Analysis Overview
SHA256
0425ab803d1c49be57f16ba39d6cdaa2056b4b07e1fc9a754ea9bc3fe5740876
Threat Level: Known bad
The file MalwareDatabase was found to be: Known bad.
Malicious Activity Summary
Wannacry
Deletes shadow copies
Loads dropped DLL
Drops startup file
Reads user/profile data of web browsers
Checks computer location settings
Executes dropped EXE
Modifies file permissions
Adds Run key to start application
Legitimate hosting services abused for malware hosting/C2
Sets desktop wallpaper using registry
Drops file in Windows directory
Enumerates physical storage devices
Suspicious use of FindShellTrayWindow
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Interacts with shadow copies
Suspicious use of SendNotifyMessage
Uses Task Scheduler COM API
Views/modifies file attributes
Suspicious behavior: GetForegroundWindowSpam
Modifies registry key
Suspicious behavior: MapViewOfSection
Uses Volume Shadow Copy service COM API
Modifies registry class
Modifies Internet Explorer settings
Checks processor information in registry
NTFS ADS
Suspicious use of AdjustPrivilegeToken
Suspicious use of SetWindowsHookEx
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-05-18 01:26
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-05-18 01:26
Reported
2024-05-18 01:44
Platform
win10-20240404-en
Max time kernel
1049s
Max time network
1047s
Command Line
Signatures
Wannacry
Deletes shadow copies
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation | C:\Users\Admin\Downloads\@[email protected] | N/A |
Drops startup file
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD7CA1.tmp | C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD7CA8.tmp | C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
Executes dropped EXE
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
Modifies file permissions
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\icacls.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\icacls.exe | N/A |
Reads user/profile data of web browsers
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\guaqpnihl896 = "\"C:\\Users\\Admin\\Downloads\\tasksche.exe\"" | C:\Windows\SysWOW64\reg.exe | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | camo.githubusercontent.com | N/A | N/A |
| N/A | camo.githubusercontent.com | N/A | N/A |
| N/A | camo.githubusercontent.com | N/A | N/A |
| N/A | camo.githubusercontent.com | N/A | N/A |
| N/A | camo.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | camo.githubusercontent.com | N/A | N/A |
Sets desktop wallpaper using registry
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" | C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" | C:\Users\Admin\Downloads\@[email protected] | N/A |
Drops file in Windows directory
| Description | Indicator | Process | Target |
| File created | C:\Windows\rescache\_merged\3720402701\1568373884.pri | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| File opened for modification | C:\Windows\Debug\ESE.TXT | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| File created | C:\Windows\rescache\_merged\3720402701\1568373884.pri | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| File created | C:\Windows\rescache\_merged\3720402701\1568373884.pri | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
Enumerates physical storage devices
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Interacts with shadow copies
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\vssadmin.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main | C:\Windows\system32\browser_broker.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$Telligent | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust\CRLs | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\DeviceId = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CacheLimit = "1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\FileVersion = "2016061511" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\LowMic | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus\DynamicCodePolicy = 05000000 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\Next Rating Prompt = 20227ff792b4da01 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CRLs | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modif | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "395205405" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = ec1d3fcfc3a8da01 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Content | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\NextPromptBuild = "15063" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\en-US = "en-US.1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\EnablementState = "1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus\SignaturePolicy = 06000000 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\DisallowDefaultBrowserPrompt = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root\CRLs | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-SubSysId = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "395205405" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 3 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\ACGPolicyState = "6" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\NextUpdateDate = "422761126" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\SignaturePolicy = 06000000 | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\{DE1C579F-95D2-4BD4-902E-501042350ACA} = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\Active = "1" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionHigh = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionHigh = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\History | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$blogger | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\CIPolicyState = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CTLs | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\NextUpdateDate = "422777720" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
Modifies registry key
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\reg.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File created | C:\Users\Admin\Downloads\Ransomware.WannaCry.zip:Zone.Identifier | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\Downloads\@[email protected] | N/A |
Suspicious behavior: MapViewOfSection
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| N/A | N/A | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| N/A | N/A | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
| N/A | N/A | C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Users\Admin\Downloads\@[email protected] | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Uses Volume Shadow Copy service COM API
Views/modifies file attributes
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\attrib.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\attrib.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\attrib.exe | N/A |
Processes
C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MalwareDatabase
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.0.252719587\937908531" -parentBuildID 20221007134813 -prefsHandle 1684 -prefMapHandle 1660 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8e8f78b9-39c1-4ce6-8711-82eb409c5945} 32 "\\.\pipe\gecko-crash-server-pipe.32" 1764 233321d4858 gpu
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.1.588508339\1357818768" -parentBuildID 20221007134813 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dd933729-b38b-4e2e-bab4-1cc4f9dd75c9} 32 "\\.\pipe\gecko-crash-server-pipe.32" 2124 2331fe6fb58 socket
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.2.1141833739\1508855068" -childID 1 -isForBrowser -prefsHandle 2932 -prefMapHandle 2692 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {20c7498c-176d-4aa2-8584-cb0ddf0d39e9} 32 "\\.\pipe\gecko-crash-server-pipe.32" 2704 2333215b658 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.3.1216053953\1619921269" -childID 2 -isForBrowser -prefsHandle 3608 -prefMapHandle 3604 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f532907-dd44-4017-8343-720bcac0963c} 32 "\\.\pipe\gecko-crash-server-pipe.32" 3620 2331fe61958 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.4.77700090\951923877" -childID 3 -isForBrowser -prefsHandle 4144 -prefMapHandle 4136 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c5ce625-9178-4fe3-81c7-d97b247937a3} 32 "\\.\pipe\gecko-crash-server-pipe.32" 4172 233379f8e58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.5.1177354891\1858898192" -childID 4 -isForBrowser -prefsHandle 4772 -prefMapHandle 4892 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1de6752-b251-4836-ac4e-66b8c89493fa} 32 "\\.\pipe\gecko-crash-server-pipe.32" 4916 23338816f58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.6.1892364216\1766658794" -childID 5 -isForBrowser -prefsHandle 5016 -prefMapHandle 5020 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f712f13a-9d34-4d3e-b54f-8fae7861a8ce} 32 "\\.\pipe\gecko-crash-server-pipe.32" 4980 23338815758 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.7.1687245566\563117456" -childID 6 -isForBrowser -prefsHandle 5200 -prefMapHandle 5204 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1497f23-917c-4eff-b89c-2e8cfd106047} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5192 23338816358 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.8.2122475032\672031345" -childID 7 -isForBrowser -prefsHandle 5536 -prefMapHandle 5532 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {71a1389b-f944-4ed6-abdb-8f63af0bf026} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5544 233397c9f58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.9.1330995277\1567942264" -parentBuildID 20221007134813 -prefsHandle 4628 -prefMapHandle 4636 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d242d0f5-b5a3-4fa5-be21-615176a00786} 32 "\\.\pipe\gecko-crash-server-pipe.32" 4208 2333490eb58 rdd
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.10.646721944\1671808984" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 4148 -prefMapHandle 4396 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {aca2b8ba-34f2-4f59-9d71-6e68a3271d84} 32 "\\.\pipe\gecko-crash-server-pipe.32" 4728 23334993558 utility
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2b8
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.11.1165474057\60131194" -childID 8 -isForBrowser -prefsHandle 6628 -prefMapHandle 6632 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {29a56b41-7e41-4477-b75e-3ccb26fe275b} 32 "\\.\pipe\gecko-crash-server-pipe.32" 6624 2331fe68458 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.12.1985886678\1269995925" -childID 9 -isForBrowser -prefsHandle 6964 -prefMapHandle 6976 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b93e3888-df98-411e-83eb-36aaa66ccee8} 32 "\\.\pipe\gecko-crash-server-pipe.32" 6988 2333490d358 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.13.990056138\1685900308" -childID 10 -isForBrowser -prefsHandle 7192 -prefMapHandle 7188 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc0de77b-10f3-4747-bf6e-b82c6cc2b8eb} 32 "\\.\pipe\gecko-crash-server-pipe.32" 7200 2333bd4d258 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.14.988723276\418823718" -childID 11 -isForBrowser -prefsHandle 7396 -prefMapHandle 7404 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f45f7788-5e00-4f1c-a78e-a56021a31020} 32 "\\.\pipe\gecko-crash-server-pipe.32" 7384 2333be30258 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.15.2068043336\1692069317" -childID 12 -isForBrowser -prefsHandle 5276 -prefMapHandle 5348 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {316ebdbb-b13b-4871-b539-d6887ba52438} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5356 233394ee258 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.16.677443256\536321015" -childID 13 -isForBrowser -prefsHandle 11244 -prefMapHandle 11252 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {06ce8fd5-d065-487c-ab70-9d0fe1f49483} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5632 2333c8df858 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.17.1380875994\697669887" -childID 14 -isForBrowser -prefsHandle 7200 -prefMapHandle 7120 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {82f4dc6b-db26-4989-853d-731471f37a32} 32 "\\.\pipe\gecko-crash-server-pipe.32" 7176 2333c95f258 tab
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
"C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
C:\Windows\SysWOW64\attrib.exe
attrib +h .
C:\Windows\SysWOW64\icacls.exe
icacls . /grant Everyone:F /T /C /Q
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c 177481715996082.bat
C:\Windows\SysWOW64\cscript.exe
cscript.exe //nologo m.vbs
C:\Windows\SysWOW64\attrib.exe
attrib +h +s F:\$RECYCLE
C:\Users\Admin\Downloads\@[email protected]
C:\Windows\SysWOW64\cmd.exe
cmd.exe /c start /b @[email protected] vs
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exe
TaskData\Tor\taskhsvc.exe
C:\Users\Admin\Downloads\@[email protected]
"C:\Users\Admin\Downloads\@[email protected]"
C:\Windows\SysWOW64\cmd.exe
cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
C:\Windows\SysWOW64\vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\SysWOW64\Wbem\WMIC.exe
wmic shadowcopy delete
C:\Users\Admin\Downloads\@[email protected]
"C:\Users\Admin\Downloads\@[email protected]"
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Windows\SysWOW64\cmd.exe
cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "guaqpnihl896" /t REG_SZ /d "\"C:\Users\Admin\Downloads\tasksche.exe\"" /f
C:\Windows\SysWOW64\reg.exe
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "guaqpnihl896" /t REG_SZ /d "\"C:\Users\Admin\Downloads\tasksche.exe\"" /f
C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
"C:\Users\Admin\Downloads\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
C:\Windows\SysWOW64\attrib.exe
