Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\No Escape.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\taskdl.exe	N/A

Modifies file permissions

discovery

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A

Legitimate hosting services abused for malware hosting/C2

Description	Indicator	Process	Target
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A

Drops file in System32 directory

Description	Indicator	Process	Target
File created	C:\Windows\SysWOW64\winnt32.exe\:Zone.Identifier:$DATA	C:\Users\Admin\Desktop\No Escape.exe	N/A
File created	C:\Windows\SysWOW64\winnt32.exe	C:\Users\Admin\Desktop\No Escape.exe	N/A
File opened for modification	C:\Windows\SysWOW64\winnt32.exe	C:\Users\Admin\Desktop\No Escape.exe	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File created	C:\Windows\rescache\_merged\4183903823\2290032291.pri	C:\Windows\system32\taskmgr.exe	N/A
File created	C:\Windows\rescache\_merged\1601268389\715946058.pri	C:\Windows\system32\taskmgr.exe	N/A
File created	C:\Windows\rescache\_merged\4183903823\2290032291.pri	C:\Windows\system32\taskmgr.exe	N/A
File created	C:\Windows\rescache\_merged\1601268389\715946058.pri	C:\Windows\system32\taskmgr.exe	N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description	Indicator	Process	Target
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	C:\Windows\system32\taskmgr.exe	N/A
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000	C:\Windows\system32\taskmgr.exe	N/A
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	C:\Windows\system32\taskmgr.exe	N/A
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	C:\Windows\system32\taskmgr.exe	N/A
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000	C:\Windows\system32\taskmgr.exe	N/A
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	C:\Windows\system32\taskmgr.exe	N/A

Checks processor information in registry

Description	Indicator	Process	Target
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Windows\system32\taskmgr.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Windows\system32\taskmgr.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	C:\Windows\system32\taskmgr.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	C:\Windows\system32\taskmgr.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

NTFS ADS

Description	Indicator	Process	Target
File created	C:\Users\Admin\Downloads\bomb.zip:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
File created	C:\Users\Admin\Downloads\42.zip:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
File created	C:\Users\Admin\Downloads\winrar-x64-701.exe:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
File created	C:\Users\Admin\Downloads\MEMZ.exe:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
File created	C:\Users\Admin\Downloads\Ransomware.WannaCry.zip:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
File created	C:\Users\Admin\Downloads\No Escape.exe:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Runs .reg file with regedit

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\regedit.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\regedit.exe	N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A

Suspicious behavior: GetForegroundWindowSpam

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeSystemProfilePrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeCreateGlobalPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: 33	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeSystemProfilePrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeCreateGlobalPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeRestorePrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 35	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
Token: 33	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
N/A	N/A	C:\Program Files\7-Zip\7zG.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\winrar-x64-701.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\No Escape.exe	N/A

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

persistence

Views/modifies file attributes

evasion

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\attrib.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\attrib.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\attrib.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\attrib.exe	N/A

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://gofile.io/d/GfflS3"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://gofile.io/d/GfflS3

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.0.918233766\583478578" -parentBuildID 20221007134813 -prefsHandle 1684 -prefMapHandle 1676 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e529bd88-0777-4079-9713-eb7a1e7fec39} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 1764 22b53fd3558 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.1.1077278083\427484884" -parentBuildID 20221007134813 -prefsHandle 2128 -prefMapHandle 2124 -prefsLen 21608 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8c837048-e5b9-4f13-b8c2-88b0dd73dad3} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 2140 22b542fc258 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.2.146698207\442446990" -childID 1 -isForBrowser -prefsHandle 2752 -prefMapHandle 2788 -prefsLen 21711 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {53da0eb4-947c-43af-aab5-7b0deac8af5b} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 2648 22b580cd458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.3.479964322\613689278" -childID 2 -isForBrowser -prefsHandle 3396 -prefMapHandle 3312 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {386d9100-5d88-4568-9508-ba8ca68051e1} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 1000 22b41e62558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.4.1614728662\39551908" -childID 3 -isForBrowser -prefsHandle 4916 -prefMapHandle 4892 -prefsLen 26424 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8258ad1d-7baa-4690-a988-d4dd405ec4db} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 4876 22b5b49fe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.5.538357627\469442380" -childID 4 -isForBrowser -prefsHandle 4932 -prefMapHandle 4928 -prefsLen 26424 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8e1dc795-367c-4531-8588-57aed93d1bb3} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 4944 22b5b4a2e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.6.32715630\954217863" -childID 5 -isForBrowser -prefsHandle 5068 -prefMapHandle 4944 -prefsLen 26424 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b60fa3f-9b96-4a6d-9a0c-bf6fde9819fb} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 4696 22b5b4a1f58 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap17989:70:7zEvent32278

