.8.8.8:53 youtube-ui.l.google.com udp
US 172.67.172.116:8443 claimrbx.gg tcp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
GB 172.217.16.226:80 securepubads46.g.doubleclick.net tcp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net tcp
US 172.67.172.116:8443 claimrbx.gg udp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net udp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net tcp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 142.250.187.225:443 photos-ugc.l.googleusercontent.com tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.187.225:443 photos-ugc.l.googleusercontent.com tcp
GB 142.250.187.225:443 photos-ugc.l.googleusercontent.com udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 142.250.187.206:443 youtube-ui.l.google.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net udp
DE 18.158.174.162:443 a3.pubguru.net tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 108.138.217.119:80 d3f4u3khr0ycep.cloudfront.net tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:8443 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 tcp
CA 15.235.9.150:80 tcp
CA 15.235.9.150:80 tcp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
US 172.67.172.116:8443 claimrbx.gg udp
GB 172.217.16.226:443 securepubads46.g.doubleclick.net udp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 ds-global3.l7.search.ystg1.b.yahoo.com udp
US 104.26.14.156:443 galaxyswapperv2.com tcp
US 104.21.60.73:443 lootlinks.co tcp
US 104.21.60.73:443 lootlinks.co udp
US 8.8.8.8:53 unpkg.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 104.17.246.203:443 unpkg.com tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
GB 52.85.142.74:443 d1b7aq9bn3uykv.cloudfront.net tcp
US 172.67.134.236:443 gforanopportu.info tcp
US 172.67.134.236:443 gforanopportu.info tcp
US 172.67.134.236:443 gforanopportu.info udp
US 162.159.130.233:443 cdn.discordapp.com tcp
GB 18.245.206.228:443 d1wzdj81h1hubn.cloudfront.net tcp
US 162.159.130.233:443 cdn.discordapp.com udp
US 199.188.200.48:443 galaxyskinapp.com tcp
GB 142.250.178.14:443 i4.ytimg.com udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
GB 142.250.187.225:443 photos-ugc.l.googleusercontent.com udp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
US 172.217.131.106:443 rr5---sn-q4flrnle.googlevideo.com tcp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 142.250.178.4:443 www.google.com udp
GB 173.194.183.199:443 rr2.sn-aigl6nl7.googlevideo.com udp
GB 74.125.105.41:443 rr4.sn-aigl6nsd.googlevideo.com tcp
GB 74.125.105.41:443 rr4.sn-aigl6nsd.googlevideo.com tcp
GB 142.250.200.46:443 suggestqueries-clients6.youtube.com tcp
GB 142.250.200.46:443 suggestqueries-clients6.youtube.com tcp
GB 142.250.200.46:443 suggestqueries-clients6.youtube.com udp
GB 142.250.200.46:443 suggestqueries-clients6.youtube.com udp
US 52.41.233.141:443 location.services.mozilla.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 173.194.3.74:443 rr5.sn-aigl6n6s.googlevideo.com tcp
GB 173.194.3.74:443 rr5.sn-aigl6n6s.googlevideo.com tcp
GB 173.194.3.74:443 rr5.sn-aigl6n6s.googlevideo.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 173.194.183.72:443 rr3---sn-aigl6ned.googlevideo.com tcp
GB 173.194.183.72:443 rr3---sn-aigl6ned.googlevideo.com tcp
GB 173.194.183.72:443 rr3---sn-aigl6ned.googlevideo.com udp
GB 173.194.183.104:443 rr3---sn-aigl6nek.googlevideo.com tcp
GB 173.194.183.104:443 rr3---sn-aigl6nek.googlevideo.com tcp
GB 173.194.183.104:443 rr3---sn-aigl6nek.googlevideo.com udp
US 172.67.181.245:443 androidfunclub.com tcp
US 172.67.181.245:443 androidfunclub.com tcp
US 172.67.181.245:443 androidfunclub.com udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
NL 23.62.61.136:443 e110990.dsca.akamaiedge.net tcp
BE 104.68.64.217:443 imgsct.cookiebot.com tcp
BE 104.68.64.217:443 imgsct.cookiebot.com tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.14:443 i4.ytimg.com tcp
BE 64.233.166.155:443 stats.g.doubleclick.net tcp
GB 142.250.178.4:443 www.google.com udp
BE 64.233.166.155:443 stats.g.doubleclick.net udp
GB 142.250.178.14:443 i4.ytimg.com udp
GB 74.125.105.134:443 rr1---sn-aigl6nsr.googlevideo.com tcp
GB 74.125.105.134:443 rr1---sn-aigl6nsr.googlevideo.com tcp
GB 74.125.105.134:443 rr1---sn-aigl6nsr.googlevideo.com udp
GB 173.194.183.170:443 rr5---sn-aigl6ney.googlevideo.com tcp
GB 173.194.183.170:443 rr5---sn-aigl6ney.googlevideo.com tcp
GB 173.194.183.170:443 rr5---sn-aigl6ney.googlevideo.com udp
GB 74.125.168.135:443 rr2.sn-aigl6nze.googlevideo.com udp
GB 173.194.183.103:443 rr2---sn-aigl6nek.googlevideo.com tcp
GB 173.194.183.103:443 rr2---sn-aigl6nek.googlevideo.com tcp
GB 173.194.183.103:443 rr2---sn-aigl6nek.googlevideo.com udp
GB 142.250.178.14:443 i4.ytimg.com tcp
GB 142.250.178.14:443 i4.ytimg.com udp
GB 74.125.105.42:443 rr5---sn-aigl6nsd.googlevideo.com tcp
GB 74.125.105.42:443 rr5---sn-aigl6nsd.googlevideo.com tcp
GB 74.125.105.42:443 rr5---sn-aigl6nsd.googlevideo.com udp
GB 74.125.168.105:443 rr4.sn-aigl6nz7.googlevideo.com udp
GB 74.125.175.71:443 rr2---sn-aigl6nzs.googlevideo.com tcp
GB 74.125.175.71:443 rr2---sn-aigl6nzs.googlevideo.com tcp
GB 74.125.175.71:443 rr2---sn-aigl6nzs.googlevideo.com udp
GB 74.125.105.40:443 rr3---sn-aigl6nsd.googlevideo.com tcp
GB 74.125.105.40:443 rr3---sn-aigl6nsd.googlevideo.com tcp
GB 74.125.105.40:443 rr3---sn-aigl6nsd.googlevideo.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 74.125.175.136:443 rr3.sn-aigl6nzr.googlevideo.com tcp
GB 74.125.175.136:443 rr3.sn-aigl6nzr.googlevideo.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 74.125.175.136:443 rr3.sn-aigl6nzr.googlevideo.com udp
GB 172.217.169.22:443 i.ytimg.com udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
US 104.16.114.74:443 static.mediafire.com tcp
US 104.16.114.74:443 static.mediafire.com udp
GB 142.250.178.4:443 www.google.com tcp
US 104.16.113.74:443 static.mediafire.com tcp
US 104.16.113.74:443 static.mediafire.com tcp
US 104.16.113.74:443 static.mediafire.com tcp
US 104.16.113.74:443 static.mediafire.com tcp
US 104.16.113.74:443 static.mediafire.com tcp
GB 216.58.204.74:443 ajax.googleapis.com tcp
US 104.16.113.74:443 static.mediafire.com udp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.204.74:443 ajax.googleapis.com udp
GB 172.217.16.238:443 translate.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 74.113.16.104.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
GB 172.217.16.238:443 www3.l.google.com udp
GB 52.85.142.7:443 cdn.amplitude.com tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 142.250.200.10:443 translate-pa.googleapis.com tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
GB 142.250.200.10:443 translate-pa.googleapis.com udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
US 54.185.3.142:443 api.amplitude.com tcp
GB 142.250.187.234:443 translate-pa.googleapis.com tcp
GB 142.250.187.234:443 translate-pa.googleapis.com udp
GB 142.250.178.14:443 i4.ytimg.com tcp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 142.250.178.14:443 i4.ytimg.com udp
GB 163.70.151.35:443 www.facebook.com udp
BE 64.233.166.155:443 stats.g.doubleclick.net tcp
BE 64.233.166.155:443 stats.g.doubleclick.net udp
US 172.64.169.28:443 privacy.gatekeeperconsent.com tcp
US 104.22.75.216:443 btloader.com tcp
US 172.64.192.22:443 www.ezojs.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 28.169.64.172.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 172.64.169.28:443 privacy.gatekeeperconsent.com udp
US 104.16.113.74:443 static.mediafire.com udp
US 172.64.168.28:443 privacy.gatekeeperconsent.com tcp
US 172.64.192.22:443 www.ezojs.com.cdn.cloudflare.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 172.64.168.28:443 privacy.gatekeeperconsent.com udp
US 172.64.192.22:443 www.ezojs.com.cdn.cloudflare.net udp
GB 142.250.187.234:443 translate-pa.googleapis.com udp
US 172.64.168.28:443 privacy.gatekeeperconsent.com tcp
FR 15.188.219.54:443 g.ezoic.net tcp
US 130.211.23.194:443 api.btloader.com udp
US 172.64.169.28:443 privacy.gatekeeperconsent.com udp
US 172.64.136.15:443 go.ezodn.com tcp
US 172.64.136.15:443 go.ezodn.com tcp
US 172.64.136.15:443 go.ezodn.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 172.64.136.15:443 go.ezodn.com udp
US 8.8.8.8:53 15.136.64.172.in-addr.arpa udp
US 8.8.8.8:53 54.219.188.15.in-addr.arpa udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 3.121.6.51:443 btlr.sharethrough.com tcp
DE 3.121.6.51:443 btlr.sharethrough.com tcp
DE 3.121.6.51:443 btlr.sharethrough.com tcp
DE 3.121.6.51:443 btlr.sharethrough.com tcp
DE 3.121.6.51:443 btlr.sharethrough.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 34.120.63.153:443 prebid.media.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
US 205.196.121.38:443 download843.mediafire.com tcp
GB 172.217.16.238:443 youtube-ui.l.google.com tcp
GB 172.217.16.238:443 youtube-ui.l.google.com udp
US 23.200.184.234:443 ads.pubmatic.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
NL 72.246.172.22:443 contextual.media.net tcp
NL 72.246.172.22:443 contextual.media.net udp
GB 142.250.187.206:443 youtube-ui.l.google.com udp
RU 147.45.47.39:80 tcp
US 172.67.75.172:443 api.ip.sb tcp
RU 147.45.47.39:80 tcp
US 172.67.75.172:443 api.ip.sb tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\b31ae4e3-c004-4a20-a0bb-44afe69d4a82

MD5 487181c68998960eb101ced7035a194f
SHA1 8f7c801b5a332f579411c198e136a014cb66430b
SHA256 5565a853ae8fce34388ff7e3685553dcf8439ba4d2715a256c67f8b750f48e4c
SHA512 bbfda010cd4633b3884d11ad1efcbc5b12417d5338e78e8e052896fb1a7a5c1d9796545483839e7719992eef1a3dced07dde9c5e5f13e133c0fcef7d2fe6cdd6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\8a0befc6-f322-4864-b903-d27cec48e2f7

MD5 a12b80f9622e23bc218ff2eaabfa4f64
SHA1 b11eabfe3d5a8521f2ba5952fd957ff63f2d2eeb
SHA256 c98562a20159d790e157e3ebf87184157d51434467a11220ac082dbc14fcda82
SHA512 c5b8b795264123ac38984da2b71c775fc641f1973f8f041b7e8eb4efcf6f5a029fdef1d098e1450b8a8fd70f639a35e0b50073d6918222b3723b9d4d40d7d0d7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\db\data.safe.bin

MD5 0c081ceabd3b8c95a67634063cbec5fb
SHA1 407586c003851ac9ac47a67bba26283d8454cb9b
SHA256 2000ad8df877d81e4c504ed46293cdcc40811ca97eee8972429bda534866cc6e
SHA512 e5f6785d479a5631bff965b94ab804a9451502a805b023cc9200087630d9709582debfe3be9a5638f6dec54f18d66c09caa48900b88c671a8d24ccfa46fdbe41

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 b161c7a30c50f69ea05e159a93039c44
SHA1 cfc9e0ec94dc6f981c5058f84a792b8c554e68a4
SHA256 a128c6fad2ab59aeb9f1cead2df9e9a40e0275a2c31324d762166c8150cf8005
SHA512 b7783e70580513bb3d09d313366b962f6716995de714637fc2aa5475da70f0932b2b66ceb7833a68a021927b5053509bece43d5a478dbc9c14b62b27a34dec12

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs.js

MD5 189a11adc5cbaeb6625034eb7b1b05fa
SHA1 0004dd613454c2d635ffcde277abb9f0fbc70895
SHA256 de861f1fe4bbd78a68068163057c036f345b97ad5e4650d100bdaaa2244373a2
SHA512 d02a47c67c01f16873f3cd626543c927e8880a431e170739e038d6b1de539654a2ae310389c7c388865951adcbdb917283fbe5834c510518827322af5e8f95c6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a4e3784f429c38ae3d65e4334fdbee62
SHA1 5fd4f386b5a492483a2fcaf9ea6a53fa57856b15
SHA256 1a76a39a596590cbc8a6ccb7bc1942e1609e002211a7bddef1080b0290f0a4f6
SHA512 64a65370cf6a850dfa66fe9711d00c7bda5f19c632487de2c6982adf93220b9ab28cca05ba4fc91d4974b4f68531863f072cb9b92ba236325fd9c43dde0da2d1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs.js

MD5 8450677e1e3ca4d7d617e29255c423eb
SHA1 a53f38fa738cf6b0a803c52f249ee28fc1b34141
SHA256 451bede46e07f41ea0c6fffd91bebd575efb9320dd79560085e9dd812c1f4172
SHA512 4a787b54ac01d095d7dca8eb0d1d7e48022238dddb5859a17e4580c384ab222e73b8ea0b4c9a586d66c0ff187d073edf4ec7ab1d25a74de1e0ce447e032d0789

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 97916665d776e51cdebf91f6a2e510e0
SHA1 acad22b8a732bd4610918c86ee034fc9da7d0f0d
SHA256 449762abde0970e432775cb92167e6d56082947769335fa0d307ccce08c5534b
SHA512 d7412f35fbfd559904d589589d5074d91d4b71af7d207f939ab0e3d6260b2001af2910d57aa3e4cbb83f3d53b224045ce2f8a0fe340628940c286096372e0c2b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs-1.js

MD5 0420af091c83fdb0b5dee367bae8e155
SHA1 f0d34e3cd6e3759fc73738b90147331f0d734761
SHA256 a597656e7ce47d266c175d426c5cd6b3e90d6a318ea2f65d4d29a1daeb97d134
SHA512 bcf096a33239a1be6bca8541cdfed3356e99827bfc3f4f3b370f8992a1bd17d73322e629c82b7be37809dbb9b33c0e735cd265d907daebbafed719c7cdac4357

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0d18a8433b40845b5f3d94f057ca6392
SHA1 d5c0d129a57c8c5336452fe8920801742929d48f
SHA256 2d4517ed5c864d8a8a11b217cd445756794a30214af51e81bbe6f0a10946efd9
SHA512 872398b141a0b74403422b2b99727bd34bc006dcefdcd6e3a7841e8a0f162c4b6c8038d86ad4e500f7cdd2cf58dc5be1b00381fb479a39608448153f6f1e96ac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++uk.yahoo.com\cache\morgue\84\{594956ea-dd79-4c9f-8476-1ac4b3860154}.final

MD5 a06913af767a537bdb0a175e7ad1eedf
SHA1 4b1764f185e689d4f342dbddb40adca6f9cb42b3
SHA256 cbf8ed5cee151f447b3885fc30a92a07d3786d62c5080ee9856eb10401bc8265
SHA512 e36ff0b37fb24c60a1832398228bac361779ceae41ad9e6b66ad9e773410e00272821e7f5a07b1181d076389633a2ef32baf2175b92858e7fd7ff728f0e80939

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++uk.yahoo.com\idb\3643735545ysanhooiotNaoctiif.sqlite

MD5 296ec94705fb420330ae79fb8c02bb28
SHA1 bc318cf8a07d677211c5a82974d0f2acc64974c7
SHA256 f57128da2a2f38e81d1ae32d64b55af9803fa70a9a6e1188b003aebc8cd3fae1
SHA512 911ada75682783266a53c47f843cd5e7e1c1908b23dd17464fdf6fcf707be08b0a624a27421c419658a9da25495c75c63cb4258d7df888b62ede5017241de15e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\serviceworker-1.txt

MD5 b56599b0dee1bfad233d75c27c683d64
SHA1 e83a01e6f38ed507a550421773b76297ec48191c
SHA256 688c543adec6e02bd5fc8be5ceb1e7ec017a48657e288a07f09c416612327894
SHA512 5cdecdb8a122a4cac09e6eb6d5de1f2fb9827efb673b6cd422a429962f3f881b6995c2cd9811b06a1e292a3048eb78b2965b9474890ad657124a116827708fdf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\serviceworker.txt

MD5 750f20a1c8f9bac1117ae3169b9aeeab
SHA1 dc78dbb56ec21458ebf9fa33b5130028dd589162
SHA256 fcb874645235ad4151b8d4a34e38f406026b8ceb851bee53c04b88142679a7a2
SHA512 d79504ccaa9dc17c65bdac098924784b5df23e3b748fb9fd018ff8a06bcf56880769a2a4166b3f3215299728b9c5b9e40bceac024deb19e013ab7895c0e52a2c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 703163f3551fdbc1135ffbc12725e96a
SHA1 c22f6bd76ab0120472553133dc8eb7ecc7ad97d9
SHA256 b41b244210da121f608e3f9f3c415d4a69b8ddedc3de61d4ff5f6c39ee3663dd
SHA512 d091ab91525304c586a4952fc4a19829a8d23b92c8df3966de71b193b20d690e3a2d2424d6d83439e9227a2c9ccb808a57c77cbfda3594b633aeb2efad94234e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c7ade110cc7f9055e4ce9aab6eccd072
SHA1 452cd4cfd1860357e4d28ec23b3a2cac2eb93d34
SHA256 3a5afb4d9a1205470f2ba42d201d3f25901953d7205ebfd32a67b16d65b698ae
SHA512 dede71cb6827d593972487e6d03f594e64d16abb19e8a8381fb6507f7832b1588c776da36844524ba759b9baeaf85f6f53d5fae0ad249ec5922fe01e62dfa543

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3b4a87a4558e5de81b3a3001ccb04a2e
SHA1 6634bcf693d08bdda0ba1bcfdf836025cf1a5ada
SHA256 46bd40b22c2e8314194e4946eb215c849f4cfe640e63108088f806db08b5be85
SHA512 c2aceb7302eab6f907248ab4fc118d3b3956787de6266eb83a4c037ca328da603e72cfb5aa8786e9dcb6d1f6cddead8a2e2a7831b7f079fc511d0372cbeac9be

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ef5f2131d312344027023bc3fc4a1bd3
SHA1 a60bc6b0c472e4c9edcea676547f400ff888fde2
SHA256 cafb4bc9f1db72ad55ccd8974785951c581182a142e455c39b98551333d2878b
SHA512 6926a24165a750df480e7aa9be7b3b2d37fda27255ef8174387a1eebf5a586d205a0ce74545e2e54045ac99f7bd4aa2ff67673a3326155ba9b523ab75c14a79c

C:\Users\Admin\Downloads\Loader.RTH7BtnZ.zip.part

MD5 93e969f91896895055ef91e806250a0a
SHA1 70a1a09848f2a361da7ee782fefb92ca575a7f40
SHA256 7ac3046153fda2e1579a1776a8b92264cb0c908cb80ac7f772cdd26bab46b9be
SHA512 f51ec5440185db8600cb573d8806e9f08d9236fc1980445af7edc9608c851c8a63719cbb9929e78bb461a97ba1280e99987a6eb54e5f09cfd879ed94f26fa58f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 2b8ace85f3e293ce6da493f3cdacd3af
SHA1 78081091b1948ce9438e9cc9e543bc75140aa1c4
SHA256 a8cfd8304015e26f1e9f078231462423a9e8e1a1797fca1cb2300a61e663d134
SHA512 5f4862149aa5a3809fb520ca46f23627800aa7cba61b540142126125681b95951cfcd53955f5ebbfe0fc3ebc23dd5185d65c13e69a7b2cf2ea23a6b57c981273

C:\Users\Admin\Downloads\Loader.zip

MD5 e1fea421d234a45ceec7ddd183b72c76
SHA1 96b32e62f513b4e562bfc54a58f43844dde1e302
SHA256 40d6861fe84821ca8a2d3f226ac49f6406dada0a1504592dd86fb25b0136b896
SHA512 5908b2f9dd8edd3092375966501cd6697af827d7db18cd880934fb0d712513447dda269f019decf480a2e8c7899f85f0af60ca5beb685547e3968af9a4ecb712

C:\Users\Admin\Downloads\Loader\tpm\preloader.dll

MD5 218a905dde00690c0df0cf3ff51d7edf
SHA1 b6061466fe408d946cba281614a311aa69dc2f85
SHA256 8023af161301e71e9a827d8ee567713286c3407f90899e745fea1533b038a66c
SHA512 e9b5e84cd105ea9456da9ee7592786577faee3bcd88adcd60176edefbf93a816bc95b64d2c4b9b7ac6e832dc4d6a17e399a21190f2e0b56784d5d2a72bdeb809

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\f5b19ee0-7165-4dd1-8723-3fa6569c6934

MD5 b1ed8527e7619b02305560eda7f843b5
SHA1 ecddaab356f2cd2472b221d79cb5b84a347031f9
SHA256 ca008e201ca68408c4f05323dd2d814a74a8e71385fadae5f174cd3e76492b46
SHA512 79e606f28a34a35aa9b6d9572c9207c29994d4c536778f38997b608be8f0d14d17f0bf1e58cfd515df7f2066e8c7129c8549ea1be23fa25673b2d88ba4f93324

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\aed10d67-1db8-45af-8aeb-afe759e6bc2b

MD5 bbd8695917b47df7bbd165616938309f
SHA1 566873da3c261b97ea11e24fcf47c2f34cd6dece
SHA256 2e22aaa552d184220278cf8f8ce17cd5bca60e46b1bcd9ff4f3cbf1122573063
SHA512 35bedff1111069aefed6465759e216fd96a8782546d8ec75318e7b4d3e6c763347ab25c1caae2292acf47cfbc617de7664c115beb757cef7e922f532669d6553

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 001934c645bc994bf5b71828dd1555a2
SHA1 bc65a6bb17e994a7758be3ec43c63bcffb47a9f4
SHA256 a3742f3a00508d8270948c401b08a92d498681328bee09c27e216de00213343a
SHA512 02d032b78fae1a9bfe0b684880ab9d85a11c01f7fc635aa87f2c99c2c4e28d808d20bd793ee4af50050a7d1228f16d69bafcaad2f73bbc86d25a14ea001e2124

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs-1.js

MD5 c1032fb3b0a4ddea7a6ce6d50c46c2ef
SHA1 e375707e1e6af084f412147e853f0aacf639e6d0
SHA256 3f0e5927bbfee61c7b363fb1376324feec68c2d014ddcf2bd9d29fb896ba77b4
SHA512 c427f8784d349445e4d8046af649090d37088ca94c13f06a22651dcf517a38da669040d6e22b29d48bd6f3814a0efdd550130b0925a5af3e5bd7e25c41ab9187

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore.jsonlz4

MD5 7dce09baa26efa7d852a32d5c44f8954
SHA1 47592e1a53bb1898ac9bc0cd2f7854ae5b5e8522
SHA256 92c88681848a249f6c83c38ba4d30c2588edadcde6c215147339c857883eddee
SHA512 cba3542cc482198155e37a966974355ee213aaa9feaef586b2c139bd60be786c65f555d15a468ac5babe085cd12d662c00b63794dfd6a06d27cdc5f7001df8d3

C:\Users\Admin\Downloads\Loader\loader.exe

MD5 9db6a280a7e1ffa5671c8c8d0d2ab98b
SHA1 a9fa510a63cafdca2503e551d69b3cfb16155569
SHA256 23a9f26fdaa40a04010b88080386db60f8f9dea73374913afdb45d51f2f3063e
SHA512 62b81e46d17f0805fe014471b72797f462dcd40440cf9764c11c43328d7ecc59629cf545ca136266edc3bfcbbb7e4e6a2ed0bc14771eff9d85b057ef8f189dcd

memory/3320-1385-0x0000000000E20000-0x0000000000E70000-memory.dmp

memory/3320-1390-0x0000000005B20000-0x00000000060C6000-memory.dmp

memory/3320-1389-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/3320-1391-0x0000000005490000-0x0000000005522000-memory.dmp

memory/3320-1392-0x0000000005410000-0x0000000005420000-memory.dmp

memory/3320-1393-0x0000000005530000-0x000000000553A000-memory.dmp

memory/3320-1394-0x00000000066F0000-0x0000000006D08000-memory.dmp

memory/3320-1395-0x00000000057F0000-0x00000000058FA000-memory.dmp

memory/3320-1396-0x0000000005710000-0x0000000005722000-memory.dmp

memory/3320-1397-0x0000000005770000-0x00000000057AC000-memory.dmp

memory/3320-1398-0x0000000005900000-0x000000000594C000-memory.dmp

memory/3320-1399-0x0000000006140000-0x00000000061A6000-memory.dmp

memory/2020-1401-0x00000000006A0000-0x00000000006F0000-memory.dmp

memory/2020-1405-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/2020-1406-0x0000000004F50000-0x0000000004F60000-memory.dmp

memory/3320-1407-0x0000000006FA0000-0x0000000006FF0000-memory.dmp

memory/3320-1408-0x00000000072C0000-0x0000000007482000-memory.dmp

memory/3320-1409-0x00000000079C0000-0x0000000007EEC000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cookies.sqlite