attrib +h .
C:\Windows\SysWOW64\icacls.exe
icacls . /grant Everyone:F /T /C /Q
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\Windows\system32\browser_broker.exe
C:\Windows\system32\browser_broker.exe -Embedding
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.18.498401861\44183155" -childID 15 -isForBrowser -prefsHandle 11284 -prefMapHandle 11128 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3143d993-b8ff-4dbb-ba73-321ceb324461} 32 "\\.\pipe\gecko-crash-server-pipe.32" 3800 2333af60558 tab
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.19.1782325878\976121388" -childID 16 -isForBrowser -prefsHandle 11076 -prefMapHandle 11072 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ee618d04-0d05-4ff0-800c-5b2e30d59500} 32 "\\.\pipe\gecko-crash-server-pipe.32" 11084 2333d5dd958 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.20.689832847\1251316052" -childID 17 -isForBrowser -prefsHandle 11220 -prefMapHandle 5600 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c89b83bd-ae91-45f5-98ad-0dc9d438dbde} 32 "\\.\pipe\gecko-crash-server-pipe.32" 7560 2333d4d7c58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.21.806534591\465591904" -childID 18 -isForBrowser -prefsHandle 7052 -prefMapHandle 7064 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6527025a-2117-45cf-b4c7-55226e20c514} 32 "\\.\pipe\gecko-crash-server-pipe.32" 2520 2333d5ddf58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.22.1848103666\1331669671" -childID 19 -isForBrowser -prefsHandle 10872 -prefMapHandle 10868 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7bd3d411-1b9e-44ef-890a-3a1d162abea6} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10756 2331fe2f058 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.23.304095613\1360824899" -childID 20 -isForBrowser -prefsHandle 2520 -prefMapHandle 10988 -prefsLen 27444 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4bcf232d-c5c8-4e16-91b8-91f10a9cff92} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5356 23336515558 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.24.768968681\454028553" -childID 21 -isForBrowser -prefsHandle 11148 -prefMapHandle 11052 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a8515d4a-ec5f-4b4f-8848-3e5ed051c9e2} 32 "\\.\pipe\gecko-crash-server-pipe.32" 5640 233324ce758 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.25.321977372\366860830" -childID 22 -isForBrowser -prefsHandle 11088 -prefMapHandle 10620 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {90cbf39b-d995-4ef3-a353-d5a0d111c7ec} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10488 2333ee43558 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.26.213583913\1158139237" -childID 23 -isForBrowser -prefsHandle 10364 -prefMapHandle 10200 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f91a5b7d-8bad-4c75-aa63-4e4f7fe9566d} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10208 2333b3b7a58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.27.1934568723\1330283391" -childID 24 -isForBrowser -prefsHandle 9992 -prefMapHandle 9988 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {620df7c0-c6da-41db-b0b1-880eda4ee0c6} 32 "\\.\pipe\gecko-crash-server-pipe.32" 9932 2333bf87c58 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.28.109527623\1566809648" -childID 25 -isForBrowser -prefsHandle 4452 -prefMapHandle 10616 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {735be2a2-e890-4324-93a9-464026133695} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10932 2331fe69358 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.29.686320026\1949052324" -childID 26 -isForBrowser -prefsHandle 9452 -prefMapHandle 9456 -prefsLen 27596 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b47af0ef-5369-4cc4-9398-9b4bfdaad573} 32 "\\.\pipe\gecko-crash-server-pipe.32" 9444 2333a9c0158 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.30.1574244094\1579155823" -childID 27 -isForBrowser -prefsHandle 10224 -prefMapHandle 10072 -prefsLen 27804 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d5345de-ccc7-48ce-ab61-513264278724} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10084 2333b1eee58 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.31.889156733\181554108" -childID 28 -isForBrowser -prefsHandle 10360 -prefMapHandle 10344 -prefsLen 27804 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b5f59624-c31a-4822-a187-7fc69507d425} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10292 2333bd4db58 tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="32.32.1484815885\1035479786" -childID 29 -isForBrowser -prefsHandle 10628 -prefMapHandle 10324 -prefsLen 27804 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e26b1ee7-4954-4500-b855-f492a1fa91b1} 32 "\\.\pipe\gecko-crash-server-pipe.32" 10372 2333be31a58 tab
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\taskse.exe
taskse.exe C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\@[email protected]
C:\Users\Admin\Downloads\taskdl.exe
taskdl.exe
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 34.117.188.166:443 | contile.services.mozilla.com | tcp |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 8.8.8.8:53 | content-signature-2.cdn.mozilla.net | udp |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 34.160.144.191:443 | content-signature-2.cdn.mozilla.net | tcp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | push.services.mozilla.com | udp |
| US | 8.8.8.8:53 | shavar.services.mozilla.com | udp |
| US | 8.8.8.8:53 | firefox.settings.services.mozilla.com | udp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | autopush.prod.mozaws.net | udp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 8.8.8.8:53 | autopush.prod.mozaws.net | udp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 44.233.67.78:443 | shavar.services.mozilla.com | tcp |
| US | 34.117.188.166:443 | contile.services.mozilla.com | udp |
| US | 8.8.8.8:53 | f.f.f.f.9.d.a.0.2.d.e.b.0.9.0.8.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa | udp |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.188.117.34.in-addr.arpa | udp |
| US | 34.107.243.93:443 | autopush.prod.mozaws.net | tcp |
| US | 8.8.8.8:53 | shavar.prod.mozaws.net | udp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | shavar.prod.mozaws.net | udp |
| N/A | 127.0.0.1:49760 | tcp | |
| N/A | 127.0.0.1:49766 | tcp | |
| US | 8.8.8.8:53 | 78.67.233.44.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 34.149.100.209:443 | prod.remote-settings.prod.webservices.mozgcp.net | tcp |
| US | 8.8.8.8:53 | 195.212.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 99.201.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | 79.239.69.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 142.250.179.238:443 | play.google.com | tcp |
| US | 8.8.8.8:53 | play.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | 238.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| GB | 142.250.187.238:443 | consent.google.com | tcp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| GB | 142.250.187.238:443 | consent.google.com | udp |
| US | 8.8.8.8:53 | 238.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | github.com | udp |
| GB | 20.26.156.215:443 | github.com | tcp |
| US | 8.8.8.8:53 | github.com | udp |
| US | 8.8.8.8:53 | github.com | udp |
| US | 8.8.8.8:53 | 215.156.26.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | github.githubassets.com | udp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 185.199.109.154:443 | github.githubassets.com | tcp |
| US | 8.8.8.8:53 | github.githubassets.com | udp |
| US | 8.8.8.8:53 | camo.githubusercontent.com | udp |
| US | 8.8.8.8:53 | avatars.githubusercontent.com | udp |
| US | 8.8.8.8:53 | github.githubassets.com | udp |
| US | 8.8.8.8:53 | camo.githubusercontent.com | udp |
| US | 8.8.8.8:53 | avatars.githubusercontent.com | udp |
| US | 8.8.8.8:53 | avatars.githubusercontent.com | udp |
| US | 8.8.8.8:53 | camo.githubusercontent.com | udp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 185.199.108.133:443 | avatars.githubusercontent.com | tcp |
| US | 8.8.8.8:53 | 154.109.199.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 133.108.199.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | collector.github.com | udp |
| US | 140.82.114.22:443 | collector.github.com | tcp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | api.github.com | udp |
| US | 140.82.114.22:443 | collector.github.com | tcp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 8.8.8.8:53 | api.github.com | udp |
| US | 8.8.8.8:53 | api.github.com | udp |
| US | 8.8.8.8:53 | 22.114.82.140.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 210.156.26.20.in-addr.arpa | udp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | 79.190.18.2.in-addr.arpa | udp |
| GB | 20.26.156.215:443 | github.com | tcp |
| US | 8.8.8.8:53 | codeload.github.com | udp |
| US | 8.8.8.8:53 | codeload.github.com | udp |
| GB | 20.26.156.216:443 | codeload.github.com | tcp |
| US | 8.8.8.8:53 | codeload.github.com | udp |
| US | 8.8.8.8:53 | 216.156.26.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | collector.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | github.com | udp |
| US | 8.8.8.8:53 | github.com | udp |
| GB | 20.26.156.215:443 | github.com | tcp |
| US | 8.8.8.8:53 | api.github.com | udp |
| US | 8.8.8.8:53 | api.github.com | udp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 8.8.8.8:53 | camo.githubusercontent.com | udp |
| US | 8.8.8.8:53 | camo.githubusercontent.com | udp |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 34.117.188.166:443 | contile.services.mozilla.com | udp |
| US | 8.8.8.8:53 | contile.services.mozilla.com | udp |
| US | 8.8.8.8:53 | blog.malwarebytes.com | udp |
| US | 192.0.66.233:443 | blog.malwarebytes.com | tcp |
| US | 8.8.8.8:53 | malwarebytes.go-vip.net | udp |
| US | 8.8.8.8:53 | malwarebytes.go-vip.net | udp |
| US | 8.8.8.8:53 | www.malwarebytes.com | udp |
| US | 192.0.66.233:443 | www.malwarebytes.com | tcp |
| US | 8.8.8.8:53 | www.malwarebytes.com | udp |
| US | 8.8.8.8:53 | www.malwarebytes.com | udp |
| US | 8.8.8.8:53 | 233.66.0.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | dev.visualwebsiteoptimizer.com | udp |
| US | 8.8.8.8:53 | dev.visualwebsiteoptimizer.com | udp |
| US | 8.8.8.8:53 | malwarebytesunpacked.disqus.com | udp |
| US | 8.8.8.8:53 | stats.wp.com | udp |
| US | 8.8.8.8:53 | dev.visualwebsiteoptimizer.com | udp |
| US | 8.8.8.8:53 | prod.disqus.map.fastlylb.net | udp |
| US | 199.232.192.134:443 | prod.disqus.map.fastlylb.net | tcp |
| US | 8.8.8.8:53 | stats.wp.com | udp |
| US | 192.0.76.3:443 | stats.wp.com | tcp |
| US | 8.8.8.8:53 | prod.disqus.map.fastlylb.net | udp |
| US | 8.8.8.8:53 | stats.wp.com | udp |
| US | 192.0.76.3:443 | stats.wp.com | udp |
| US | 8.8.8.8:53 | plausible.io | udp |
| US | 199.232.192.134:443 | prod.disqus.map.fastlylb.net | tcp |
| GB | 143.244.38.136:443 | plausible.io | tcp |
| US | 8.8.8.8:53 | plausible.io | udp |
| US | 8.8.8.8:53 | secure.gravatar.com | udp |
| US | 8.8.8.8:53 | plausible.io | udp |
| US | 8.8.8.8:53 | genesis.malwarebytes.com | udp |
| US | 192.0.73.2:443 | secure.gravatar.com | tcp |
| US | 8.8.8.8:53 | secure.gravatar.com | udp |
| US | 8.8.8.8:53 | 134.192.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.76.0.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 136.38.244.143.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.201.58.216.in-addr.arpa | udp |
| US | 18.205.178.162:443 | genesis.malwarebytes.com | tcp |
| US | 8.8.8.8:53 | genesis.malwarebytes.com | udp |
| GB | 143.244.38.136:443 | plausible.io | udp |
| US | 8.8.8.8:53 | secure.gravatar.com | udp |
| US | 8.8.8.8:53 | genesis.malwarebytes.com | udp |
| US | 192.0.73.2:443 | secure.gravatar.com | udp |
| US | 34.96.102.137:443 | dev.visualwebsiteoptimizer.com | tcp |
| GB | 143.244.38.136:443 | plausible.io | tcp |
| US | 34.96.102.137:443 | dev.visualwebsiteoptimizer.com | udp |
| US | 34.96.102.137:443 | dev.visualwebsiteoptimizer.com | udp |
| US | 8.8.8.8:53 | cdn.cookielaw.org | udp |
| US | 8.8.8.8:53 | cdn.cookielaw.org | udp |
| US | 104.19.178.52:443 | cdn.cookielaw.org | tcp |
| US | 8.8.8.8:53 | cdn.cookielaw.org | udp |
| US | 8.8.8.8:53 | 2.73.0.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 162.178.205.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 137.102.96.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 52.178.19.104.in-addr.arpa | udp |
| US | 104.19.178.52:443 | cdn.cookielaw.org | tcp |
| US | 8.8.8.8:53 | geolocation.onetrust.com | udp |
| US | 172.64.155.119:443 | geolocation.onetrust.com | tcp |
| US | 8.8.8.8:53 | geolocation.onetrust.com | udp |
| US | 8.8.8.8:53 | geolocation.onetrust.com | udp |
| US | 8.8.8.8:53 | 119.155.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.hybrid-analysis.com | udp |
| US | 172.64.153.73:80 | www.hybrid-analysis.com | tcp |
| US | 8.8.8.8:53 | www.hybrid-analysis.com | udp |
| US | 8.8.8.8:53 | www.hybrid-analysis.com | udp |
| US | 8.8.8.8:53 | disqus.com | udp |
| US | 8.8.8.8:53 | disqus.com | udp |
| US | 151.101.0.134:443 | disqus.com | tcp |
| US | 8.8.8.8:53 | disqus.com | udp |
| US | 8.8.8.8:53 | 73.153.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 134.0.101.151.in-addr.arpa | udp |
| US | 8.8.8.8:53 | c.disquscdn.com | udp |
| US | 18.239.208.52:443 | c.disquscdn.com | tcp |
| US | 8.8.8.8:53 | d231vab146qzfb.cloudfront.net | udp |
| US | 8.8.8.8:53 | d231vab146qzfb.cloudfront.net | udp |
| US | 18.239.208.52:443 | d231vab146qzfb.cloudfront.net | tcp |
| US | 8.8.8.8:53 | 52.208.239.18.in-addr.arpa | udp |
| US | 172.64.153.73:443 | www.hybrid-analysis.com | tcp |
| US | 8.8.8.8:53 | assets.adobedtm.com | udp |
| US | 104.19.178.52:443 | cdn.cookielaw.org | tcp |
| US | 8.8.8.8:53 | use.typekit.net | udp |
| US | 8.8.8.8:53 | e7808.dscg.akamaiedge.net | udp |