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.7.1191618955\1300313653" -childID 6 -isForBrowser -prefsHandle 5416 -prefMapHandle 4628 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e7012f1f-a777-4016-814c-36e2f58d157f} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 1556 22b5804ea58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.8.519280147\473115744" -childID 7 -isForBrowser -prefsHandle 3868 -prefMapHandle 3872 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1daa4dc1-f283-4479-ac74-d7b6be730519} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 6060 22b5aef5958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.9.33815072\626125668" -childID 8 -isForBrowser -prefsHandle 6340 -prefMapHandle 4280 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b19978ef-c682-42a6-a91b-d5f80603dc8e} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 5048 22b5e3b3658 tab

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap13265:66:7zEvent31550

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap25032:66:7zEvent24306

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.10.59967831\1668816203" -childID 9 -isForBrowser -prefsHandle 6176 -prefMapHandle 4132 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0a602ed5-2356-4437-bd6a-b1fbb268acbd} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 3668 22b5a6afc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.11.1881298846\158198371" -childID 10 -isForBrowser -prefsHandle 3712 -prefMapHandle 3716 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {22fe32db-ccff-4a25-8a24-7c25b19415c1} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 3624 22b5cad6858 tab

C:\Users\Admin\Downloads\winrar-x64-701.exe

"C:\Users\Admin\Downloads\winrar-x64-701.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Users\Admin\Downloads\winrar-x64-701.exe

"C:\Users\Admin\Downloads\winrar-x64-701.exe"

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\32734a51fe284d76b804e4cb07f2e2f8 /t 4200 /p 2324

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\4466c451669c4c11b83825cfd25ab07f /t 2880 /p 2800

C:\Users\Admin\Downloads\winrar-x64-701.exe

"C:\Users\Admin\Downloads\winrar-x64-701.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.12.583734406\208540564" -childID 11 -isForBrowser -prefsHandle 3864 -prefMapHandle 5084 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {21d21889-efbd-489e-b8f8-b523f44078e2} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 6432 22b5939d558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.13.1929668846\446394357" -parentBuildID 20221007134813 -prefsHandle 6972 -prefMapHandle 6952 -prefsLen 26882 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e440608-7502-4fb9-aeec-b3e63cd87719} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 5980 22b5b1d1958 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.14.1732262906\438011990" -childID 12 -isForBrowser -prefsHandle 7376 -prefMapHandle 7364 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bd3fce7-f2c1-4d7f-8b23-46ee45783fc5} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7388 22b55a30e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.15.218025056\2089556596" -childID 13 -isForBrowser -prefsHandle 4164 -prefMapHandle 5944 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e632a1df-2a3e-4e7c-a4f0-787866f669d5} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 3672 22b5475ac58 tab

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\42\" -spe -an -ai#7zMap12878:66:7zEvent23927

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\42\*\" -ad -an -ai#7zMap25675:1218:7zEvent17305

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\42\" -an -ai#7zMap25484:2466:7zEvent1789

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\42\*\" -spe -an -ai#7zMap22788:5942:7zEvent32549