MD5 ed4ccbcd0b084dfd750fa90a82d46d7b
SHA1 67d471af5aa4ba2fb925db0563a5de307a67632a
SHA256 69e5da320a88c62e1e5a3b4bdebb91116eef0a8037821a1330d301c8d58d48ce
SHA512 13f2737a40adaaff8be2258f71ac145236f35dccbb3b1c6321de49ba8785e3f2b2a916fe4b7250e83db6da9a27156cce9727e9904d0a797e92458079601a9d04

memory/5468-1412-0x0000000000B10000-0x0000000000B60000-memory.dmp

memory/5468-1416-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/5468-1417-0x00000000051C0000-0x00000000051D0000-memory.dmp

memory/3320-1418-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/3320-1421-0x00000000743A0000-0x0000000074B51000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\AppLaunch.exe.log

MD5 47b3bb3bf3bd31854ef77da134dc534f
SHA1 79f7ee98bfce765215cb9bc54d6c27a748af50f3
SHA256 27bd7f1def6afae36983285feba3f689c7a006617a7d48cdac752bbd8ca39683
SHA512 f0d52c49fe5de3abd83875dc52755fbdd7d70aa92d31abae733a8104742372cee2f2e59c5b71f6d667144e52c97c543b095a718ea63410e1709f55b73b4953d0

memory/2020-1424-0x00000000743A0000-0x0000000074B51000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\startupCache\scriptCache.bin

MD5 32a53cf9df45f140132a2bedc5fac40d
SHA1 9e387e437ddb1ec471e8c9ac7d0a18528a15828c
SHA256 997699559af39e71c3bd25c334775eb73af97d5ff7c8567496f74900c0059a62
SHA512 5648b1fcc9a1211188fb85444792ff90421f5428fd2816630722a2f7c2ee9a6f61ddb06a08f42d8468146aa999a6c1e6b69160966152a45058b31880dfe23066

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\xulstore.json

MD5 0c8d2affca72687940bfda3c73b943b1
SHA1 1d29b78b6c4a57ae16cda5acdd3fcdc817fb40f1
SHA256 51818b82ba606d41839fe0f3d3669cdaa244174d8b764426cbc5d9de601b2408
SHA512 15c6d606c92d62758c73dc344296d1445947d85e34b86e0d578890e3b72ad0baf7f8b59b5bb8060a52b00f4168a25915b1a52ce0fe65245e51f08604bf90c5a2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\startupCache\urlCache.bin

MD5 d1daed897fd4c7ec91447bc5de4439ee
SHA1 fb249ef840ad336a4701508c2670ac8150f658eb
SHA256 800ad2cd5934fea5513e4342097a0ab29151ed418cb52a778570ba75958b6eac
SHA512 873b0d4a6898d71d82ada6acce70f0c6b06f16c94f95f826c0cfc975813bf2e2dc2935e9273263bd9095cbd1dd58c7f3661b2b80876e9b5bf0f66ab29aa8df60

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\permissions.sqlite

MD5 db8f7c33b4b3abea33a1e224b600107b
SHA1 38775e17a4ccdda0eb263ccddf1ee0fe1a659462
SHA256 086591fa82a47adf4fdb2b2d329bde7d4111d4a19480844c20f51bd66f58a21f
SHA512 5892b43bbbf9ecb4403ce432a3ae6de7b9b1dbcdab08bc362598a663dd1db6c3452798cdb3507e0a617e12224cc3153f97d83bc80efcb52306734b0277fe628f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionCheckpoints.json.tmp

MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionCheckpoints.json

MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\index

MD5 6b37940b6e897ea8f1f3fb372463cb59
SHA1 46fa94c80fed362fa91172cac5be70d2e5e5e140
SHA256 27b45fb73707470e6b6238af7272abdde90bd35f66323024c7b41d0a6cacdf39
SHA512 632f18ed16866b6293c8f924e9aa485044e9cc849bcd60e63c397e671fcda0d3419cb07b16299570c0700037a0505c2148e253c46bcb02bf440bb1bda5dbcdd5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\index.log

MD5 92ec1ba3f10117e8afe86b22230d3cc4
SHA1 e7d3170f2d58e0eda9512f12276896e4992f2976
SHA256 b005b6b287a711116a946ad7e22fe9c93e9d09b5a1b77b0952d7509a4a90dae7
SHA512 ed6df912842b8852d3bfecac971e0c8acee4bb60cb6ebf9b0fb4609e8d3c80dffdf2289cbacf271a599335ef6bbff78a251fbf8660adf687c2034f4e90a990bc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 820576516039690b2dae3e6a99072fcb
SHA1 004eeb99897c9af1fc7eafe733f67ee7decd1fa2
SHA256 bf283db59b4735eff03a55c90e37d2788fe81c862eb4e7838d2ee92f3a5eb42c
SHA512 166e0b2e0311d6a08c6d334f710ad04e38df89b31f4c1c61de51af7fe71c0f595cfee87b9cc865abbc825ffadc6c9d0069094ecbdf68d0a1513a1efeac4f1433

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage.sqlite

MD5 495288645b1afc4a491e80c43a9ae51d
SHA1 5ad8307bbb74939aef76bc3b4a9930b210626832
SHA256 4ca526a71835831cee238e3b00a9af07fba9bef45552bdec9bb8787ec7e4dd4f
SHA512 9482a6e6e47e820de077f2f9bd63a1bf8e1ac2eb906e7ddfadfd9e6df5513db32aa59651e636f9913cb4e4dc13d30e12bd4bbd73522ccf9f3738a645597e2693

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\SiteSecurityServiceState.txt

MD5 de418936b6e803df0667ff323b75b9b2
SHA1 1c270c4a79b9b7d1e7b2ee7f194f4de17e76df54
SHA256 775dbf7174d24eac5e653b4a7f09fd921cffe52db843efa38976d91f03107853
SHA512 549aad443050d9a333bccafa7266b17187c9d0642fa19c2d3f1a40967dbd93dc83f9eb6e64f6302b5015f383decb190b503fbf0e7df6fc45f9d2bb17a133dd63

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionCheckpoints.json.tmp

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\favicons.sqlite

MD5 4f680583583fe01eb854cf6fda5d66af
SHA1 de9bb03e028603605187add95415533f22e12b48
SHA256 cb2a9925a5ab0a8d58337a992f1ffc9aac9de3c40c95a3ad9175b6f70ba914e6
SHA512 ebae5ad0fb1191f97e16226eac6fe68ed04061ac53f1f477c1e1441c67c1f71ce2a999e91756cd189c522d3c2d3a3d2d4bed188e7c550c447a9b863275f8f21d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\places.sqlite

MD5 a69fea860fbb9701a993fc365e443162
SHA1 7ecbd296d01cf01ab4c6df305636736a0a71f653
SHA256 e608cbe724df2c2120e132c3eb46494fb03eedf4fdcb115edb9cb10bd5c94c73
SHA512 cc8bc9dc1156f2b81ff1771ccd1000a19d2c2a303230c4359ed876fe7b34b19cc89364016dff193c82ec949f6814fd075348d5add976f2c1a5728f27bf9e0d5d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5 de9bbf631c6095cf0f661146df01efd7
SHA1 738684b011d54d3b9594df6ffc627d6edd7b9a4a
SHA256 4561f73e823cf6377bdadc0f3b6d2f351771aa5efe61e8ec9a74a31c2cf9b97c
SHA512 4d591d0be3f7f346c035c79980849ac9ece7b4a2c77b551f27ff38abc6af878756601b7a3b87ffb40084cfe15c54ab102e9d9e306e4492ddfbe2b997d2736315

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cert9.db

MD5 8c44041493c92dc59732a5b87e43bd8a
SHA1 f418b3b8a0fb3014c1cf6377123006edc7b6856c
SHA256 b16fafdf22e416280387d8558e1bd242eba5f211d35f200651fe7b2d7ccdddd7
SHA512 2739299ecdc201ec7aa47ac2a5a639758f2a90ce26d3887623a888685e69c86e75622673bd5caf4fe8750afda50916950452bec71356b1e2ac282a4e568c1abd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

MD5 ee98ada350c60f8b89c566c9e442f9ea
SHA1 6e46bc45215fbe5d17fe3afb3e98737da5a42fc6
SHA256 7f5e9fe7e733a5b73b8dbbb77eba621c4015174bd0ecdb2750a2b24270d14320
SHA512 fc9ed6a870ccb13a28231cae1bbbe45ca750102e4c989508adacd1a1ed778ca94255960563cb7312388c218a26a0aca2e53372ba182127c773d45dbdd012c2f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\a8e3db7c-94ec-483f-aef3-57bc10d15478

MD5 c99eec059c6dfc94f5543f633a328ab5
SHA1 f3d483231f0ef8c671c21ede820413513e83d0de
SHA256 1ecde235d7931933ec215eef5ba9c89a36beeab5805b479c3257b9149ffc6fb8
SHA512 19a70e93783f04840f77c322a759485e4bd46c2558aac8ba3111ea6c9914aac1adaaa4110b07931604bd37eaea9d4d936aeb0d2bdcacfb121d2ce38a247284ce

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

MD5 153d079efd6af63045605abdf6b18a34
SHA1 7f608a0c021a18936f9684918773a73ad8b2a7bc
SHA256 18c66e0665fb5a554c9a50550d3c16eb37e2b8a22451ac312824521072716054
SHA512 bafc6d4cf15c953ee737966ff0611303ab6df8e51cb7db81a875ba4da727a0cf0a90dea8572c127d0da33a42ed68a0637c3885d239645384b11bb0fc3e310627

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\protections.sqlite

MD5 89f362b0f780adc596cbb95556857b1b
SHA1 f01d0214a952f2e6d4f355147f0d1dcb431cc87a
SHA256 66fe4841578897fbbddf070cd7298042d70dfbc7c0bc33f56909bc04a2586c62
SHA512 0d402ea91814fd32295dd77c4d417ffa7aacccc52f1e2192d164d98ad6d35eb62ba4fcf45f83a656d5847ffcc16133d08baeef11cbdb7c7feade317590af063d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\72dd20d7-b4ed-4714-b4b5-c0dfb6933a8f

MD5 46e0c1c2dbca928845607ce14c7d79dd
SHA1 c51e644ec056f98da24cf632ace166ee3b568e48
SHA256 ecaa33ea6d78cd6d562e29c14286296f1f85c927ab99ed24a9c495b92d8ce5d8
SHA512 331cc000f89ee34b325a80a3e3abcfe909875814f8d1f028c906f8c82e1d903b443b087af54f6480208aa3a03d17e6f9ec49f2e64e280ffa8ad42c2468e91e0a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\db\data.safe.bin

MD5 e66311501b51638768f08d7a9ddee8c3
SHA1 250c9f8962582887e8f97e20da518f1acc956eb5
SHA256 8476bd087426e59e991be2d438e5f1001033d4ee2ae6a5fb1533e6b38f49d8d4
SHA512 12416bd78d622a66ab54f0f156332580373c8184a25bb5f683cd215b4cae920c90d05000ef44be1e4d9c795baa4d3fc704cced61c4e16cf2601f16769d07d887

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\events\events

MD5 923bfb8b7eecf8677de04b1c0143b374
SHA1 8b00227e5faaade45d0c68db9b5ce67700596d52
SHA256 93fc22c1400c4bb6b043f518ec757b29cb884cb25844fa4ce84e24b3bd71f07b
SHA512 e4e7006515a088623c922f188be7c09ac52abdb9bc893fc64a06b0a16b28e85348b72f15dd783ab728f01bb5bb5b6d37fe9f60a5c995be6f5b3f6920bef396d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C

MD5 9ceb8f57f1002d8bee13680820776566
SHA1 63a2f6221578c528fe5e0ae7dc5bf65264c6bc77
SHA256 1b4d10fdf0c48719a3baa4eb5d11cbc393a6f09b74074b98b9f9123c90e29009
SHA512 3eb9512c951d6c272c8f03ab109a8eb6120269ffaf5ecf2a682365c23d19e365fb1b5a3c39ec3260c4599fc6ce65315f01037370946501df72d72c1183fb60fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\AlternateServices.txt

MD5 660de226c8c6e67492b3bf08a13ba5eb
SHA1 a2130a5848cebcb612573dfe827111f35f228b67
SHA256 a7ba539bd0f2919f567d57be255ebad47013fdba4c27b4730bb10bfd678170e1
SHA512 a0275d16769fc0f9081f49ddfd8e4e636122ed326d05f76926527e3019b99cb9259e59803a0de6eb97fb2509685e3796fb91b345c4ae3b253918e5260b6e66e2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs-1.js

MD5 1161d0422f960a1d2e0190149fea8215
SHA1 ad79fa578ddc2aefd45d8aa8fe758563930d910b
SHA256 69e244f323eb9798adb0b1ccdd7743830c857e4b0866f539e1c4f4599aecc5c3
SHA512 a6c75c9ab3ee0f1b3a9c15e606d7c8854e21602c194463cd804ab3462cf9ce2be454f7cb5d4fdcd29bc69acc6e8d99d8ee68f922b9d8154c941bf9c33178e6e9

memory/5468-1525-0x00000000743A0000-0x0000000074B51000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\formhistory.sqlite

MD5 eee1b0caebcebc9c275ca980c71da8a2
SHA1 20cd9b853fa05e3d3330f2161c5a5d1580e38f5b
SHA256 d65a6882e29acfe8f00b8b97c2bf3bc99f0b71bbe9a3d5705b9ab0514c35c132
SHA512 9532f3fb58a263776aa6f863d8c61f4cd0b61fefbdd5f3e0a8dca664aaa5bd535cdf5342db1c81162fe834994a50558ecf5bc0d60b04eb84788384949f96f38f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C

MD5 56f4b12f5fbcf2dc3e97359a54571bf9
SHA1 9da70d780b6cb7d6232e7f2b9761ae2248254351
SHA256 aa6e3b1da83953854dc3b88981cafa8566239ffd41060e7a02501a182e849380
SHA512 c0ab5501bbf993af4bea600a474feb9a63745e8f42632a1d6b74b5ed58ad6dc7d94e46f068ba1b1734ed7697b3618023e03bd6291b771ac1756e00312d2d5208

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\E0288C23BD9135E50B1E70EE8871459520AC4F63

MD5 03960b43097fdc093e08c6badec54481
SHA1 de34b3268f220a69a10ca557c050ebc6c9d10ab7
SHA256 38dedbd44b7138567ae55ee0d7b378300077bdb4786990ac52a4661c1e1c477f
SHA512 da43313e6933fe655f07c4dec3741b1b770fd38b2f9a7ec58d3407e1ea0e36a65d832a4d3dd5ef423e4ba5525c42de2dfa97f93f97a725b34bbfb65dcfaa7bc9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++uk.yahoo.com\ls\usage

MD5 df260eb2ed77174818c9b68a2369acdb
SHA1 7b49bda720648717b181fd5b5b648df2852df084
SHA256 6040c51e51de0aa4c8a3c8a9ccf27bd39531713b7900ee052cb961c66f55dac4
SHA512 aa4ee0d2357fec41273953401290e1eea9467f508bcaefa32cbdfabd17c84e9fb4292d8cf62c08b922d51055192826f87b526d088ff6c037a4d09c6bc09e29c7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com\ls\data.sqlite

MD5 275fb68eeb25ac1d617b9b772a47474f
SHA1 56c25501e1615421db3626c3abb2242fa2be2d70
SHA256 c7c1e06d27fc367c1ec336585eac457a89973620b7e42229d43fa084e6a86dec
SHA512 35e86707752bd632063f3cb45bfe5702dd7ce84f3482b53bb9c12aa7c0b6606daef17e79b91ade5cbae4b41157160fc1068f21ebceb0ec524ba8737044c46834

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\0BABF52A64DC7B1FCCDD563D131A086B80FE77E0

MD5 dab73067fd8b521f183242a6869b7ed3
SHA1 cbdcbc0c6c9ae9ed7525d3f9c46acac63499e211
SHA256 30e607f1d6244c8818bacba0e070639488f598d4fe6be68b4aa4fafea882830a
SHA512 adfba7f67aaa9196088c4ce7cbc5b1b0c7f6f6609baf842bb2d976ec7406a7849a421b8efa05b1821d7803d3a564d8a02abb1c9914666727f67e30958e3e24a8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F96A1A8368D3C3DD1FA81D170326E6C1C65D342F

MD5 32c3b2cc56a871d2d6143f3465c44c47
SHA1 199220516c6a7b8a0509b8255f24c3e82a3256df
SHA256 242e5f7be4462ca649f26630d63de14822b7aae59652ed65bb0bcdd88eb161cd
SHA512 77a48d4138dc36d0628eabe0c757f106710e3cf2f9e27705d0c03fd659dd3c7eb313310acded6a7a296fa18dca04f938e5ec1eb6e98f04a807607792df2461e4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\3C7712659D18F9BDD24B44DD2EE887F2D1CA3EAE

MD5 35a183eccd82ed461a239860a58fc5b2
SHA1 ff59568f1581730718aa5e5288f0240e2ac963fb
SHA256 bb0946fa44296940ec59dea6f7f5f96f7ec6f59a1652656f7b1c83f168963a6d
SHA512 00546b12f543b939edd05294618a2e4fc5378f4ef4719a0cf4d2d04dc6de29236f46dbac5a5927a7e0608b6fe0cf63c63422c9110958bdf811fa6d03cef6693d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++uk.yahoo.com\cache\.padding

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++uk.yahoo.com\.metadata-v2

MD5 d9a7dc8ec93de19db96bff176826385a
SHA1 de89f6632e0e8da1fa8ee066f44fffd146e2679d
SHA256 1b79d426ccf96072d8016bab1c0241a0fe99851fb0b04681462c8d1c6aeafc33
SHA512 d2e81f9b49d5ef584d2844160ecbf9c412012231c46bc952d61d513f793cd6281bb27ad63b946539817a37a8b1968aab00fcdb1866579beb1653edf9098e7cf7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com^partitionKey=%28https%2Cyahoo.com%29\ls\usage

MD5 ef5bef2c23533b20775817e0acf08128
SHA1 7e6292d37817cb31904c13795ff44f14e69a7678
SHA256 0ef72b88336bf69ce23a2f09cd08268e0eb7ef6ce19e7fd0632c7179a22f7f31
SHA512 61c57a8772cbfd11f9118704795d4ac30259b447ab34575ae25636fa1f7138d015e89514ea9025abf3fbce791cf597023a3ac209ca3a27031aa2f01aff2cd0c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com^partitionKey=%28https%2Cyahoo.com%29\.metadata-v2

MD5 64a762536cb34c327fe3c87c5fa3e0d8
SHA1 616ca3855027af0f416aa4d4b18f4375e84daf23
SHA256 08951ef06c16b68cff1456dda6741819b2a193cb3451ed69da5791a7905c80b8
SHA512 eabe25b90051e56e8558b62d8862ac690034b680ea2292ad5aaf48998b257c5191b9fa3085b3b1ec6d73eb483e2b84524ee86b5540d993ca19b8e60c256c4888

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com\ls\usage

MD5 69b06a4d6e9f93d36050ba64c3e6296e
SHA1 6024a91746ed7f1074bfe8463d894e0cabd1663d
SHA256 cd91fab0f8a3daa0ad26e101fd2ad02c86335a1b15cd583277e54c03c67feb57
SHA512 5e35eea2a411411e6a949fef35a37b2009614cfc13a397ce9de491b2c60e61113e5316c9e00c822da1c14eafc28a1655702ff01b2628a3006c9aa8b66d9981d9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com\.metadata-v2

MD5 8277072086f96247638deae7c61540a8
SHA1 3af0daff643fa39d5929a171d599c30c7e97ab56
SHA256 6e23dd6a474b91e9ecad0bbf632cc559483476dfe19ad6a5b3db705f4ee5b368
SHA512 972bc05327ad53123a5c6aadd33827188d5ba6e53899e2c83702b41b3a90baa9128a6869fce075b8cae0eed18c6b70d8a95dfde607d0e62215072700c9afb2e3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++tsdtocl.com^partitionKey=%28https%2Cyahoo.com%29\ls\usage

MD5 f2eb82ab4986e263f2f40d67b22e330a
SHA1 1146cf66a774b10ec3de216eeaee255d17c74175
SHA256 629a226aeda2948aded58f229f97cf1fcdb263236e4d56ad486709b97e8a51b2
SHA512 36b766928ebf81bf604bbb07f17d20fef4eea0ad038f231f0689237afe880d1afde81bd6a1c5359fea5df8c529f734bbad74f3f356278bad91bbc8019f928e25

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++tsdtocl.com^partitionKey=%28https%2Cyahoo.com%29\.metadata-v2

MD5 f1e0dd77017ed0e749f2a3bdf06b56f2
SHA1 a51f96efbe139a3adae978b75daa1b146df14971
SHA256 12edb54882a3e0d98a0b2784fb5bb73eaeaf9496db5534ec07397a6c0d302561
SHA512 f376491454670d1b922e401062c11647f75bc50dcd52285dd80d42f19d0172069fb44ab040cbdfc18e6833760c5693107ee93782f1b51508242461e2b15c8b66

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\9210E0E3CC43AFD189C4B0F7DB47E2086582B78A

MD5 2fd589ebb209c45e2aff0719674b0390
SHA1 01fb87f74480451fd4513611e27401f6526d2524
SHA256 3cc848c623ea5357888c169d7e00d298d3caabc049119e958f074f68ca8c6c6b
SHA512 cf602f085faa5befe7db5eaf7ad9f2646a26e671373b8922080e14ac141db857525bace0b2ed2e171ff46608964512ccd590c44564f582f3ce67ffd3180794eb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\1859C6BC550B387847C04D45ED0FEB44EB516DDE

MD5 ca13337e09668640ae25a86b9abdaade
SHA1 b68a2800d33704aebe294ea73357c04b45b4a640
SHA256 5d34cfdd261934639f78eeb73414b15d444ec64c15c79aa63809d7a0147e751f
SHA512 ea76a3fc275e160e9f3da863db95d5f6bd1c387d1f6e2de40067932d9d5b17a77fa2fbd2bed9f408caaeea0876a4980fda3a4a291012059484eabb1f9dff4941

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\22DD782BC7BA8DABAC756FEDD6A1A2B1DA15B025

MD5 da3056015532b1a5fa0beddfac8d750a
SHA1 8a160d7ff299ba7fd9ab202c29107064d414f8ff
SHA256 f4888f8941f4bb1ab84dcf6a0a4967c26198251cda982919c99302a5b2666304
SHA512 ece84fa10d9176def81dc0fdbfc42c07fe9aafc8af0286a42740771621d6a2c5705a5f77e22220cbac6f714aa0f3d1e49d524fa6830b846c19ffbe307304fa69

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\46B98193B333A98929E2805B168F9C83F2C3F106

MD5 d4902c337fac07b9d351f7d3adcc16a8
SHA1 f00b8b93b9ae4823521fba99277cbb01e60e7d2f
SHA256 e50ed8434a8d85c2d5bedc111a167d3c13459e160957fae1196a5d503a414dd7
SHA512 132dae8c6b9f932fb0f288f389eb720aaf1eca5aa46e9e899369e9009985e5bb3156dfdddd092ee410316f090ed0e274535acf56de9003a24f58c38569eef62f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\8540EC873F08CBAD5DF5121BD3BABF95624B4A14

MD5 ee7daa91779b25276b1641e377fd8b0f
SHA1 048ba0b1e9b8615a0f988aa805f04a0d44ae4562
SHA256 1d816da06ad92f3e06261ac3b530f5d239e6cc96d7a56ca4407de15d29da99ac
SHA512 ce912a6f519b288d02704c7941204eff841508cb00c4c5c27a55d0878ffe0e2b37072179cea0e61f58152fe943e98895fe5175b54c2f0b580d111766cff8ff34

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C63DEB924CFCA7DC7D690EDC11B2A4E05A99DDBE

MD5 7c46748d2be7dac86a50953fa3c6ef35
SHA1 17ad805c12570d5463bb34f04923601e7b9d9bf5
SHA256 a36f27d1f9726e0c9d05e628b4a5f62c9f2a61b2dc1f236c1338b3aecc5ef9c3
SHA512 20246dae7bb8ba6061a4bcc7e1ae482d340dbe4a9f139e93dc606ee472f6d75466372e1fc9b181c03f4c9970953cf89b39877a5e83121cf1920e1b1218dc4a3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\075B8FCF1E4761117058C2EFF149858F93A6A354

MD5 7b31d847ae0545ebd13f42dd53577598
SHA1 a3f0aae57e8e18ea442f58b2fd0ac1edf7e52b5d
SHA256 37e9411e26752f87cea4e3ddcb045456464197746c57e7abe9cd7c3ee8d9d2e7
SHA512 c6c608b1663bf92e7eac9310de5cfad01f0121963afd0efd406b12582a47901ce6688f09ddcbe32d8a08f01a6b7c3ec8d355046f72faa6a3042b5401d177cd37

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\67FA364673709B2531102838492206F0C3153D8C

MD5 2a803113797d313e588f35c13796456c
SHA1 232f562a24c0733fe96ea0bd07f0ae60b8bd0030
SHA256 a6921211e995ac19936d8fb0d3eccbf031ff4cf1b2ba4bbbadc43271ec9261c7
SHA512 45f4c28e89e582bb9a5e192eeb22e0953cfc72945173a70c9690b89c2adca33c0e4f2b71f2024c3dd7164a8b44fa630ce72944dd0ebe88c490970591f2c6d616