| US | 8.8.8.8:53 | a1988.dscg1.akamai.net | udp |
| SE | 23.34.232.228:443 | e7808.dscg.akamaiedge.net | tcp |
| SE | 184.31.15.74:443 | a1988.dscg1.akamai.net | tcp |
| US | 8.8.8.8:53 | e7808.dscg.akamaiedge.net | udp |
| US | 8.8.8.8:53 | a1988.dscg1.akamai.net | udp |
| US | 104.19.178.52:443 | cdn.cookielaw.org | tcp |
| US | 8.8.8.8:53 | privacyportal.onetrust.com | udp |
| US | 172.64.155.119:443 | privacyportal.onetrust.com | tcp |
| US | 8.8.8.8:53 | privacyportal.onetrust.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | privacyportal.onetrust.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | 228.232.34.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 74.15.31.184.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.youtube.com | udp |
| GB | 142.250.178.14:443 | www.youtube.com | tcp |
| US | 8.8.8.8:53 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | p.typekit.net | udp |
| US | 172.64.155.119:443 | privacyportal.onetrust.com | tcp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | youtube-ui.l.google.com | udp |
| SE | 184.31.15.48:443 | p.typekit.net | tcp |
| US | 8.8.8.8:53 | a1874.dscg1.akamai.net | udp |
| US | 8.8.8.8:53 | a1874.dscg1.akamai.net | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| SE | 184.31.15.74:443 | a1988.dscg1.akamai.net | tcp |
| SE | 184.31.15.74:443 | a1988.dscg1.akamai.net | tcp |
| SE | 184.31.15.74:443 | a1988.dscg1.akamai.net | tcp |
| SE | 184.31.15.74:443 | a1988.dscg1.akamai.net | tcp |
| US | 8.8.8.8:53 | 14.178.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 48.15.31.184.in-addr.arpa | udp |
| US | 172.64.155.119:443 | privacyportal.onetrust.com | tcp |
| US | 172.64.155.119:443 | privacyportal.onetrust.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | github.com | udp |
| US | 8.8.8.8:53 | github.githubassets.com | udp |
| US | 8.8.8.8:53 | github.com | udp |
| GB | 20.26.156.215:443 | github.com | tcp |
| US | 8.8.8.8:53 | collector.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | glb-db52c2cf8be544.github.com | udp |
| US | 8.8.8.8:53 | api.github.com | udp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 8.8.8.8:53 | api.github.com | udp |
| US | 8.8.8.8:53 | firefox.settings.services.mozilla.com | udp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.149.100.209:443 | prod.remote-settings.prod.webservices.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 185.199.110.133:443 | raw.githubusercontent.com | tcp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 8.8.8.8:53 | 133.110.199.185.in-addr.arpa | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| N/A | 127.0.0.1:52491 | tcp | |
| CH | 176.10.104.243:8443 | tcp | |
| DE | 131.188.40.189:443 | tcp | |
| US | 8.8.8.8:53 | 189.40.188.131.in-addr.arpa | udp |
| US | 51.81.93.109:443 | tcp | |
| US | 8.8.8.8:53 | 109.93.81.51.in-addr.arpa | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | en.wikipedia.org | udp |
| NL | 185.15.59.224:443 | en.wikipedia.org | tcp |
| NL | 185.15.59.224:443 | en.wikipedia.org | tcp |
| US | 8.8.8.8:53 | aus5.mozilla.org | udp |
| US | 8.8.8.8:53 | 224.59.15.185.in-addr.arpa | udp |
| US | 35.244.181.201:443 | aus5.mozilla.org | tcp |
| US | 35.244.181.201:443 | aus5.mozilla.org | tcp |
| US | 8.8.8.8:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 35.244.181.201:443 | prod.balrog.prod.cloudops.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 8.8.8.8:53 | content-signature-2.cdn.mozilla.net | udp |
| US | 34.160.144.191:443 | content-signature-2.cdn.mozilla.net | tcp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 34.160.144.191:443 | prod.content-signature-chains.prod.webservices.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | upload.wikimedia.org | udp |
| US | 8.8.8.8:53 | 201.181.244.35.in-addr.arpa | udp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.224:443 | en.wikipedia.org | tcp |
| NL | 185.15.59.224:443 | en.wikipedia.org | tcp |
| US | 8.8.8.8:53 | ciscobinary.openh264.org | udp |
| US | 8.8.8.8:53 | redirector.gvt1.com | udp |
| NL | 2.18.121.197:80 | ciscobinary.openh264.org | tcp |
| US | 8.8.8.8:53 | a19.dscg10.akamai.net | udp |
| US | 8.8.8.8:53 | redirector.gvt1.com | udp |
| GB | 142.250.187.206:443 | redirector.gvt1.com | tcp |
| US | 8.8.8.8:53 | a19.dscg10.akamai.net | udp |
| US | 8.8.8.8:53 | redirector.gvt1.com | udp |
| GB | 142.250.187.206:443 | redirector.gvt1.com | udp |
| US | 8.8.8.8:53 | r1---sn-aigl6ney.gvt1.com | udp |
| GB | 173.194.183.166:443 | r1---sn-aigl6ney.gvt1.com | tcp |
| US | 8.8.8.8:53 | r1.sn-aigl6ney.gvt1.com | udp |
| US | 8.8.8.8:53 | r1.sn-aigl6ney.gvt1.com | udp |
| GB | 173.194.183.166:443 | r1.sn-aigl6ney.gvt1.com | udp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| NL | 185.15.59.240:443 | upload.wikimedia.org | tcp |
| US | 8.8.8.8:53 | 206.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 197.121.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.183.194.173.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.59.15.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | udp |
| US | 104.16.166.228:80 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | tcp |
| US | 8.8.8.8:53 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | udp |
| US | 104.16.166.228:80 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | tcp |
| US | 8.8.8.8:53 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | udp |
| US | 8.8.8.8:53 | static.kryptoslogicsinkhole.com | udp |
| US | 8.8.8.8:53 | static.kryptoslogicsinkhole.com | udp |
| US | 35.237.128.253:80 | static.kryptoslogicsinkhole.com | tcp |
| US | 8.8.8.8:53 | static.kryptoslogicsinkhole.com | udp |
| US | 8.8.8.8:53 | 228.166.16.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 253.128.237.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 74.204.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | www.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | www.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | 161.19.199.152.in-addr.arpa | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 104.21.55.94:443 | www.kryptoslogic.com | tcp |
| US | 104.21.55.94:443 | www.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | tcp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | tcp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | tcp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | udp |
| US | 8.8.8.8:53 | m.kryptoslogic.com | udp |
| US | 145.40.89.20:443 | m.kryptoslogic.com | tcp |
| US | 8.8.8.8:53 | m.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | m.kryptoslogic.com | udp |
| US | 8.8.8.8:53 | 94.55.21.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.24.17.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.89.40.145.in-addr.arpa | udp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 8.8.8.8:53 | 200.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.microsoft.com | udp |
| NL | 23.62.61.97:443 | www.bing.com | tcp |
| NL | 23.62.61.97:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 76.234.34.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.17.21.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.61.62.23.in-addr.arpa | udp |
| US | 104.16.166.228:80 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | tcp |
| US | 8.8.8.8:53 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | udp |
| US | 35.237.128.253:80 | static.kryptoslogicsinkhole.com | tcp |
| US | 8.8.8.8:53 | static.kryptoslogicsinkhole.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 104.16.166.228:80 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | encrypted-tbn0.gstatic.com | udp |
| GB | 142.250.178.14:443 | encrypted-tbn0.gstatic.com | tcp |
| US | 8.8.8.8:53 | encrypted-tbn0.gstatic.com | udp |
| US | 8.8.8.8:53 | encrypted-tbn0.gstatic.com | udp |
| GB | 142.250.178.14:443 | encrypted-tbn0.gstatic.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | location.services.mozilla.com | udp |
| US | 8.8.8.8:53 | locprod2-elb-us-west-2.prod.mozaws.net | udp |
| US | 44.241.205.248:443 | locprod2-elb-us-west-2.prod.mozaws.net | tcp |
| US | 8.8.8.8:53 | locprod2-elb-us-west-2.prod.mozaws.net | udp |
| US | 8.8.8.8:53 | 248.205.241.44.in-addr.arpa | udp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | www.bankinfosecurity.com | udp |
| US | 50.56.167.254:443 | www.bankinfosecurity.com | tcp |
| US | 8.8.8.8:53 | bankinfosecurity.com | udp |
| US | 8.8.8.8:53 | bankinfosecurity.com | udp |
| US | 8.8.8.8:53 | 254.167.56.50.in-addr.arpa | udp |
| US | 50.56.167.254:443 | bankinfosecurity.com | udp |
| US | 8.8.8.8:53 | platform-api.sharethis.com | udp |
| US | 8.8.8.8:53 | nexus.ensighten.com | udp |
| FR | 13.32.145.121:443 | nexus.ensighten.com | tcp |
| US | 8.8.8.8:53 | d2pz9khpjpljz2.cloudfront.net | udp |
| US | 8.8.8.8:53 | platform-api.sharethis.com | udp |
| US | 8.8.8.8:53 | d2pz9khpjpljz2.cloudfront.net | udp |
| US | 8.8.8.8:53 | platform-api.sharethis.com | udp |
| US | 8.8.8.8:53 | 130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | 4a7efb2d53317100f611-1d7064c4f7b6de25658a4199efb34975.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | 75d03c5f1bfbbbb9cc13-369a671ebb934b49b239e372822005c5.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | 6d63d49ccb7c52435540-5070aa97eaa2b8df4eb5a91600e69901.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | dbac8a2e962120c65098-4d6abce208e5e17c2085b466b98c2083.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | fa94d5c47256403c613d-7164cafcaac68bfd3318486ab257f999.ssl.cf1.rackcdn.com | udp |
| NL | 23.218.49.243:443 | fa94d5c47256403c613d-7164cafcaac68bfd3318486ab257f999.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | fa94d5c47256403c613d-7164cafcaac68bfd3318486ab257f999.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | fa94d5c47256403c613d-7164cafcaac68bfd3318486ab257f999.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | fa94d5c47256403c613d-7164cafcaac68bfd3318486ab257f999.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | 21aaef15263171502b5a-3fc6a64a094676b060fa7dc8c4490be9.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | 752b069ec945bee67d86-1021436e05aad7b2347bf3096cc7e309.ssl.cf1.rackcdn.com | udp |
| NL | 23.218.49.243:443 | 752b069ec945bee67d86-1021436e05aad7b2347bf3096cc7e309.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | 752b069ec945bee67d86-1021436e05aad7b2347bf3096cc7e309.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | e4845.g.akamaiedge.net | udp |
| US | 8.8.8.8:53 | platform.twitter.com | udp |
| US | 8.8.8.8:53 | dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com | udp |
| US | 8.8.8.8:53 | e4845.g.akamaiedge.net | udp |
| NL | 23.218.49.243:443 | dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | udp |
| FR | 13.32.145.121:443 | d2pz9khpjpljz2.cloudfront.net | udp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | cs41.wac.edgecastcdn.net | udp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | cs41.wac.edgecastcdn.net | udp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | 121.145.32.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 243.49.218.23.in-addr.arpa | udp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | worker.ismgcorp.com | udp |
| US | 8.8.8.8:53 | worker.ismgcorp.com | udp |
| US | 104.130.251.6:443 | worker.ismgcorp.com | tcp |
| US | 8.8.8.8:53 | www.googletagservices.com | udp |
| US | 8.8.8.8:53 | munchkin.marketo.net | udp |
| US | 8.8.8.8:53 | www.googletagservices.com | udp |
| US | 8.8.8.8:53 | worker.ismgcorp.com | udp |
| US | 8.8.8.8:53 | e10776.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | www.googletagservices.com | udp |
| US | 8.8.8.8:53 | e10776.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | bankinfosecurity.disqus.com | udp |
| US | 8.8.8.8:53 | ml314.com | udp |
| US | 8.8.8.8:53 | sjs.bizographics.com | udp |
| US | 8.8.8.8:53 | snap.licdn.com | udp |
| US | 8.8.8.8:53 | j.6sc.co | udp |
| US | 8.8.8.8:53 | ml314.com | udp |
| US | 199.232.192.134:443 | bankinfosecurity.disqus.com | tcp |
| NL | 23.62.61.152:443 | j.6sc.co | tcp |
| US | 8.8.8.8:53 | prod.disqus.map.fastlylb.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | ml314.com | udp |
| US | 8.8.8.8:53 | prod.disqus.map.fastlylb.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | a1916.dscg2.akamai.net | udp |
| US | 8.8.8.8:53 | a1916.dscg2.akamai.net | udp |
| NL | 23.218.49.243:443 | f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com | tcp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | c.6sc.co | udp |
| US | 8.8.8.8:53 | ipv6.6sc.co | udp |
| US | 8.8.8.8:53 | dnn506yrbagrg.cloudfront.net | udp |
| NL | 23.62.61.155:443 | ipv6.6sc.co | tcp |
| NL | 23.62.61.155:443 | ipv6.6sc.co | tcp |
| NL | 23.62.61.155:443 | ipv6.6sc.co | tcp |
| NL | 23.62.61.152:443 | ipv6.6sc.co | tcp |
| US | 8.8.8.8:53 | e212585.dscb.akamaiedge.net | udp |
| FR | 52.222.153.63:443 | dnn506yrbagrg.cloudfront.net | tcp |
| US | 8.8.8.8:53 | dnn506yrbagrg.cloudfront.net | udp |
| US | 8.8.8.8:53 | www.clarity.ms | udp |
| US | 8.8.8.8:53 | e212585.dscb.akamaiedge.net | udp |
| US | 8.8.8.8:53 | dnn506yrbagrg.cloudfront.net | udp |
| US | 8.8.8.8:53 | part-0036.t-0009.t-msedge.net | udp |
| NL | 23.62.61.155:443 | e212585.dscb.akamaiedge.net | tcp |
| US | 8.8.8.8:53 | part-0036.t-0009.t-msedge.net | udp |
| US | 151.101.0.134:443 | disqus.com | tcp |
| US | 8.8.8.8:53 | disqus.com | udp |
| US | 8.8.8.8:53 | epsilon.6sense.com | udp |
| US | 13.248.142.121:443 | epsilon.6sense.com | tcp |
| US | 8.8.8.8:53 | epsilon.6sense.com | udp |
| US | 13.248.142.121:443 | epsilon.6sense.com | tcp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | epsilon.6sense.com | udp |
| US | 8.8.8.8:53 | 6.251.130.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 152.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 63.153.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | c.disquscdn.com | udp |