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.16.785622222\1734923868" -childID 14 -isForBrowser -prefsHandle 3260 -prefMapHandle 7192 -prefsLen 26891 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {52d1c592-a9c6-4dfc-b276-b67cc1c39bf9} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7008 22b5e645858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.17.545190836\1051857904" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 2904 -prefMapHandle 2880 -prefsLen 26891 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6bdfabc5-7e6a-4ae8-a0c0-358628bacbff} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7116 22b5e898658 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.18.512531307\756570104" -childID 15 -isForBrowser -prefsHandle 7184 -prefMapHandle 6448 -prefsLen 26891 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9a71956-8997-4706-84a6-b9166df4de26} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7280 22b5eb91c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.19.1299555598\308534559" -childID 16 -isForBrowser -prefsHandle 5816 -prefMapHandle 6428 -prefsLen 26891 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {452c9138-023d-411d-be47-cf089b4c4b86} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 5936 22b5eddbe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.20.516802796\1653120740" -childID 17 -isForBrowser -prefsHandle 6708 -prefMapHandle 6724 -prefsLen 26891 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {461772b4-9b10-49f7-bd3b-8fa2d6ec1b56} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7604 22b5f2ca958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.21.1530825734\994915528" -childID 18 -isForBrowser -prefsHandle 7408 -prefMapHandle 5096 -prefsLen 26891 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {089e6d3b-50e0-4147-b10f-0f376c1a49ad} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 3864 22b55abc658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.22.311069930\302948533" -childID 19 -isForBrowser -prefsHandle 7556 -prefMapHandle 2900 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {69101f04-91bb-4123-8fe0-5ac70b40df6b} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 4132 22b5eccae58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1596.23.462391058\1053312326" -childID 20 -isForBrowser -prefsHandle 7736 -prefMapHandle 6864 -prefsLen 27435 -prefMapSize 233444 -jsInitHandle 1276 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9aa71a2a-1dba-4e62-b03b-42fdb49d7a35} 1596 "\\.\pipe\gecko-crash-server-pipe.1596" 7832 22b60564b58 tab

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\d823d2bcb92847699fb1f3d086fa0fa2 /t 5284 /p 5280

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe"

C:\Users\Admin\Desktop\No Escape.exe

"C:\Users\Admin\Desktop\No Escape.exe"

C:\Users\Admin\Desktop\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

"C:\Users\Admin\Desktop\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"

C:\Windows\SysWOW64\attrib.exe

attrib +h .

C:\Windows\SysWOW64\icacls.exe

icacls . /grant Everyone:F /T /C /Q

C:\Users\Admin\Desktop\taskdl.exe

taskdl.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c 51051716676320.bat

C:\Windows\SysWOW64\cscript.exe

cscript.exe //nologo m.vbs

C:\Windows\SysWOW64\attrib.exe

attrib +h +s F:\$RECYCLE

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\hello.bat" "

C:\Windows\SysWOW64\attrib.exe

attrib +s +h C:\hello.png

C:\Windows\SysWOW64\attrib.exe

attrib +s +h C:\hello.bat

C:\Windows\SysWOW64\net.exe

net user Admin death

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 user Admin death

C:\Windows\SysWOW64\Wbem\WMIC.exe

wmic useraccount where name='Admin' rename 'NO ESCAPE'

C:\Windows\SysWOW64\takeown.exe

takeown /f "C:\ProgramData\Microsoft\User Account Pictures" /r /d y

C:\Windows\SysWOW64\xcopy.exe

xcopy *.png "C:\ProgramData\Microsoft\User Account Pictures\"

C:\Windows\SysWOW64\xcopy.exe

xcopy *.bmp "C:\ProgramData\Microsoft\User Account Pictures\"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Windows\SysWOW64\regedit.exe

regedit /s C:\Windows\System32\hello.reg

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe" /main

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\@[email protected]"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\@[email protected]"