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C38828A589826967E45869A06026E590014D271E

MD5 19e28abdf87159feeacb55c1f4ceb94c
SHA1 2952595f37e3b99bfc7451d1b22fd2de78abdd58
SHA256 5b6a9323618a559e9426470e3d5b71c24370a8986316ff89b1e0f46a3e55fdc3
SHA512 efa4811b7022b5e49a7a76f439d9b41f7b6a6b36e046844b1a2d1167d14160759ec0fd3b899e89ba1a0f4867e0436337d91db1c749d8198cc28f518856e97c4e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\DB2D6B1804D09203946F270E8891A7BF94138BC5

MD5 06d1decc562fee60a8256b01b870013d
SHA1 eedf650b256836660678e702095cc38739d95cc6
SHA256 3560096c0b01742057047123c12fdbfa3ff129602d4dbb84e54c67b22032b893
SHA512 e5bd9028a020c3f96d425409a432377697f698506e146bedefed9bc077f13449862a46296d35da55a6d4b8bf0b0e24e3c919fd39d6c2c6c54b48739faebacf77

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 e563b875b47fa7dc7329716c313a603e
SHA1 109dc137abbb5637f1593aafc67402a571523f7f
SHA256 504dafd466fa0a66b34873aaae1c372e98229e1c5d03ed77cd4dc38397df4134
SHA512 b0227c9df791f0c97d264b6110e6fdb06609d5f9a7fcbe58bb463cf8add8cd065b3472c7cd6259a5b22822a6ea108245ff91b2492f01e1c27d82ae27f3792292

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 e14779c53e7902ad25e9a3081d59d1ec
SHA1 2c5f56bec9a2d5de3102f96bb0ede07200b1d475
SHA256 c587c7c343260d3319e225fbf1fac58cf42759cce0faeca6886680438215b8a5
SHA512 0b1f4212df04c53b84b69eeb6433f59048afae2ffdf13206b273c2ac6185a6ce96f46d6b4c79581157b905bafac0e14d6fc24672bfb0e71921a508ce67975086

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a2bd8ffd60e7d302d28735d1300def4a
SHA1 a470d9341ccca807073349fd21472ccbfd289905
SHA256 54da7467ee9ac90055f2bc32ffc9e1f8ba2a79844ad8e0165332fb5a42f58b89
SHA512 35b07655f24de16637749f498a51e79a1d74ab2a778e0364477fac0a4a9fd3ef32e67035247a3d599db08c66ef272376fd8722d527e3900eaaac5082ca80a582

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 2950c4d4329231a978fc7445bdd0a11b
SHA1 ae8b98594c038b51a57623dc2a12b4fd2a6eb2fe
SHA256 99f0d9fbc45ab9d61be511cba1bda54b1be73fe3d964aa0d1e33b4f7bd561192
SHA512 01d899c96cf4405551bf4b4c8ad4d8883b169097077feba6197680b39d60c9fdc4065a573e0c968b4f5a33aec60b4a17c7ac926ba3c3c623617fc630da688080

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\88\{8b2140bb-6cb4-4510-99ba-8e9e9589e358}.final

MD5 2a252393b98be6348c4ba18003cc3471
SHA1 40f75302fcbe4a8ac2e33a8d9daf801abc2a9598
SHA256 04cae3c7b208fc55b25763913d0bbdc99232942086efdf705f2a27764be6f5ee
SHA512 07af4a7b0d10f1b5e1fe0877b21abc98483d78797608a1763cfb71e25559fdce10d20f03c16f4284d7ae7ab90266f45240425e3a264de9525ec1657345b85198

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 abf5f91d14b78ff527accc405e269c1f
SHA1 6c190bb32302908d6ad6ff8a767627eba19a8161
SHA256 fd1a57dba8f9520859ab955d56ab2291d87e9c307a66e58a6252028094279dca
SHA512 70414793e602b15f255294aaa9bc79680a74d8d82d696db9ad82ddca4bfa3d8c28b441b0942ddc08aea1f1422798451baf6d460ac40ff2921e2409e1b3e8594d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\10220

MD5 3a2992264781277f8bedc1bd3c3f5d79
SHA1 f63e2fc5296be13040aaed4bdb83d04bec54b748
SHA256 98fbd16b456d6eb0e91ceb8a0a4ab22e5c50725bfdaaf046f309dbec84acab91
SHA512 3f5cd892ef3c83deaaa6a2685a53ce66cebf3cec12d5f67a090d78b4f0a6e56b71898e396f10e5aed04c4479d02819275a69a838c95c4c356f6e497c2abb1901

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\21936

MD5 9313c2c50b7a8d382e678c95fca9e840
SHA1 bc551a4486129b6625b14463b454f6cfc063e8cd
SHA256 847c43e9499729f6795fd6cbd0e8a2b8614006740290177145f3665e0036e2c7
SHA512 b9cd3c6ae862e9ad3fd715477381033f349526a91da9319d78f19e1d546905bbbc52c588a60987d8fae67caf6c66a80887b02e428c0d40aa51cd577b794dc769

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\2230

MD5 251d8552de83e08b028375497230ef1a
SHA1 29228fd792b4902b85290c50658f98665a438b5f
SHA256 31f9d4fb8539fad29247a6e2ce9eb2d5f1cee9fe29c4155d801cb3560eba2ebe
SHA512 a529ff0f6e7f81605d10a7601c805fa58e55a29d7f7d4df2001d900fc7d08c666e839acc93bf3075e0de7f961173ee398bc57555f17039a943848f9fee6a593a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\14\{7283b6bc-7572-4288-a752-4ae840e70a0e}.final

MD5 95e775863a8d01cff5cec06bd0003cab
SHA1 a3335f279462ee766a09a97a5d3a627286310fea
SHA256 ec26301dd7298e87129c8d4f9f8b1d7f314bc9f9506e52e8d5eaa34df1be75b2
SHA512 07008efd449cab4ecd87324c5693f7e39e5a8f401be672ac192d215ec4acecde045bed6b986fbb722a5170c1aa0e0374ba7423c9996614ae2090452b336ee6df

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\idb\3211250388sbwdpsunsohintoatciif.sqlite-wal

MD5 14b736d49e79543be11d13772733c5af
SHA1 2a05caa2dda3cab1a6bf67c4bd030999b9cc85bf
SHA256 07153e55123991586ad3b55ffb7e19219b513113c55f10d2c69be61a929ffb1f
SHA512 dc1163939b5f0cfa85b9b8b4542b4ebb963a5214a8c47618f5765f8198da6e433a05dc97f59fdd5333800536fd691bd8e3708efa11c830b4be270acace912516

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7db1e23b02f83972ae1d13d9f13134e9
SHA1 6453663493c798e24301149d7b99e4fd4dc0aa08
SHA256 9f6e934c81d389a80febc7e81ef87a036ff9b25fca85a80e27eb12a48a4813a1
SHA512 36583cd09efeff359b21cb27df945f5ffe2f0d8ed4fd0f36b20bb586371b1dc421138c756b1311795707e27a839cb6b7d79e133c0cc17f3914b3eb444ede4a1c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\crashes\store.json.mozlz4

MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6fd8981bfdf975dec9483dd911fee17d
SHA1 b132594e44142bf8956a7bdacad298e84d502bd8
SHA256 a981bf1f8a5d6f2bf82072213f1059233c967c8829efab19abb6561e71f5ed32
SHA512 dc21b44b5742f61f74990798b4f2014f11c9b2554d5293ecdbef149b3749c90b44f5d0661cd3487f0f6300fa2ff0ba21e676ba103a0a0c5138589a28b0c2be57

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\E0288C23BD9135E50B1E70EE8871459520AC4F63

MD5 6d8c4f7a8b49531d8af5014fbd206146
SHA1 86e170e6f7446725d2e669840aafabb477469299
SHA256 7f659a6c2bd6525f704683095369e5b441d27e6370b38e688294e206303b982a
SHA512 b200ee8e2305efd4c5d0a39faf3f01d2325443b5dfb66bf633fa1fc7b8189b3271403b0b1c9281fdfc5846ffc4c83f7aecc757685ab7dd78cb7a70a443869d79

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1be6089c1cf10ad7ad246820047a0109
SHA1 b91fcde22c722dae2829913e5ab5f2e8d71dd810
SHA256 78c61225aa4c015dc253abb35b0a3f60908871bd23904385d66d03ff65a66ba3
SHA512 ec41a6aaaf32aa3b30354c33c0a98059fd0c91a937f0930031d41d2da8d6dda7809a91226d6825b3282990500a16784d5edea68f47967824c5b123ae058234e3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\287056BA24A7D50CA00ECAA05E3CC2C7FA597D39

MD5 a4f443fa0a77b18d71e2854ab4991e63
SHA1 70c4bf5f72af5b8dcce227166f6f1289d106c757
SHA256 36422b071efd808da6742f9885eec4275b421ac87ebadeeefc6daf8790428074
SHA512 62adb9cedc7ac747ef8573be5c519bd92ddd2ee42c2f40b605dcae6e48603960ad918c173337e4ab94ca74bc56e5ae441a92e68f88f49e5550f50b7d3bf4d85f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\21819

MD5 673a2ffb4ace41f677cfb4068c370c43
SHA1 37911e0d07c9774c2c985d30006dface81f01b49
SHA256 f28aa912a9c3e343506e63a11be7d3c2dfacd90efb6bd79ed61887f4a9f26565
SHA512 bc0fa77422ac3a0a2e5f918204e0502c886fbf68b371d7783c64ba3a22adb6ee6738d484f9c5925ebbf63fb99a5d0fe6afacfd8b3d8298d8e5918c0586d2ede0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\41FB51F91787A6F37B1C386F4E6DD77F96C1A319

MD5 4efe82278c3aa8122ac4bd7a82a867bb
SHA1 468014a8cbef67e704c2b139126fc357f97e5657
SHA256 f2993fb1bb848a2cf3cd9c93f942c5266278f50df96a92d31bed3172e11802e0
SHA512 cf392b51e219cd868530c94cb00a92da3a13f78c50965222935497b5fe3555cd012a58868994daeb7e24ffd1935f6fc4313bfd36e31e86263f459854999bff15

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\212\{6465caee-efb8-4800-b8b3-96bab63965d4}.final

MD5 707a39f3107b60c93c36ede3f5b19168
SHA1 c0da2d5953518682eca0d8e25456edbdb6876752
SHA256 780714b8e53c7f6889478ac83bd894453f3afbf5a551e7b62ddc8399bb0eac43
SHA512 7ce2a2982df85b330080ba28ba60eba1af36ada9f43ef32550dba15cb284d703ef5010e55cebd9e54f067ffadf39f0749aa679ffb384aaa9012cf8833a7b0ce5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\30753

MD5 587b1a82d863814efc4506070fd8127f
SHA1 0c70ceb4ea654df33615a3cb384c31f20b4a33f4
SHA256 15d858493445e3ed8b46b5a157917403191a6f5330fa086bb7500602be6a29a3
SHA512 48a53f9703ce55e13ff673cd6d9898eff0c824e547c90a3fee70a763acdb72a7a5349e65c6589f5aa7dd6aea4f44637fbfe9a247f0e7df0fea02f2463a934c05

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\24279

MD5 1a47dd182d8939a69dd98de75ec2d030
SHA1 5a5bd9d4b17cd95f4109a8cab40c33c0dd76ac12
SHA256 343e7d659266730fc199a77d52637d6dc181dcfa48d65284aefc73be97b7a8bc
SHA512 1de5c0c631db33001b7d79431277e18eb8c392a88c4ba00d9f381ae630d030a7b5e820461409e2f5b27ee6cd51aa9ec1fa35cb7e9e54e8583cf44fa0483dea86

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\98\{d6a310e6-05c5-451b-92dc-e92e08937362}.final

MD5 be203547ce77fa7a91259437b55c0d1f
SHA1 cff2ff2c9469ac96eff7baaa308cdc886fab804d
SHA256 e5f9c781a4756c64455652d9b4bd944aab9ecc1eef556814c00b1797209f4840
SHA512 adf00778a63ea8a143f8fbbf61188392a87a376234e17856339036854cff3a5247aed0b1c0b603332e244d348d58402ba58b32f6df6cc8e18f9d8242f6573f71

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\77\{6e166699-9d77-49ef-8905-c0f890af914d}.final

MD5 45e25bb134343fe4a559478cd56f0971
SHA1 79f18ad0b7e3935c3231ced0edd8ea3c7997ca93
SHA256 dae4dd8e56ccc952312b3b238a1db294d4d7ad4f532c31cd1c2e5f9dee881678
SHA512 9b32b125c4183fe992630bc6ce9a511157959556fdce53f8264aba2aa8fb7b0e53b408b505da2cc96cdec771470927e74cba3bbd6eb71a5077e9f933cdc85292

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\83\{0302f4bb-63b8-45ba-90e8-761c6cea4d53}.final

MD5 5b0f165bbdb71faa1bb5b26c4f022e96
SHA1 704bbe81e0d8370e675246e1cbb347bf8599aa45
SHA256 b95a445bd9d295276e8423f1ad3fc50c740512a634f2115364217544bc87d44f
SHA512 6c521b2c55135ec98f79193bf9c62b73cfb1801cdeed03a9871878f677aacea46cae165a4290682768ca1c1192dff2e87b63c39228164d72d2c7abbe732f8d20

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\145\{1a9f6a12-936f-4f9a-8cdc-3496a5798b91}.final

MD5 51bb0fe00991a2ae6707b3aefc583918
SHA1 21ec201ebf41ad57faaab02f7961ce5a746e6dbb
SHA256 97dc140355b2b45b54c3dab1ac66b951afae0bc742402cbc342be117f4424e0a
SHA512 41863cc0f1252366a5514dd62a06f4bba493029b8c7a35e19173b6d7f9114e7098fa35d284623b6641d28f7d7bee1ce99064987afc985dbf0354368f71f9a39b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\218\{b04e6990-c5b1-4911-8877-a7339b00c5da}.final

MD5 276cbe7276c7f3a0fc88eafb5ec6e68b
SHA1 de67587eaf19b38f2e9f02fa238219c2469605a1
SHA256 8f2a87983ce99d8418be2ccd1a0a69aaa0753c5086ba37d627a272b2b97e184c
SHA512 4f0d71b0dc2b94016e4983ef8e6288a57a2864f174b3be96809f0a6c4a755115cb198a22988f603e4dfe89f97616b39dae6c47662b2dbc359d40f184122611f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\53\{abfe48c4-b46b-4529-a318-025a8a9da235}.final

MD5 830028a05fd627d68ab70e41825f7f63
SHA1 721199e2f117990f999b2a41d91536aa4790fc76
SHA256 d7f263bba51f160914640b1310d713268e564d9bb1bbb878e67d442589edfca7
SHA512 7af9479e45a89cb49053df5657133a83b86553cdbac5be5fa18ed069c111021ad7d82b02404bb3c35b9e8dc1ed66c3c05bd8a5e8afd4c0d66a598be3ba24641b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\105\{00b4844e-6e0e-49e3-ba04-eb69b4021c69}.final

MD5 fef2bec6aa54f4d3b01b7934b6145099
SHA1 d0ce8827eb647b40e587925bce6baa87a678294c
SHA256 22b096d01a69cd9c5d08d8e75cb3040c90647ef7ae42e5a7ae3fed4b95876c0e
SHA512 27e5af3594d7fde882c69a6341065a233cac8250c1c6a42146ccdbc5edf1895856becc62e899b04188a7f0b7cb05cadcca3d90172d67ee8c50ac65a77d6c0026

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\254\{48127000-fece-46ac-8b15-bd8d89e9d5fe}.final

MD5 61fe63358ed5c171881bfffc422a3d0e
SHA1 aa75bd2ab0c3337649e0c8b70bda7f026c873854
SHA256 b595399f19902bc6fd474a33408fa74f5f4f97308c2fc8f8e6226897241e5cb7
SHA512 8f8de25ad07e2b76f2e8366d6be5c636cd40e1ea3a36c82595abd42113816a0c7668d1aa6af84b23c57644710cb607d166324330e8e095613190de5159b3b3bd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\133\{52e3111f-03fc-4a3b-895b-f3c1a4feb885}.final

MD5 ed6fd5e11dfc8e4cf53ea851ea9ede04
SHA1 fc392e8d4f64aec77d892182f63fedcd543977bf
SHA256 478c763f896d5b271626a85070b75e8d66dd1eed1dcd244d9d6874bb1c24e6b1
SHA512 5da78d681d8feed8958b8fc60c4bc7975e9a4cf3e94e884e2525005cc1852c5643cac43cfc0c387381ab6f8d97d90a1d22b31faa0a1ee3529117b471cf6ff21e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\198\{1f0b9ce5-3dcf-487b-aee9-a1bf88c5dcc6}.final

MD5 dbc7008af6496a1b3cbe4534ea1879e6
SHA1 4ba4da481815f4f74562b66cebc7f7c3f34c5f97
SHA256 1d9f675d3f6fd7a5ec9d9b7dc5f68d47eb6011d37059523bb8b01a53d2ec1ded
SHA512 aa632a6ea6d1aceaff29ba7d1dc47cb5605b0d3924513400cc4236d1cfc11b193a9e206ef3d819c1865a431a3b68bd591dec58d7141f14f46d0e7280f3d26a0f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\50\{d510c3b3-33e8-42bd-9234-87c33bbefd32}.final

MD5 c4e0cb3d3de8b6bcac527d2f0e5ed241
SHA1 2425b0c4ddb89f31d101257662629cac0c3cf0af
SHA256 3135abfbd2020a12ee327fd81c3739da37a6fdfc11d2032634ce5d33e916505c
SHA512 29e026c7ece58ce6c56d64073f3b0f6a008286edfef920973b7e399ef57f042780f8cb5a940d8654c41abe2a6fc8f60e4427d70fc285fa7fee5fdf473ae66fee

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\32\{ca6df96d-6c87-47b0-8637-921f63b05b20}.final

MD5 b719a3c8378a40cb900349ad2a922921
SHA1 10a71eded94cf7fcf70bb4952a35434526264e88
SHA256 7d6082dff0e7a043a631ee1ac1c1e094458d7f7607d075db809ca60f531539ba
SHA512 5bbfe366cc072b80c4d35c45ec91c4ce60a6f5140e6ad7109554ca3dcecb765336ffe938bf490e99c8edddbc3571d41c8e2a34e1becdbd9adaf334b15207e167

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\174\{a02544cd-e14d-4bb9-95c8-e03a659a75ae}.final

MD5 86594976122d89366b8176df017e3cc1
SHA1 22f5f42d9ee348aa4628fdbacfb1581de8261700
SHA256 302fe5310bd3b2995c6624bc1a7eaf2529bd6d0f2b351e10ef3d9e33c87fd9b8
SHA512 db9eb4602dc4451b8d5e5f6cebd18232e6b5046e2b5c0ca548db4fa0e6b603418140c833d79026514a80c79b3663570b9bb87123cdc07594c773ac0171465b61

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\3\{7d5cb77f-7a5c-4e3a-8b98-80c00e1c1803}.final

MD5 9aaaac373e73c9d2059b9ab2b43dddf8
SHA1 7134c7ec09101b8b3a94c2a6a7acbaca698f449e
SHA256 26196c7ca915523f018d004c6f83295cb67e0c1ed511e56d2138daf19cb8b488
SHA512 d9b35001205de8e00819ef253a33e6bc46f50fec805e130cb14861663041a1302ed7ae25d0cd615c6e267f4519e07f70bc814b2e3888f419ad0138de96e27c51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\203\{559fa043-f9d0-4b7e-8f4e-57dbcabdd6cb}.final

MD5 914b9ca76eaa14332c4942d6c54e2407
SHA1 b4e99668f3c64231cbceffda752f7f4e44eb30c1
SHA256 5a4ade92be1975ccc46ebd2c27813e8657c743efca4ce9d2a0e0324835379a6a
SHA512 1876e62f49f481c30b28bb47a347c4e495e3e405be1fc767564780bab91d4b17764ea6e507360e3587dacfb74ba58bcf5a47e43d608da2b3b3d231f9c1322af7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\80\{8d5bc914-7e2c-4f1d-90e6-a831366c6050}.final

MD5 d0d1672cc7d147f9f802ebefdb01e914
SHA1 22ed7eb147f695ec1df8ae6f43cb7787dd0ea652
SHA256 62efa98b135e5ef8779b99489ab8200b60026a5b1000ff3c997f3be230febe2f
SHA512 7f8ef8af3f57a6aab90ccda6ab1079e43630de11d14a780786a1b0f1ab057d7cfd5ab512b53ecd8ddd1bcc669fa56a0c260b2df421db64e3855dee7d63251a68

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\98\{afe98827-cd4e-4468-ac0e-4890de2b9662}.final

MD5 7454bd7949ca6f818c9fa0981f0573bb
SHA1 af773127364e0e682b4577d01d91bc23d66bbd90
SHA256 4f388755d0e889df408524d81b7e72f59eaa63333d27506047365fdad0d3b0a7
SHA512 cf36700ad0791654a81e40ce63037c1cd7d17bbb601f578b62fab159ec9d9507101871fd08a91f29398dbca26fe184fb44ef5cd3cbbde9044026df3fd4747326

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\127\{ae4aa5a3-965b-4a32-b68f-1d6072d3f87f}.final

MD5 1871ad8227869c9065eebf84c80192e2
SHA1 25a40ac2cad47b0a0f073d969ed57ae10d977ac4
SHA256 fd92593246f461339368c1675ae6755dbd0c25075d87a858f6196f7bd6f1e54b
SHA512 5de97aa093110c6d92b692982e2a9ba7d9332b68c7834a6e27b35fa0c4b78162c51aa8bc610d69bd9921f8bfab20d6a271c671bf11a343672afdb6f027836ed1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\112\{a45bccb0-0b76-48fe-8ccb-2a4bf0aaaa70}.final

MD5 25bc26013ca16ec022cc26f5370c3769
SHA1 0b959045667e2ab2efb992cdfe8abf8d833ffa83
SHA256 8e291ff624d1139db9423256f8b7637e909580a54b8838c81119b12cc631b84b
SHA512 ed775d60df5dfa9d6fcabeab00e46d6ddd421f19c8de2ba3d1a78786cf70ddcd86e3dfce18519d916078a36a23f64e9db42149a4e3c26d58ffdd565f3dd9afdc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\246\{d5738b1d-a51b-4327-bf4e-a80daf5720f6}.final

MD5 fb3d6634360a9125ce7edd27c987c8c7
SHA1 d3b094de4065f9302bc48d57637bbe04cca19d0a
SHA256 e75d4b40320638f498c0e1b2daf9a4c9f2ef1f09010d48a88740c48b43d306c3
SHA512 c880e7c9a5174e0e31a733393744e19c82e6a7f424be9e35a6736cc1209d17552e0c5a6cdb8cd725a77a00f15d2e4065b21db78a99abb5f35758d32adb52a53a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\215\{34ff6171-9985-43a8-af54-10911c1235d7}.final

MD5 36b3af163e76f8c0550efc7b62857c65
SHA1 adf7a970b74713ab804bed1a0ae35d51e72e5290
SHA256 a874bc8299c7dcdaf1a507d459eecb176e4b503956e46aecf11bffc36de87a91
SHA512 942d5afabdf48957e93680f8517a2648d9d697c2c3210503a89d7352aff41ca944435ed7f9ee2c4eee48b43ab303914f50804747b0a0501849ab97a5f4274145

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\202\{847f743a-ff1a-446c-9a1e-ec2d532f09ca}.final

MD5 440b8569f0166adb464f65b587fc1864
SHA1 bd9ec70774c72144b24d6b025169adcf97f4100f
SHA256 7679aaa38924228f58794ffd76387e65f03fb1a7ed42ba79a369069f2da4c13a
SHA512 2a4d57dabf61b213de49a46569ad00401afeee417d28936851c1ea346d65d5019be0b8092d1857b58ca0bd0f2a1407452920a2f3e0a69688d61bef25b419fcbe

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\136\{189c8dff-d832-4a24-9aba-1987edf36a88}.final

MD5 7981f433590b9d8b8a3ddcbd9d4a83ed
SHA1 58944a6101a8cd3e37574d26f2d03638c0fe2b2b
SHA256 097ca92e3fe122231764cb6d23deca18894c83cbd4128b39e925c88c061096b1
SHA512 67e541767b07de4f4a1b88b13c5ae2f0b0df41c09b22648d8681cd7e7cb2cc7d0c15f685f8d6165317fa5956687f46731867892d3e811b78a9b6df2eb3565d4f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\47\{6b068890-5353-4707-96f6-c411a2ecb52f}.final

MD5 329d8ae08d8dc87f86a511b55ecfc6ee
SHA1 46a40fb3e9c046870707b0a98fff5a53cb4857f8
SHA256 a61773d79b8fc91cde32c678a7e7b10cd7ee94c0023a83cce29180c032f5472d
SHA512 6940b02abfbf4cda7439f2b0ddbfb7b63fcc451b12d2a3fd4dee2e0d1f2fa3c23af1b5177d7e6f68db6252d5aaaa702838bbdfac9cbbb12b6588e9db535324ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\134\{221e8bb6-abd6-41a5-b5b0-bcd060327d86}.final

MD5 ab0beabb0034744ba50d0125490b6563
SHA1 819052fd166eaf842cce978597e0822d28a066ed
SHA256 682910185c6177e5cccd258f0ee3d1572e97ef9cf2451d52f239dfdd0cfca502
SHA512 2251fefc65563f6dcd5a5e042e7e89210a2f7bc492a79af04b3ab1cff735df75bc2e1b9db95855cd9eb2a7ac9bd309bcca3a09fcb66d5db089455e605e1a99b2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\145\{a8d40c66-b7ca-4c84-818a-019d80a4cf91}.final