| US | 8.8.8.8:53 | d231vab146qzfb.cloudfront.net | udp |
| US | 18.239.208.19:443 | d231vab146qzfb.cloudfront.net | tcp |
| US | 8.8.8.8:53 | script.crazyegg.com | udp |
| US | 8.8.8.8:53 | script.crazyegg.com.cdn.cloudflare.net | udp |
| US | 8.8.8.8:53 | d231vab146qzfb.cloudfront.net | udp |
| US | 8.8.8.8:53 | script.crazyegg.com.cdn.cloudflare.net | udp |
| US | 18.239.208.19:443 | d231vab146qzfb.cloudfront.net | tcp |
| FR | 52.222.169.20:443 | platform-api.sharethis.com | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| GB | 216.58.212.194:443 | www.googletagservices.com | tcp |
| BE | 104.68.89.134:443 | e10776.b.akamaiedge.net | tcp |
| US | 34.117.77.79:443 | ml314.com | tcp |
| US | 2.17.251.40:443 | a1916.dscg2.akamai.net | tcp |
| US | 2.17.251.25:443 | a1916.dscg2.akamai.net | tcp |
| US | 13.107.246.64:443 | part-0036.t-0009.t-msedge.net | tcp |
| US | 104.19.147.8:443 | script.crazyegg.com.cdn.cloudflare.net | tcp |
| GB | 216.58.212.194:443 | www.googletagservices.com | udp |
| US | 216.239.32.36:443 | region1.google-analytics.com | tcp |
| US | 216.239.32.36:443 | region1.google-analytics.com | tcp |
| US | 8.8.8.8:53 | buttons-config.sharethis.com | udp |
| US | 34.117.77.79:443 | ml314.com | udp |
| US | 8.8.8.8:53 | d2znr2yi078d75.cloudfront.net | udp |
| US | 8.8.8.8:53 | l.sharethis.com | udp |
| US | 8.8.8.8:53 | d2znr2yi078d75.cloudfront.net | udp |
| US | 216.239.32.36:443 | region1.google-analytics.com | udp |
| IE | 3.248.168.123:443 | l.sharethis.com | tcp |
| US | 8.8.8.8:53 | httplogserver-lb.global.unified-prod.sharethis.net | udp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | httplogserver-lb.global.unified-prod.sharethis.net | udp |
| US | 8.8.8.8:53 | 121.142.248.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.208.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.212.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.169.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.147.19.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 64.246.107.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 66.220.184.93.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 134.89.68.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.251.17.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.251.17.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.32.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | px.ads.linkedin.com | udp |
| US | 8.8.8.8:53 | in.ml314.com | udp |
| US | 104.19.147.8:443 | script.crazyegg.com.cdn.cloudflare.net | tcp |
| GB | 142.250.200.34:443 | securepubads.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 13.107.42.14:443 | px.ads.linkedin.com | tcp |
| US | 8.8.8.8:53 | l-0005.l-msedge.net | udp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | in.ml314.com | udp |
| US | 8.8.8.8:53 | l-0005.l-msedge.net | udp |
| GB | 142.250.200.34:443 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | in.ml314.com | udp |
| US | 8.8.8.8:53 | syndication.twitter.com | udp |
| US | 104.244.42.8:443 | syndication.twitter.com | tcp |
| US | 8.8.8.8:53 | syndication.twitter.com | udp |
| US | 8.8.8.8:53 | syndication.twitter.com | udp |
| FR | 52.222.149.89:443 | d2znr2yi078d75.cloudfront.net | tcp |
| GB | 142.250.200.34:443 | securepubads.g.doubleclick.net | tcp |
| US | 54.156.231.169:443 | in.ml314.com | tcp |
| US | 8.8.8.8:53 | referrer.disqus.com | udp |
| US | 199.232.192.134:443 | referrer.disqus.com | tcp |
| US | 8.8.8.8:53 | 051-zxi-237.mktoresp.com | udp |
| US | 8.8.8.8:53 | 123.168.248.3.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 34.200.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.42.107.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.42.244.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 89.149.222.52.in-addr.arpa | udp |
| US | 192.28.147.68:443 | 051-zxi-237.mktoresp.com | tcp |
| US | 8.8.8.8:53 | 051-zxi-237.mktoresp.com | udp |
| US | 192.28.147.68:443 | 051-zxi-237.mktoresp.com | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| US | 8.8.8.8:53 | 051-zxi-237.mktoresp.com | udp |
| US | 8.8.8.8:53 | 36a06700bd3b0047f2e731e2e91e7345.safeframe.googlesyndication.com | udp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| US | 8.8.8.8:53 | platform-cdn.sharethis.com | udp |
| US | 20.114.190.119:443 | x.clarity.ms | tcp |
| GB | 172.217.169.65:443 | 36a06700bd3b0047f2e731e2e91e7345.safeframe.googlesyndication.com | tcp |
| US | 8.8.8.8:53 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | d3oiwf0xhhk8m1.cloudfront.net | udp |
| GB | 172.217.169.65:443 | pagead-googlehosted.l.google.com | udp |
| FR | 52.222.169.129:443 | d3oiwf0xhhk8m1.cloudfront.net | tcp |
| FR | 52.222.169.129:443 | d3oiwf0xhhk8m1.cloudfront.net | tcp |
| FR | 52.222.169.129:443 | d3oiwf0xhhk8m1.cloudfront.net | tcp |
| US | 8.8.8.8:53 | d3oiwf0xhhk8m1.cloudfront.net | udp |
| US | 8.8.8.8:53 | t.6sc.co | udp |
| US | 8.8.8.8:53 | tpc.googlesyndication.com | udp |
| US | 8.8.8.8:53 | 169.231.156.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.147.28.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 65.169.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 119.190.114.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 226.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 129.169.222.52.in-addr.arpa | udp |
| NL | 23.62.61.155:443 | t.6sc.co | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| US | 8.8.8.8:53 | tpc.googlesyndication.com | udp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| PL | 93.184.220.66:443 | cs41.wac.edgecastcdn.net | tcp |
| US | 8.8.8.8:53 | tpc.googlesyndication.com | udp |
| NL | 23.62.61.155:443 | t.6sc.co | tcp |
| US | 8.8.8.8:53 | cdn.syndication.twimg.com | udp |
| PL | 93.184.220.70:443 | cdn.syndication.twimg.com | tcp |
| US | 8.8.8.8:53 | cs45.wac.edgecastcdn.net | udp |
| PL | 93.184.220.70:443 | cs45.wac.edgecastcdn.net | tcp |
| PL | 93.184.220.70:443 | cs45.wac.edgecastcdn.net | tcp |
| US | 8.8.8.8:53 | cs45.wac.edgecastcdn.net | udp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.16.225:443 | tpc.googlesyndication.com | udp |
| US | 8.8.8.8:53 | 70.220.184.93.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 225.16.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | abs-0.twimg.com | udp |
| US | 8.8.8.8:53 | pbs.twimg.com | udp |
| US | 104.244.43.131:443 | abs-0.twimg.com | tcp |
| US | 8.8.8.8:53 | abs-zero.twimg.com | udp |
| US | 104.244.43.131:443 | abs-zero.twimg.com | tcp |
| PL | 93.184.220.70:443 | pbs.twimg.com | tcp |
| PL | 93.184.220.70:443 | pbs.twimg.com | tcp |
| PL | 93.184.220.70:443 | pbs.twimg.com | tcp |
| US | 8.8.8.8:53 | abs-zero.twimg.com | udp |
| US | 8.8.8.8:53 | c.clarity.ms | udp |
| US | 8.8.8.8:53 | c-msn-com-nsatc.trafficmanager.net | udp |
| US | 8.8.8.8:53 | c-msn-com-nsatc.trafficmanager.net | udp |
| IE | 68.219.88.97:443 | c-msn-com-nsatc.trafficmanager.net | tcp |
| US | 8.8.8.8:53 | 97.88.219.68.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 131.43.244.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | c.bing.com | udp |
| US | 204.79.197.237:443 | c.bing.com | tcp |
| US | 8.8.8.8:53 | dual-a-0034.a-msedge.net | udp |
| US | 8.8.8.8:53 | dual-a-0034.a-msedge.net | udp |
| US | 204.79.197.237:443 | dual-a-0034.a-msedge.net | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 104.16.166.228:80 | www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com | tcp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| US | 8.8.8.8:53 | i.ytimg.com | udp |
| GB | 216.58.213.22:443 | i.ytimg.com | tcp |
| GB | 216.58.213.22:443 | i.ytimg.com | tcp |
| GB | 216.58.213.22:443 | i.ytimg.com | tcp |
| US | 8.8.8.8:53 | i.ytimg.com | udp |
| GB | 216.58.213.22:443 | i.ytimg.com | udp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | www.youtube.com | udp |
| GB | 142.250.178.14:443 | www.youtube.com | tcp |
| US | 8.8.8.8:53 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | 22.213.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | youtube-ui.l.google.com | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | static.doubleclick.net | udp |
| US | 8.8.8.8:53 | jnn-pa.googleapis.com | udp |
| GB | 216.58.201.98:443 | googleads.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| GB | 216.58.213.6:443 | static.doubleclick.net | tcp |
| US | 8.8.8.8:53 | static.doubleclick.net | udp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | tcp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | static.doubleclick.net | udp |
| US | 8.8.8.8:53 | jnn-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | 98.201.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 6.213.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 234.212.58.216.in-addr.arpa | udp |
| GB | 216.58.201.98:443 | googleads.g.doubleclick.net | udp |
| GB | 216.58.213.6:443 | static.doubleclick.net | udp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | udp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| US | 20.114.190.119:443 | x.clarity.ms | tcp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | aus5.mozilla.org | udp |
| US | 8.8.8.8:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 35.244.181.201:443 | prod.balrog.prod.cloudops.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 8.8.8.8:53 | firefox.settings.services.mozilla.com | udp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.149.100.209:443 | prod.remote-settings.prod.webservices.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | content-signature-2.cdn.mozilla.net | udp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 34.160.144.191:443 | prod.content-signature-chains.prod.webservices.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.content-signature-chains.prod.webservices.mozgcp.net | udp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | i.ytimg.com | udp |
| GB | 216.58.213.22:443 | i.ytimg.com | udp |
| GB | 142.250.179.238:443 | youtube-ui.l.google.com | udp |
| GB | 216.58.201.98:443 | googleads.g.doubleclick.net | udp |
| GB | 216.58.213.6:443 | static.doubleclick.net | udp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | www.pcrisk.com | udp |
| US | 172.66.43.104:443 | www.pcrisk.com | tcp |
| US | 8.8.8.8:53 | www.pcrisk.com | udp |
| US | 8.8.8.8:53 | www.pcrisk.com | udp |
| US | 8.8.8.8:53 | 104.43.66.172.in-addr.arpa | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | tcp |
| US | 8.8.8.8:53 | www.paypalobjects.com | udp |
| US | 8.8.8.8:53 | cs1150.wpc.betacdn.net | udp |
| SE | 192.229.221.25:443 | cs1150.wpc.betacdn.net | tcp |
| US | 8.8.8.8:53 | cs1150.wpc.betacdn.net | udp |
| GB | 142.250.178.14:443 | youtube-ui.l.google.com | udp |
| BE | 108.177.15.155:443 | stats.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | 25.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.213.58.216.in-addr.arpa | udp |
| BE | 108.177.15.155:443 | stats.g.doubleclick.net | udp |
| GB | 216.58.201.98:443 | googleads.g.doubleclick.net | tcp |
| GB | 216.58.201.98:443 | googleads.g.doubleclick.net | udp |
| US | 216.239.32.36:443 | region1.google-analytics.com | tcp |
| US | 216.239.32.36:443 | region1.google-analytics.com | udp |
| GB | 216.58.213.6:443 | static.doubleclick.net | tcp |
| GB | 216.58.213.6:443 | static.doubleclick.net | udp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | tcp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | tcp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| GB | 216.58.213.22:443 | i.ytimg.com | tcp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| GB | 216.58.213.22:443 | i.ytimg.com | udp |
| GB | 142.250.179.238:443 | youtube-ui.l.google.com | tcp |
| GB | 216.58.212.234:443 | jnn-pa.googleapis.com | udp |
| GB | 142.250.179.238:443 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | yt3.ggpht.com | udp |
| US | 8.8.8.8:53 | photos-ugc.l.googleusercontent.com | udp |
| GB | 142.250.180.1:443 | photos-ugc.l.googleusercontent.com | tcp |
| US | 8.8.8.8:53 | photos-ugc.l.googleusercontent.com | udp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| GB | 142.250.180.1:443 | photos-ugc.l.googleusercontent.com | tcp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 20.114.190.119:443 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | tcp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| GB | 142.250.180.1:443 | photos-ugc.l.googleusercontent.com | udp |
| US | 8.8.8.8:53 | 1.180.250.142.in-addr.arpa | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| GB | 142.250.179.238:443 | youtube-ui.l.google.com | udp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | x.clarity.ms | udp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 20.114.190.119:443 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | tcp |
| US | 8.8.8.8:53 | clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com | udp |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
| N/A | 127.0.0.1:9050 | tcp | |
| US | 8.8.8.8:53 | b.6sc.co | udp |
| US | 8.8.8.8:53 | e212585.b.akamaiedge.net | udp |
Files
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\26188da4-0740-4985-9c11-659de835bff2
| MD5 | 3df779999143955a75c569fb6784bb71 |
| SHA1 | 16b9df6a0e9d33647624d8e16a3641d14c291513 |
| SHA256 | 33df76a9b889f1a269469e71eaae4c86dc5e48f2468808b1fa1bb4f771af7a71 |
| SHA512 | 5976486dc2b548b58e5006427b79cccfa0cef1037df95bbe852c88d5eefcc560d0d20a0cd934aa6daaf8e757056d37f20a86e8e9567b27d20580b9f2f2dbd053 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\db\data.safe.bin
| MD5 | 4a1b24655c7e733adf8895e52fb10a93 |
| SHA1 | 1a2d659ffe86998434ffb71197df3bd7325f7a5d |
| SHA256 | 4496c2bdbbe0c4520fec365edfc686fddd6810939c50e887ff24141a0ceb833a |
| SHA512 | 9bd3aa20b0cb11c2d34d3e35fca893c1b92b5f1e5da41f7f93474e1f91b1110c8a07f51d7defaf84ac59179a91dcb59996d7238e896a48a2cc6a0e691aa5a2e1 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js
| MD5 | dd0e705e3d73784d2e76c1945b8b3c82 |