C:\Windows\SysWOW64\regedit.exe

regedit -s C:\Windows\System32\hello.reg

C:\Users\Admin\Desktop\taskdl.exe

taskdl.exe

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe"

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Users\Admin\Desktop\MEMZ.exe"

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\6d5879bc39aa48dd9e4ac92155a51175 /t 3264 /p 3260

C:\Windows\SysWOW64\shutdown.exe

shutdown /t 0 /r

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Desktop\taskdl.exe

taskdl.exe

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x0 /state0:0xa3a9b855 /state1:0x41c64e6d

C:\Windows\SysWow64\winnt32.exe

"C:\Windows\SysWow64\winnt32.exe" "C:\Windows\system32\taskmgr.exe" /4

Network

Country	Destination	Domain	Proto
N/A	127.0.0.1:49766		tcp
US	8.8.8.8:53	gofile.io	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
FR	151.80.29.83:443	gofile.io	tcp
US	8.8.8.8:53	gofile.io	udp
US	34.117.188.166:443	contile.services.mozilla.com	tcp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	content-signature-2.cdn.mozilla.net	udp
US	8.8.8.8:53	shavar.services.mozilla.com	udp
US	8.8.8.8:53	push.services.mozilla.com	udp
US	8.8.8.8:53	firefox.settings.services.mozilla.com	udp
US	8.8.8.8:53	gofile.io	udp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	shavar.prod.mozaws.net	udp
US	34.160.144.191:443	prod.content-signature-chains.prod.webservices.mozgcp.net	tcp
US	44.237.65.238:443	shavar.prod.mozaws.net	tcp
US	34.149.100.209:443	firefox.settings.services.mozilla.com	tcp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	34.107.243.93:443	push.services.mozilla.com	tcp
US	8.8.8.8:53	shavar.prod.mozaws.net	udp
US	8.8.8.8:53	autopush.prod.mozaws.net	udp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	autopush.prod.mozaws.net	udp
US	34.117.188.166:443	contile.services.mozilla.com	udp
US	8.8.8.8:53	83.29.80.151.in-addr.arpa	udp
US	8.8.8.8:53	166.188.117.34.in-addr.arpa	udp
US	8.8.8.8:53	238.65.237.44.in-addr.arpa	udp
US	8.8.8.8:53	api.gofile.io	udp
FR	51.38.43.18:443	api.gofile.io	tcp
US	8.8.8.8:53	api.gofile.io	udp
US	8.8.8.8:53	api.gofile.io	udp
US	8.8.8.8:53	s.gofile.io	udp
FR	51.75.242.210:443	s.gofile.io	tcp
US	8.8.8.8:53	s.gofile.io	udp
US	8.8.8.8:53	s.gofile.io	udp
FR	51.75.242.210:443	s.gofile.io	tcp
US	8.8.8.8:53	18.43.38.51.in-addr.arpa	udp
US	8.8.8.8:53	210.242.75.51.in-addr.arpa	udp
N/A	127.0.0.1:49772		tcp
US	8.8.8.8:53	store2.gofile.io	udp
FR	45.112.123.239:443	store2.gofile.io	tcp
US	8.8.8.8:53	store2.gofile.io	udp
US	8.8.8.8:53	store2.gofile.io	udp
US	8.8.8.8:53	239.123.112.45.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	196.187.250.142.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	udp
US	34.149.100.209:443	prod.remote-settings.prod.webservices.mozgcp.net	tcp
US	8.8.8.8:53	195.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	99.201.58.216.in-addr.arpa	udp
US	8.8.8.8:53	14.227.111.52.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	id.google.com	udp
GB	142.250.200.3:443	id.google.com	tcp
US	8.8.8.8:53	id.google.com	udp
US	20.231.121.79:80		tcp
US	8.8.8.8:53	id.google.com	udp
GB	142.250.200.3:443	id.google.com	udp
US	8.8.8.8:53	3.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	tcp
US	8.8.8.8:53	play.google.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	238.179.250.142.in-addr.arpa	udp
US	8.8.8.8:53	2.213.58.216.in-addr.arpa	udp
US	8.8.8.8:53	github.com	udp
GB	20.26.156.215:443	github.com	tcp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	215.156.26.20.in-addr.arpa	udp