MD5 030dd07949fee4d5e67e6885b76ccedf
SHA1 a83002727b38d84882fdc444a3f5d7fd7963acae
SHA256 95c8349deca56128ead6daceb682594a737a5af8a03b70065e1f2c6c4fb84209
SHA512 f094815a8ed89bb7e6376238142cc13887694fb184d9ffffdac56b7fae2bde2ce7acf3d50c0431d14ca2e03620526cc21bfe1b6c44b467e079e30e9dc3a8e87b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\170\{5056a527-5b64-4252-86cf-d0804c9a63aa}.final

MD5 a5a12471c60b1660512fce9579675a2e
SHA1 d702b7183c27a6b08b626c9bba460ce0e20a7395
SHA256 2b8ad66d9eb14d6020cc86c9472a8d32859faec20e5bc971bbbe068753b378c0
SHA512 ec69cf09ef623b7971bf8a42267e23c4f5265127608a70d1ea8ee7a910982e075723a0dabd7053022905c9d0e44cbecb4fe2fb1005258fac9a0bd5a33f3b6014

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\179\{5fbdc661-eb5a-4d84-b05f-ad6af38786b3}.final

MD5 253a9d7dbf4f2f8141599d38f58f86ea
SHA1 0766863065b6c57e98fb00fad0e6d8ca1c1f6aca
SHA256 fb659afa77a61d064962153784f63ba71e453e597d98b770c02aa31d1cdfa7d1
SHA512 379424e9196ca464ecff6e513cb32a296a63afa9fbb8d19561d0ce9cac304440896f4efb71956bc781cc51eedbda4f6d0e588e075ecba82e482ea2bf6aeb7371

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\106\{cb4c8a7e-c66d-4eff-98f3-063a9018ab6a}.final

MD5 5525a3d889a5f2b22309572b81eb632f
SHA1 75570ecf4e74c8094526263c3f8fcaf09d4ea87b
SHA256 82b1f81789c3cf58f4985bcf3dd14d3606a9bda013bc08501e36bf46c4fd4e52
SHA512 d1e9153d5da3549d63b5833648191ec199a616e64c343b2985a11626465bcb728e39a3a04b906ea5bd42bff8b7376ef1a26e65c4e62b689af0cba19487fe982c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\252\{80ddd79c-c619-4ada-b119-c28ad23393fc}.final

MD5 fcaa7f35d0b6f5dcc3edf6ea35b7ef98
SHA1 37eab86381cd122095b712d205eefd4c15ff49c1
SHA256 67b688b893251d9e52650b3cb720b6f8be62c6e1afec8ea4b223a8e975d27b1f
SHA512 becd339b63fb55676cabeed67fbf4e28740feca0995b8734a430359c96e14b8591d4242a526d920ac8893d9d22ac125288e8ae8dbfb0a0fb484ed8544774958d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\165\{092b3304-122b-45dd-ac88-1d2ab5f7f7a5}.final

MD5 b3a912f7ad1772f6fe5812fb79fb8f4f
SHA1 00443a5067e504d2b102a4358ddb6f0484d464b0
SHA256 7663eca944129445deb2757f49ef731ac2a95ac01080067f5938dcc0904fcd7d
SHA512 58e365169f36ce049bdabe6c19ef7788684a68b2b38fc499f0cd7ea8232dccf0708d585ecd249d9a92b2023fed544145b967848e50ba44b0d2af5447abb0b761

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\131\{4a03dff8-7f5b-48a7-aab2-69920def2983}.final

MD5 a57c59c5082da22125cfc69197546e95
SHA1 ecbc238d1f440562832601a78bc3fdc052df1e0b
SHA256 aa70e89647f51593908420aa5856e5ae4f663065bf8a12cc4ee1aba1a0916a9b
SHA512 ca88eb897f8ef1fbc65b1e2e426a2e8274a7cf8c225e02e5406c39ef5d1bede11a732673162e21379773622207b28c9a45de83a64aed110ca82218e7097e7cd0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\225\{b1caea6c-3b73-4c67-8f1d-01f94e7344e1}.final

MD5 34eabb6d7873666c4dcd0f6e2c379fde
SHA1 e6dceb2fcd82d2513d383afba73625a4822b44cf
SHA256 2f6cdfea39358c552286c9a055d5e364e27d8a1e6700de932fd8f406446d7048
SHA512 ddd2d6d1c98d67ce10e3c4085fcd33499767b0a158de2975cc6993f2cc06c8c09cb1daf1ff628e4cf9127c973e87a6f3559e3459de1ffe4c8685e40c1998ece9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\183\{2a529bbe-3335-4fbb-ab65-068c73a6a0b7}.final

MD5 887d18f5d2a951296bceeccc0a2908bc
SHA1 d9ea3e25c31f63fa2b5c234df3f4a22c87b7abdd
SHA256 47c2305553e87db8d59361705090fda372c32938564297a6db1dec0e5dcbcf20
SHA512 ce858e1c6730655d32e099d8c2804288a654bf2f7629c9bff0a28636473c1834fc9f8e437e04b0b985998ee7cc499abc3b474ab292f3d7180e5e6adbb4d07956

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\132\{3352f900-177d-4bff-b20e-d59085f0a484}.final

MD5 3a412424ac9e9e38359ed78efdadc85c
SHA1 efed1bcfc57a1a6b9917cd3bc20d59f767adf5bc
SHA256 8cee6015ffd0f547e1bdfc958c906df98b64e24cb6dd5d89cc1aa3b38bd62bd4
SHA512 244689ba698e3c6323e8b72acc8ee5672bcdca4f859dc402e463d09b631861c996d90f8740b75d7e1668abc27ec447a1cdea1aaa30434ba56da1f7b06b84d57b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\190\{d679c504-6278-4c61-88a8-82fc03c4dfbe}.final

MD5 abada082ffc6679a2067c452c7cf2afa
SHA1 99a4e6c70bfe85066f09c2ac1b2108d05f129c52
SHA256 fdd42399b41bbb74565be3da15f861b96f044ddee74f6f2ba29940a96b1f2031
SHA512 a4db103b9409b1a544ad9e449a3cd65db72937fa325f1d08419450997f0de9b1481fc7c31ec915b89dfaee13f42f4e50bed68155d2e39d42332c01f4f4e6fbfa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\67\{081070cf-ad8a-40f9-b1f1-6176f3965e43}.final

MD5 0ef1f531ef723ae794070d8fb9f22e7e
SHA1 359a185e7e59e52162aa084fab2f31d2131d2da1
SHA256 7b92f7b90080f024b9f265b888631c058878628e569fb1301c8dc93ecafc90b6
SHA512 876120bfdb112bdbbbeb2a87140af386ebf91d13b9bbc02cf7e96fa0f9f10d66c4a7265811b7ca79223a61fe141712ea64c5c2773aad6199648e3bcd496225eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\223\{3a91f769-e10f-4cf2-a61c-585d8d8300df}.final

MD5 6593c3cd0cd304b103124a65062a274c
SHA1 aba82966f9eebb81bcb05ab9eadc5f9ec7087f38
SHA256 89e8c95a42b02e26e31e55e66381898d19e3ad9e6da3f27ad837c7470f9b9324
SHA512 ac4026f5fe5346f518171c3ce08c0ba5652382f1ef83b1358140e5696ae1721d980b925925ca24d2b84cc6a84b5fddc9433ac492c943d09ba2f8f2485e892768

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\136\{d406a2d9-59a6-4b85-b773-004fbe7a6c88}.final

MD5 a16ea228c26d9635887c0f16939633fd
SHA1 4296ff50e58e69f667e69a5eb0e4b33d5584c011
SHA256 1147a378214d10a08296484419be2cfe7e251bf90f5f0ea9897ec1b79e195664
SHA512 357c2daf556aa2471b6f0887d32000939044ce584534fa0fba618fbec99031d0569c5ce662a9f3c1235785ab3fc9116e095e99396a082cb60e1c763f9e561c74

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\99\{b774bf17-59a7-41c4-aa42-38062ec59363}.final

MD5 c39ad8422f2a033a19029e992171863c
SHA1 d4bc0db91f8b6a7e562632cdbc47238bf7074311
SHA256 d4b92610c82ebb2fa1beecdec652dd1b40731ced23e5281a1746739bb9636783
SHA512 abd2d36b411db7e869da2fa6434644768801ee8db91c4b06a15b8af4e3bcb8b58721d654a7208809eaacceb2d17a91bccf8d40aeb81c2ebb0817eeeb0a9c31b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\204\{2a6d4b08-c762-40de-bc68-2c3d2214ffcc}.final

MD5 3e7dc63be6da02f295c1b9a5c56dd322
SHA1 0aa6083dee17a265efa6814d10f0171753c5f042
SHA256 6ccac4a1dd37f1f6d1bc68aaa92f48f02d92d3a23be15dee4d83c0b892fd09d8
SHA512 3ee1d46e61646303fbe77cfae5231366edd2862e9c2bfa45529fd7e90d7bf8fb62969c95f4125a17760ba6f934e5d51dbb5ba42bb43e24af33b43ffc0faf53b4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\120\{b04822a4-3e66-4897-b961-9c37cdbd0578}.final

MD5 be912f4bcd3b478ace5df6dc46d82aa8
SHA1 2485e534279a5fa834a6e099cccc92f20c91052f
SHA256 8a3103971412691de6ca0bf149f63e274d5347e8942210e0b14470bc2c74538a
SHA512 8d082b4bbdc165115c47454a3d641a6d6fc9ac732a6f2bc511802fae3ebdba8a84ecf64d1acfe1fc9c023cf40ae2520cd74d5cc428dc9eba7913a2323b27d59a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\7\{253470db-4c12-401c-a531-2427b8d07907}.final

MD5 a8ac2b1daf1197439e18577f9341b301
SHA1 7c6e18163d4915ae57f27df9cfe607834bb998c8
SHA256 de289ef6a8ba393577207b6a036d9bb0462b56479d9fceec6b4c094c8891a72a
SHA512 617ac8779a29725613666c729e3b0976f0bbfda6bfc358f7e606a552dd0ebf712de791d483965a72b225412fd7532764a2ccb2df1b3b91666ff25fb841cd3c93

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\252\{e0b8476c-b23c-4405-911c-da31453ad2fc}.final

MD5 6034306070954b482117c7883f153714
SHA1 dea03382c66843d3b2f548bcc628dbfbc3cab661
SHA256 dacb173c166fb4640953753914c783a1c8aecda2eac07dbc30ca70804bd8c029
SHA512 dc178d0f42734ca82160a12caabd406b1b16f414e09d67fee35092249aed61f570702bd1716a169c1e97e33fcdace6709e98044884e7459e453377f103946e62

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\250\{7b217063-f138-49ef-9b73-9b2f124d76fa}.final

MD5 9aabec02bb846ee3fab89838fc80448d
SHA1 8b0f294de64204dbee03446885a8f31f03a22b17
SHA256 31afb122c87ea568cbf6b96fc5bb8ce12eaa379581d41c269ecc4674d452d72e
SHA512 198e2db29f6cd3807e92fdc6fb2fce689ead581fec734e414f953595d1d4dfd0de8a23a364d3665380b99e58c4146d4899ba0ba6e3e818dce29bdf809ca00b73

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\55\{cffe3f0e-678a-40b1-943e-3d9f6c38f337}.final

MD5 5dac736054f1bfd6efddc9f8941f6513
SHA1 8d333e22dc6fa20e26c4732d5ff91c954433185c
SHA256 e1f390622425670904099ccdffe9b808e555fc402e7015697d49f9f22abf9175
SHA512 3ea570e7041a136d250e5e94c215b468991b70a6d6609ed27907aba24123e068e08559bbd96ca39a615a52dceccd524e3aa52702a8ad544f8a7b952fff935577

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\181\{0f5fd2aa-15b2-46da-bf9e-c116a33d0eb5}.final

MD5 7b4110fa3efde7eaa286ecb28002c24e
SHA1 ef18905bf90bcec8d651b137f902e2d70968b960
SHA256 3b339433141e9d91736ec678e692c2ec5890be7d216f4ba576461109835b802b
SHA512 bfa6025d1b2638ec2aa85188c52d1d15b9fe8c85f1e431da724f9a28bf6fbe78299539497a24fce08e48985430e713c5982aec2cc5b5c137f5b611be77767fac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\103\{c0ec8e39-8807-4fa3-afb9-f4b56b6de867}.final

MD5 8074dc643bfb7d1c60ceaa4761009fb1
SHA1 5178bcc18bbe6907f7603a90c9ef1dcc2c3bd9ac
SHA256 df4188f88b0fcb6b315de652baafadc68de7649e7c3e16f83e162d7a8b5a2751
SHA512 3d58b3e2a7de3ce79cbb8c43471431f4ea6e7e19116057a655cd997c7ff9889f0352e69eda49009a2de52be254fa2cb125d3566d281bc567d4812c9b5bdba62f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\139\{298dec9f-d1dd-4a37-ba33-6640fc1bae8b}.final

MD5 162f09323b6a93d1a573c6059f56748d
SHA1 01ad3259e6f31b5574868f7e71a180917e480328
SHA256 66a152f9fe8afb18db1fa201c5054750721af807e1dfafab9ba70bb17d131cf4
SHA512 0ecb45d87d32d12fd0ec446c3a9b8405162465d8b940eef6c86cb634962bc4e6c95e6ec18d6744e4e8ed730ee4417f10a7808b505aa1ccb78deb58ba0161a5e1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\135\{f052bbee-8f0a-48a8-83f3-2a5e83b32087}.final

MD5 c0540c18cbf85eba330f97b8fae2375a
SHA1 65f9ef9c5b0664ef9bc045344224a266d72c7861
SHA256 d540c5c26f2eab78ecf7fced4ac767f1af89e7c3eef303e4027d4fc77d6e74ca
SHA512 d6bbc155fccf19afd17cdaf3b9739e8bfa732c4c519aac5516447c23ac9e1d97f5a6a2e003cc7cd09e9e9de14f28c88de6bcae26628dfd0aeeb4ffa8f0d95a56

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\114\{bb3509e4-c7c5-4fc2-93f9-dcb02fdb4572}.final

MD5 5409f7bf4f5bee52df75c2e72dcc9f36
SHA1 7d03d02ac3127b6d3bae88725b830f05e2c19b92
SHA256 1e026c82f67c10fc4746f558ac948fa6549402b7331d97fcf7b22690cb8a6696
SHA512 b3b6a124599c979b29f89ecb3d28f494e1d9046e373539f94acd3d89de284dcadf860c38067bb496e0d8a9d6f1a4e54e15a82d0dbabfcc6280543a25b7bb86f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\241\{a0e36cdd-ebc4-4021-bef1-a129ac502bf1}.final

MD5 982db069b2cb3f7b12df524ac058cb75
SHA1 b3c4cee2073c9b11afd4fd4cafa14506dc7c4c36
SHA256 77015506cc1b153afc0ed88730d3248b4a9616edd67cb03d7b671c7962dd74b1
SHA512 53d24e86229558747d0291ea42632fc1468c7f672b38493232a75bfa5da6e58312e64905b6291593adad411563968edf9c035ce95c48d60d7a7a0151f0c94692

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\230\{8818e1d3-ee31-4aae-9f7b-6a3b2dc630e6}.final

MD5 a975d247eb217c175e9104e649cfa5d0
SHA1 d85ba5f059f8b624aabbdcb974b16d05fad94b1a
SHA256 3165df152edec50d78e9a54edb28e74682976dd15e4bc1e7ae72a5838a8436b4
SHA512 cd11924a023f8c57315aca37f3b77a90b2ddc2db55417c4002e916c917fa7826c521240a646e24b94ce72192bfcc2739b1ec0edcb790ae33960a3329c2af22c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\19\{67698bcc-f169-4b67-a665-3705d0ad9613}.final

MD5 680103ce64ae5c8edff61a1e3240326c
SHA1 03038ee24f31ad0b8da727f0c3dc3b5879b26c8e
SHA256 3c24065c3b89ce87c07f724caf59d270c80b7a072d751bd51e2f0b27b594442c
SHA512 68c0beb28e4050858d9ed8f79e0bc4a24abc99b9776faa392aa7d412a83b8d7320645ed498b7de7f1d712ec13abb554862d6c2b01d7223a229a96f27c9e130a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\162\{2942daa1-2373-4cf7-a7f0-cc84399c9ba2}.final

MD5 63c7f2fc0ff6a57ff3d98d003b00abc5
SHA1 7eff871879b328e59dc2a5e959c9efdb9e93c91e
SHA256 d750432333b0cf3e88461237110ce0718e2118f3f65d368e9e0d798b9986c440
SHA512 b3eb057cb9578836664bc1d73ff55a40e66eb48b8a210587dcb2adbad404c99a324e388b2d88a77e61f67bf25a3825a4768e7cf6f126008637feb3dd01255d63

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\58\{6246c660-5b9d-4536-9372-d396a351e43a}.final

MD5 93fe42b9cacad9a58418d5702e29918d
SHA1 fc31ea0118b5b0999dc102efb09ed974b0a6ef9f
SHA256 10a26c50074171def0db39d8343ce1b08c398e77336f87dac2707492053f891a
SHA512 9248b47c5b621c6dcd9792b25c765c6bf7dbab2a03eca1f4507ea42c1aff3f08ca165f89c75f43c2bb1f35514845ea7ccea5199bbf57ddaaf631d0a4bb2ccd7f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\199\{f8355269-9ed0-4522-b051-5a3fd17db3c7}.final

MD5 cedfd917c042bfd5faea22058d451ad1
SHA1 5a98904fbf1c9bea6d27f75c42aa49c66db8c54f
SHA256 9cfc9e25c7e723abf5c14049886f33d836c6ab91b40218920efbdc864764f3f2
SHA512 5f7513b881549aba1fad170019ddf45e780ddb6a576e08365f4c9ab2c8bf4e7d2d5053b1db4ec6a2af570de21a182fc8981a0790881172d8605c023fbbbba4d8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\71\{35952058-cb23-43aa-a0d2-8ab24f61be47}.final

MD5 103a3bb224f38cac909b8f5719ac61fd
SHA1 a2f0ca0141add7d8ccf18e2cfb38acfcee45a0fc
SHA256 63f1c1eb498439212024b5bcc18287e503b28cf7d84c3723d153a78f1cbde45d
SHA512 00c640a963ab78076b97323b51f2a3e8fbcfe288bf3cb52c97d4c3e5cb8e62e29affc9f616ed35d3ee978027ccc9d8d23dbc9d7e78f48abe8dc707fc6fb215c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\86\{660d4c7b-a91c-43db-bbca-51c458a2f056}.final

MD5 1a840973aaba0bc8aa82cd789f229983
SHA1 dcdad762a070027acd4d167c919a8b12eb7cd4f2
SHA256 fbefd71795c1a773b199567dea99ea28a5bd85ed96abffee7e3f4c1cf6f57c6c
SHA512 871508335ab32879d045ed3309d52512edd03c69e3da9813de212b19ab3ef2e4939f7f108262f12bbcfb593cfff2f1b3774bf4a84076111569fba0f306dcb773

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\65\{af1b960f-6d32-44fd-ab89-87c78fb68541}.final

MD5 3642d5820ca7ce4525164aa44f5d6beb
SHA1 b8d4c651b067c3bd08f2fefbc9cee8fda03c9354
SHA256 9624b4751a170b67e592dc6b20f93a13ad959ca57a74bdd0998871414f05e512
SHA512 3cd72c8df0f244da5aa0ae250bb9ced273a45c30374864ea662b4e518dd03c6b7ff8030bbe1ae5ffd078ccb8b8338d43b7ee61ef7545059e87616c56fd3a079a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\158\{ffc40c45-e3ff-4527-bce4-c17cf6c4b89e}.final

MD5 501e302df1cacf7ffe388900064433f7
SHA1 d044ddda684b1a7b8acb5d9a887f1b92f77f10de
SHA256 baad1d86dab561f7abf009b62005456a15797550fd0dd565328f8c1e7e7c23ca
SHA512 8a75f975a60c979627e4f325e7ca6b8af17df51e425b7df27ea45ccb45b0b37b8ff339a7cb1a22108f1085854c4bdfe8694a6009a41df07ffd93aa7c6766c80a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\56\{15cbe1b6-ca30-4922-8bcd-62d3157dbd38}.final

MD5 ff1714439da5865eda7a26d7366ecd42
SHA1 d05ac8350fa53bcb01c187b349b9c0b6cd990da7
SHA256 f2406a6799cc1538f17a8ae8eb0f6b053fc8f8cc37f77429de1fb638bbbebffe
SHA512 4d76e9d3676913d82fe7c85f4f481c2508eeb7bdc76f61507353e6af12c70dd2721d43d3405809d518f29b87c0cfdc1658ad688453e37aaceb4e6cb68669204e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\167\{737171f4-7a96-4311-a355-ac6874f972a7}.final

MD5 d53cdfdc78bbfa83f76b88fec1baf8d5
SHA1 44fdfb015f2e0ef773b74c91e7aa3084f86be4b4
SHA256 b60f85072330edde455cf9a62c94958d66793b18f461289da8a88b6bc0e29621
SHA512 07f7f09c3828e81d79f88d768dcee3d8f91aded0b408bde57daf82593eee49a1ef2dfde683b0aef1059031b5f9d701dd6a20673020578801a66555eef720f023

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\194\{f516dbb5-67fa-48d1-8dd7-bb81a8ed7dc2}.final

MD5 f4329a37d0cea28c0611e3e06f3b4615
SHA1 656b756e8b1205d928149c1c4d3ce310261c2ec9
SHA256 bfe3522eb5506f73141bbde6d8bc2e581bbfae0b4fa8cbe3f497679703ee27f0
SHA512 ca703e191a276b1439b0dc43b225f9cf0e8307336e418c48a1311b692da560052a04f2141291eba82ac5c549f7b21c92b7bae4f0191d271ab0f52f8fcba909ce

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\164\{5347c41b-c12a-401e-8cd9-491b7bc7e9a4}.final

MD5 4a514bed69506c494569d2de079a4565
SHA1 cfbcb0c9ef303e49adb4f8c85191593dcbdd95f6
SHA256 9b16a083b682783c5014b9a1f4f6914ec9399100e86fd5e56a82fec41ea96a68
SHA512 c2d81af256d7d5e8bf9b4c2ca467a1972aa625511ad0d63c5da573d0916b85b1b09babf4a606d94f6b79f3db26bc00ff8c4b08db485224383d487749881b88fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\121\{e15e9c8b-4441-4af6-ac9c-406fbd9bf179}.final

MD5 5ecad04347c2a8c59c4b6a885e947fcc
SHA1 ddfcb94ac1af832b6a831dfabd66b47138534ee0
SHA256 9fb212fc86221efff20faff19c616c41932108a588078ed6a6377cde48e81d4d
SHA512 9a79703298ad64b902f6a0328f6c80031f540a7267ce4f4c96cc33b6b9ab2ba23f1b190f0ed1a51da1ed7306dab020ef30f87331da5cd77d01789c5e8887faf4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\162\{aa6dfeef-e404-49ff-9398-072b1388b6a2}.final

MD5 4281c6880b38580a12983db6afe98254
SHA1 052f3dbcc36e439f4f23b1e1b608d92ee8e72654
SHA256 98cdb9a3eef1764f2034497868bc60328364b1a414eba55860fc1756aa5f85b3
SHA512 6b92b3ccf7ab00db56c0cd6c7c180741e1a154be3cc04199b883e7c350a818a6b0357454116ddc86af433f3afd57cc8dd89efed7cd0dfda6c3d9bbb270dba533

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\140\{b19e13ce-5572-4c19-931f-3b520a8df28c}.final

MD5 590de80c94ccf9eadb9c7d51be8e796c
SHA1 e2c967e833e34a61c7bbb2cacabad6743f3d48c4
SHA256 75b7670458b285925b57d33949d24b515dd8fe50466ef7e4a4cbd9a402f168d0
SHA512 d06068e443b20e3778c98441fd8fab3bcda4fbba3daa683e3e7c18c0de280d59d4261de63ef47ce8fb9a819b3c7f8d612f7d6b7c6fed591be25c19421ebd7a91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\19\{f2e36815-fe00-47a5-9377-613ac5427f13}.final

MD5 a5b6e175f5a577af3302c7029593adfc
SHA1 7b21982420c602f2678b28d3eeb7172d5c491903
SHA256 02240202d841f7910cfc4d17aebdef67a1084e704359fdf544d80dec3809a8e1
SHA512 9e62f4350403815e642a70d746bac7c8862238a8f108491f6e33031db7ebef4ce91a9a97d83f9fe9c15dd70333bda1229dd7d1ee709f964dd8c65071833b6544

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\106\{261cf560-c6f8-4401-b043-8dee6d1c596a}.final

MD5 3f7a4ebdd9e533cda0125618ad02dadd
SHA1 8f024e90ae75e5926e0f9d0847e2a1520b4f8eab
SHA256 3408ed8bd0781a9ee0576ff0ddf30150456e0fa59b40406b21248613602c1043
SHA512 6257799dd555ca13833a2320b10056a966f1f384d474cc66e6ead51a76b726e66ab64add92d9bf3a85456ec75b5b97404bf7574eab7d3e6090b8f60d2799c1ca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\235\{79adf027-1d5f-4dc1-82b8-d5fe6108dbeb}.final