| SHA1 | 37c001320ce2fb9202bd30fc51ba533854f2ecc3 |
| SHA256 | 1b288a02ccfaa70d1745b23ef1f9171e9e979fe5cd4a1aa31c12d8ca89070699 |
| SHA512 | ececbd36d7413010d4ee0997f77c0701fe9f38ea6c1ea32d2b2811b0ae32ed3062eac083c24af1f43d3ef5e5114979bbfb12b22f02332878c19534bc8e147970 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | e6e6c93f9d7e7f13636c4670fc6ce498 |
| SHA1 | 23437873e9308986b3a5672d4818f8c3e0592688 |
| SHA256 | 22f9b103ca1d7fe55ed086fd17fd2c6add8e617da56d234ccb53ef367b2ffe12 |
| SHA512 | a4b14da20b21d7a63211a738c7e45d1828a6d2249590ec67a64026a9ec146c8395a4647f1b12099297b24a9d6bada2b0513856d15e118bf4e1d9da5d521be2ea |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js
| MD5 | a972b56772c6107310cd1e7ba40ec360 |
| SHA1 | 378b4d1313fca3297c1b035657cb18df8e8b021c |
| SHA256 | c151fa56caa73721be7596a0db7db607721c5501dde34f85a3f8be63a0f2a4d1 |
| SHA512 | cd4d613fbc260675f2ca4970b6411b010f20b972fbb54c3e904790ef1146fb9ee7563324dad9df14b6583a46a3424a948d3ab1bf6180c6c49bbc982c7d3f1a99 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 9d026f804278e5bada038660d072922a |
| SHA1 | f1fd56f375ed762b56cc9d5fa7b842ca2f5aaa84 |
| SHA256 | 5da511f19f947a980eefd3cf84bfb77a1c1f412f6164b128d47904d2baec09f0 |
| SHA512 | c4ecf2a9f2c962237093e06db1e4f23ca959fcf9d2e783382382eafa1dd61f1e55cbc733b9c7ad2913f7e44eef6249acba43bdc3487acc077225040fda1b15d7 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\7EC141FE707EF6EBB3EBF7467F7BBA5CEE79D4E6
| MD5 | ab23e2286ad7e3c118eff9d61896808d |
| SHA1 | 5504628f73f4637c4b7f1f4960e9a118bf38830f |
| SHA256 | e709925e15b8c1b38d6b3c61547ce8f210bc651a7b0789ca4f87c328888b19ab |
| SHA512 | d82dfc882dd56848b673e0ef51689f011b56d00d927822f2659a5622b80a5574cef5a44d2f65f7e563a6be8835540315941c64e15bfb4d211d5f71cd9eb150b1 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | a0883e0c2cb7eda8b239ff0a71eba85a |
| SHA1 | fbc51e6c20a40519db619d4ab9d0c37a84410340 |
| SHA256 | 672d3cf8e42b91259c8d019b21f9b42cc2482d7acdd8fbfba9da1711cbca3736 |
| SHA512 | b7d7e6dea67bfd638d7d58493c1bad984b7b08f3bec6fd20d53ba020b49b1f4713da77e5fa73a8d7b734daaa61106cb176f347b1d99c8ecd05fe78f3872063a5 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 7e4d392b9452321052802c1ae7589b73 |
| SHA1 | fe8f3d727d2661059edc87d5e9e1f0e1e12deb4e |
| SHA256 | 17c0b1ce4491ed643665d8cfdcb7d2c9481f5d74400e7ed32ff9e94e7e69a3c6 |
| SHA512 | 573033f6b8a7f744777b07ddf31af200baa76dd922f2b52fa2fd0048af7a5322d518ecafde6f9e2b0eee54d1d1eabc77ca45758ec641f2d307bc89503e603828 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\3DEC1DEB0D18DB7E7F4CFF044D318FA41F46A1EE
| MD5 | 29fc286ce717d33fc0a14ae79218b580 |
| SHA1 | 748438206831c4fa63fd8a8783c2880cf5884b7d |
| SHA256 | 76117c1045aeffd24fe052de44c9c6895565e26e36847699e45c2585faa8f22b |
| SHA512 | d14ea37dbc599add84bfb61c2371a3d29411bef1b156894152c586c664092f3c558b85dbc3af727b19a4cb41c528cdf00de58c857b2f711a340d8dcd483a697b |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | c1a108f2fee4964c8380068c26ea72a3 |
| SHA1 | f0285f8a24228fc2e65461951d25c2d57cb00a6a |
| SHA256 | 46cd36b86425db4d641af5afb57b2c379d29a1f1d54fd58d5aa3eabea03a526c |
| SHA512 | 565232b8d48bbe415dd853f38df4e555b1c81fe19dfe5efda63d23382a014256ad678fea2c32eb4d14a6e76c0d86533b8ea718fa67395e66b713de9b17a66a66 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\621
| MD5 | ff3a388d8c031ead7dfe194dacae7ba4 |
| SHA1 | f810d66b1075508382459c922762df6887012bb9 |
| SHA256 | fa67390685d067c1963d0fe102ff47073188871bfa8106651f80e46480df1c67 |
| SHA512 | 9e40ac538ca1e38ee78bba74a8a0a84b723337d60f1761da8c698a07d98bec651d1dbddf2b592c1bb59243b802f6a9402c372d5deab0349d66ba2250e971bdf8 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 5e710b9063d7ad7b4ff2db0f3114c048 |
| SHA1 | 19342c4464db12a098b108a23c8fa64748c6dc82 |
| SHA256 | 9d4bd6eda0d6d54eee1e6cc48e9433ccd4f867b2377b563402636ac83431c699 |
| SHA512 | 26cafaba3cc7f7aa8773ecc37cc10b5a7a74501a2f2d58493682d59276a538479f343c4a98ab07dbae44d8c78328f58cbb2980c4727215efdfd16edea60f482b |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | b152788192b7bc0bf6fc916912cbed4e |
| SHA1 | 5c654438984996dd1f1148e5c698c1de80ac4fe1 |
| SHA256 | 7a36f227ba4d4210fc215302b39b841eeb08dc84effc1c13d70e2f43061468d8 |
| SHA512 | a96eb1379b953f4c7440ca752387354fbc7ffd9fd9e21834b2a71857c94e6041632a649cd285ffce0f36cc54501890f95f77465528454114fec57dccc62c22c0 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | b50c27c5d621a2abada0729e0bbaa82d |
| SHA1 | 0dbc160ec36190bd79db7e96930a0f750cc6bbe6 |
| SHA256 | 49799c0cb8df6ef8d1c97e629dd955290afd36f61b7c512435646ac4148931cd |
| SHA512 | 71e58798f9b3dc8487899c33bde8ebb2610131b151f4af48711faa4b4ccee72a734a57904b30bcba037d4ccc20d5400e7a3c4824b77bed6083411e8a23849dd3 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 4c4f4c926e6fbb83d8311685a0077a43 |
| SHA1 | 0eb6c853fc155a02cc78fa6f4529aba56178713e |
| SHA256 | d3cc8893ddd0547ea6cbb64ac7f6d6362824a8e81298a1d43255a1db9fd92920 |
| SHA512 | e1a2af812d7def4dfb00d484f64b2ce95d35d03a421583d40d291a6b68e8636011e58a249464dbdf366a202e96974c7f1e2203fd5a947dbd18f927d9686106f4 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | b31739902ae47337b582fc2d8b810eaa |
| SHA1 | 336fc1685021abb6e7dc868886ad5fe2074c8c38 |
| SHA256 | fd59a98801e53d082b8c5bc6f9fcc2e6805134c9696862c5d70cf166532b469b |
| SHA512 | 3908f4b9c7223008e0e0fbcbd87337f1da2716614d18c51be9ac9af2e36da087147f617cb668b91c3ed52cf1a78347c86923aba9e90348716112322251901987 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | eecc9416b98dbe2fd974978bb8830f7f |
| SHA1 | 8d15b594e7a9cb44e8b89878d919203f1f673d5c |
| SHA256 | 3fdd4f5a16b217c5d41fbda135de18bd08fe4c1df0a9a437f77d1f4a1e08fc82 |
| SHA512 | 1648a96e1310eb8933d4167d0fda6825e76f189a8ef3025a265fae10a2ae382ddadf804cba1b5f5f35796bd7d9974a239d8ad90fb63bcb0343a1e829046a68dc |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 00292837a5e7c1c74bc4e0b03b339686 |
| SHA1 | f49b8a1efbe07387a5759ec7d49bb9c1c186cc69 |
| SHA256 | 63abf163367a9315e710fa3d988045be0b96f16acd67e2b9531699297622c686 |
| SHA512 | ff7d63b12c527edcf3c2031a3e2c536532efbf7f0b50991ee3ea8bf1934ac8bb0b681c5ffe93fba28dbb6835c595921875cacdad0e3ad225222a1f7b9ebb2d5b |
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
| MD5 | 1f01e244d0701b339b583dcfc4a931a7 |
| SHA1 | 3396fb9a568905d7b9cff54b02969d32092f4e0c |
| SHA256 | 662e03dc21bca26c8664ce43d253928b7947cc8ddb44ffd9db080c0c8313d86a |
| SHA512 | 6c605b54a3f2d2735c02cd68724f34504446c5bf39fefa1729ac5a970884c369b9e9280dfe8c0b9985da032885882af207f2dc25b2b2d901839677d24958af2a |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 66e6db81d36119f503842dd914d17a40 |
| SHA1 | 4df37921c22f620080a7baffe34ae1e5a8ad40de |
| SHA256 | 8f62d8a10ab529694ccaa6880af367b61d3d91439ab7f226dfbdeb8557ed3911 |
| SHA512 | b431ab5a34f2c5aa6f1d3613bb936d18fefca4c0f46df9a53fc85b05f556248d822df3a5926ddbdf2eb2318a2e1ef6640c882e811477c02f313cb2e9f3b80226 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\AB740295913D6FEAC15A7060502087FA226E19B5
| MD5 | 216b4984cd8d270df57ee5ac86162d74 |
| SHA1 | a0e8ce30e1a9fa919865cd164fb76983a623e39e |
| SHA256 | 30da840d47d5c4227ccf4236b767b51c4c6ad75ff863ceb2fb1341641331c450 |
| SHA512 | 9834a432fece0449ddb7ab3c747ab76400b414f073c99984cfbe70d4cb2b62eb0dafe3457306b34dc7c61aecec717d66c73478feac5982545f7ee3fc76d9dcfd |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 62520740b7667389de5421b8ef3efd4f |
| SHA1 | ec357adcfe109909ea82586ae1167388f105e8a0 |
| SHA256 | d1c3cfc38c4ff5686daf2f8cd38d8d76d1a4a7160114f67b90a6e69bceaeea4f |
| SHA512 | 41d9675d20f9c7d10691a5bbf370ad73bc65c247e860a82b0b820ffd81d6b88e974932bd9a4b050f983c5065796f40add56e870807ed39d9c40a206a0eaf4943 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 4ebd51d5aa5b98dff25ae316f6819635 |
| SHA1 | e48a5d0a2cf676b21cb9ad6059815a0679b4459d |
| SHA256 | 8d6a641490716ffd3c96cbb54bdd774bfe77038cab4d98524569a4355b50007d |
| SHA512 | 60453e360d5928779ed183e1b9565483edebc74e0c42eb8ba2a021b5960bffc1250feadf0b39fd48c59f5e5f80d6ded92b6f8915c402270562148c01a04fff9f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 9378e6fa9eb00b74c1b48b072536654d |
| SHA1 | 4aca3f0cac34be76002142a6d29ed0bb5afa9e9b |
| SHA256 | 2e5016d0f248ffe5bd7c1d639f79553ee46bd648190d4dee3a1c8c38fbe624a7 |
| SHA512 | 50895146dfe7a0e9699bb80b94e82e701af15ba752eddc864d387cb67bb793a723a888990fe5fdc520b916768b86f1c1ebb6b5f86a3bcd6b36f3e1a409ea125a |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 03fad110f9b09f5c9de8d188831a01ac |
| SHA1 | b8ace5f03ec95f2ea5ffeb1dec6a1b97f07610ab |
| SHA256 | 420e4fe1ac1fbc05069b2e708fd2fa76ba2c5e8f6d20eb7b77037f77ee263e1c |
| SHA512 | 1798e130c7fefe54a8aeb80030a55258214a0eae55f7eb50454b5a4307ded3225626bac39e577c9b13b072863c6df6c176d1a70fa03c98c0aea3798b1ba34901 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\3AB6377F0E6F9D12A9ABEF3948C7311B98BB3AB4
| MD5 | 8a0bf5a3db6929234c764f761d1a6e77 |
| SHA1 | 631196fc6f20836e9681eedba6096482269220aa |
| SHA256 | 8a6da89991a15acf2c9bc74c82e1b7af589a2125d327497cf0324eb56ef7a56a |
| SHA512 | cf13be55639c1a5718097a57b62a6ecb940ef421d1e36a1f8be4179871e17917f50b84c1a784d1d659ad4c9780ed4619bf7311d02f537e97675bf08e4d3c1c8f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 6a64a4c8015b6953dc25f9ded76a700b |
| SHA1 | 6df40c9df7cdfe7ad2ca92e9d5ab3f49de114864 |
| SHA256 | 41a7ce89fffe069d62f0c6bb4062994f6e0e036f79489be63edcffbf2ab27242 |
| SHA512 | cf236dd20eccdfa676d382a950f3804e1489d079011043ff7a916d88c44b78b713516804809779395c8f6bb8c45045965fc2bb049a0ed459c7259ebd51f0aeea |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 1d89b2b52771b634d12fcc198215e904 |
| SHA1 | 721732cc0319fada9d0493f0a6aa05a07dc1e90c |
| SHA256 | 0ee6ad394cf650fa65ed3cedf9da7b4dcbe1c37055f9b75d56b58a6b176332d7 |
| SHA512 | f5e38de3c9afa0e2dd0a3e653c0ad299b13b3cc82168778d34b4420b197cb5ceb9f42831b6bf2646ec406f74c3a164d2cc34da8bf4ba094296c11f3f4ada36ec |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 6c78518eb904d022a8cbc67149842444 |
| SHA1 | 7ad1546848a2dbb750c6c6137c9ef512179d12b9 |
| SHA256 | 51e8544c0d4263b57541388ff376be8aca38efc0c893d3f2a54e68ea08e3efef |
| SHA512 | 4c7682adf870865f54d45a85046339c91b8f3ef0589a095c29343776e99d9aef82839360a71e11d323b867f53cf4a4bbbf0ed819ef2fcbf2a17360f28014b202 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\7672C49DACDA27C85B31956D670A430E3D5497E5
| MD5 | a8f870198685f4a6daa71721e4242bc7 |
| SHA1 | 7cca7bdc809fa437a591c60797ae2d0149997a7b |
| SHA256 | 79c9c798e0b48875bae4410744468a720701ef419fa59f69f656a2bec6b51c88 |
| SHA512 | a191b8deb9b4a259d5fb45a0582d9c409f2503143d62a7627defa114b9d9d5384d18405982bdd8523e49487ccb86fcdf1d48da5b23f3e9802cbdabe29c6c16ed |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\47375858E82A2DCAD31131A75BF7CA6150133B59
| MD5 | b63ac4052f198d6a56b021606320cd33 |
| SHA1 | d3550d14a7957fb1007a529285b348537ede9aca |
| SHA256 | 27cbebfb60ca3b2f027a4c6ed794614461cecb30f810a2832b233ea07ab50dfc |
| SHA512 | 6240abd8a14dc351acc1c57f1485c7bfc37291adfc4f7ba7f761cc16ee7d50228099b7f9b583ee451ca8b7eb6b2e9230f50ac584542d6b81e5fd8672410a0586 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A0D91930D3248D88263AC1A5FE6FAC60DE487747
| MD5 | 9a39039e80e167e0b82072ce65e2e2af |
| SHA1 | af836aafbf42df649ee22bf739d8ea934425b1d0 |
| SHA256 | 28b14e017f3f21368654a2ffce195be5085440568aaa0173f54e2070bbb0f7b8 |
| SHA512 | 54bde8afb26a6b640e24da652764c7506989f2a648b4b6215a2a7963c0e09311457bdcb7224b70ea162b75239ee3fcf34c08e2af6a8d288e5734db95fbd44b82 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D35C09500437DD22D7C72D16F29F6C78D8E3C45D
| MD5 | ddbfdd3cca8acae05d3789eacfd16c98 |
| SHA1 | dab24e0c2f75ce383dae40878fdb968c19f494cb |
| SHA256 | 7e9d79f6581012eb9fe1879c7475981b7ff7778d516d1e37cf778f77aba98436 |
| SHA512 | 47a005dfa217aea340417db35c8f84b845019055fd614660935d668e9ddaef4315f6781b1ccd1b75f973e19a37e1d77ee161134c98be4c7b318ee950cede0291 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6D298E98B21ABD32AF71E40D60A916427900348A
| MD5 | 45e21c431c21d59a054d14749ba39126 |
| SHA1 | 8c5b010d221301d4ebd8c7b8d85cafdfa5cbbe23 |
| SHA256 | 2bc3bd527e60029dd2e008faeb09e95a1ee50b8bc7a68afcdc72461dbe13ffd6 |
| SHA512 | d26b9e69ee63987cf3f59f9d2ee5783566ffb29b65054d9075f56e924028beca2ff812b721e2bc4c8a97fa18edf63deee322fc8005b3b0a5018220c87850c049 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\44836238049E96471D6554497813EF38374771D5
| MD5 | e3012201b2f37bcfbb10ff74dcf6686c |
| SHA1 | 4956bcfa73b3927f2f76d84ee43cde69d440f2cb |
| SHA256 | 7654b27ca5103c91d5afdef0b8b49c22e205b8200e0bff800eef95136594b258 |
| SHA512 | 1ee18cb6818256ca071c121cebb0b8bb1e424079c12f58bd6d005f7986e201e19c536e142d7580d2f0e41aac5d6692e74b15cd316973cbed4f5bc5162c10fece |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6A02DCD5F756DE8DF6A4CBB7CAA8037FC817B107
| MD5 | 12d66dd824a5487ce96bdeb5757b2601 |
| SHA1 | c570f22e4ac479da88647ea37ac9a3acd0f1f67b |
| SHA256 | d62abbd3f09cb26dbc9f2e1c4454900363f04b89c4afbd01eee2dcfefbfb88fe |
| SHA512 | cbcce2037fe840a4937b461cf598cd409bfe337370173777da701496074cd48ff7c28ec7e7f831399a621f78f64024d8da83eec444620c90b6f8d98ffe80ad77 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5D8EB0F4C6BD3444F895FF6EC928B70CFC2B2F53
| MD5 | 1a186c46cedbbaf2fc3358d4d2e8c1ba |
| SHA1 | aa9910e76cd06226c78518ecb2ad6f97c709e108 |
| SHA256 | 38a43f91a09d7723c73122d984592d1a9f196df633e4589e7b46b475135b3415 |
| SHA512 | 8853dd8e82ca547184eca8eae0e87bcee6b78c46ab41052cb98766d77346f77eb1e6b72a9768ae57ca9b01e6c1dabd97048e6a0571d39873731d803f2631e812 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1B8EC99648104CAB66FDD36087B20FB20668FE82
| MD5 | bead6c7886c1a8452ac4b8f2eeddcd6c |
| SHA1 | 32f1bf83474b192ad408037cf1eff98bdfea1a8e |
| SHA256 | ecb872055963f71b28b495ba862f08ee829d945e7b1ec6fa75f5733682280f18 |
| SHA512 | 023f272e0503d732c67ee40ad2c3cf669934c64a948c7b8fcfcf3bfd8e3418f4e307ea7ac97c14e9993e3751177a519b253aa1444bb8785d66dd3af53de96c5f |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9B85EC67973732269C5D1A6EEA2C58CAB8237701