US	8.8.8.8:53	github.githubassets.com	udp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	8.8.8.8:53	github.githubassets.com	udp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	8.8.8.8:53	github.githubassets.com	udp
US	8.8.8.8:53	154.109.199.185.in-addr.arpa	udp
US	8.8.8.8:53	collector.github.com	udp
US	140.82.114.22:443	collector.github.com	tcp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
US	8.8.8.8:53	api.github.com	udp
US	185.199.108.133:443	avatars.githubusercontent.com	tcp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
GB	20.26.156.210:443	api.github.com	tcp
US	8.8.8.8:53	api.github.com	udp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
US	8.8.8.8:53	api.github.com	udp
US	8.8.8.8:53	133.108.199.185.in-addr.arpa	udp
US	8.8.8.8:53	22.114.82.140.in-addr.arpa	udp
US	8.8.8.8:53	210.156.26.20.in-addr.arpa	udp
US	8.8.8.8:53	raw.githubusercontent.com	udp
US	185.199.108.133:443	raw.githubusercontent.com	tcp
US	8.8.8.8:53	raw.githubusercontent.com	udp
US	8.8.8.8:53	raw.githubusercontent.com	udp
US	8.8.8.8:53	90.65.42.20.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	www.win-rar.com	udp
DE	51.195.68.163:443	www.win-rar.com	tcp
US	8.8.8.8:53	www.win-rar.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	www.win-rar.com	udp
US	8.8.8.8:53	163.68.195.51.in-addr.arpa	udp
US	8.8.8.8:53	130.211.222.173.in-addr.arpa	udp
DE	51.195.68.163:443	www.win-rar.com	tcp
DE	51.195.68.163:443	www.win-rar.com	tcp
US	8.8.8.8:53	164.189.21.2.in-addr.arpa	udp
US	8.8.8.8:53	25.251.17.2.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	encrypted-tbn0.gstatic.com	udp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
US	8.8.8.8:53	encrypted-tbn0.gstatic.com	udp
US	8.8.8.8:53	encrypted-tbn0.gstatic.com	udp
US	8.8.8.8:53	lh5.googleusercontent.com	udp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	udp
GB	172.217.16.225:443	lh5.googleusercontent.com	tcp
US	8.8.8.8:53	googlehosted.l.googleusercontent.com	udp
US	8.8.8.8:53	googlehosted.l.googleusercontent.com	udp
US	8.8.8.8:53	14.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	225.16.217.172.in-addr.arpa	udp
GB	172.217.16.225:443	googlehosted.l.googleusercontent.com	udp
US	8.8.8.8:53	i.ytimg.com	udp
GB	142.250.200.54:443	i.ytimg.com	tcp
GB	142.250.200.54:443	i.ytimg.com	tcp
GB	142.250.200.54:443	i.ytimg.com	tcp
US	8.8.8.8:53	i.ytimg.com	udp
US	8.8.8.8:53	i.ytimg.com	udp
US	8.8.8.8:53	54.200.250.142.in-addr.arpa	udp
GB	142.250.200.54:443	i.ytimg.com	udp
US	8.8.8.8:53	www.youtube.com	udp
GB	172.217.169.46:443	www.youtube.com	tcp
US	8.8.8.8:53	youtube-ui.l.google.com	udp
US	8.8.8.8:53	youtube-ui.l.google.com	udp
GB	172.217.169.46:443	youtube-ui.l.google.com	udp
US	8.8.8.8:53	46.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	34.117.188.166:443	contile.services.mozilla.com	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	static.doubleclick.net	udp
GB	142.250.187.194:443	googleads.g.doubleclick.net	tcp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
GB	216.58.213.6:443	static.doubleclick.net	tcp
US	8.8.8.8:53	static.doubleclick.net	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	static.doubleclick.net	udp
GB	172.217.169.42:443	jnn-pa.googleapis.com	tcp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
GB	172.217.169.42:443	jnn-pa.googleapis.com	tcp
GB	142.250.187.194:443	googleads.g.doubleclick.net	udp
GB	216.58.213.6:443	static.doubleclick.net	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