MD5 321ea72e49df8692233391c1f36451e6
SHA1 2f016758fc5830a806ed9891e574936db521c034
SHA256 8113ef313d8a5519df57034e29db538c65721112804bf1a1a446b8302ae7e0d0
SHA512 86d5a408e472a62c2cfcf69a5fadc122f7a62dae866a36fdc4a7381de6cc8028af4ba51cec9c827b9815c26f75db82c4813ab25682c728c1f03d3bfc7ff21114

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\50\{17995bbf-40c9-48f5-96be-204398e80832}.final

MD5 fe5981f30c81e299a4b3cbb8d54c236d
SHA1 86d257366f84c5da701ce39084e8bd6b54a644c5
SHA256 d94c2ef736a7e46e3c6da5ce1b0f4ae07d1aedf5de035104fa48c3804f5cc86d
SHA512 51bc339682768b4ab038325bc12186aa16836e7179d36ecacdc8b4559b70e76e7868bfbd1ae19af5fc35ee36299060166d5c4da74f70c0816849510f93e2a403

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\197\{7c1683c0-30c3-4896-888d-60f82ecf74c5}.final

MD5 ee0078268c18aacfbb32f121a2bc2902
SHA1 413487a0a575c27405b739fa8938a66b61a24149
SHA256 9718aa5eb454fe31d59fb6cb2d7bff3ba1f7e73b171c76390ed97b749493a85d
SHA512 2d776ef4276e4f8cbe7782e1aaa91d78f1154cafe818b8fb507e7e5f823c1ace750e8b2214a82448fe0d3be43fc25f1c15eb93d9198ca4c6b1962d19af45ccf2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\224\{681e7967-49c7-41b3-88ad-da19f4198ce0}.final

MD5 f8a4486578289f338eccea68bf578c6e
SHA1 6cbd17168a35b3f10b74a28f1fa3a83e161a7e35
SHA256 264c3ef4f7bc3f390875ca49d87ec35f9c4f0bbb0eabfdb38073951253ca721a
SHA512 e896ce1bbfd145a4c38f7e81a8afb12c3f354d5632f24f26cf19e8b5f1a466fca8d098e7277a4c0979170c37be25b6cdcc0654ae94f46908bde1810d4c03c3c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\211\{c83d5785-a801-4393-a0f5-be3e0c9914d3}.final

MD5 184e8de5f2d1b10b1cd688026dfec0ca
SHA1 dd632464c3ad026e57bac8efc3348eb7349dad84
SHA256 e3aaf869118c6db298d843c5308262f88ce5ba474d88e7043badfdea4471c93f
SHA512 e3495544032b7f6760967b0ccf57861ec5454bb32e8f5f7d2165fa63e6ab580e278275a1f719fa55fa17fc0a3aa9788e15ba60ff2ea0e25557f0160607066143

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\245\{5e7965e8-86cd-4eeb-9517-82512030ccf5}.final

MD5 41d7c0ee3ebd3ecf60e8f06238d8976a
SHA1 313d08e7b04eefdb0ec87504462f522d7cb94d4d
SHA256 7b48b7ea9af7535de272491304ba8988db28c4cdf0d50c800e7d461666e73efa
SHA512 9619b290dd7e07d7a4d9768ee35dd564e37f1b0f4357bd2cb8a39c1289772f275f23f260114fac395974f544ff70efc168285a34611f40950eded0735d2ca6ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\100\{6ca995df-80ed-4ac3-819b-892ee27b8464}.final

MD5 18ea68569ded72b5f8f681906febe6a4
SHA1 5797e923cf4e23b0c5b834923ed11b3fd101ebf4
SHA256 3f7e5effbbc5b1d293c34e82334eef3f6f20195436b46a97c9322a406af63cc6
SHA512 e32bfa8081fcb47042097617f10454358b0fa206db22cf3d4ceb09c7134ca97c4cc3d8d283e1dfe7b4db13c0254ca9aae2fc2dad38d50cff4375373d76d9e060

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\215\{f0243a3f-34b4-4d20-a58e-d96c104de5d7}.final

MD5 a601665adcb4c6be23f3f43db3ecd713
SHA1 daf1dbb4c74201e6e986283fba3603b508d576d2
SHA256 38f281885066fb223a840e11199c5fe053ce470857cb8ffe5fdee25e226e2e7a
SHA512 b60b5afbcafcfb4d4751dda855ce4e40674ba635a28dee30b9ee8dae0cc1a751623ebcc3f1657aa1e847ba317dbb4bcdf44e73fd68b96ddb9ebc3d0a73bb5ae8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\71\{4c1a3100-8ec3-4224-92fe-a29cb8c31347}.final

MD5 31f682f3d011c942f1c41b7f915eec10
SHA1 0163e4cb475138b8f6ef221cf0bb15055f628f4c
SHA256 00392c87ab0206705a7f066ab9b2cad308eb3b2d0b538fa535d053b0c662c48a
SHA512 da32317bdc01471cf7fe107c80d3b69646aafbde3ba9ef7d4fc674c56034d78dfc08ef33d8c133cdf198e4ce265625c8411cd85b2cc6d57016af360129db733f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\179\{e87e1ce4-9762-42b1-9dad-7ff2e9c223b3}.final

MD5 b0e3a03d13d45c1f130df30ee51eea72
SHA1 ed19adf38b3978300a958e5287546be08c8fb371
SHA256 ab156c3358cd6b946718508bda5099c8cba2e4583e3d03fbe0401c0e6f20e5e7
SHA512 3fa2fbaa7f78f69d0df8e3b8211ad56532cb0a68a9ac89c37fa5354fce51e114babd0673f2f44d109fe2e518ad7806b7ff3040a840e3099be4cc5f6dc07f8154

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\88\{c273ec1f-ea0f-4ddd-95e9-c7869b5a7e58}.final

MD5 0c93d244125f8056cc0a69a4ca53f049
SHA1 e35678e1a49498e40e1ed508b521e79779a6d25a
SHA256 f286ce18e4e82f60816536d23dd2b1708cc45a3d1850b132b282feb1d5aec4f9
SHA512 198952bcd97b9497f6cabd7c9dd6cf0b8e75416fe5a2eaea15ca1e30919b7219be5b28985752834f0b8d501b9d6f6b637ac799db078a16f1e7e95480dfedcf5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\45\{dafd8541-841f-4c53-a6da-c9f444d6252d}.final

MD5 93215d67966bcb26afdfaa76aa00aa91
SHA1 aa3252645abeae4e228d6595c93d829afad380a8
SHA256 aaf4281ab5534bf37010c4e3ed86dab18a9f4cf8185f85ba7b0e6ac59c844849
SHA512 52df1847b0b802417b245e1fd51197349639fb25ece34a48003120b2920255b52848b3318f0f9602f8d8bf22bc7e761082befcd21b9d06b6a1e882a23f8c9ba6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\55\{3469c951-2c9a-4368-bb88-a646f1e77537}.final

MD5 8d9443186ccb116d608c8970023a6c4f
SHA1 c280277c0344161167dd348d9267548041e95124
SHA256 70feeade7e05a69d4604df99cf1ff6793f7aed0879ae06b50a69b86906a892bf
SHA512 66240fc8a36102b8d3cc7cf157dc80981bb05ff707efa775b82ad6219fcb72fca9a3c45f30aed6147b222356a06a9b4063c9967f41f1a246735d68bd502eca51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\211\{a78ac231-f7be-4852-abcd-55cea2c61bd3}.final

MD5 9d8bbd70725c7ef1461172bcc4e85c13
SHA1 a4c4db2ae4f58c81ca1de7fced23b522d6bb8f73
SHA256 4fd302f56fcfae608964aad2038a1570e38e96b82d52d590387ac91915a8c8bd
SHA512 fc90e23b5e86c1d6aab537069159ce5eeee5068817b6923bcfa33d93e54358fc38c5dd8ec4638b9eb5349da1fed4679af0159ef958cf48227efb14dd67511811

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\58\{e5f894fd-a915-4784-991c-f5c314a30a3a}.final

MD5 c6993227cd75c082eb25aee8332d888e
SHA1 a2e27914baf9a1a4b8579506f419bc7167dff937
SHA256 75c2bda8599570de972a83352d94cebc61a2bf66c8470a0461f0803c59dd8223
SHA512 bc37854e6471273085bd3ee362ede016fea6eaccb11194f749c3a092bc803df07c7dfed2d0a3fa538cd447a21d4875f95ccac3ff4f278c96249e7110cb968b39

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\87\{6c807416-34a4-4f55-a9a6-47041948e457}.final

MD5 f5ec5b6fdcb0fe6f76aca19310305268
SHA1 46d30ca75e110987809f6cd78f52b5cb35302754
SHA256 c9f94f5a2384b5a253cbc563cae021fb1d15762412fabef25d90b4f0c60814d0
SHA512 d22ba260c9738129d976df698208c8cc7a9b70dd89c0f81f995f0105940a2956e3097adfd2c300c94387ebbff54af720429795ee1bf4d81f3a1b6a6cc666940e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\69\{0ec2697a-ed81-477c-9ecd-9673ab221b45}.final

MD5 c65b0ec9f20fa9e69df1fad2b2a28e33
SHA1 4449fe9d195163e22a0b205966b402058d9e8bd2
SHA256 0500a3b5295d9ecac1151418dd4279da2aeda76e2b9f05ac56967fcb882dab01
SHA512 19a870b77f57e555b2d67116dee5487e700bc64ccf689ef98fa0e54fac162351127c09523f8e8d9a3c3587ce089b84eb5e81076486dfbe93171843b6360f5516

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\27\{39d5a7c8-c504-4e20-9cc2-c79b201e4c1b}.final

MD5 bc7d8425fe4aaf118642e9a60d1b764d
SHA1 7456f9cbd82c691a2832ca856873d8e00901fe1b
SHA256 0ef51d3deb46884c157b25b78667241a8809dee794e3402c07b3c5fe972c1d92
SHA512 0a2dd57fb2ea736faa79c3127af31ad0671a06653d5bd152597fff5275c38d816ad1633cfee6e870c2de82aaea14a976d627fac4458c688d3650ad8197173301

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\106\{68b05b3b-9ecf-45e5-a3b8-1e09a2fcbd6a}.final

MD5 32355676adf4c64f1fe47b92f9500b6f
SHA1 cc2a0c3f0da02c1a1ac32a3a5ba417010f89f73f
SHA256 f4b28298d53a353c23a88b0c82002f1036c376d22154ed21630a8c1d04e2a841
SHA512 1945dfb8bf90df999cf7aaed9c881b2d10df4a3550f2bceaef655b2379e79d8128ebefdcd4f37705c7b42dcabbbc4c25dec1c1f9559f4e727c6df45f769a2f95

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\225\{dfba505d-2ab7-4fcc-b6ab-30c9d62063e1}.final

MD5 004c0529776665be8335ef4beb8d0eb6
SHA1 8b1fb58622c92f0ce3e490bbf21b532818797f8c
SHA256 493593022b630c1c1bdfc20479ebd34465a1bc79e066b04f388c6572375b0005
SHA512 6ee9bb5cddee2ae52ad1d3f068d08011ca5696975783fcdc816c0e16dd27c87ec0957d6c4b63cdbd76664899fd8f8df087db375a5eaca8b9d494430a6ae09efd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\235\{158051e8-1743-49cf-8a83-3504a6e9c7eb}.final

MD5 b6c6d354eb2e7e52adb948c0366f0053
SHA1 d7f4586d41fcee9be681c70bf002d36f6d2ed624
SHA256 8383e636c9249a611493d7c83a9f02bbc0d9566d5d3389d8082ad6042271ef28
SHA512 9a08680e4aef9e54a24e7956858ffea9871f874966cb36fef70b5e49f6126b2662c443b4049a3c4d74fdcc00c83d3af12072fadb11a96ecddbb87280a0a2303f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\189\{225d4d2a-5286-4d40-90bc-aaeafd3893bd}.final

MD5 7732897c3667adcbaeb632ed111b170e
SHA1 eee532cc36738b7e586c193db814a088896038ad
SHA256 ea06cf7afba50fefdb6b8ef1a084dab27ba0d9b578814b3b79eecf474b200b67
SHA512 08a7130e9b36e13b2cf41be54a7eef19d209c494d177dea1d11e2e224f17a611c649683fc5b49976e244dfc4d91944ef481fe1cbe08d130126817180b97a0717

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\66\{2a794eac-eb73-43a3-8d50-6cea453e5342}.final

MD5 50af989865f9dad63f573c5f2bb66321
SHA1 91c2c613fe2faf799d1916e3245c8f7672926d28
SHA256 d36552977b70782f63c9fd0ebbadce131eb78616c7c5f0e0274746cb0adcde8c
SHA512 074f69af44958bf010198bdd2a37272d30da53a22d58313606f5c1f19d67597b98c6cff376bfebf63e199f3965bee93a0588cca0ad70a8eb9e9de3ad9afe5d29

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\101\{249b3820-e461-4e6e-8164-ac705431e765}.final

MD5 bca3032426d23daed1b2d997b7bd5fad
SHA1 76a4776fcca6e6add4773481b6b3a82a7c3f5a34
SHA256 41b63a851c63d3c6ba8bd92548013e1a472973011f0be1b95eb2e29697b32b34
SHA512 67b6c14e89be76624f964eca71653977f3e4c5d8364fa9e008a6810efa9d0ba359aafa79570278bd80e57b6e31820d27dda06a588873c181ee96d8c868c4b822

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\230\{d7e6ee85-dbe5-4635-ac0c-a29fff30ace6}.final

MD5 df74de9b9890000872199833e120bb06
SHA1 9514f328171b10d04003469f6dc8a7a4f7daa741
SHA256 3756c1dee77d8250d1431077670e560f38dd9081ec36fa0b5f7f17ad58aa1f84
SHA512 73b313870183d2fa4ca5c38d2192b902c7a79796af1fdbe5e64d8b2d212d2ef85d0bb57f2ba486ff8610f22a9e952bb15947289107ac0d1d307c00015f4baed8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\226\{d5c0d20a-49b0-4065-8d2c-fc2db54df5e2}.final

MD5 b85f318ce844cd0ac2d4ccfbfde4d2bf
SHA1 f3eea534e7b991836ce9eef594480ddb1bda1987
SHA256 480677e695c4b197a66db44b3d42f937f304e44fc560c6690885827cc99f4a5b
SHA512 1f8ed38e5dcc51daab4e6bc8af64e6b1b8316436519ccf21b2a8414f493efd374bc541a4de3a00fca1b9f48d113b235b657a94d9bb8aba4eee58d0802c1e10b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\128\{b95bb971-b0bd-4796-b9fc-0ddf47d4be80}.final

MD5 2d5401040d875e10273c9d8ca9fc511e
SHA1 79ba0a97214692e52090f4d2063deb4f20ade88c
SHA256 31342b78121940f85212b9b664588235affa0cc7fa398e80d5f3914ea12efe88
SHA512 b82ca313bc8e3daa966316e10c8303d144aebce1c00761df10790b93113b6eac2ebca429f099d88750427dff8de2a7448fa470e5cc2eb000c7cf71ee73c3edc6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\219\{c31d98a7-13e5-41d9-9a6c-954c71010bdb}.final

MD5 2300eafff09d478fbf68f49fdafbff49
SHA1 12f127da15a69beece4f71f600975e0503c77ce1
SHA256 f8c94c9f9dd4455eb89053d024bfd28afa482a9c697732ce5acb2df3144e885f
SHA512 93d447b0a87e4c25dbca71a80a198693b12c684c0a96b370693d693899230460bbd8c85c137dcc0b4872bd2d85fd0d10bfe3f4137c1b08f01da3a9bbfa481447

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\240\{b1fbbcb9-296a-4e9e-a9a4-735f7e1033f0}.final

MD5 5a85b3ec969004ce7b23e6712c04860a
SHA1 dad284278108abf777290add4971eb92142d52aa
SHA256 bfa4bd5ff49d8418628f3a3c0da5b6d8a95d5436168b9482d6de954c0fea74b5
SHA512 37d836d572226967995b3f20557f98e4e55b89c08fdfbddd4dc45a6d4ee90a24e5dc8276d0e1971d7b366712bba3382086183e1498b006905169b758e44394a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\228\{979988a4-354c-4759-ace2-679dd37176e4}.final

MD5 3183686d3a59ab0d15fab2be7411e186
SHA1 22d29c6b9fcfa649773e12680f00d868e6714485
SHA256 2a1c50b6d5014af422db7ff5661a5a68cb0c27ee9cc4768c99502ada0eb63867
SHA512 eb7dcb18d20e28d283ea7d4cfdc08c0da81e0499089117ac068194b1ca2be661d380fe7d938d5828c42d711842bd3793b2dc2a3fe6285fab83b90be4fe3c7b16

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\134\{d5ea7166-8850-495d-9336-c63ff4b66986}.final

MD5 ab4b8a454e0df449d6ba142cde90a875
SHA1 63b48959b8e2bf0f6c7d1d61783c87283a77e209
SHA256 e27b087aef52a71a5a5872015ad562881b0f647f88365fd14d212c551eaa21de
SHA512 44b086fec3aa73d4a3d3bc2cc7e73fea589af3a56682d8fae2869d4b38674139c202b9621d5f93ce1e7e36f7c789d4dba8979d205020a2f89ec753e1db81502c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5d283cef520d65595f8fa1ebcaa61dba
SHA1 7fba312d7114ebba985402a5a0733c08efc8fec9
SHA256 52cdd6a9d81bc5b64b0506ceff0b96d821f48b42995f21ead104bd09b0629b73
SHA512 814613007de393fe6c6b7a31fa79634ca1272279d3805ccb38259923513f2f2a1b0602d0bbee18c81865ac5262bd9985752311ae4f73c520b7c0920987272cbe

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\204\{45cc81d9-534d-4984-9893-6069b85f98cc}.final

MD5 0552a7950745b6a5bff8a69688fc1ac4
SHA1 f3eac7e3b002f65c8d526faa32c51390abca3b8f
SHA256 a0f7756592a37918d717fb8336c99059d6c544a29644e510fcfd97a481f966b8
SHA512 03ff26369ff92d25753a1fa9b6508d53184cd7dea326814e0b98ac021e8a1b4ce90bba8cbc5b6b8a25dcc3049992f337fe66b0af383521ca4db01bdc84fcca18

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\166\{5e636b88-e8f7-4ba2-a4e7-0dc583a291a6}.final

MD5 c5b76c5098a2ae6cadf330df8d8a920f
SHA1 63f7cf062a248301062e9a6add9abad1ce758998
SHA256 495fd4027b52b4ba5595df1387fcf3145d878cd332bb207b5d9fc66160eae162
SHA512 07d96d1341ef61f7b2419b867c9ac0e4b18567745518274ea83d00e7180bf8246a444dfbe12cdde05e9becdc3fd867b0b7a3c94fd8339b807420ff5f506d2798

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\24656

MD5 9a7aa442b9148e8465242df1e364a64d
SHA1 b6ad52f50369f837b7fa040ecd0135b1464822d2
SHA256 daef34b6305db1e2001f0dc1c4738959207cb8204ed063cb199259ea944faf06
SHA512 3e01083c3bffe0faf0fbf5af4097961ec712fa8f03f9881762ad0d9cc1a2f280940a105776466b931d2e4574ef64b811b3f4d6c7de7d3e630268539ace20b983

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\22DD782BC7BA8DABAC756FEDD6A1A2B1DA15B025

MD5 d5322094314defb683ecce35f2e9b294
SHA1 97fced4206a440f6c27e24bfad42a92802fa69f5
SHA256 cf8ddf91550ceb3b79099fe288e48be95b6b1f5cd8d89b83a17f9f4a2029ad77
SHA512 487defded1b8a95ffa5cb3e40bcbb336166c64b28c4816ebb781c15d55bfa19f4ab2f67462be92f8bb5aaa2209c593509dcbbd29b376fdce546d4f62fb63dd6e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\AC905F9B3BC794F3408586050D7C90F9FA613A00

MD5 ae7cfaf2ec72412b8c4e607aea3cf644
SHA1 90a788a916c70ceeb23c211c1de8e6345648a517
SHA256 dd9cc55db25be0dfc2d9bed0aff1c01be61f18a9d8d575121f94e8981e83cea0
SHA512 d38e51ee3988bf174ddc9e944e8af5e928e9b648c8fe6643d1e1dfd040633c224fc7b5e494eb442d1217b5f4243d98bc8bd0ec509d3633d47f04740d8c94dbb9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C63DEB924CFCA7DC7D690EDC11B2A4E05A99DDBE

MD5 34bf775a18d18e5f4562802b339de63a
SHA1 08334d13a41ba8e7425f6190d004227cf2b6ab55
SHA256 8f4b6a3b3a56f236fd737730f39c5b022d917d1123ffbd27f9c20682215708eb
SHA512 6a2d935d41fc6c7c83c6b2c507c9607ab533764a70f89c928b0208a493d47a59a2917dcca65cb1cc3df4a9d1c8aff1e6d796760fa8a71c87731c8e49f55dee22

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\46B98193B333A98929E2805B168F9C83F2C3F106

MD5 560ebfdba0698fef4f2931bf61d44eca
SHA1 dcbb4b2b85f0d66854340bca17a70079d8fc10b7
SHA256 969e5006a4957943b876ced604fd793ff855ef614209a81bd0c9c8728b4bc6f7
SHA512 6273fc2f8d245ca54edf086d4d85d870b2510a17bbf8f38047379dabdfd00d51e8023434a6e8017a44c46bc90a1a81c6008ae1567702eceb0d45529b0735b9a1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\4392

MD5 eb0ed4bd34deb41aea6ae9569b20db62
SHA1 7e4cb55f90906cfcadc7d842ee5bf4b019d91f2c
SHA256 fc3c67b7bb607ff83f1035fbabad335b311d32b8b8032fd59576bddf52ffd458
SHA512 a681251b9afda41c6ba56eca8f18f153aa0a49e091cee748b44b9fba246c027a66ace1a878296818d8d4234bcd0afea5cbb27d4a18246ebe06632b51369ac4fc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\23874

MD5 73587c16d9e35e09aaf5d67c805a9ecd
SHA1 b5b679a95b475af790c26ad0fac747524fbe922c
SHA256 b8b95bac591e2792bb70e60c81783941aac76c7e1bc8dcf287a55951a359c68b
SHA512 82ce91a5d228eed9659eebb2af3f93530fff9fcccbb3b18df70aba0df734acbde95bfb1ca34deb99fa43e9ef0d5c6ac40b939439375a091b04ce498291fea33e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\22527

MD5 5ab9fb3dff7db13bfb188714deae4b58
SHA1 547520f24676b858ce234391daaf0e57395ef53a
SHA256 674618c3129bce28284f502c9587b3c6505c7ab76a3abc7e212b391e34ec157b
SHA512 90c8fe2d26c6dc140f53c624c8329d3fb0d5a67d8c1bda9972dcc303faa352c99709034d41c2d6486434b27454b463b8b28712ce16fef1c39c5062ecd5126087

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\EBD927F6BC13DBCC43E67FC27FE62B10F219F789

MD5 51e7f4a74b32304ee7b5c4a52305c6e8
SHA1 330c6501486f3e913dc2841ab53ec2a7bfef2a52
SHA256 cc3edfddf362ca4ecbba40912bf9b5fbae37b28b5dd1eb8179e3181feed80416
SHA512 185db1bb9840a5b419e252c5cd6d0d430857d6949617d8087d9e0790daf6a972d5abe7bc7f4626a5a33349c315a214733ac1d71c606e7a2337c76a11c7d405dc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\9727

MD5 c499132bb869ccc1249be6a6fe29a88d
SHA1 957dcbd46379196bec84eb96141cba80f2e4f20f
SHA256 e2a2a994b38cf4d4790765c424cc19cf9952ebc16cfe118dd25cde1f4b797c73
SHA512 f4669e67845cd20870229a9ceb409df6ab4cb27cface20ede38fdaba0dbbf5df4e5a0259b2d195517bedec30af11a831878ad0e1431e95b08b2173363c5c5c7a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\B3316860430DA0966649580110E85D2FFB7B5A61

MD5 5e3d250aa9b4d8d270030522c9ee0661
SHA1 80aaa0f27b94fe3c541b7ef48aae7b88d4a71cbe
SHA256 bef9992d0fb1ff9c2b8342d3254106497eb23ef3ba7ff1ae304eb7b2fa888804
SHA512 9c9624409fb7209ac0843dbf74c13b74c9482f80a857df1d25335e0b0e4b2a25447154dc613e31d887a0c2a85129fcaeaaf525ac5c1120223d492459594da66f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\8A43456D051C9452DA2974F9FAEAD5F9B662D9B3

MD5 19650ef3680741c00488501d8df68532
SHA1 1ac669ac0a32908366bca9c6fe3e866a1f4c7607
SHA256 54435c88552d05b609012371c7823dbf0320cc4b271a15dbc9a9e24310a8e39d
SHA512 dcb9035d176a70d1946e77e16d9b968de3b751767c734909e6076fce94d63df62c591dc797ae5eecb1f0bc42b7d009712bba81748bffee3d51f414e920276324

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\6047

MD5 e4244a863ac0c5f073357d917ee9af26
SHA1 aef82df3039d1fbb2c356a55f6868563893a4a9e
SHA256 c43f0ed4784dc977a9465e34825fd4cc1f2e4ede883319c2f2bb3adabceaccc2
SHA512 473c59071f843a072705863a613d378def34514fbd0a2a8f0b23880c278ca6b1ff4d13871d80f89b277488d002fe25290130015b7f70036d41c6e5896834d8f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 24e77dd6af1877adc789e9733e52e038
SHA1 46b28c03cee1e1b1cd6be20882ca8647ce638988
SHA256 d8c6edbe881dcbfd6737a1f27cc3d33b06eb0e45340f9a0a7f083e51d5797bd2
SHA512 a51731dd2bdd0d8dd229ea9a0f74a8ba9120eecc5a17ecd9f915f18f49ede6224eff1abcf49bf4f88d4bc4392761eba91bafe9cf9a3dec7bf454a3e8cc8cb9c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\2B647F4E243649229C94C78CE8D3C41D276EF127