| MD5 | 7de292808e8a73fcbbf538f6a933b2ab |
| SHA1 | 14993bc032e661c24868a6e13f3429354446908b |
| SHA256 | 8ba1321c2210e4565c1253c7a8d8a329978c6fdd58257f1d85679c9242e0304e |
| SHA512 | 73f5887daba68f835a66574e411df65e97c85b7f2776a38b386d979c4c03402d07c3b83822353c1ed2fac80f16914fd50d6be365abe15ae32046a6faeefb84fa |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D964636302D374DC68C4DCA2362B6B75D9DB1ADD
| MD5 | 7d32ea0e8fcff027eb3479cc9c149ba4 |
| SHA1 | b4f356fcb60eeb9002412d059580a232d5193495 |
| SHA256 | 8b8c7898353d1b70870b89b8a6161349d4ed06861b0f98e69d088ea5a5a82a43 |
| SHA512 | 9769536e5fdd8e26a6ba7ca45fa353dd88793408de92b5018a722fcbfa3d9e9eb31c911191c5bc5dfd0b301110cdb965ebc0fe87e80c254e9340986f3a8da0c1 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\05E2754797FA51C0D8F623EA38915D71E69B1921
| MD5 | 0a55f61ee00872ffc895e8592b7a4e38 |
| SHA1 | e37ed628ba98ca0eda97a99f71194549004f02b0 |
| SHA256 | 2443d1c25f71085b9beef30a13ca402906cbe5381e647520db492ef2b867ec3b |
| SHA512 | 5a5a456597ef105c22f04fe30129fb6bf669f237cf8ae88ef48b8f3a6b55ad80e453d49e7e9d8d9b20b212eff23e8fa334f17714790c3273fbb67fc98c3825ce |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\175FC1F27DF5030D57F8D0FF3A5E0CD7039CB332
| MD5 | 7831fcb2bfba87390291e879d934fe71 |
| SHA1 | f5933a4f2ab11dcd51e0672621ab5c55f3c77b18 |
| SHA256 | 295fb4ac22fe76960737216d9d75b481c875a7952cb46b372c205d1b4c21eaaf |
| SHA512 | 5f74dd5a40a46f2b247383b45d45f48c9479d73598e2c0f609eafdd18325fb05e75ca652c4ebe89f2d27af8306790c3cdb2c61512679eff6bf57ceca53ccf687 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\370692646C383B1CC22EDCBA9F8DB753461D620A
| MD5 | 51c76498a6fee9fc9e431d41b462320d |
| SHA1 | 713afca7efabece37c31d0bff3b583fa0ea742eb |
| SHA256 | 66955aa6b9848b89031efe2281bf7c052fa45519997bf590603678094bdc34ed |
| SHA512 | 9c6050e378b5b59dd5fae73c7edf96e471de287b5d66c6dca85d61ce45bc56200a32ae97364b51edde79abae9e1f891bb7b1e9a7ea6e23bac78686f926fd9114 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\96C3E502F86DD32B257160FD7E37883A44B7E522
| MD5 | b9b3e22279faa08003c059cefb349ac7 |
| SHA1 | 2e933cc25909ce65f9a14f04e1050d16e2d92b8c |
| SHA256 | faf52158271886f6e633dfa28934c1974c8a294cc555075a886ef1af4eeef247 |
| SHA512 | ad60d5d3afb4f57723013d31b8b686f08b8e6196c2acbf335e4e02b9baf67a1da71c1b9c7484998ece5f28258d76425242224ad25056437745c950094f25c0a4 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 3ad335b60b912ef4812451d0cb6859cb |
| SHA1 | cbda60c5c0ab55299a92c3771d9e56d03cb03d90 |
| SHA256 | e5aa51d7f0b8a9aa4f07878bf371bb33b9ea8b9aca76cceba2f86de556cd4bc0 |
| SHA512 | a43feebb896aa161ef40673e42f1a2114a40a5f8280e6b483c22c3152752823f89632a6cbea59d4ae84fd2bb082ca195069ff2bf7929f60a8e3ec9686a6ef37f |
C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41
| MD5 | efe76bf09daba2c594d2bc173d9b5cf0 |
| SHA1 | ba5de52939cb809eae10fdbb7fac47095a9599a7 |
| SHA256 | 707a9f323556179571bc832e34fa592066b1d5f2cac4a7426fe163597e3e618a |
| SHA512 | 4a1df71925cf2eb49c38f07c6a95bea17752b025f0114c6fd81bc0841c1d1f2965b5dda1469e454b9e8207c2e0dfd3df0959e57166620ccff86eeeb5cf855029 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\11aa8498-db23-4f40-b4e0-9e16884a87fc
| MD5 | 18e66b8754d3273c0db9aa67aa6e7c1d |
| SHA1 | 57115150e5f979a0e309666cf055f1c796fc7b9b |
| SHA256 | 7f3df0447f0458cdaf3940c9b1206a2aaaa310211be207f930acad6965034e57 |
| SHA512 | 0309344ef89361b25e40bdf0fae000e889ba0143188a6f5034719706f201c3909bc38423249f54f4e3d9671d502e2d88379ebd36acadc52cbfc78f3fc138aa83 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\3e62bf93-fc47-46e5-9fca-9838b98f15b2
| MD5 | d83e0fac3655c142dba3b5b9cd17d948 |
| SHA1 | 77ae509b1dfeb9817f42084ff9b7f19f281e741d |
| SHA256 | d482c7560c54766e3c12f97740624f6a7e6c3e24ea967df8a1dfd138c3de02a8 |
| SHA512 | 2a055ea6171872011742b4a9ad01757f368b1282243cb180604f6fd4a53af0e09c5a48805addebed447c3f1eca962ca6652909958ad2b41839184c8103b13597 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | efc355ae842b5a0d0ab50b2c6ecd8175 |
| SHA1 | 525b2a344b8328ebe28c34a867c7fab19b6d3206 |
| SHA256 | 294ad249405ae82a6768a6cdf0c140fe0cc313791f9b44fa1187a29b034a9f98 |
| SHA512 | 31855079a41d2117b668a7c139f35ac8312dfdea1220349b19e08881aac31f10373e0035d8e0b6e5124c6dd9e5aee97381936bcbe6cbe300b28cc1bdb5d4b3e6 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\330E57AD0B8206512407062DA6041E18125D8074
| MD5 | 791a93dc319e59ee9686ec16accdaa71 |
| SHA1 | 61b8cc42615b8e9253ddf187b472c0c80eb82daf |
| SHA256 | 41aa69a81ecb3bd32e82f55b3faddabe8a72f8f65b6836c32e2a729d111bfc5a |
| SHA512 | fa423c7bbb123164af5700ab767f0667e8345fac604486039c2f07c73be6780919e9db12b4d5f42047b881b016710fdf3cab80ce3391a86c706c714397ea4f84 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\8835B189820E8AD0379E4A49B1968AEF8D7C1F60
| MD5 | 5ef49013427bb9a9c1a0cf034236398d |
| SHA1 | ee30017b35374ff458eb3b9b621ed87a3bf51109 |
| SHA256 | d3a99b699222b494e5854522fccd2d7e39349ce2671afd92c912e4e369e50855 |
| SHA512 | d7ead10e6da1630646264f089dc27d036e9432d53881f1927d80fb69162d643083598f18e1234e8d71a665a7b10d6928bc3f438993fed04f14433f7ce22baea5 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\5577
| MD5 | 8e63279357d7ec310669303976d082f0 |
| SHA1 | 1f94f51bdfefee03c8ffe450bd299dd06cab1f9b |
| SHA256 | b44cdc6fafddfd34858a7f1972885b3a0cbd8741accb5d4229fe724cc4160d31 |
| SHA512 | 3e1e2a5c4720ae4588cbca52df73ea7b074e9dd3dfb65d7387d1a593e3fe1ea9420557119d9b3c4009c0a7987954d8dcb025504a06305c570a9521444ccaf6e6 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 4d3bf50a69dd1762fd35d6a491ca36b1 |
| SHA1 | 9a438a8592796c020a24436580aa61566be1bff2 |
| SHA256 | cbad38a52f34a0854e9ca8da5b11183bcc993ddfe48c3702176a27fb66b8371d |
| SHA512 | aaeee9e15a5ba3f72b7484963da6ff73c45c2a947e0c4edae9d6ac332515db584025013aea868db78cb186065a1d33c6146f60abb8596f19e13efc6cc566f741 |
C:\Users\Admin\Downloads\msg\m_finnish.wnry
| MD5 | 35c2f97eea8819b1caebd23fee732d8f |
| SHA1 | e354d1cc43d6a39d9732adea5d3b0f57284255d2 |
| SHA256 | 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e |
| SHA512 | 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf |
C:\Users\Admin\Downloads\u.wnry
| MD5 | 7bf2b57f2a205768755c07f238fb32cc |
| SHA1 | 45356a9dd616ed7161a3b9192e2f318d0ab5ad10 |
| SHA256 | b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25 |
| SHA512 | 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9 |
C:\Users\Admin\Downloads\taskse.exe
| MD5 | 8495400f199ac77853c53b5a3f278f3e |
| SHA1 | be5d6279874da315e3080b06083757aad9b32c23 |
| SHA256 | 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d |
| SHA512 | 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4 |
C:\Users\Admin\Downloads\taskdl.exe
| MD5 | 4fef5e34143e646dbf9907c4374276f5 |
| SHA1 | 47a9ad4125b6bd7c55e4e7da251e23f089407b8f |
| SHA256 | 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79 |
| SHA512 | 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5 |
C:\Users\Admin\Downloads\t.wnry
| MD5 | 5dcaac857e695a65f5c3ef1441a73a8f |
| SHA1 | 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd |
| SHA256 | 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6 |
| SHA512 | 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2 |
C:\Users\Admin\Downloads\s.wnry
| MD5 | ad4c9de7c8c40813f200ba1c2fa33083 |
| SHA1 | d1af27518d455d432b62d73c6a1497d032f6120e |
| SHA256 | e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b |
| SHA512 | 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617 |
C:\Users\Admin\Downloads\r.wnry
| MD5 | 3e0020fc529b1c2a061016dd2469ba96 |
| SHA1 | c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade |
| SHA256 | 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c |
| SHA512 | 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf |
C:\Users\Admin\Downloads\msg\m_vietnamese.wnry
| MD5 | 8419be28a0dcec3f55823620922b00fa |
| SHA1 | 2e4791f9cdfca8abf345d606f313d22b36c46b92 |
| SHA256 | 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8 |
| SHA512 | 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386 |
C:\Users\Admin\Downloads\msg\m_turkish.wnry
| MD5 | 531ba6b1a5460fc9446946f91cc8c94b |
| SHA1 | cc56978681bd546fd82d87926b5d9905c92a5803 |
| SHA256 | 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415 |
| SHA512 | ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9 |
C:\Users\Admin\Downloads\msg\m_swedish.wnry
| MD5 | c7a19984eb9f37198652eaf2fd1ee25c |
| SHA1 | 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae |
| SHA256 | 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4 |
| SHA512 | 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020 |
C:\Users\Admin\Downloads\msg\m_spanish.wnry
| MD5 | 8d61648d34cba8ae9d1e2a219019add1 |
| SHA1 | 2091e42fc17a0cc2f235650f7aad87abf8ba22c2 |
| SHA256 | 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1 |
| SHA512 | 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079 |
C:\Users\Admin\Downloads\msg\m_slovak.wnry
| MD5 | c911aba4ab1da6c28cf86338ab2ab6cc |
| SHA1 | fee0fd58b8efe76077620d8abc7500dbfef7c5b0 |
| SHA256 | e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729 |
| SHA512 | 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a |
C:\Users\Admin\Downloads\msg\m_russian.wnry
| MD5 | 452615db2336d60af7e2057481e4cab5 |
| SHA1 | 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6 |
| SHA256 | 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078 |
| SHA512 | 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f |
C:\Users\Admin\Downloads\msg\m_romanian.wnry
| MD5 | 313e0ececd24f4fa1504118a11bc7986 |
| SHA1 | e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d |
| SHA256 | 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1 |
| SHA512 | c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730 |
C:\Users\Admin\Downloads\msg\m_portuguese.wnry
| MD5 | fa948f7d8dfb21ceddd6794f2d56b44f |
| SHA1 | ca915fbe020caa88dd776d89632d7866f660fc7a |
| SHA256 | bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66 |
| SHA512 | 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a |
C:\Users\Admin\Downloads\msg\m_polish.wnry
| MD5 | e79d7f2833a9c2e2553c7fe04a1b63f4 |
| SHA1 | 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff |
| SHA256 | 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e |
| SHA512 | e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de |
C:\Users\Admin\Downloads\msg\m_norwegian.wnry
| MD5 | ff70cc7c00951084175d12128ce02399 |
| SHA1 | 75ad3b1ad4fb14813882d88e952208c648f1fd18 |
| SHA256 | cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a |
| SHA512 | f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19 |
C:\Users\Admin\Downloads\msg\m_latvian.wnry
| MD5 | c33afb4ecc04ee1bcc6975bea49abe40 |
| SHA1 | fbea4f170507cde02b839527ef50b7ec74b4821f |
| SHA256 | a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536 |
| SHA512 | 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44 |
C:\Users\Admin\Downloads\msg\m_korean.wnry
| MD5 | 6735cb43fe44832b061eeb3f5956b099 |
| SHA1 | d636daf64d524f81367ea92fdafa3726c909bee1 |
| SHA256 | 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0 |
| SHA512 | 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e |
C:\Users\Admin\Downloads\msg\m_japanese.wnry
| MD5 | b77e1221f7ecd0b5d696cb66cda1609e |
| SHA1 | 51eb7a254a33d05edf188ded653005dc82de8a46 |
| SHA256 | 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e |
| SHA512 | f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc |
C:\Users\Admin\Downloads\msg\m_italian.wnry
| MD5 | 30a200f78498990095b36f574b6e8690 |
| SHA1 | c4b1b3c087bd12b063e98bca464cd05f3f7b7882 |
| SHA256 | 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07 |
| SHA512 | c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511 |
C:\Users\Admin\Downloads\msg\m_indonesian.wnry
| MD5 | 3788f91c694dfc48e12417ce93356b0f |
| SHA1 | eb3b87f7f654b604daf3484da9e02ca6c4ea98b7 |
| SHA256 | 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4 |
| SHA512 | b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd |
C:\Users\Admin\Downloads\msg\m_greek.wnry
| MD5 | fb4e8718fea95bb7479727fde80cb424 |
| SHA1 | 1088c7653cba385fe994e9ae34a6595898f20aeb |
| SHA256 | e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9 |
| SHA512 | 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb |
C:\Users\Admin\Downloads\msg\m_german.wnry
| MD5 | 3d59bbb5553fe03a89f817819540f469 |
| SHA1 | 26781d4b06ff704800b463d0f1fca3afd923a9fe |
| SHA256 | 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61 |
| SHA512 | 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac |
C:\Users\Admin\Downloads\msg\m_french.wnry
| MD5 | 4e57113a6bf6b88fdd32782a4a381274 |
| SHA1 | 0fccbc91f0f94453d91670c6794f71348711061d |
| SHA256 | 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc |
| SHA512 | 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9 |
C:\Users\Admin\Downloads\msg\m_filipino.wnry
| MD5 | 08b9e69b57e4c9b966664f8e1c27ab09 |
| SHA1 | 2da1025bbbfb3cd308070765fc0893a48e5a85fa |
| SHA256 | d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324 |
| SHA512 | 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4 |
C:\Users\Admin\Downloads\msg\m_english.wnry
| MD5 | fe68c2dc0d2419b38f44d83f2fcf232e |
| SHA1 | 6c6e49949957215aa2f3dfb72207d249adf36283 |
| SHA256 | 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5 |
| SHA512 | 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810 |
C:\Users\Admin\Downloads\msg\m_dutch.wnry
| MD5 | 7a8d499407c6a647c03c4471a67eaad7 |
| SHA1 | d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b |
| SHA256 | 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c |
| SHA512 | 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12 |
C:\Users\Admin\Downloads\msg\m_danish.wnry
| MD5 | 2c5a3b81d5c4715b7bea01033367fcb5 |
| SHA1 | b548b45da8463e17199daafd34c23591f94e82cd |
| SHA256 | a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6 |
| SHA512 | 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3 |