GB	172.217.169.42:443	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	194.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	6.213.58.216.in-addr.arpa	udp
US	8.8.8.8:53	42.169.217.172.in-addr.arpa	udp
GB	172.217.169.42:443	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	www.reddit.com	udp
US	151.101.1.140:443	www.reddit.com	tcp
US	8.8.8.8:53	reddit.map.fastly.net	udp
US	8.8.8.8:53	reddit.map.fastly.net	udp
US	8.8.8.8:53	140.1.101.151.in-addr.arpa	udp
US	34.149.100.209:443	prod.remote-settings.prod.webservices.mozgcp.net	tcp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	i.ytimg.com	udp
GB	142.250.200.54:443	i.ytimg.com	udp
US	8.8.8.8:53	2.180.250.142.in-addr.arpa	udp
GB	172.217.169.46:443	youtube-ui.l.google.com	udp
US	8.8.8.8:53	play.google.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	play.google.com	udp
US	8.8.8.8:53	github.com	udp
GB	20.26.156.215:443	github.com	tcp
US	8.8.8.8:53	github.com	udp
GB	142.250.187.194:443	googleads.g.doubleclick.net	udp
GB	216.58.213.6:443	static.doubleclick.net	udp
GB	172.217.169.42:443	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	github.githubassets.com	udp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	185.199.109.154:443	github.githubassets.com	tcp
US	8.8.8.8:53	collector.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	api.github.com	udp
US	140.82.114.22:443	collector.github.com	tcp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	185.199.108.133:443	raw.githubusercontent.com	tcp
US	185.199.108.133:443	raw.githubusercontent.com	tcp
GB	20.26.156.210:443	api.github.com	tcp
US	8.8.8.8:53	api.github.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	185.199.108.133:443	raw.githubusercontent.com	tcp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	aus5.mozilla.org	udp
US	35.244.181.201:443	aus5.mozilla.org	tcp
US	35.244.181.201:443	aus5.mozilla.org	tcp
US	35.244.181.201:443	aus5.mozilla.org	tcp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	content-signature-2.cdn.mozilla.net	udp
US	34.160.144.191:443	content-signature-2.cdn.mozilla.net	tcp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	34.160.144.191:443	prod.content-signature-chains.prod.webservices.mozgcp.net	tcp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	ciscobinary.openh264.org	udp
US	8.8.8.8:53	redirector.gvt1.com	udp
GB	142.250.187.206:443	redirector.gvt1.com	tcp
US	8.8.8.8:53	redirector.gvt1.com	udp
NL	2.18.121.79:80	ciscobinary.openh264.org	tcp
US	8.8.8.8:53	a19.dscg10.akamai.net	udp
US	8.8.8.8:53	a19.dscg10.akamai.net	udp
US	8.8.8.8:53	redirector.gvt1.com	udp
GB	142.250.187.206:443	redirector.gvt1.com	udp
US	8.8.8.8:53	r1---sn-aigl6ney.gvt1.com	udp
GB	173.194.183.166:443	r1---sn-aigl6ney.gvt1.com	tcp
US	8.8.8.8:53	r1.sn-aigl6ney.gvt1.com	udp
US	8.8.8.8:53	r1.sn-aigl6ney.gvt1.com	udp
US	8.8.8.8:53	201.181.244.35.in-addr.arpa	udp
US	8.8.8.8:53	206.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	79.121.18.2.in-addr.arpa	udp
US	8.8.8.8:53	166.183.194.173.in-addr.arpa	udp
GB	173.194.183.166:443	r1.sn-aigl6ney.gvt1.com	udp
GB	142.250.187.196:443	www.google.com	udp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	github.com	udp
GB	20.26.156.215:443	github.com	tcp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	collector.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	api.github.com	udp
GB	20.26.156.210:443	api.github.com	tcp
US	8.8.8.8:53	api.github.com	udp
US	8.8.8.8:53	50.251.17.2.in-addr.arpa	udp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\e27866e4-777c-49df-90f8-101d10fffd7d