MD5 a2b2102c7b2985b7561261a8a5eec7ee
SHA1 12e93b9af4dcbe15defdb8c769d24288c04b4278
SHA256 49dd12f40fc073d1d75cfcf3022db1623b2484acab9db1e46c3662726cfa6dc6
SHA512 82d541912c9ac975fbad99c8e3965bced2c4d05cc3e4e5dd7378d44679edd7cfe6012eb40b44e55b7d2097e41cdef3a88091f2725df223cbfa24fda2b8b0e7e8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\6F35C6DE698595D21ADD7650C537001209B0CD22

MD5 1eb8820481717d6f5f1af53cc286bc97
SHA1 40977516f59ac85236ea08e3ad3a56ff35ea2f29
SHA256 f2c95f5c5e4b95a884d9af1a1f9cfd20371251a9852a5f5102be6187135e50f1
SHA512 5110d3ac7b38c4d0d864daf109dd18f054ab35324c597ad5d6889887de0981ee07e9fb808774845b63dff784dfdfc6d092a032c676b933ab180e7a37a60974f4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\FA0AC683637FE0133970E2516D7F3461D7EB6BA3

MD5 a95ee5087a0f78d85fb896a86d7db1e6
SHA1 ca1ffea97acd6b78ecfe5ebdf0fe8e49411971bf
SHA256 95d28978053893b716884961b6d6649ac62b615fe1847b3debaa81600ab9c76c
SHA512 cca93e7720338d1ad847c4fe2347701178ebd849c7b52c73294070e7ef8f9c8d47ae859906be422058ab052211250713715c698efc9bb46fafbcc67bf25844d5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F3AB2E3DE098CDC11D4777DFF901FAB34648BA99

MD5 109dca1655ddd696c83b4686c8387180
SHA1 8231fa68eed4a38dd47646c7e6b9c2991c0b5dfe
SHA256 9dd28b5650479dbf2c88715c3178467420193936eb2b7b907e61250506811d80
SHA512 76c77c15529a674ae5eb5177d70ce9aded2fa6793dea5179e90041abd98f7d3af67919d0fc779cbc7e369f232822d99ebe8992b1f7372bdbea1dd72443a77d4f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\82D59B4F9B3F9993CE2C76EB0C40E4D39E021CF5

MD5 0d1fa69b40af26cad6179ba34c38e918
SHA1 06265fc329622ae5a5824e2373a260a0c77628af
SHA256 8cb1ab8b88a4e4dddc279f980f1b0044441b7e02ac09dec2688a13f067409e9d
SHA512 a3aaf5814cab14b09ce2944e29044299814f9d72da35ed8e1ddd4004f0a261425f412c05d3368bd07eb6d6f6f5cc239962acf20574bcc06b470907cb7aa54004

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\BB727F35C87F3B87ED3504ADBA5E2DB5387ABF49

MD5 370374abcb85bb4f82cecdc6e2c6f91c
SHA1 9c2322dfc6223c77e4fa77edcd2d6aedaa162df6
SHA256 505339c7e8ea308419f2fd006bf1ec177d4c0ad5493bfb58c7c7d0f67cca7595
SHA512 9c68037f9dcea731512da896641c48e1b8780b9e0273818baf54ff9cf766e3ba95929531056465b55e2f7896b078a187efa569f69ade5d682776d8cf1bdc2999

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\21311

MD5 1f68686ddb9b66bbac9ef8a3133086b5
SHA1 1f5611b67d0383d2b2ac00215c495ac620f7fcd5
SHA256 ad06caef87d53bf25bb66321f290752cb086b014a63424e4f84df3d8c415d421
SHA512 959006154e429c4756fe52149cf224060d3bfd3f1b9a743ea1b033f5288d8516295a4162e912ad68c982c1fb22a6cb0738e7f4c4d1cf5d409eb219cab4ed989f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\576A6D6A03D40A52B615749F8BEF2A2D653647D1

MD5 b8d9e9b8f444801517d2c5dd43d98c70
SHA1 f212dac477ca340cb34ef525adc260c23c8b64e8
SHA256 e27ed222d669bed5a46599bae87fedef7f6fc80076286988b24c556a7b3d80a4
SHA512 2947fbdbbfe0758824a1755d2632254ad7531e2267eed8f8edaad1be47c1a50ab2dd751a6adb874f5716f3c9f6b636eded0ca88a26327d42572b0616adfb216f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\8100A49F5E5D24243B369AAE65F52FCE8AA9CE54

MD5 8968151e21feb1e2d1795b020fd61412
SHA1 05d54f87a4eba6d1ca04ad9d22bb7712aad072ee
SHA256 9c39c039823489ae4a73d879289132d81734701d012d439c85ad9a80fd044e78
SHA512 05f3666c524876dc8e1e5518c45feda40fd898df745af2ea2316541bbcdeb576bcf5d15155675d6620aa1c741e19c6f528d10d22c1971bd25c0644d0cfbdc667

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\137\{52d508a7-b621-4089-b7ec-e8441299b389}.final

MD5 b71005a1ce4d0845af121e18082de99d
SHA1 28c28f7245b41f27d6849e64a0529da9cbd5c153
SHA256 8b48311ba936d13e6c956a3e24a81811e40853681ad1fcbedeb35a060a0db859
SHA512 3e2b3a07ce20e1fdb4605d51f7f8fb82e5da305c13405a764c92c66648fe40577946feec167bc52631a6f49487ad05cc29e0b9124d1c7d477763704f610cb73b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\40371339ad31a7e6.customDestinations-ms

MD5 36603296caccdd8ef952af989ff4c36f
SHA1 7e5b3bfbdab8dab74e7af22574cdaf1cea8e4805
SHA256 bb836f03d49131ebed3259c578d38ca7180cc0dbcda45895c5b02fd73965f2c7
SHA512 f1912bb6d14fd882af11995db03be9c975bbe53a46aa4539675a4d55692687d8663dc00da74c29490da460b04ec9786dcd2cb5951727dcbed739907dd8fb0829

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 a85042ee1dc78b74416c1e7b4b50de92
SHA1 db89711d0d4f504d56d23af271dda5e75d32d248
SHA256 1c63d9d99bc011154cf45fb2224018aed4e1348f9387665631b1658f8a01b0b1
SHA512 f06ed5efeb5ea9192ab20c2a0415c7ff35c770b953af6677d92cbc671daf2412ee3ca0eb16e565769b2223bad137f4d8648bde3ecea5aacee86c5e1a81117db8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\3500

MD5 ed1c26dadb3556c8356e111eea3db7ef
SHA1 e8e86993c1d37af79395d398907b1f5206ceb9cc
SHA256 6099a0271325b62f04efa61dc6700d313a85e3d8a6a3618a3e7021a6241d9251
SHA512 c5909eb0a30879b32b48903d02b1824e78e00d3fca97c32883811aafdf77a90e91374af3822f45ca256e2b08781f57fc93e6092d7e77eaa5ea75b746ad2dca9b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\11760

MD5 be8e700a4837e3b3eeb123f9bd7f7d91
SHA1 44369a4ff278958fe8793809f84950acbf55f676
SHA256 a25f1d86325e861cdc0dfabb8b6b5e70d0c12207f603ff87796a1ab6ab56816f
SHA512 c681624c3ff74efb1c42080871776e566016f16fafd7a0612a77ce0dd1621cca5f9f985f3235a12dd19c236f38b3d35048270b0cd74cfdb80390711653d16421

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f03b1097d538b814a68d1acfef41369d
SHA1 18e24b4eb07d08217f83e08e2e92723010cdd590
SHA256 63b3f143801b702c1ffe0b53c4c881cf5b9a6a8cd4ac380446ed6fb657fce13a
SHA512 0dbb0c4e21410e28d4649bb712cbb07e74713ecbd17ccdd7c80f74c86d6ebd2933f5f4ee98b616b752c5a2b40e2505391b28d86fbce09ac07c818f4c57d3326c

C:\Users\Admin\AppData\Local\Temp\tmp-ftg.xpi

MD5 503c8aacd0cf7349518594484a58eea5
SHA1 56147fbe16ce11ca45fc588b7ad8426eb43f1086
SHA256 7988d3974f14dc63af6a75756039d92ee413c13dbb7136cade07db401fc50f98
SHA512 04acd0f830ee8c31544b9aed8e2021c3db6373bc48af73aad7917178ef82bfbbfc866b15d247b6ab554b2c332b13efcb854f67aa7c69c12041d3e54baa814a47

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs-1.js

MD5 f610c51dd1146f4f1027e5132965845d
SHA1 8d559398f555d0b2ee8b29e5c7a67d205022d156
SHA256 e60f56ac119c550f9bf2b81a1512ddea0f36543c94d7a7b4063f0dd2b506683c
SHA512 b202eaa90f60ddb3ffcf2dd0c2765cd85c5cf369f214fd087fd04c2ad8cdfb4c8bf28726cffa449145f01592f7d425511a1831ad2576870e75d423335ce20fbf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\145

MD5 69c6303bdbeacdf5c0df666e8476e47e
SHA1 02a5fd4e89ad738628af09578bb6dbdcfc4e044b
SHA256 5df616cb25bca194a579fa6ad1c893fd1d6a435a2adc1f7c8dfdd6b80d22b46b
SHA512 428e40607c1112b41f3c647e0b752aca6c18b0c164cb78b33e09207235174e58230dfda705ba260211fd79c6d420179c316ca365b7a0c8988499e3c9415544df

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8bc0d79e31d486797e747c262469cfe3
SHA1 ca31bc8d97f8c0c718ee7dadc9a67daa95890fa1
SHA256 3101ecdf12d9337887197b5e7a8f95a1be082c2cd26770cf2ef55e1170a90c41
SHA512 2b156f8eafa971d1889567a494ede90d50a324e001980d85e7c04cecf820c9dea45e46ed7305e708c72875a293f4f71341ec21fce23fa35e700cbd20bd1dee67

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F56E4598B33CE57A5CEC72A66E159DF2C95CDCE5

MD5 670135edcce1f0c3586819833e6f8fc4
SHA1 5dcc221396bc238716d38dd2b57617cf3920e7ee
SHA256 18d5c228a4d656c2b5163b1d71e41b74b315c3e3f2be3b9cb18a0907f8e306a4
SHA512 0efd2a5652ff571544c42ae689eaf22016600d9eef322b90629eefed35bb2e5c286c157c46af294f42f9a9828b4d02944367af8c9333aa3dc5d4bc28eed136ae

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F6469A7DE4C7EF8943DDA06B8358C1A5083011F4

MD5 046232c27e933c21c08c24eea1b161e7
SHA1 c11f75d7e059d63dcdb39a1c27b3a1c85cb1b218
SHA256 a22990e813dc99c14e0640f3b5d64e5a95a92d6958a416ea89a23c78371bb9e8
SHA512 840edfe9b6906f24217ed3fb75ce2b5c9d623810480ead4fba68dc20f56ebd13de8a4a55985df4c3424a1bfdfb5323cf07327a8b11b3e3520526accf28454cea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\39422D6AAEC9CFCEDA69BDCBD032D00762B38F4E

MD5 ee933a42c476bf95d8fca7d358c009d1
SHA1 199ea154d1d0268519d67ce8123198a58686e460
SHA256 107aee58f783f31e213e9437f02ca23a7afa4e3cb63ac96a320685be16ea7e61
SHA512 2688aab67564c35400256f5214484781a76f34a2c160b9dc692831afb4d1a87e417d46562c57df08025f2cd5ff16680e7baaed0c6eadaded10d42655a5b824a5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\D0A79B69CB43EB16D1C753EB0E134FFFFD65E7F9

MD5 27f803bbed2484433c88de0650419f39
SHA1 84f29fc457423246416522de7782a0a8ecf7d3d7
SHA256 aacae258f7eda5d21fd4f7a8ffc5fd4ba5f8b5e35d3beb87677a34ec8a25a003
SHA512 5985fc0d18fefaa813f15962a726378bab9a92323cb1c53dd6ed2e000f025f6287c65984c68584003aadb9446885e9226a681b65328418a96218067fea3f3a1d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs.js

MD5 e440bc25a7d972666b1ea13d3efb2ee1
SHA1 9d7733950264ab82747b5d157efc4e47004e6d76
SHA256 67b9413dcd4a1ad59afb702a7b81dfe64623450bc8dee04d9d98e09f8bdf51a9
SHA512 b924636602bd217314a5f71fb062ddb6980b9eb626efe643250c07c4c5469debd50c5945801c99ee0e795ca85f9c047747be2bee990726cf78dae6b7defc5b37

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\5587C2A7E1D4B7AABA9BE97449CF653B1233CC9C

MD5 ab5b031dc0dced3a13ff68315108d7c0
SHA1 1a60d34ef29eaa52e36c34f342d3f212274154b6
SHA256 a5669506612aa7b8536235f6ec1d4a4b057680e76d6323cbf7f7d8b3a4a8fb1a
SHA512 3a7ceef3ab87676eea37dbfeb7a63886bcb2f30015884f679a8bc5c0d3985768fabe3c69fa51e4f0e190d57515f4f2edea92d1aaa6c73ba6801d805fc3741b15

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8d40d14519d76f4ce4484934dce0199d
SHA1 95db2e9e4d44c1319e01afb3df933a0a8bd9a113
SHA256 452a3f3b3ed6378432dc60f8b1c36ac9d315b918995690a8ef8caf933682e64c
SHA512 42f0c1696d98e51a25d56ed96eb29e2092bf574cd692fe79d6c3f63ec393bbd5f324df0cf593adf26d4a32259abea60872cb267b89a2f031a04822613f890665

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7c6ec75a2a0bd3f3dd3e0ec33b1ee11a
SHA1 b32f2f7ddc5a670f06880bbc784271a0ae07c8b5
SHA256 a9d00a6a36a4e9e1db9ad99bc52a161a5cfcd1ccd6e8def2c2b50b88418ac131
SHA512 1ddefe314740cdca29a7042c738fbf64c1bfb1dd9a4a680af7ac166cbf19be75e42dea0a0c5d16db4c2bd9c531bbd0c0eb83f70a9813de406143eaeac955aa4e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\8ce976a0-5ca5-4b72-bc68-77067d0c8038

MD5 b82687044ca1bba1745543e515264f2f
SHA1 44b1504578da30eba7ec4adec35638850cc40184
SHA256 9b23f2f277852e92f9016edd949ba275cd58a1a5cc1194a4f81993170ba835bf
SHA512 7663fe83ceb737108d29b8b3ac07825390f0e089253455cb6caa8c591f9f4fa2b275e98faee930f33efc586500dc8468191fee5db04fe759da16a73f86d886b4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\52e2fb1d-ebdc-4527-bf6a-688efc1467aa

MD5 3c352b739ad6bedf2c2ed693581b1ab2
SHA1 dd028d334906c86df6fb30916d36d39404e42686
SHA256 f8e87b9c7b661d378dca92b0527f18a7d6dee68478ecc72ace6a5a82d4deef29
SHA512 06fd4ad109b331f633dd2511587bd775dd3890b2a989a9ea097928dba5941a818a6dea5f3685417278545a0b1a95331a372be68e34d66d0b241817d103693983

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 13fc7627872635b88c986c1c7d3868d0
SHA1 2b79f4f5defc6301902e2547fca6a7b95630e9ed
SHA256 c15e392163cf48cb5770fd1459172568318663b4f155bc410b583cbee081e943
SHA512 3942de74ccae6ce9270d7080dbdcea8c2421912657ee2ed51d6d6d583f30f74e802cb07c70e66a766c0e2591402d13202b4bdc95470a2b8b1892844b13dd0dde

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F96A1A8368D3C3DD1FA81D170326E6C1C65D342F

MD5 4fd2114838067db2f3b3a07a53798275
SHA1 ebac6a66c78b759c436d6d477cbf3fc89a9e1fb5
SHA256 8e5caf4f0ee8e89c080fe16acc14233016e541de9c3ab61c5fc9f36d3193826d
SHA512 c5382a86c5115ad5536bdeb33a96cc5fc50b38f181cf7b1e314ac3c94aaa91bf0e1f4c828b63091f5f76404be161dc6b90084427fcd773109681a3d8d4903d31

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 0684dc858f8b52f09400ca599593c6c1
SHA1 21a34db7301db60f1d9b7737a26ff3ed239b252e
SHA256 0a6386f8a5824384d651646d0df8ff0948bb4a61618ef634c7dbfe2e4429f05c
SHA512 48c2e85a768cd442f4fe39c56d33b2c222cc3956dc2e47f2c6ff56b4fa610d8ed01ba4a24e8a669e472e93dbb6903da84b0ed5b97fc66ff24613a605acf8d285

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 691154b59388b7e12d1af2bc588599c8
SHA1 b346e0aedea500fa0432966a01734c5a13d38e16
SHA256 8ef90bae6ddf6e9a2754200706990699b58300db0ac1ec91c39f319dd3b7f244
SHA512 de9f57b0bf5879f7e6ec6e6d58a14a4d3cee5beb055197147ba9c3cab08218ee58b33a439f0079dfcdc49155e55532b4215d8f3dd21ca2583ac78ff4b957face

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\DA3C9B0976709D6502A077737BA462DA7E94FB67

MD5 44a42d6d042a425b52488667f702a67c
SHA1 29cbb4d4b49f09f4489fa316d3bae3380d3ec9da
SHA256 8c56a47a9bbefcd7199d915ac34ca5ab261deecd98306b3bf46083c5953f0449
SHA512 77924788c07cd44b109cf52bcc522eed70056db3f2f9b36a410962ea9a6e3a72dddb979d6ae66253d7f4963aaf63f1cf84628770141ab14d509ffddc1e6cf6e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C41A66C034FE1DDAE1ECAC8AD4792EDAE0075455

MD5 89e9221922c8ae0a6809df70c74dc61f
SHA1 6c9d9dbc6ac5ec9f4eb4ed3a30e0b546afa8a2a1
SHA256 77573620b946da1a1fc18208067bbed7114df64b83db9ad4bce180bdb686a137
SHA512 401640f165d2c455bd6dd48074c558e1d763c3e78b7313b751371ebc1115f7757fd23bfbee6bc6734196ed9e6c9f0cc97184a0133d1ead6d91ad916e8dd797b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\259573A32A192E39C56D6150FF1C56E0F438DD0F

MD5 9d1e79c8229c4f5f109382ac68a60233
SHA1 87fed38ee386b440b2a8f497b8810dbbbc1ce337
SHA256 cc88461bf6dc141a82abd6f6fceb6fc5a5ac730ae6343480f73d5be9d7464065
SHA512 3bbb3b86d9295d2eed64b7076982d470013e2469e07f4565bf8c046fd0070edb39c196bceb8a3446f10075bb8db5588acb4bd88266f21e7f1bebfcae18517207

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e3298840b447037072dffadd4b371a52
SHA1 e6dc7282417ad4848fdd408ad9dd30170f95d634
SHA256 83880a61b53acc3b2b71974faf8e80370d89c7cc215953a9f32013bdcff018c3
SHA512 4c505027091ef87da64e0b5fa1b03d2af567e6f11c6fe7e289f75aca4e7c398fff9eb5a073054116c84cef08dfb3e856efb8f2c92db3350340cfc61b89d0e1e8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\1412

MD5 e64ed86b4560546079c6bde7f0a94a89
SHA1 17238f0d347688765c6b0712de98cc95a2889061
SHA256 0313f532c34cb1c1f186ece1b23b4074840be34018a5b35490d373f4dffe833b
SHA512 e25f6ae94c48ea2e7feb1476d5459eb9f4ca6f64901db65cb78b5d6204e392f588624a559acc8068ad7b4b42e1bdccfa2b57d0f156ba0ecdb32e80bb94c01a4e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\7D140FC8B10FA0CFC53F8E57E0114852088512C9

MD5 cfcadc37df324b0b80a0240318472ea9
SHA1 fd6dad0eecc0c706e0ff0f936f798cc93c5676b0
SHA256 f158277488d6ddb113a4311308c8e376facfd7358f11236bedb12137cef356b3
SHA512 efa34cecdc6b94cd8641c0f43521e4b92687470f8e82839623da0b0725ae6a26785bc4bf7d10eb9c87c1bc82824d85193f2fa34032d0af806a63b0fe991fdaae

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\30052

MD5 501ce269052adcd7aebcf3ad6e94f3ce
SHA1 cb8ae911c265e9d6e977224bce000bc5ca8238ab
SHA256 55cd5effa45aa711e68e394491c9dc2c13f75a39c8e332a0bff52f55e93055a8
SHA512 1e0d1b6d5c5bc890c2bd2887b2576cd50763cff24da0dfae6f49b2ced02b54778098d8a68df4e87e0cbd92a3b2412fc87cc6630a54d7c4ad2131c8e80e1cedc8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\6D0ACF304627E989C1DC7C7DAC7C2F402A97795B

MD5 9432ff34650b41e759568106652cfbc1
SHA1 4ab39bf8f9ead4ad8f5b8984a5f5b68f4aabf28e
SHA256 c75c9bff288be8327e843a498f0d910500a331fcf7cdcf125d244bc511f22c36
SHA512 1048caa0b1ea381dfaa806ab5bb6d4a234ae07b3f14f88dc86f05648802743655baa8d1b33faed1b60d54dabb0af206a655b7acc5334befcba93fa5fbe18e204

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\9719

MD5 9e7be8b019854cf2527c79d11583ef46
SHA1 0b383cd3398469a3a3495183621f4aca8da33771
SHA256 bae358ec39e0ee83811fa5023f677eaeeaab117f75aa0439d41708d541b3fc5d
SHA512 bc1cadf348575bd7430268c7347df9efa0dbb8061cdcf37ca55267b0208f7813d5bbbf48cf7aaef4c31435f81612ea5d4d4e4dd7ae0e54867111efafe2a27e74

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\137\{a87e5eb6-f147-42ec-abb6-898db52da789}.final

MD5 e47636e5eaa32a7bedf59aaa87b19e8c
SHA1 d0a9b47ad38ab84751ac228053a98e27ffb7471c
SHA256 4b2ede568ebec5899d38b438598ac6a18dcc5168a5ccfe103314d91d9c3343d1
SHA512 941e397d3a92c1a2b62f88cc22070b0e4eb816b745af3bf98a872d6e2205fcf38ec51f4298cae2172307fde335481e167123f14114ce81f6c023988de81ab37f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\DCDCCD97B615F85660C06CBDC3964009DD7EF67F

MD5 a9143026d87002687b5173f40307ffbe
SHA1 9037be6e951247acf5796214754af317d70b9f23
SHA256 fe632b884e4c50c695c6443479cc2d2db8649d2dfd4d2f27e89a85fcfab1f370
SHA512 51b8608f3ea975f57b00897708f1286e52f3d13ba59ecffcb44b55b015fc5825cf3788503ef37ff9c3201e0f969ee4e94871a0b92fdb9f96c37d12136a911d9a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\101\{9a5e885a-1fc0-48cb-9225-465694139365}.final

MD5 765dba9ef4fd813c5fb2a3415de36055
SHA1 3d1f1e91de8e970e9bc4b163dd4780b1b4183f9a
SHA256 51a3817f5a261ea92d1e8fe4c01fcb1bef5eb5682f96b2fbd2107cbf1ff52449
SHA512 81d7028b7e325d593c6f6b4ef5430f27c4ab2433dc22e9ed98a5aa6c5ed7110f4b2aec72c7cedd6f249dac08c2de19c1707f4ceb6c83cf27c20b8cddc8e03987

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com\cache\morgue\172\{eacb22fc-2934-47e1-a487-8335a67a84ac}.final

MD5 b788aa09889ea8f6f49ec3c4330a8fa9
SHA1 de55bf6345c060e3ba2f3d48e7645e7bd9445580
SHA256 6dda50f7014dd6328a44fa926ef24992212b553d0e6e1714413694634490223b
SHA512 1c6b713996423af24f5671b80fbc141c33af046aaa1f7f672ad19ef06cac1d58b80e03928ac617d135a069261ef93b0b6251559ac093bc39a2c1298518238f6c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\625

MD5 a2d8b27c1b2823dda38f6b4d2d1c2dac
SHA1 989abae8ad78ffe8dbf042482ee0ac13d4209a4c
SHA256 fb7f5eab8cc933d8cfac95ecf1f36309ab1b55b693df5f9653e29c6bc1b6d840
SHA512 ed64549e6942bbd2bac3b5184a35c0f19921b56f2fd3f9f08b5deae8b457aa157c79bbb3b202bb317c7efb2444557e96cc1d5dcb3d8820d8b9231967dfe60c07

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fba1dc7e0fed6e02ba4a60a98ac93e1c
SHA1 3488fd1b14b7c18b300090a4ccd76c373e21b7b7
SHA256 95216c3110da51d24684e49f7fa712da9278896b11cf5792d66fd1e4fa0830f6
SHA512 a962d53ea1dd32a1e72c4b4fff4fb55cdac1d1210f58b3cd86cd83c596807d0b8297ad2263d9916022517c55c550445e10759dfb9a467452ef4913d0e695cc65

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\31369

MD5 cbc0a86814024798dd03adc8863f696a
SHA1 34c338ff2ee73caa627071393ac382e4a310046c
SHA256 fddc915d193375de1f3bb6684342a7b35f18def4a9bdf25b0af24df371b6953b
SHA512 844a7c26233603671909fcb66006d6b93e9741a7dc7cc240421a3a3aa8882056e44eefcbd59c88b99197bcd909673ecdb36f28c4d2da5bcdc6c6a630c4e5db79