C:\Users\Admin\Downloads\msg\m_czech.wnry
| MD5 | 537efeecdfa94cc421e58fd82a58ba9e |
| SHA1 | 3609456e16bc16ba447979f3aa69221290ec17d0 |
| SHA256 | 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150 |
| SHA512 | e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b |
C:\Users\Admin\Downloads\msg\m_croatian.wnry
| MD5 | 17194003fa70ce477326ce2f6deeb270 |
| SHA1 | e325988f68d327743926ea317abb9882f347fa73 |
| SHA256 | 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171 |
| SHA512 | dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c |
C:\Users\Admin\Downloads\msg\m_chinese (traditional).wnry
| MD5 | 2efc3690d67cd073a9406a25005f7cea |
| SHA1 | 52c07f98870eabace6ec370b7eb562751e8067e9 |
| SHA256 | 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a |
| SHA512 | 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c |
C:\Users\Admin\Downloads\msg\m_chinese (simplified).wnry
| MD5 | 0252d45ca21c8e43c9742285c48e91ad |
| SHA1 | 5c14551d2736eef3a1c1970cc492206e531703c1 |
| SHA256 | 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a |
| SHA512 | 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755 |
C:\Users\Admin\Downloads\msg\m_bulgarian.wnry
| MD5 | 95673b0f968c0f55b32204361940d184 |
| SHA1 | 81e427d15a1a826b93e91c3d2fa65221c8ca9cff |
| SHA256 | 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd |
| SHA512 | 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92 |
C:\Users\Admin\Downloads\c.wnry
| MD5 | 93f33b83f1f263e2419006d6026e7bc1 |
| SHA1 | 1a4b36c56430a56af2e0ecabd754bf00067ce488 |
| SHA256 | ef0ed0b717d1b956eb6c42ba1f4fd2283cf7c8416bed0afd1e8805ee0502f2b4 |
| SHA512 | 45bdd1a9a3118ee4d3469ee65a7a8fdb0f9315ca417821db058028ffb0ed145209f975232a9e64aba1c02b9664c854232221eb041d09231c330ae510f638afac |
C:\Users\Admin\Downloads\b.wnry
| MD5 | c17170262312f3be7027bc2ca825bf0c |
| SHA1 | f19eceda82973239a1fdc5826bce7691e5dcb4fb |
| SHA256 | d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa |
| SHA512 | c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c |
memory/2108-1397-0x0000000010000000-0x0000000010010000-memory.dmp
C:\Users\Admin\Downloads\177481715996082.bat
| MD5 | c719f3a51e489e5c9fbb334ecbb45ede |
| SHA1 | 5b5585065dd339e1e46f9243d3fe3cb511dc5ce6 |
| SHA256 | c67348cacc707decd859789c8ed1e8afdb6eb8753d3941d0ee9ecba2f00500b7 |
| SHA512 | b2b0ea3a3701b5d689a5cbcc5c16721cf807304ca02375f33c5b507c1a00655917354e32f6e2b96c081125751498484c974c2d3eaa754d6074c9d55aec8c0164 |
C:\Users\Admin\Downloads\m.vbs
| MD5 | b067df716aac6db38d973d4ad1337b29 |
| SHA1 | 541edd1ca3047ca46fef38bd810e5f0f938b8ae2 |
| SHA256 | 3f7ded679522e917f30aacbfb7c688ef477d7886e722731c812dc486195e220f |
| SHA512 | 0cbc1b820abf13e225e7a7636ce1e336d758fa54a9ee6aa09dee7a9748a2cf890f45ba55a7a188b69972b396bac37ddb9a98ba202ff2e203b34a75e515c0759c |
C:\Users\Admin\Downloads\@[email protected]
| MD5 | 7e6b6da7c61fcb66f3f30166871def5b |
| SHA1 | 00f699cf9bbc0308f6e101283eca15a7c566d4f9 |
| SHA256 | 4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e |
| SHA512 | e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3 |
C:\Users\Admin\Downloads\@[email protected]
| MD5 | 13dc3f90685746384b52de658eb7d844 |
| SHA1 | 3a450edbfa1e9c1899fd8e12b1acd473526e7b12 |
| SHA256 | 89b642d2de7bf47de1eef7b04abb7cbbbb5206d25af981b4c9ab219c41f66bb7 |
| SHA512 | acc0df58c4d5be7866a1e2ca5a77e77255bdbe54ab8081f6fd0a6881c6f7c21ce7ce837a92c20efa25c4ed0ef0a9dfc04eb9df0ea81619e735000a7f3ad4353d |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\AlternateServices.txt
| MD5 | 05e6bdd472573307e6eb4faef820f1d8 |
| SHA1 | b5197d06327e14134bee076e116001e091cd773f |
| SHA256 | afc6ebd2f1a7efb5929fdb6b1848c479ebcb17b9696198464a50b0f360157d8d |
| SHA512 | fd13a90e220a10604521b7d053c32e49aa3da7b90e85b5a0d65c3d6cca2f52424444d37264ecfa8ca99e57d168ba724942a2d6cff1ea396d17b8b75dd8c50dc5 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cert9.db
| MD5 | 3bf23e03f5a8d40eaf0d2faa0b5fbc25 |
| SHA1 | 2508aed401789014498564d89a0d5342788a2050 |
| SHA256 | 34f94b7283281afa51f51c76b8ee362289d40d3783a9ee801643a04fe338b729 |
| SHA512 | 00e05bbe82ec62ce38b73269884bda09ad86f59f0001d58048a9e1745325c991ef2ca25d8f42c6e6fb55b9c2dc8328898182a0caa48b4121430798dc0e18fe71 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js
| MD5 | 3527dd056932b541a1f9b834b09fc486 |
| SHA1 | bd3ced82b255dfe3dd916f60268a544f56730459 |
| SHA256 | 42207283f4bb8b775684d78c542f8789fd29d017a233905aaebcde8bec494a33 |
| SHA512 | 89ef90a12bd1f0410f0fc32bae310c585959e3f326270b1f1047d05c0f1752617f399781b4f9d9eb39d4b06f92ead4880366d1eb7f2df4b7e40a4af5f96f57fc |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\SiteSecurityServiceState.txt
| MD5 | 7f2047ae8af3f8b7f0455d357ad2b492 |
| SHA1 | f9ac2869a16249d3022f2915fa4b9844298e37bc |
| SHA256 | bac42d954c6fb5634d537fd080e59accd19dbd16551e8cd92bbfac45661c6cd2 |
| SHA512 | af2fdd01450837cdb83830c2e74789faddfeba88b1bce85e181b3c6632f619ed14868d4e1de200ecc2c6d294aa62d882e853ec47a89897204ab2af50befd16b7 |
C:\Users\Admin\Downloads\00000000.res
| MD5 | 9d3a843442209b6585b20ea3a876e3a3 |
| SHA1 | c7009d198d4a490125a772448b69513ecfec3c62 |
| SHA256 | bc38d802dfcffa11f81b92b1663f47f318d2e27a378bd39b02b71aaf0fdf6431 |
| SHA512 | c7e7e0f90879f04e9bd3a20b3bd99c48ac2a57c92e8d3ca73ce2f1339feb62673bd5b85d80d33a811ec9470dcb5b04f8e4781482b9e23603b1e410f42e8a0801 |
C:\Users\Admin\Downloads\TaskData\Tor\tor.exe
| MD5 | fe7eb54691ad6e6af77f8a9a0b6de26d |
| SHA1 | 53912d33bec3375153b7e4e68b78d66dab62671a |
| SHA256 | e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb |
| SHA512 | 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f |
\Users\Admin\Downloads\TaskData\Tor\zlib1.dll
| MD5 | fb072e9f69afdb57179f59b512f828a4 |
| SHA1 | fe71b70173e46ee4e3796db9139f77dc32d2f846 |
| SHA256 | 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383 |
| SHA512 | 9d157fece0dc18afe30097d9c4178ae147cc9d465a6f1d35778e1bff1efca4734dd096e95d35faea32da8d8b4560382338ba9c6c40f29047f1cc0954b27c64f8 |
C:\Users\Admin\Downloads\TaskData\Tor\libgcc_s_sjlj-1.dll
| MD5 | 73d4823075762ee2837950726baa2af9 |
| SHA1 | ebce3532ed94ad1df43696632ab8cf8da8b9e221 |
| SHA256 | 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b |
| SHA512 | 8f4a65bd35ed69f331769aaf7505f76dd3c64f3fa05cf01d83431ec93a7b1331f3c818ac7008e65b6f1278d7e365ed5940c8c6b8502e77595e112f1faca558b5 |
memory/6044-2648-0x00000000735A0000-0x0000000073622000-memory.dmp
memory/6044-2652-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/6044-2651-0x0000000073630000-0x0000000073652000-memory.dmp
memory/6044-2650-0x0000000073660000-0x00000000736E2000-memory.dmp
memory/6044-2649-0x0000000073300000-0x000000007351C000-memory.dmp
\Users\Admin\Downloads\TaskData\Tor\libevent-2-0-5.dll
| MD5 | 90f50a285efa5dd9c7fddce786bdef25 |
| SHA1 | 54213da21542e11d656bb65db724105afe8be688 |
| SHA256 | 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f |
| SHA512 | 746422be51031cfa44dd9a6f3569306c34bbe8abf9d2bd1df139d9c938d0cba095c0e05222fd08c8b6deaebef5d3f87569b08fb3261a2d123d983517fb9f43ae |
\Users\Admin\Downloads\TaskData\Tor\ssleay32.dll
| MD5 | a12c2040f6fddd34e7acb42f18dd6bdc |
| SHA1 | d7db49f1a9870a4f52e1f31812938fdea89e9444 |
| SHA256 | bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1 |
| SHA512 | fbe0970bcdfaa23af624daad9917a030d8f0b10d38d3e9c7808a9fbc02912ee9daed293dbdea87aa90dc74470bc9b89cb6f2fe002393ecda7b565307ffb7ec00 |
C:\Users\Admin\Downloads\TaskData\Tor\LIBEAY32.dll
| MD5 | 6ed47014c3bb259874d673fb3eaedc85 |
| SHA1 | c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8 |
| SHA256 | 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19 |
| SHA512 | 3bc462d21bc762f6eec3d23bb57e2baf532807ab8b46fab1fe38a841e5fde81ed446e5305a78ad0d513d85419e6ec8c4b54985da1d6b198acb793230aeecd93e |
\Users\Admin\Downloads\TaskData\Tor\libssp-0.dll
| MD5 | 78581e243e2b41b17452da8d0b5b2a48 |
| SHA1 | eaefb59c31cf07e60a98af48c5348759586a61bb |
| SHA256 | f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f |
| SHA512 | 332098113ce3f75cb20dc6e09f0d7ba03f13f5e26512d9f3bee3042c51fbb01a5e4426c5e9a5308f7f805b084efc94c28fc9426ce73ab8dfee16ab39b3efe02a |
memory/6044-2668-0x00000000735A0000-0x0000000073622000-memory.dmp
memory/6044-2669-0x0000000073520000-0x0000000073597000-memory.dmp
memory/6044-2670-0x0000000073300000-0x000000007351C000-memory.dmp
memory/6044-2664-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/6044-2667-0x0000000073630000-0x0000000073652000-memory.dmp
memory/6044-2666-0x0000000073660000-0x00000000736E2000-memory.dmp
memory/6044-2665-0x00000000736F0000-0x000000007370C000-memory.dmp
C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new
| MD5 | 92209b8e1ca6101769827c579ff05374 |
| SHA1 | 557bc2bc63fbff478db7b69c9681944f4ad69e78 |
| SHA256 | dd0cce4c169ba1fb28fd894f042b4b07e233026f9e175e8f4747ca86ece0fc81 |
| SHA512 | e9d7039841868f3929c1d893d278a2a1de92697f55e56ec9faf770deb9338fa067c985d281d6cbddfb04966383e2461689357f222db2d87761ddfa77f816f39e |
memory/6044-2686-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/6044-2697-0x0000000000960000-0x0000000000C5E000-memory.dmp
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\jumpListCache\Qp40pIc_z6N05FSZsy_d6Q==.ico
| MD5 | 6b120367fa9e50d6f91f30601ee58bb3 |
| SHA1 | 9a32726e2496f78ef54f91954836b31b9a0faa50 |
| SHA256 | 92c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0 |
| SHA512 | c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f |
memory/6044-2723-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/6044-2729-0x0000000073300000-0x000000007351C000-memory.dmp
memory/6044-2772-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/6044-2801-0x0000000000960000-0x0000000000C5E000-memory.dmp
memory/5316-2808-0x000001E5D4C20000-0x000001E5D4C30000-memory.dmp
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js
| MD5 | dfd697e208a15134eeca14169205e274 |
| SHA1 | b91c572f87dac5d1cafc55fb0576985311b1ab73 |
| SHA256 | 429a1839a04b152361e1a57a462fd1e9bd1481513883d971253bfa7618db104b |
| SHA512 | e858f02fbcbd2867a8c3cda911c43a2b81edee6784c6fb8077c00b2eada6c0d4cf5237619c34c8665ac07940b3f60933bc96cb66425daa46a42631754658ca9d |
C:\Users\Admin\AppData\Local\Temp\tmpaddon
| MD5 | 85430baed3398695717b0263807cf97c |
| SHA1 | fffbee923cea216f50fce5d54219a188a5100f41 |
| SHA256 | a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e |
| SHA512 | 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
| MD5 | 3d33cdc0b3d281e67dd52e14435dd04f |
| SHA1 | 4db88689282fd4f9e9e6ab95fcbb23df6e6485db |
| SHA256 | f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b |
| SHA512 | a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
| MD5 | fe3355639648c417e8307c6d051e3e37 |
| SHA1 | f54602d4b4778da21bc97c7238fc66aa68c8ee34 |
| SHA256 | 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e |
| SHA512 | 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c |
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
| MD5 | a01c5ecd6108350ae23d2cddf0e77c17 |
| SHA1 | c6ac28a2cd979f1f9a75d56271821d5ff665e2b6 |
| SHA256 | 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42 |
| SHA512 | b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
| MD5 | 49ddb419d96dceb9069018535fb2e2fc |
| SHA1 | 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6 |
| SHA256 | 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539 |
| SHA512 | 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
| MD5 | 8be33af717bb1b67fbd61c3f4b807e9e |
| SHA1 | 7cf17656d174d951957ff36810e874a134dd49e0 |
| SHA256 | e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd |
| SHA512 | 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
| MD5 | 33bf7b0439480effb9fb212efce87b13 |
| SHA1 | cee50f2745edc6dc291887b6075ca64d716f495a |
| SHA256 | 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e |
| SHA512 | d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
| MD5 | 688bed3676d2104e7f17ae1cd2c59404 |
| SHA1 | 952b2cdf783ac72fcb98338723e9afd38d47ad8e |
| SHA256 | 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237 |
| SHA512 | 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
| MD5 | 937326fead5fd401f6cca9118bd9ade9 |
| SHA1 | 4526a57d4ae14ed29b37632c72aef3c408189d91 |
| SHA256 | 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81 |
| SHA512 | b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2 |
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\Z4LDA95A\wikipedia[1].ico
| MD5 | 904ce6bd2ef5e1eaa6de1eb02164436b |
| SHA1 | b37ac89616b9e4c01a35991af59fe6b63e41a48e |
| SHA256 | 3638de61226857e62cf5187d7d59cf902111ad4f792b5bdff1bfed3f5ed5e608 |
| SHA512 | 05044e298742b1520585ae3c029938036ebed50337608a600c4924a29e3624ce704f3b13fbe348d9e1b1e93b1e0abff9f53bbc9fd31929199f9a374f154f74c2 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 01410376a484be55343407a81b79f9c4 |
| SHA1 | ba2595226510fe92f2da2bd2a05dfa577a16a2ee |
| SHA256 | 22ba72b7e3cce5c10b2f3d37da682f8a4a5a07dcba7d989c15b9835481f6a0a9 |
| SHA512 | 79e141e201005473ec91853fec23f75d9ec3177a2b70887e8298d3eb42ece2a280331d28d0361d0946243d5ce17ff0e61d38f1af1a0cb8f23c8680b312c86389 |
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OHP8MVFQ\edgecompatviewlist[1].xml
| MD5 | d4fc49dc14f63895d997fa4940f24378 |
| SHA1 | 3efb1437a7c5e46034147cbbc8db017c69d02c31 |
| SHA256 | 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1 |
| SHA512 | cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
| MD5 | f1cc56fa19df232f427526efc8bbd8e0 |
| SHA1 | ed5b9547e3bead774fa3322bac8abccca6c323d7 |
| SHA256 | 48fe7e0e28163b71dfe2c6eae253fbb0877640a58e3586a84e2443b59a371f46 |
| SHA512 | a1de5462d8f88f95592da25a962253258445e610a1360ff2a3bfc0f77ba0401ce327d7325318eff25ee3afaf0bdec1f9d48bc1b093a617e038f2a2a52966913d |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | c45b9c2b13d039c0b2d5371e50156678 |
| SHA1 | 9c9ee378c528f0571d3ef48262cf0bae811170c1 |
| SHA256 | b25fe7bc92ce8e8584ff8df4f7f7853aa15149bae7c5fcb524815dbe064c4070 |