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\4F5A4532A1B4C281D5E183627A78A2EFDC1A7E09

MD5 28f7dbbab2ecfe9779dfbdd6425deac7
SHA1 186d0a72ae8f5416edca7868e0367157b754007b
SHA256 d3dc6b2abafa5662a4c6dcf7887af2eed11e7593e3d39efb0e31a0e29c0c7c60
SHA512 5c9836403b6fb14908d98358dba9d39b8be8bc7e01da8d30e52ef5b33f7a48c600beac7c272a33d031550975960fd26e25d280cca38909c80a6256161e72fa75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C01A5A91B3215B34E7411A2001698454305F7026

MD5 283355c57dc6f5da1064add550d3f3dc
SHA1 93de9c6d1e04cd3b5bb2a1a7f99dbd4b413aa6f5
SHA256 36b65733ee1b469686ac36339aa468b779ca82e8a8d02eb65d484d53470f3901
SHA512 8d0d60dc05ede89b59452c1aba77fc7c0d3c3349208b56d17d42af3681e17bea8e96174b2d05d0f88ab8e51b68aa855eef23d4c5dc095ba17fbb663a9782d0d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\DBA5860E1EA6B54384EFE33E3A0C031CA9F83D70

MD5 c026f8b6e1453b5b711e6d2efb41c280
SHA1 c50730b07ae867bad71acf46f6d9c52c0e79fba0
SHA256 943eb73cd921d87c10ca010c6d5445331b6f96352c495f13601ab70f3bae2ec9
SHA512 4484a991186879a065bc076c2745aa039c2f9637f0b1addd4fc70d50649c0231f38f97a79fde23568f7527509ce81789e93101c7d2fdf1876985a4bbfb8db8d4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C4E8E30111348F7EAFA2A0B3147EB10001E40849

MD5 02e000b37254fb8fb43d544f28f42db3
SHA1 ba0618e4cd12d1748f5430f4e4df52c347310f4b
SHA256 816f5182e5d813a09e5f4618c31e19f16051df4f2a4f87e28fb8584e1bbe26f9
SHA512 21a070df06db9549ccf19eb7c023b9517e5ee92b7b3b3664080a78491c1e7f2a9009860e849a004d43acc8296ad36e0a765b3dfd78fc2e42645e7b920203f677

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\2002

MD5 9177d2b4f0469595938d00ea0fbc63b0
SHA1 e1f2e7286eac4635c81eb9737734eab4ba690928
SHA256 afb0b5828f6e2f64c6a04704000ac30e57170e14b5cb06d57c1b8fdd6a7930d5
SHA512 7fc40f1897392a3d9008c60b7f345078f63b5b72118346aa9f22b232eb4e2378dcc78606f68cb9da39449decaee94439e07a584721f6bf18c075f5eb34d40c97

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\18329

MD5 9b3668ee8e9038c8b4d4c3403ace11df
SHA1 e16c8b2dcbbc413bd8cfa678512f317c521a88f8
SHA256 8291c187ee9e77d38d17d532c34cdf2af9ab7d8086ab3dbeded145acf83f8174
SHA512 62c873e99469dfd24ec12af11defa579ebed93f2b24986fdeb22345376d7e106733c2b78e53e627006a39521b9f2b8f25d7b1ba1aaa6533aa4845714550dfdcb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\12483

MD5 d360e94897d6b65570734cb1f85b6f5f
SHA1 0cba28d65ad267d815d92982adb4b32a14eaccc5
SHA256 bbcb75fc51ba7e63271f6974c6b0936ea98fc22b8babe464460eade429f1bc13
SHA512 fdddc32a95de5c36443ea5c58cffb5938a126eb1b8dcc0628e00275df478182653d16c4f272233fdb6f2ac7f6f1b336c6cc7c89a38ab308821454a39427847a5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.google.com\ls\usage

MD5 b0a07403e962bc08aba6c1bb486319d0
SHA1 f34f81bf3129efeb6ce7e08765776208560529cf
SHA256 5dcbaad366516aa1bbd108f84e0da44ac343c90aa9af428dbe04c6f17450a833
SHA512 b03e9b026f5618d2c9c28a5e03a8443ce8069a6f70d1ae376a81142a22b9200f64990ae16bf6bcd7871411867b2a97949fe1bf910520f8fe79211a7e558e0376

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\ls\usage

MD5 a4b57866747aa8bc0828ccb259689903
SHA1 b77c045f5580c81a6cd07a5e5d2271064aa52233
SHA256 395c2160a5f25f4ebff4939482f032465544c7d1105b8f93b529552a1f8f7b88
SHA512 f5e9b04e525e1bb7a913c3e02504f98b1f860cbc487029075c668cfb560bcf85855d7e48ad19586368becbb6157872b70a083a40081c2c109314ccbe9e5825b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9016b0233228b87f18f76fbcc5a12055
SHA1 72b78069ab9d502399f8cc56f76dc85de3db834c
SHA256 0fe9d3eeb8b6a48186cd28c6757bf3f93944b6a7dad0f4bcfb7cffa27991dfd0
SHA512 10939dd3689a757f2a1af2bcc405c089958b39aec342cf728ad55fe88387a184fcbf7021db8e5effc6ac7b76f3eb9dc8f55165f8f492e2b8f4caa08114de36a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fd0fa1e2017e85faecc0d8c9235ebd93
SHA1 d38e962ac6aab06ab85608fdf4e8150eb56b8842
SHA256 c2955c6ea568ce169df834e0764eb2f014f06d3a95aefbadda75c36b04b82b58
SHA512 4f40e77fb94640b513a005cd2849870be186fca0c62ff27aea79b8efdd48455733215cae48e9cad14d6f5b96eb65c1fe87512428b1912564c8d56d24f8745c6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\21818

MD5 f781505677f68f9d131b85081d1c74d4
SHA1 4fa2fdace5f4112be9df12bd04feb2e6a1b66d34
SHA256 b7e7bd5efdda640eb88a507b747a03593686fe1e73488c27b74f6f02a21b9dfd
SHA512 ad1318b9b8768dca116d970c307ef7ad44f52bba3c82c6e938448b5bf1ffb5c1020406a4375409ada95951e67614cbd9c9fa65510b89668c6b0a9a7c9a396c72

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\C0041240D9AF8683185D2078F04A2ADFE9783E79

MD5 9ff65f71b55bdbefda6c825a025716ac
SHA1 3c707ee47aff5a962b9f17fe172262bb36857111
SHA256 f66aaaabe59d668da6b1fb3193aa6bb287a4af161821e8de5c359786dad624da
SHA512 9710da14b99b253e6bce693d2c61489ed007359a2b912d19f5d3068b619d5c028a313d7a691db239d56e311f3ad9ec7344ba3dec3a12ea4de8578ea2380612d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 af169a404f3707857e839685421cbd8b
SHA1 91dd8bfd098156513240ebdc28fa3bb2d501063b
SHA256 92117f5c0f3e3de6fa7aec98e66ff3e59c5a2c6b1374cf7ba3287380f70cadfa
SHA512 86855e24649b565a1c2774419c41dbf09d92489c490ca5e3943ab2b7b60e139f07ec51a8cd14c8771929f97aba6266f4ce4c36bee2a49cb6a17343092ce8f734

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\21508

MD5 6868582b7df5c2e087e73b9f14665a44
SHA1 b3c3bdfbd93bbb05f86eb3d77fb505d5d9118330
SHA256 c8241e7fa5d61b4758054199b2dbe9946ce65eb01192f215f313c0cd3598cc21
SHA512 874d8c53f3ec3254305ab4839b4a931f4a1d51cbcdbf70aa11b392fa03979349d89f23e72d5a8032daa70f426408db2fed49806bf3942a01b7de0b1a2f3bce25

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 46f9f3c7f68e89645d783806ad0d8670
SHA1 d53153a0d9e10253ce5848bd0770b3f6316604a4
SHA256 c515a8f4a5dec7cf2dbd571541f5954cde79ddedcb41824cbbd93c4e51152694
SHA512 b2f2a5073908eff3258775bc76b95b83ad5fb169598129f87e41944cb6394838c8417963858483670372c558433b0c7f625554741ec051b30104f1acb86d4dc7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 121ec3b3f1828ea10a840107f7382019
SHA1 da50d62f49d6e7af46e0736640061c9fe5626741
SHA256 f4e321ac830d7c47e90d48d3fb7896cfa336f4aaaffaca0ad526822b43dc0624
SHA512 8e33f060245e8df8d68ff70c45ea8c39935a8ec82a648710eccbd321db2f191affe2390762318f6c147823653e5cb3c793915b9f318bd49ccea4a04b019fa61e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\jumpListCache\lBLKduLS9PgHivHuJ+KGvA==.ico

MD5 5f6c87c2eb0d9d685276fc64efd9e15a
SHA1 e6a20a0af71959c213f48f1cf8b1c004285694d4
SHA256 098ceb09bf53ec90fe7bf2800145e02ef7ecf33a95f9d020bd46223195408b64
SHA512 85b89a85311e6a2383cc077f7f9e1c6152ea3dd28c17bfb514c36876f4c42777ab34452d4f51187540d9fdcc9c951b1b25a9f05c00d105d435e1e05d1e305e20

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c300e3d275af9785a772206f7ca586c5
SHA1 0f357b18eb867aea1fe357bf5a75858627988098
SHA256 d4a128efcedf5f7b54c0f4ff43c5f523e838920329c769e3540acc7cde90f3ad
SHA512 805a13bed6540294077e54995e2e56e329734d19322e881c23450a76456bb26bb3e91ebbca8504d590f43015b920c9f1e511b941c2eec88e276e30fcfbe0c57d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\6F7F82732F67137B0500951CF1B17182C1EFB4B1

MD5 856df5f0dd7c7683576509846b65ff17
SHA1 4287c5d99b9bbc68725cb76ec21828808e2cbb1a
SHA256 97a74fb47f3a7633bae0ec8049a11e6069409dc17aa600616500614eede4d6f5
SHA512 421530c552855c4dafa3e7831277f8ad5e6ebdb35cc292b3cd830d6f88b7acb5d8a170e30dc477ac0a61f06b145c322a0e041e6105a5fcc84973c977cbb219c9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ae9a556fb1cef6926572ce32d88477f9
SHA1 644e164547b0f8d0c03e92022e3593c71fa8c91a
SHA256 02b0b05840c6fd6036328752df914a8dee693b3d6c3274f249947873c6433fef
SHA512 e8f7bff0e49b013fab863e3b40e024dc0df4c859542a2532eb2ccc13dce41dc1aaee55053029aa5f03fa179730f5d81c6a3e4029d60a1dfb9619cd19056f187a

C:\Users\Admin\Downloads\OperaGXSetup.p-0QEthQ.exe.part

MD5 4dd978e6970ead0340784b789beec9ab
SHA1 c93e387d99f326ee65247bf0e859623796f04fa7
SHA256 b3d73cf4827ac03cd159c8871a265361e140961b7a9c889dad6f55064ede392f
SHA512 1767fbf6100101762dc64fe5ca07a1fd9b1da31e5a2798fa58e739db94ba389a13e4097c8d7d5af27ce9fd8b10e306fc24662650a1b62db1361408b77bfd6793

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\extensions.json.tmp

MD5 62475173059275231f9d723dbf673f90
SHA1 82a24bca046bdd8d454104a0182249c5a7c81c0d
SHA256 234bf6013f66c2d0e0aa5498a442f883b46357bb9cba9ca6406f952b1f82d05a
SHA512 88df7920738e92711353928f57baadbfbae621d880f1a0fd1e2b460bca37cbe9b97a96e1967e621e447125a073d56db5054fd95aa98e1145b4f2bf01e26a2256

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\3f818479-db55-46c5-b6cf-9a7231272524

MD5 43bb5b3235f93b77f45df9671fb0295e
SHA1 332081a38112453651f61a0e06b87fa58031db91
SHA256 6e060cac281a8be269f3af1d5bf6ba72c52bb47c23d17558f4c5501ede80b189
SHA512 86bafa3668d45bcba95ab11a37b176f08a4e6c89d29484542a4ee57d14272c1917897549dc89d6292d9e1dc68c6a104687c5c1b75aac9e50f3b4119d669b81de

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\b869153f-183f-40f0-8f18-e924ace23807

MD5 85087b07e3bcadc31182d1c2f6937f54
SHA1 6b5f157fb935e685827f8cdfa499011ff7b37fe5
SHA256 ed29ef16ab4ea5b34b9b20f6552996081489af48cadb65dab6f69098ed22499b
SHA512 b4e185687fd775348b99b9ca9170983efea915afd591a2ad3fda1d441c619af5a701de445fb1a8824bcdf5d5fb974b5012f04fc59154a61e449509ae5e29ffd8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\db\data.safe.bin

MD5 6c826e00316c36a88fb723567e8ee647
SHA1 6b07c0e6597ccaea1e4a2ecc7e1dbcaf881efb0d
SHA256 f73893117f269bb32d7b3bfa55c4b23e8869caf261696e0a410df28d00917031
SHA512 78b9b7488f021e42261ac15307e5386087c57789c4ce1b63f80aba275f05a28f8ed930c61b509524692176e47aceb2944c5b244526165e6f2441fa19e6a1176d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 380afbd5373aab50d83bf11938eb36bb
SHA1 1e7822a07bb1253673fd32d85ab1dbc6b6810f71
SHA256 787ef507d82b021e8e4c44cfb685b1f3f68b750103d2519cade5e8cbca0cdd2a
SHA512 376564f3f70b9e65f557a4849b21e074795773c954e439aeef2368af83910c248480e198bcda80b886ddf7951c533cb004e0779400ddc485257db652e491660e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\9749

MD5 7a766edbe6055153a3faa3c49a79f1cd
SHA1 26db9893753e2fc801a7209607a880e7c2c5db44
SHA256 e5a73518fc175f60375be41a99895dad6b4cb4da135e76bc3957d313c5daa72b
SHA512 f87a6db2759190a44de49ce45cf00cba9453e27588726ca951f4d95ef6f4769acffc16bf2b8e006aa947c983fa3db826735d184c58609a2fd6896c6f715b1ac0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\E6CECED4831B230BE30B351F3602932E8A28EB1C

MD5 a663065833da4625c03f69572c5265d0
SHA1 479b8433b6d71a02a4e57294d107554f8a243e8b
SHA256 36b606013662c9cf2baa2d0e9fd0e5378fb4c2a720bb98fbdaa44e8fb92662a9
SHA512 26d917bdc0bfe5f32ad4e1eb7ac484d858511511f1f3799fa8a6bf52284aaee0d8286cbbcc026def3817f999dddf63886a404a412f354b318f6ca34074a14717

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 86af9f9eb1300069e75ff4f8772ea2dc
SHA1 d1ec3a93ecc1dce1885244a4fdfb401db6578242
SHA256 3db1e2dc6e63840776e0a41b0ab4969afc838585d2870e3bd3ceee45fab55a5a
SHA512 bb4bffb05f66b42d73e3acdde74cc83698fb1d5f34d687d50a8f9e4ca22410c8fa7eff84a763e861330b1d7d0fc46a24c4642da3c833aca6828c2b7c81478fe9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b953ce978169e0525eb77cf2d291684b
SHA1 2e54e0243840c0d9961c205989b931500c0b8ff4
SHA256 e274c85811e5c60566897812c2d88f5f082877b05eaeac2f31e1d941ee581ac7
SHA512 0ef21dc7e0cbb96e215cab26df846ce22af11d0d5d1abd74294b1f62e3edfb8b9405eb3a3eeef3d5946b9b01dff7a2b45918e62d829b454267c621f27d5c9063

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\11074

MD5 3c71f58aff43a035c5d3079ccea2f688
SHA1 756012c37f880ce2e27a6b4ced62b5b3af3784a0
SHA256 960f0b64c5c02655a5fde7c7d15da361fc897eb12b1afdfbd852a7b8940c04c9
SHA512 067e4fcb84aaf26cdf9791e9ab031f200530a14966868a8f299b0f69340ffc2d4d293b3255fc52518fbb33ae353d843c3ad685c99ede929dc7690fa0a46fb86f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\13422

MD5 e1886e5b4c3e8672fd1acdda58dd4649
SHA1 19344b3e36b30e14394a5c39b512129f622b3dde
SHA256 af47c8aafcb55de74a3ff96973461976442918b21979273cbe9bb6065dace735
SHA512 c2b2bdcf52a20bca92139d670b989e870e33e7877e3bb2fd17d520d6fe111a1372823875d4918e7008f33967abdb15a93037193443d94bc4e000c365ba27a83e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\18730

MD5 4b4a8098c146282e21bb1b857c450a12
SHA1 53f261c880a53175b14d57b72c923c8c5947f3e4
SHA256 64a8f1f6ec9454210d28764d971c2341e6bc9997ab675430f9dea1bf7aab9e57
SHA512 927be1747ad3cdb8871bee312ac5da29d091e7ebb788925a24021c938bff8e131097ae1e92f24a4fc390a7008e200c063ee64b096b9b1442fec1d0779191afea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\12087

MD5 e77441e22f391a3410fa32be4756e321
SHA1 2c2a02c5462471faed89624b15e742795e892ddc
SHA256 8443483b0fcbdde7df11ee6109be3e1987c791348cf19929fb558872af01ac41
SHA512 d6c0b76e7d59f9bfccf042d12bd0d3284c016fafabaf3671d75cee15ffaab0c53f1cbd986858252be40694d8e1df69c0035684a2c28304d7dd6dd6941636f544

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\8822

MD5 bb483522469248d2a582f0324566a1a4
SHA1 df8e2f8958da1c0a51f8051deeae43b2ffafab61
SHA256 5be8b32c8881356242b8a0fc7182c01ae55744eb6f153f3f9e5b454b9d6cf714
SHA512 7052c279f9e8f559ce44d85996e77cf3086a234102553e6ff76d204324630855734b48736dce66a4945e04d0d6682eb3319cd36ce3b5caf923e529ff3d25679e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\32690

MD5 fea3174fadf705a9e685796d74723c4b
SHA1 4abfc6822384127b71ca7bc8bf3bad9e85708f5f
SHA256 f54b66791ad00a273b4e937f280e6d1b33c7d2cc4d47e93b8976e98c147b2306
SHA512 a718f42b8a6d37f474bc6096ff2ff571a5ce6e992023ee7b07d5ed77bef149a5bfd1a1770cc95e194cd6d0e884c72e321044b980d0467e90a7f290bc1b2c51a3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\12199

MD5 5eff6cc9537fbee2bcc40af69ede16d8
SHA1 10ed2cbfe5e807aa5d6ab0d72e9d3b7bba03c5d8
SHA256 f80797f8bdd01ed26a2942db2e85dcb3bf55b7faf1d0cd4c4f9ed411d396ff73
SHA512 81519b33ce05128b21167b94ed70e7ed05eee1b2711975164a6da6b01e7ea91d7db581e9fb6119188425bf2737ebb2df91e4c8c57a61ee3ec9b2a32ca8dbdcb6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\5668

MD5 298f0ed3ccf5dd12f14c96331fb7ac3c
SHA1 630eb609182af9078ca4fcee612541ef4abbcb88
SHA256 bd782be64bd4cf96ffcf67a36eb0e62b66ce1e9081338619a58ce0a52b6db142
SHA512 43b5cccd8c75f2792115b0bd95939b29405b79a29bc6a80b42316331a25247c82bd727e6b65cc6bc02050403a6682f6c81174f6b35d093eb685ef99ba1041dc0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b72aad922a2b1db074f00300d36e51b0
SHA1 2ebef9c4239bf7009fd21584c21ad13318ec0934
SHA256 032bb441ad8791dd6d15cd33ff9a44c0aeaea9266b59f5d09fd8c7d2b4026ee9
SHA512 49604c18e52b8fa88228e4281b6c0d1c6d307a315d50c4a9f9a0632ed4cf761a23fd1af2819c1604ee6bb9da8693034007806d13864d6aa6a58a9db9aa807b5f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3aa0971f285bb4842e9f3ae3b9b109bb
SHA1 9708d74e1fdbbba257e22e4340f1d4ab3ad7ea70
SHA256 5b8188121851c08f962ba0ac2afe9c658c9d3c2b301b0a4ef625f0210c4e20d9
SHA512 56549ba4eae24ef1bac22865be97a83509a2b707c75eef6f6d46b33c6181efe91aaff1aea114a1b57f7f4a1cf18099815e1e4740cefedb1d231295ef4337fb06

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8721b11e093ace881c7a9c052943f68f
SHA1 f5c3567c2ff3fe30c3099251e7c1e8bdde632bd0
SHA256 2a097c2cd7cc9e0fe3a3c57dcd2e4cf692e253b2dc490b49dd74205b7346488e
SHA512 1474eb67612999d28794856c18b074b90c710a7729eb4c0714e69bcfa3d7ee34388b6314cc4c3d3ac45c257a1d97ade6c760fd541b984a3edec284a024ca3175

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 330ec76c1ac0595386b949f323883cce
SHA1 c40d2131ed16372d8f8b621f3579d1bd31dd12c3
SHA256 e900cb0b509aa0e16c0a8bd8000d13d5da9c06a3c1b997cbbe5e4bf864b1759a
SHA512 cd94d6a0c2341fd5559cadb8d2a4b5e85e89f2a2a8efccdc81bec2e573fbc0ba75f0f64c01fa5aaae4c38f20a96b1daae95338a52d8f0ec4a360a6b31f3675f7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\25615

MD5 d37baefb16103ccc9b6cb4d6bb546d76
SHA1 cc05ca3a948d3e53a411b05b4d26940076964f50
SHA256 815fa78b99e60ff3679af71d3bc63e6e95779c88ba5d863beb107a9ad444189f
SHA512 e5b1f18a03d636db20a9a8be7a5b97c3e21b84ede169a0900fc5c139f65f5bf994124f6139c232ee9476a6bfc3ff56a7a45d9f60adc75540bab21cb757f7db34

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\EBA01E2AD0DE499C9BE9E810DA16ED5802A541B0

MD5 d574594b935b344ec29c6a6a247a35bc
SHA1 599b465a1a383d72ddcacf77fdb0ca30a981d5eb
SHA256 2895df2f18a2bed1b33e20de19c82e0c2bb718ae9e9845f02cd17303c09f4909
SHA512 1041913930591caf9303707abf08f64705c781e2dcb440e5c238a25f80cd2f75acd52fa6b1e4068c82d77c774bdd319bddd272962e9e26216039e6bb63c252b7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 13b5ecc6658aa1a09a5e3410ad63d201
SHA1 065280aa5ea559dcd753aa6990525904826eeae0
SHA256 8fc7155f49c89e240212264c70a27ade8e6709aac913d3e958217b49deef0eef
SHA512 0e51fb14191e03d64c943f8524d2087294623a3ec48094878c7ac048513d073b0a849cdadb1e7aad657d3cae4074a78f0af2cbd0a2a25a036f59e4a01298eb24

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 79cb469d8fd7cab0b8451b58cf0611a5
SHA1 ff45a2bdf7cc7aedf0a10870d877a2f0899d3568
SHA256 2d471571ce86f747d6a42ae5346efdd8a23458f1b7976bb6a4ef894a96273d17
SHA512 aa2b7a246dde2b93aa6fa0d15f8f0e768bc94b18c537ca50555fee8db2feb93795f2b0d2ddc2031d85c4ed5825f423c84375dcf392af4fe0c2f55b903fa1a40a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\709693739DDD0446B03D0353B73016FC2B3C7C51

MD5 024dee3a61f6ff0f8e74b4161a4bf883
SHA1 da403a3c58e8ad70cc42fdb20758a6d947e8ee0a
SHA256 62ce4e3310b08014d82454a6cea43fbe032f06e3682cb320c229103586a7a129
SHA512 9f9f27483ba71fabc80bf55a28f9febdc67eee9ee50784aceaa08a41d587107882562b663d492f7ad928799ba659d123c7157fd406b381a0a220c7ffd12a5761

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\0D104970BBE42EDF4058EE47754FE73AB66ED638

MD5 bbbc36e386ea98e2ebd8f994970b2b35
SHA1 92af9566fe0867a6345239004c3de36c603c9c99
SHA256 9bc91a14e256ee7b7618a9a2129e49de8226d394bd8478fdc73a20be01302065
SHA512 7a562b566e953e24cc858274fdd7e31c6885f4edc0aa57a323929c3df18580bf93c978ac1697cbb4d35946e53036617fd60847e1ac1c4ada313383e48246b629

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\BAF0466D42733CDA25BA5ED6996FDFD2C14B3F56

MD5 16ec25f8d585e667abe71c7fa0a38f61
SHA1 f20e4ecd6c417319529daa33172d6bb72ca5819f
SHA256 c18edc68b0a48019639f3eb5e6fe98954a7e49c45a65582bb4feccb7f7932688
SHA512 aa57f5755c557f8f9db3281337e9d95e8e3c6e6e076dae986bc9d74be511c9fc6661c8acaa5ef29151c40aef6872b699de11ad725c173f3c06d88dda3ca445e1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\EA957C7EC2751F65C20F126ADCB62B8940AC2C32

MD5 0ec6500a407621402043593547d5da4b
SHA1 32bab63fe08fff6de077e4e8fa2ad81cd3844614
SHA256 e942148e06d9fadc332aa2822cc9abca0294e64825e1e3e4a5158b1b00849f60
SHA512 86d4aec9fa5b0f2588263c5aface46b3f57b4b844da794f993e3b9ab65bd79691525780f98575ce95b9a12e876a488c05f5fe9e9a9debf76e9a118660c8894f1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\15D25A45237F2433F486D1EFAB3154242CCA3C26