| SHA512 | 421fe43380c925b322bfa3a38aad7c0e2494f1be1937d9cc920d65e2c1631f96c6a11f328696a75479eae7f43df0268821a0c9c4eb544fc450f7d78c5f44d195 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 9e22221ae48ead3efe8ee91c2229c23a |
| SHA1 | 196a8be009bce2ac3df528747893e79fa3c01730 |
| SHA256 | d04337900ee53d4e71b8a2bae357cf66ff8463051a7d723f892110a67b3d3da9 |
| SHA512 | f2f6e150dc8be452739591de2788e14b937077196acb058ff50ed471c20b14235d8051b85992b243b72c352a7e48e685d7de3d8a04fa63c4a82e14347dae0ff5 |
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\VA9XWYS9\suggestions[1].en-US
| MD5 | 5a34cb996293fde2cb7a4ac89587393a |
| SHA1 | 3c96c993500690d1a77873cd62bc639b3a10653f |
| SHA256 | c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad |
| SHA512 | e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 8a0ca295f88a2695114a5df00d51d7f5 |
| SHA1 | 9c78cded46dda18ac4c78c2a49d01f5de7110053 |
| SHA256 | 6fcd1b9d412afc7a672ebed853d4f739008686e99c5ce95cd984e383773c755c |
| SHA512 | 3abd878a2c12dfdb7a26f6e6d6d482de7753d6f514d1d3ac53c4e59b0d5eeb64d7871f56113f12b43327766cc03063abc53fafe4f62d03fb68298bb2c8cd649a |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5B23235D54208C34AFF88FC6F18585FD8A8F8FAD
| MD5 | 6918dcce349faadae566cfcd93bdf18a |
| SHA1 | 1280b4350f4ba1e8050b5637306af5c846be94d8 |
| SHA256 | 5a1b72b3ad3eb4deddd7cf4eae672e1c143d6a74874a422060f47ffd4d75ec3e |
| SHA512 | 9c27d6607ddeba858c55951053384089f692483a8532afe20980578be0eaeaa26f4003845c02657cf6132db08098a8f22cabb43647e88d1902dcd499092b9060 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 7f8a631c6e96805721c1207d15c43a1d |
| SHA1 | d9fc4b2b35de028acd85b4b2e1d2a02d6648b7da |
| SHA256 | 2b214863e3cf72cd31ec214df09e4565abde23c6971ebe5a503c805a8dca6633 |
| SHA512 | 0502744a033d0da9001d1b375bf1452c8a97fa6db126492d54d4a99075d52156be7fad125ed8079bb0ead5da181cadafceccbebce729bb061e0ce3051da7419c |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 2766f41d38f08834f21506075276d872 |
| SHA1 | 22a2b5808102696b0cda639327edc7ccfad3c144 |
| SHA256 | ac1f7bcd9c3e569a94d2bf86394b04f8cfd97292e60fd06637a3fe9e036f7d98 |
| SHA512 | 37ba7f0b373d28999fba974c4793723af0ecfb2acea3628b7db870c4168d15819052c72b609aa3706b3fb9474867a88e6aed2c9bd9d75c50e28292040263da13 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 9f9d3698d318b8e3aaae75a3b78ca3d5 |
| SHA1 | 2ec55b4293466234043533e5081b94dfff4ea683 |
| SHA256 | ac1e712ef0bcc48193b0c97f3e136aeb299fe629de44de6dd9ff8220beb25970 |
| SHA512 | 34868358b60e6ac523678b7a92fb9329bf89e222745acddb0f8eff9eb37e48e27dcc644f73131278a063288ac50a68b660351482246c8e0009647e58b0b01097 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\jumpListCache\1rK81a9lw12pfeCINDT9VQ==.ico
| MD5 | 42ed60b3ba4df36716ca7633794b1735 |
| SHA1 | c33aa40eed3608369e964e22c935d640e38aa768 |
| SHA256 | 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8 |
| SHA512 | 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9B856C0DF44BF1753320193AA192D3DF4B9BF329
| MD5 | ac976d3432ff81bf808efbbe0fbaaebb |
| SHA1 | 58a636bf3a916ad508d491ada91c98d8469d6159 |
| SHA256 | 95d0c37f4a90f6206d8a13ab608cf0011e087c5db97157c851689968a2a36a14 |
| SHA512 | 2024143fe48de4b93ad236bd1f2df20e0bc74da511082778afc8129faece359ebc8615435edbd2c5fe0e61d8735343aa37d684a8798419e780f0ab526803e5ab |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js
| MD5 | 624b3f50541ab2dcc6a2c4c60d86e244 |
| SHA1 | 5fdaac3b80fcfb3d1448dbe5c976fd293aabb8e7 |
| SHA256 | 2db45d27335b295bfc39da2c2002481fbac2aca18297e4c9140608e27f1c14ee |
| SHA512 | 8cadb1d340350d974a5bd2781d47f80b35c4d893be250aebddf7f70ecfe71ac1347b515515c95c701b27cf8dfdb59bf5285adb0f4c6308c5ed63b05447c79145 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\78E24F7FDF4F16F88104DEBA41975D008D88981B
| MD5 | cd5bff0b1f44a67a0487aa3ca4081d16 |
| SHA1 | 082cc9a02c49875325c1ff88b5ebb1a584da79d4 |
| SHA256 | 0f543663ac05653d712952f67aa36abd59943bdeac098fe09bb0abd7cd08e8b5 |
| SHA512 | a1b04f629b69f4c5ad09150a1e6945328bccb845337ddf6bd65287ac11dba91ec9e593b5a09a681453cdf69eef86b325139a5aca50397b01f0ef652c979f64e0 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\66EE0C25DD982F86A7354BF887DEEEE054F31C7C
| MD5 | 2b1eaab258adc3b7d960bc7fbaeec3f7 |
| SHA1 | 09cf54cb7108e140299f8ba5ab8b532a5e5ab7f7 |
| SHA256 | c3aa1d47d508c2172ee459d92d151df7d764535d8003a2711e1a095669c2a6fa |
| SHA512 | 1a926dc3884d9e191f659c262b9796f5a1942b1ed97cae714ccc1acd603590c569aac96c361a4675ee857405b27a01a6a4bca6a396f862f99f83d5bc79d6d846 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\23995EEC25FF84EF9A637DA258D42952207A7218
| MD5 | c2a3b04d6f837753a91b2b55327d0360 |
| SHA1 | a0641e4501f9960340f2e84c0e24c1e99a9446ec |
| SHA256 | 292e62e29883301cfd36372978f51bf65fa984eea16a98f61be10bc41440c44b |
| SHA512 | f8f517a4fd1abff06407b9ab04c88a315d3034d8c09e7ab0e5efa1454cae87a09971f7cf25c249f152527016a5d96865c60ca3d2f8ba87e2edab209c221c6a85 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 18c088a1fb70b8760eeafc25a1985fda |
| SHA1 | 5aca299e68f955dc4a3eaa25e83d0c3768ffd571 |
| SHA256 | f7d4cbafd267b86649a5b02a9b712929c2399cfe73e45d948eeeec3862d47b3a |
| SHA512 | e26993cfde8bd4d61861bb37eb9fa435caa039ba0f307e5711be077b4ffc7cda5e36ef7cbb9919edb162792c4f8b6c5f52e9923bf2aaf0061949fca3b92dc36c |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\2988
| MD5 | 18df8ad19ad8bc5965e7ad58abf96878 |
| SHA1 | 1b62f86a2695086e95efbb81fc95fdf43d885127 |
| SHA256 | 08efa867bbfb24402727af16b0b8000d7f601cf2597a543ae9431237c573d38d |
| SHA512 | 9b5d4d50d0c31ad4c6a1380dad56cc5b708f98a6a7c82601f7995aa3d365395b948ec3e4b7870c7e31761575c1fb926d08a6b0290ace604f1c433ec3356bc31c |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\422
| MD5 | 26e64359e3fa38d24dcd8352679d3a25 |
| SHA1 | 463fae139f28cd3f364f2df5587f4eaaed866edf |
| SHA256 | eb7ece899defdd8d8276c62b04092418b8bc379850ccff5ce94af8a0157516b6 |
| SHA512 | fa61384f1c48e2601e6404aced0bab52c3c0ba1661f77e7c636c18d4e881a523a16d10ff5b8cbda80701a82020e1285a50893419f2aac63cc08e98b4b70a77ba |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B2C0BBEA9E5982C4B1F4A097CC3E57B3765DC264
| MD5 | c6dd53b97ef28a38aeef2d0341e981f1 |
| SHA1 | fcc1dc669ec23b974222bd14b6a99f13f54cb0f1 |
| SHA256 | c0706dbeaca62cedc1af8623f3a61bf7c6779a78dd4ee28952085132110d2c51 |
| SHA512 | 3469e08dcfb08417688c46afb75a7e4f06ee0e192350a48d138a97c0e2765cf60fb2c268e63af24da7c1923c6a65af57b6d24a4599a19b7e1cc56403ced2b9ba |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\2DD938C4C35664291D13F9F8562436A0AD928145
| MD5 | b6b361b66a29e3bc58f56e4fba0197b4 |
| SHA1 | eac68d7ec8934a56622856317a00c282783a01d5 |
| SHA256 | dbbd4e28fbf6c705a0213929a33191fcd696e0010284a47ed84d8460c26e2553 |
| SHA512 | 842c4b2b8b812a14793f5340a41f3615cbc2070b4cd015584c6772be185b644565025f53cf1476813d1d5058ffaf5cded2c868ffbde24c27c2c69626950198e7 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\17895
| MD5 | 8ee3fea41bf31420f8736ba14dea1520 |
| SHA1 | d69489fd2a254ca17e23db10157a279700c5f3eb |
| SHA256 | 1303619979727bc22b91e58e85edc9e1da90db20132d1c942d1d8a5cca0ee58e |
| SHA512 | c3691db46fc8c63278f541205d7ec80f6df2360b8f8b500e2e8c504aa2e9875812f8d6a2d0df10a74599493c9fdc1bf855177a159e9bbcddb9b56f99f4d240d6 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9D31F1A48DF3DB1E65BDC64027ACDF5D36EE3A8B
| MD5 | 08a31e3b556e5fc40ba3fe51c43cc75c |
| SHA1 | 56b08f1263ffbdf8b7e6ebc37dc5097ad7d12fa2 |
| SHA256 | 0e962fc52004e1c03e5b73fe55883a50f05cf62ff4cb44d02e98a6e581330d09 |
| SHA512 | 899d438ec408e9130f2dc73822e6f61ddebe5db710784476f7f36391f512521062820b8be9800fcf2d3928147f053de4b1623d20ba79ce0843a50e9427f6c382 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\333
| MD5 | a06cb72be59c95540da2fe9b26abd7da |
| SHA1 | 1d5cb2df0097c37f88359e8a46eb2331e56102e0 |
| SHA256 | dab8e4e60e5babe78afe2f05e0d2536eafac358a131f055ab734acc6e0d020fc |
| SHA512 | 9cf134edbf7ad20e1612501c7dec0d019a7002d3f440109d4fed08798599fc52d85d6da671dd22406f9c64e41c02feead238443ea18d596cf7c142177ff0be87 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\6427
| MD5 | 64e31386fe7ba1a96bb90a39f91f8582 |
| SHA1 | d78f0aadc4123caebc92bd62c29abeb6b7013278 |
| SHA256 | 38e7f62e6301db06054d276a4d873e2c638af227584e14f9505b3da70c13c76a |
| SHA512 | 38fc238195718c9666efa8558c313edc37c10a0e5ae38493d469b5c382982c8be8dc504c50e8408aede51cfd7df93d8de724646b6259f2d029b2498e7d02a6f1 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\132357D78463791B03492B75F7CDDB775BA14F8B
| MD5 | 53dac74dc1b60112a7e4d7266d69b0e1 |
| SHA1 | 65972ed050e32eaca4c18be7c3bfc70131eaad77 |
| SHA256 | 34ad58d9063b971ee755e4f0e6eef1d9bf20b2698a39d8b245ca5bbf43fb3a8d |
| SHA512 | ee2c24be868ccf35eee1439f1698528b14f29cdda3e1b2665b369e95406b3220511e996493cf9a2a65f2d9bc2cfc267dc16defc5576b6aa5a06be97974eaae1d |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 162991abd91c0799dc9368c8c002c40d |
| SHA1 | 068d00af05c5e62ce8e4e819aa2852c013b7c1d9 |
| SHA256 | 7203ff3722df666112799e9c9e3ae1903bf474b0a22f3625b387b9c5db6e3fae |
| SHA512 | 9f81f37480c45a69067df061f0e58f88e0e4a18e7470a63405ed0c88ac75392b7be690b4bebfa05db51c5ac1f9a467f9e90f339c134089b62c914ca8deb0686b |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 00cfae0db5b086bdec363e0c089d7e28 |
| SHA1 | 9dfce02e00fa14fc7e5682dc6e92f7e609391db2 |
| SHA256 | ecb7387eda79c1819b466c88034dce07d805a8abf0c28166b9e899bd2b21e1a3 |
| SHA512 | e2d8799804354f6a658a66a2a49251e10118025354da5befc1d249fdaa875ba4346601644caf150f4997769900e03b56db3b567e242b3ed7251a52dd4d93a983 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6FAA95BEDAF1807F4E509446193094F47372C67A
| MD5 | 2fa6674c4640d9ac8eb5ef51deea43a8 |
| SHA1 | 94812ccb61a24238fef26d5307e782ceb4747738 |
| SHA256 | 4758f7c16cec3cdaadc25b426f494b768fd5b9153cbdcb7be41e3fe3ed8133b1 |
| SHA512 | 268bc2b1a77b61a550462985d19c67038d3e2818908da49e36cefd01fb3e66481299791a5551dd0fed80ca14889ea9011d69dfa93cb3637b014c6058021a54cc |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 3b807808d091ea67dd1e38cebf24daf0 |
| SHA1 | 95152fb8fe77588f234f2ee4421ef64181ac74ab |
| SHA256 | 416eb88cbd888b120e270300981434b8f86bde208071b0d3914eefdfda3e2f3b |
| SHA512 | c8279e122d911f164d19909ed489610366b5af46a25f610a22d470db51c0dde38429d0071c7a03d23c9c11205ce03779a473b7270bead28af6f4c590f3a052be |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | f22c27169919f89c9560207bb46d3d38 |
| SHA1 | 0a5cd1c081cfe354a727132ef663a7be81b9c984 |
| SHA256 | 671685b679ad0905b1526f736f3dfead2af2caf3d11384921ba288cae799455a |
| SHA512 | 541436c9599790bc202ca736965e8431716e411dd7fb214905a48d4b65a235c5c7f007963e0fdf3ddcbe289335b9925b3e81cdecc0d6d3418c06bce43a6a4da2 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js
| MD5 | b1e2e2f4e149cf98e614f80b39a9968f |
| SHA1 | a441067043da865d7dab25aa2870b6e2bdc3ca8e |
| SHA256 | 236ea2555b5253c0e17d8ae60ac5b5a952634661a07eb73df4036b56d3b04ea8 |
| SHA512 | ade089b8a4a19a97a8c284030eb44fb9665a165ebd9cbba4c5541a5f31c7c63a4d86dc1a6bc0fe07ff2d0b8b0d5f99d4969e3548de8d267256a4902805aaf4ea |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\8DA4DB119404E4D87EEC216310885EDB603B059C
| MD5 | 6e770777e861e783ccdb2112d376faed |
| SHA1 | c7253223565ccedd9d95e4271023ec5aeaa01695 |
| SHA256 | 75634f48a86da0d5b339f503e2bcf2e1d852d63ff4500d2fc4a5e8538ce520fe |
| SHA512 | 2439259107cc7b4083bc4ac303cdb4d8bbe5db3b8856e5f4fffc00476d82f40cb13e8a7f9f4c9c8a20407d61bbdc27f8d5880daf01ceeaffcf40c1d4fa0ed4bb |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10701
| MD5 | bafa4068b5e8d0a7e59dc07f073dd808 |
| SHA1 | 6a4793d90d593ff9c6c614a7cc4e0968bedb737e |
| SHA256 | 02df0c4445f298c3a0e1489d4b131156d8adbe735f0081855561052da603afaf |
| SHA512 | eea4c4e84056a001c21da9c028c7dd75cabc64017c86dce378bb59d722f390f47fdbd10c97a4917abefbc7d20351d009e5195138308b43c30eb94bf26ae7eefb |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 7f7731be5539103c73e11d24d06fabb4 |
| SHA1 | 710ff769c8f0e193ceeb6fa374eec96443d11386 |
| SHA256 | b367a2007f69ebcea4ff2b19853942684881c9ebf2a18ae0b6ad0903ca0fa443 |
| SHA512 | 84569e5343f2b61582a32f2fc0a837f9b3462811d4d973ded375a6707de40cc8637a8aaffbc166daeee2c455dcfa41129c5737849b56c0af70c4ab04f8524225 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | da79d16f0767d82dd22331cbb1aee93f |
| SHA1 | cca95d6ba020ab3359ec84f7f3fed33b9e4dc933 |
| SHA256 | 903fc549ed4fc963762d6c06118fd4b2bd206314b99dd2ad409b532aa2324690 |
| SHA512 | aad5c3b30b1b104b98d64a7b42a6702685bb287067f83e51521eb917bbf3733c88780f4133adb82cc6fec424b9b995286a257ef3fe5a8fa0d64babab82c3b3d6 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cpcrisk.com%29\idb\2171031483YattIedMb.sqlite
| MD5 | ae88b7047579e4cd4f867c95514826b4 |
| SHA1 | 792bb7e4b491966c5937d30a0a838a4621b8866d |
| SHA256 | 7be069632fed23e8a55451b5907ad94eb81149d313523e106aef39fc413363bc |
| SHA512 | 39960dd75512761df204dbe21511a4833a319c5b198576d753c915422b354c4f4aec36a07ba31825ecb7f28f5ec961655452a80ab0559bde2792b7684e3541fc |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 4fa2f8e8306aa21325ece530f8500b5b |
| SHA1 | 4e01b2b29077214c1f99012ebe2d30659eb57cd2 |
| SHA256 | 37cea2ac3164c9bb13caecd039c25c11aa55a1e2bca27a94e7ee85f493d933ed |
| SHA512 | d6a701b907091d08b4bd0f081ed64a2683556d280f35a4e17e2f7757a1461ed70367a38c26e04fdc941cd8403d7c4471cea044de46c21dceeb6ac4720b3fae50 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | 2c61ad7e7d702d3af8c98280845298a3 |
| SHA1 | 1842e908c4f3efadea4aacc90ec3899f1b3b9ef5 |
| SHA256 | 7537d4ae66cb7d71be108283ae4006f162ee3ecce1cd67ac43a1e6b41ba1788a |
| SHA512 | 32b05f4f3f18b41307b76f49a8a665e3da3358d4ef9f0eff6690365ad6b5520d1743c55140e722075c0650c1a37ce0a7e9cc5b504f6eb5d41196667cc8c05998 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
| MD5 | e321ee5d8a8ff0cf8e30c0d6f2029a17 |
| SHA1 | e47aa131525e93e0f239e459789b357c7eab895e |
| SHA256 | 0e09b9a5550545b27f870b308df41a0d24422730638203d0bae536ece6e63a10 |
| SHA512 | 41bdcfebfb9083a2f2e623d36673416fcdcfd03295436d9163c85ffca4bc9aa108f33bb6dcbe58c27b8b459a487ec4500df47b1d88205a7bceffa1ffc98845fe |