MD5 3d66088d43718627bf616d066d5d6da1
SHA1 8c6dcd023c8cb4613e1f91f26fd66c52b545bb78
SHA256 2fa831e1d272e6ebf5f5c89eb4e9bff1f5aa485e4a8e81948a0656a1f449aa6a
SHA512 113c12e6fc1a3bbe9f2fe317f39d78ebe41de2d96e379154ee8aaa359ba283531cfc64282c9332d50dbdce5c46a4ed97cb33ee81f3bb889d8e9637abb57f2f19

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\2E1D19C5E152F469B45C9EBA269A3A7E23E01A8A

MD5 a764fe763ede7251eb0062545a0be8e8
SHA1 15e810de6251e2ce42564802c000e34cca0aecab
SHA256 24ab5c585121a048932089bd756ff1eb3f6726a76782f03678ee6396c94dd92a
SHA512 3247c4e281b7a55513eb8fad0ff80587e35daa758d460844c86cb1e2bda9003c5f0d13ff2dfe33d7223b6a60ef36bba25a4c810041285defe1ca0c6ea15824da

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\38037F047D605F1455A319DBDA3E7F7BE91D8883

MD5 eaabe7595f979cfab98a43e3279469df
SHA1 eb5a6ff25143cfde3e1f48e0b2a345458e957e90
SHA256 afe4503a81a3acb143da84d65007b1190e3cea407b0ea7c4bb58feb8d2d40a95
SHA512 0f3878fb960cc013c4467fcd115c186f495023e7616f7ebfca8cfff0d96db39767c4122c5014fa50bc1fd4f23fb68b6b819fd121ea2b20d569b53a19a60cbab1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\A51EAECA54D8E8F5D599BCBCC60390D0297E8010

MD5 5683c8c25d9db4117ee711b3bdb873fe
SHA1 661c0514bd8178958a051ead54ea299d460dc8b2
SHA256 15e7f4bdf330fe7984a8f98864d9dd905197c82b55f24db0fd2f761aae5781f3
SHA512 29179bf5ccb3297f78ef4cafaa896b9c258ab56ff00747e5acb98f16d78264c6b99848b29e21edbd599dabcef608003681d78ddb870146f76f2e3ac1a7cc4532

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\18D7E3B706C913B13E03F4C9A2106AEDBDEC78FB

MD5 c964354a1f8f012fca2538447ba2861e
SHA1 7407c888604c24182d2b923347ddc551c5c59512
SHA256 526db50d199a8939d6ea3c327cac4ae6a37c8bd91e85ddcd4e15481e1ed01dab
SHA512 5f67969835e3979a90c3507d33da8dd7b2b7abb347861aea3d574e4448867c109a3c2d3c133377ed3aac28e8718aaab2f5065d2537cc08222ae061114de0aa2c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F0F92FB2FBC2B252B7B852F294964FC7E1179FAF

MD5 e56fed8d5febe6b5fb58957e8b9b3832
SHA1 76b47e35596b0bd62cee22b93d45eab27d5f400b
SHA256 afeecadcb39c5edc318938935ad08d7baf3ceeb699db41cce8da1c71521fd74a
SHA512 533f24542ea8c2180b3d1e5bddabf4b6e0fece35e592d2753cd22eedd9de071050c04a3264d6bfd67b58d63f7f99c491d0a4709a6106fd0e67fa42152d467b86

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\EC49732EF6A0EBDA7275E95572410880EF49F014

MD5 47fc40d11f8fae86339b0e6883bb00fb
SHA1 50a464cc3253a740d44cdc4f8422d9e599b6c724
SHA256 fefc7210aa5fc632189e45bb2fa79f452816b087a2b6abaa276cb268c0d91457
SHA512 e9674a56734af8b6362f03df574b4e74e2462e0e45c3a41a55787408cbaf5ba5fd9e05bf671535fce8186fb1fa8d3500bb71bbe2cca2de0add13e0404f7575db

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F7E289011459E2C6B9CF990D958AE3B2DEAD94FB

MD5 4cb5c236108b1606e8b30e7fa5cc0098
SHA1 25d245eb2e1b908e278c5ddf67a833cbde7b302f
SHA256 ce0252414299adce7af4ddd648592296f3b152f8e072a7f71bd158b51f8b31f8
SHA512 01bcda855006d6786576cf4cf3e5f1038af617ce8825dcb878163fbb0f02b69cf280edbd989be5a4adb8d0b1c4382e555b059aa4c5b88b6b19e01fdf6105e12f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bd9d24e846b35bc39cf4b648a5c9c136
SHA1 f6bfe13c25ed288cc031e612b67a2f8fb21c86f7
SHA256 0210139af9769f919de00a867d022d0abb94c3f6d4ed28bf124bcd452069ef0e
SHA512 5f5acbe051a70d9bbbeadf82ef1e0f0b62ac73656a9d5a63d0ecd4833dcbcf4e67c380c4f7e91cb257db8f96221be44268ded9d0be1c3b710f9e230a0543e650

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\f0579bdf-5d0d-42a4-8263-ab4b97ef17b1

MD5 8e1a66d41aca17832e6db6048bcea812
SHA1 ae108d60d019a5cdce4918a66c13336856d38fa7
SHA256 bb372c6b88a17c5bfc8490b5804e8322e59a15c8de944b1e38b7c331fef9a5ba
SHA512 17acafbed85c293ce83bf1eb5b3b7e4aeb67b2d9701d34041347ca2ef9195d36dbe168084876f81a0d77abd59b05b28fc5426c25b7a734991d4509e4c7904e29

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\datareporting\glean\pending_pings\3d36790f-efff-4775-a44e-61db46569a56

MD5 b0e1e91c16d1ef6b10ced32119018f60
SHA1 5c368e9650ee7938efca0b13393e6187e0e8a668
SHA256 6a58b33872b73f6afa8978d2dfb4e2e93086666af07551b253669246b50a9153
SHA512 3cebd144dfa016a5d99e9662e06678989bd1b3eea2e6d2cd257c95a90bbfe9f63e8c746747132e7435a42a71b88369a96a89d2ec498851d5451c620d607835fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b2b520fad0a0c2cc12112d520935a791
SHA1 cd4cdc2dd9a555e20de72575cadcbab8a6906387
SHA256 ad9cd4a76fba71348225238dba60b3a2edf59b9360d1ecb36d143e97b0259d5a
SHA512 e80240ba33b02d06a9b3c50b43b2bccc3c2f5e0b9c0e82a26db692699583c101df0910c19f02e7d63bdf43d40e8254e22ebe208fc5435dbb51e3b71d96ddb4d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F87C64EFAD4CAC26EA07395B175CEBB1C2A06BC1

MD5 70106386acf63f5a2e9859ad1075f9e3
SHA1 194ce639f5a09708024b6c06d22f015fe010a53d
SHA256 57ce20b72a7580b8770a9d20512d52e7dd4b96819270ed6040495dc47e409b1e
SHA512 0860ba21238a8cde5f21dd9a30a2596400e50f243bd0377baed7f3806ab62373f4676843e898639fa92cb7d8dbfa927eb9d181b38449b7f24c9c5340f885845a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 4d67942e18da1df564ec7993aea2e3d7
SHA1 5baba3f8e43356fc04aad0d54875c5452ab555d1
SHA256 635a369a2728ec87e367d825a55fb8e65c67577ca5f7b7f460e07d5a3546ebc0
SHA512 848ecfd4cd55a82ff127dc33bf43fa3ff1930dc8195af20c871d49541b7b731a97a6e9f3ed59b727fc00b200a0fdaadb6a2e091d24b3e15fb4e4b1676e6f75f7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c49711fe7005e9bfff757b429e5b8798
SHA1 10f375bbd33aa1eed8913bb588cdc17eb6f243c8
SHA256 867f1768e24e1ab3c04744fe134b3e0fe51c22717920062b44e1145265218c13
SHA512 1189699345bd37c9056e47838360a06538820e0e3ed4d9f9dad10811409ae54ace74da71a778e18d64ee518a38c09e7dbdec5ab680a5d6d8c1d3a0fe0c40d7bf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 72a030f2fed739d2e2c3112ab0e2c7c9
SHA1 f9a76a8b6e6be0f10a43da4d9f92f7c0fb6c993c
SHA256 28b30adf9e7b044744c1c8ebca8d78ba3d3a1fd0024cf7bd8ec41d2a32a05dc6
SHA512 19bbaa872d60ae146c183178ffd8b8743dc40c471637c8a21f256c8eef76b0f23212e135bc879f66bbd6e86ccb8a9550e962334065e38b2d5507d154cff9cd24

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\17097

MD5 581bd2c1cce26b115ecd08cd6ae67a5c
SHA1 ccabf2264a2b871dbec21b7afb8781c8518b6c19
SHA256 2b0b9b68665cc72788a60692fac1269c7cff88921717d81f441e486682fdb460
SHA512 2b39d4f348f50a9900d467f8558f20e17a66344263d34682a0bf219c9a05bbfead16f20c6f017f4d0287d6949fa02652dc89f47b601def4c75baa2270c1ef396

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\06795FAA7CBFD3D6A9EB88F0AB5EB3915B60829F

MD5 0aa6a70035bde84e21a0fb94c892287b
SHA1 a9b5eba3df2bf9cfc90c95c69fc46fe5d468247e
SHA256 deac418a86b07b1d44e0870f41c17009823ab4854f49dc60ff5fbe7c45334ed9
SHA512 73af9996c7c445e57db5a29dea387cb7a0fdd0cc72bd30ccebf8db3d88db7c18f3b1ca9010cc67d8cd2651179e4e6561aecb5d40db2c9c00b49c039ab349b183

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\14427

MD5 86547740fb5e79f652287caa83a35f5a
SHA1 17bec1b72441735d63632171271d3c7048f51537
SHA256 2e7f84777fbdcbc2b5d5595aa74a0f1025c7227732f803d814b97d503e366765
SHA512 6dbb622a58b6ce64a2864bab4597fb62113d6ced107c6cdc1433654495c5895f5199e171d081d7011116e227aa3c93a023ec6bf0d689a21e3a12f871546b5501

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\3ADEBC46DAEA2D77E1DF4B4AB6C524084F97786F

MD5 a6cdd9732d5c2732955fa8763aa52a02
SHA1 0436cf437a0a869511f5773090865aa5b3593c1a
SHA256 2031fdc4eca8f10ff3a7eb0361bc17511897c662a8198275ff94bf00a84ba43f
SHA512 ec0574143c70fbbdbac9e3c26bd2ceb13f9c7872c64874214dc50e53db2520e1c2048aa86883caa8660342b40597738b66a65645fb00f32a5473619aec1faafe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\40EE86962A167F85FF635E63C180D94A8BE50B96

MD5 7da79d429531a72ef8e860afb506e37b
SHA1 a41a649b13c03bf4266b795a0e2014a47339e960
SHA256 18ff36daad1c4c562d27984466f6f69430a6a7bc03c21bd8dcb392c65d0b35ac
SHA512 189b71e977f3918297b482c2c789dc10ea5e1cb6e14a129be058d78bcb6e8d45259477fc3d8fff556ca1e4433665726e456adb93298043bd1aee63e7fba33b96

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\3D2EE65213655611AE063776EA786EF2A8F7901B

MD5 025c99ecf5150af8b489f02077d39f59
SHA1 d19e3afc7ad6f069ae0978eee2b5d5ddc6f9b3fa
SHA256 6e6089240709efe4e171ec19023dd598eb13c1d11af2418412dda009f7276da9
SHA512 6f70579929346b6d7c0fcc6796cd085527a8b4cf4ff677be545d217c80f3bf141cd28da1439fd683daf5d9b9b5beb2ce50cfaa41113703ae1cc9c9c9a884cd6a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\14FF324BEE8F75081FE9C38BDD3C16ACD05B921B

MD5 4d36d31d8aa5f69d21f108bb83909f32
SHA1 c3bdf960fb8a15033d2aebdbf199947d21bceae0
SHA256 a6221c57708c31938eb07f456190dd96013a07993b2011d987c30e3bc81c57ca
SHA512 20c3764c00337dc45495a5d8f813f3057c09172db3f485d50b6d2aac3fd374f960f9ff65a8b7785d9fb8907ead3af22ac24cbb14640b8f9b4519c2a96c455b06

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\21011D4B6B9E0ED4CA0F009BA41199C4D20E9826

MD5 74ab8736fbcc32af8b754f49713fce96
SHA1 d058759e5a0f35e8cfc2879966fa32d0e300b5ef
SHA256 02058d10629284dee7876e13476e6a048fc8771a380f6778e651e8de22347d93
SHA512 f782c895c5a08903d591283c75504c9fa9bfda8ba97d35bdf8c2bdd6aeea0e22a025296a371e97773ec742397d28655a6e66bdb89ac63ffaa66bb480cb8f045a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\B20635A9E3239966DF1AF8702BD403FE7FB90005

MD5 8eb508afc40085cb2f8100ff59f762da
SHA1 29d5aaba39da8dd63b5ca88994ae773c17a434bb
SHA256 29aed50a74fde3c233f5bacb1b174c1d84857d413badf32ee71b1b17cbf41233
SHA512 29b68b5a2c72234d7d231dc11420adfb562ecc96d039200ca03b808511484620258e379e16382903d3233fd5f5997f0ac88f953d01ae61d08f2ee60451637c61

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\22351

MD5 73c862d01ec0cdfac407863421236f56
SHA1 64f5f9d3e617f2c9d2feb8a5896a8f55303ce65e
SHA256 d389a27f089fe1220e93e4a56fd67688c1032cd79c2b7891fbf0630831e82c54
SHA512 14b90995f3258f3da5cb9410224edd614ff60e2399775cb334d60023eb53c608e867dcdb6faa93f73fba4f57a32c29445915676b16f7f43cb437bb67888cc3b2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\797F51F9C2E7736410CD3C1B30822BBBD5124330

MD5 e555834b0354f01de99a956369dd4141
SHA1 1f5dc82830470c5a06852250857730d6afb15d26
SHA256 87d4a374b0083c79e67a5ee745f3f2e57e43145ffc9b2cc22ef5326368fe8225
SHA512 9de4c560be8bd936fa7f2c98c0a4bffca79d94115aa56cd2ea8c36b3426e182cf322a0567663bf3a49868f1fca43a13f5b5a8672cb48ffa4ada8cf2acacf73ed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\F7602F07C22FF98D2B35ABEF3EDFB12C99DC458A

MD5 aca175befe6463f3c9aa73f0177a8352
SHA1 39874063933535fb0dc64c8c4f3ed919a0191e14
SHA256 76bf0b599a6f76bfc302ef94a764bbb7b5f909e7def6dd770bb5bdb1fe895fdc
SHA512 ab1c038e0b00cf6225932bb8adb2f728a69f1ccf98b44aa454e9b0dd8add9d93c80a0cc1e75ff5d1c818c5d0e738b214d287b06bfcc3210d56dc9dac94809f20

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\30994

MD5 9cc0d254993422bc516b96ad0577a1e4
SHA1 75070a2c5782a6d7f8286a822edd8d20147b7278
SHA256 54cb8b7f6ce21d67bebe16f51a12b2c4aefbc9c0f65f91cd56bc8bb4ae86d0e2
SHA512 9e2dc845c0b23f0b2b0e8a50872c96a347b71dd80cfd8665c0d9e3bbb803e1e848194efb2ff6447a4f74640154234e07251b4874c9b45928be6b5cb47abccf8a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\10391

MD5 b0e5bebd25ce0582f7e2113f5a30c32d
SHA1 8fc2055e551fb39da48e4fee6972efc50b07b46e
SHA256 b8210c40ca2266cf1a047e0a018dfc9309219c43697f1a2c1faebced39e9ec2e
SHA512 ebb6b2a996caaf32c86947b58f3619eabe365efa81e526a42e3f31c00905e9bc1bcd2953a1631f240d8e3f36e76c125525cdb266ab3d15b7eadcc51cdf8de72a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\5E17EF8B7002526C2643126979FF0A9D36A32FA5

MD5 bda96e6c0eb52427c62831d4ade73495
SHA1 ac3b1a475f0b96cd4d5fe5dc5d30995167de89a1
SHA256 04500572b672a6d8b6f04d7df95a6243e0071c327a9e94842b6fe9b8ba323d09
SHA512 0fe8b09bc6646436d10a0c1b45ac68963dccad26c0a887d827d6dbe2b11590941cc5c0c2d8781cfab0dbdaf293580365dd75357032e864fda7e06c7c636652c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 06b7aea1a7511a6d36f5d3f2a5f45f7f
SHA1 2df6d5395d4eb0f8d8905ad22664f906831a18b0
SHA256 15bf21a4c49dccd09924a7c0bb31789a2fa392c1655acd31a5d10d2610900531
SHA512 a5f764ba12cf76bdd4f60852b1218d626a6b7fc93e226f9c205e19e301021a0af34b4c4c9cf08c5c846f469e0f7c7163efde712be38594597c779f8111a3f5da

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7bd04170d53506fec7f6678e5bcd73f5
SHA1 950f2e47db8408e75a40800c85510625bb46c9ec
SHA256 64139d24e6c2870d3303cff00cce60ce0285caeac3b39fba92dd3f408e24dacc
SHA512 16765e75f4cd5cc88cad345134c00a236cfd739f30881007d88109c0478782a47e97a585ea310798efd45c79f60ccb6c69ba145c27f5fd730a0807d61852395f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\prefs.js

MD5 9846be46b9ccefd109f8f03b10eba6d0
SHA1 a1d2ecaf8807530213e380f764a3aa6d32087465
SHA256 5fab35d9f3f4c614c90e205e29493ada8d92409f828a4c6f45ba29778068e589
SHA512 543293bf0ee15ffee87b94fd1fccf7797a98852c701b063598f19ddd738324cec3db01963b4f94417ea54c9a9a08c02e86aa597af7c71958a66b4a0282f60445

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d1cf63af0ba4b5af57d11dc5f6d7349d
SHA1 f3836aa3c4de8e9c10ee03bd8a0508010f1246d9
SHA256 f3df20aaba71c1c09208e6b5d7b8db88851196b095564a6f60a7a20016fd9319
SHA512 414626d62622eba564542cc3363afa2fa447ee572e4edd375c2e703b2550e69bac4408dabd01fe4717a560de64369b47cdd66cc13269bd57b54181d35786c286

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\4113

MD5 a3b9d1a0abce5a6eecd3290de49e9002
SHA1 072425e9673077cce9f1667bacf45ecbf1599ed1
SHA256 26482fbbdceb2b4631f031c7dc83592ee939efd76bd6adc07ea65122e8dd110b
SHA512 9eb1b97e859c04429f6d16ae835947558218ffccf99307577b8cccf99d798c06be1353b8769f4d3a783ef1901a1a00e94e2f4b985a8715984fe5580e59a466af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9c3dcc9061ac03f2d423881cfa35df89
SHA1 08c028b5afd30a22f9c010ad6a8402bcb731de46
SHA256 d91eee41bf6a985b118f8f47c4b780f0e11e7c9b2794f2bc061e7c2a390592f6
SHA512 305bc14cb57f5c865ccfac9ca07bd99c17b30234782e7f5d51de14c5554b07c291eda5a12be162fe147a836397ffdd5bc3611d27ca1774ea09cd0f755d5f7e53

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\6717

MD5 af8b848a4f38ef8f0ecc79fa8ffde1b5
SHA1 4c39413eb3d4537683523f6cc2dbe234d448a612
SHA256 7e3d559f58166e5c127c05e5e9b16f53376e1c322d23f9de4006841099407b78
SHA512 9ae0621da38f4b3a303882dd7a89fad632954f523bfb3d43eab5f8e37df9fcd786ae2db3bec55df0d5b1c4c393cc47a62d1e724b1157f7afe442bdf2ed92033b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 124f5e7b3136fe02f7bd17482dfdcfb6
SHA1 3da18251452bd6fe7a3a2605273d0362361cec22
SHA256 9d481a8d1e96c77976d036093dc5041c1a07d30462cc805a6b6145665a21bede
SHA512 d41feb53197ece17de7cc2c39695f218b20380b7d9318ab1d7f0e6a6a70602b325d9e5c5ade91a4a54beddd9d32c4570a16fef9984931a9cdfdbf6ecbd5285e6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\17311

MD5 729b106c831d1f617a5d9587225f9836
SHA1 e06ba7a60933989f5473c1709a380edb228a31bf
SHA256 44cbd25f9d6c635e19bdd452ed8218d9b2eae1f6cb3198c6bff7c618b8842743
SHA512 5635acf4bc6e47d2bdff8e22c39c40ba6f59f8006a7e36d7b9619f869153d7790c74ca60ceef137d5d55208245e12a20edc3cd4a1fc19a1d2ccf889bfe90f74f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\2AC78448C65FB1371AF3C5594A3F20C6CAB997BB

MD5 f7f5288a51bffd39e132d654ee13f4f0
SHA1 0c16133b4c8207c2cf51ba8576c8e3891bdeab4e
SHA256 908ac131263cfe45097ec1b1d3c9ceec79992860cf01c7c88f31c31cd3c91603
SHA512 f15e44c7cb608efe6541b6090cdb9823e5f1f91b03fc838789e9eef571e68ad3f772089ea2a0f441db2e34da71eac1dd2a8bb206d4c226dc3515c845bfe127b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\entries\9BA8B73192A5FBD4C5AFD0ED08DA000B337F76F7

MD5 f745cb26d55aa2c25fb7617b8acb636b
SHA1 cd515ca2aa990b44f75c2bb522e60c64a8c69542
SHA256 e397344a28707fcbad8aa20de8de29c862aa0d729f170bbe13055f5d4d67852f
SHA512 879b9adbbd565e8e9de103bd0ba96cdc5a3fd0b6b5c47649b1e1cf259d4cb0e4de575f257142ac9a309196fa1521e7bd6fb84d863ef0217155a6d6a2b6f8fa62

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9d2f4aecc04f39ec58a0ad908c9d8ae6
SHA1 881718bb2b240441f700da7cca243c5f86816dea
SHA256 f2b3aed8e577df0767e5052670823243e3e03dc1b2486fe53252f7857a58b5b5
SHA512 699c31458f5a92600065bc61cb837a479e53e0d340c7b0e6120217a773b6aacb8df77e30129b2b8b771ec0e38ae05066a8cfa241bcb64506838d455ce22f5f33

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\cache2\doomed\13800

MD5 93f0c8d661f7a30240867d7965b86416
SHA1 1f82c4fe002995ade6b18366c1bef261242a4687
SHA256 4b9901d68782f7cce8cd169e35f063480abe6ab2f3be9faf051a8985a1f714fb
SHA512 42bfaf9d652547fcf58de375e93eb78f4f4cad044f06252439d41b7db33f9e60767cf1ff9dbaa33a15f02d1e1a77f41574f93b8ee0d660acd3e84a6d234bcec5

C:\Users\Admin\Downloads\Nexus.bb9jki-y.7z.part

MD5 3ad58f565b08ab2ed2304c3a060e0bac
SHA1 3fa1f79084f1cd4307557b72f7f7dc2947728640
SHA256 62cd2f1d8cf1a40f24f3658c9b4a67b09b4f2507c9c312c0e78852d3e9ca6b77
SHA512 8df325b8a1e0ee42d8a9d17bac4bbdf1c41964cd3442a44fadc07c883381c293bf67f57e28f96339d2793999d6b698dd7a9b82fc17688d4c91809cc9a2ae840e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4lkuyr4n.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e11408627d01ae03e39ac88243267f00
SHA1 fc31f209ed9c0a6fbb84a0c56b22e2f5eb558373
SHA256 9bfda7239bc99a35ee79d307c4ddbac7fc7f91f3d2c3ccfe206a03e743fa6979
SHA512 4cb0af8e90b9aa337289aabd0e36389d23505eee5fead25164635c707698c7e1f3caf31a6d4797a4d695b11866f77a095d89caf026ee9123e7634deec354ccf1

memory/3360-9297-0x0000000076F91000-0x00000000770B3000-memory.dmp

memory/3360-9296-0x0000000001320000-0x00000000013E2000-memory.dmp

memory/3360-9301-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/3360-9302-0x0000000005DB0000-0x0000000005DC0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Tmp46B9.tmp

MD5 1420d30f964eac2c85b2ccfe968eebce
SHA1 bdf9a6876578a3e38079c4f8cf5d6c79687ad750
SHA256 f3327793e3fd1f3f9a93f58d033ed89ce832443e2695beca9f2b04adba049ed9
SHA512 6fcb6ce148e1e246d6805502d4914595957061946751656567a5013d96033dd1769a22a87c45821e7542cde533450e41182cee898cd2ccf911c91bc4822371a8

memory/3360-9317-0x0000000008730000-0x00000000087A6000-memory.dmp

memory/3360-9318-0x0000000009060000-0x000000000907E000-memory.dmp

memory/3360-9321-0x0000000009670000-0x00000000096BC000-memory.dmp

memory/3360-9326-0x0000000005DB0000-0x0000000005DC0000-memory.dmp

memory/3360-9327-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/3360-9329-0x00000000743A0000-0x0000000074B51000-memory.dmp

memory/2336-9330-0x0000000000AC0000-0x0000000000B82000-memory.dmp

memory/2336-9334-0x0000000074440000-0x0000000074BF1000-memory.dmp

memory/2336-9335-0x0000000004DF0000-0x0000000004E00000-memory.dmp

memory/2336-9352-0x00000000087D0000-0x000000000881C000-memory.dmp

memory/2336-9356-0x0000000074440000-0x0000000074BF1000-memory.dmp