MD5	596f875bbef0b14c0835978da55f27c9
SHA1	e77a61d7bc161a9bac1f36f268a45bb31fb8ff3a
SHA256	6494903ff9bf7f22178c2980073e09460bb67567fac1348c25978c5f79ddedfa
SHA512	bf1278458ef846b79afd8c899785d6b02e7a17e81e0f77fa610988b9c3df1d07fbe69887c972682899d9e74907ed8401a09606f39685706cc48c943a5a074565

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\880be7a9-761a-4752-bfa3-9b1b9960e189

MD5	61a2eef68578abb8b00df14b39f0aec7
SHA1	cbbbf8c37c894b6d17785c6e55d153ecca240c54
SHA256	82a7c828c36a8cfd13ededb42d1e40df9da122e018d7db3848327b9395866f09
SHA512	f87b7080f344ca3958d990f14fc85acef62a17a3776421ce4bcd35193c14594aa70f6828560dae11d036c6966df948a615177a45210122491cde329b058da496

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\db\data.safe.bin

MD5	e6e44310463466f73379645e12ce6f22
SHA1	a273212813bda2acffef39557ebaecf7fcf59ac3
SHA256	d70378dd603760806a285abf360e4deff0a875451882232643464f450fd66129
SHA512	02343ba4a89a1fcbf1f5bd8d7fd98e0b83a81b7517c111ed88dea4d9ff55813e4c58fc9ccd626981d64c280f7950621e11933d6c43a99189ff23aaf40c451bc0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5	3fce64c3cf23f070dbe67b544cebc92b
SHA1	84d5104a0aedcb8c73e2ce79598ae97d8190fb8e
SHA256	21679f659e81fa16d78fb675003b34c8cba5d361da34399b1938ab1a86e4590f
SHA512	8f99e44cbc39b256ae6087d962cdc1a31dc674ea3542eb48e55dbcd2ff8c3602ea8940373d8429036e86b2340e3d1cb267dee7bd97890c861601f212f6dde2b3

C:\Users\Admin\Downloads\bomb.H-5D65pH.zip.part

MD5	5e8cfb7f10738bbd4c3d0d160bc9add6
SHA1	17d37775d93d314eefcbee251d3230ebff4e19d6
SHA256	c88a1b94ec96a270fe3880e2b4be4c73a58d4d88b7005cae3a7cc0d1646c4f48
SHA512	cf5beb91288fff938c12f6c13fb6f7b1cb5fe3ab4d658d69dd1ef89e2dec4f38ad4a189be4242dd58e7eaa34fc659a93c9d55a91e5613e736d0d35c6e4b2b876

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5	358e911b68b9f756b3623676ca8349f6
SHA1	19ae26cf006a0e3c8fe5c66ef6171e341a7e9654
SHA256	6ba832ed83abc3836f8261fe573fa35f5ed4bd3c3d769c07d11ecb3b075f56ad
SHA512	ec885019cfa7715681dd53b32d0c6eec7aa4453b108e4cdfaffafedc059fe0b3403e56596e1e30a9948127c5fee8fc55d10b066a5a65a095992df78d77886bbb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	2a0488d6ca44ac05c5a28ed28e677b2e
SHA1	480f5e13e600a618e9953d1679024d04d941c245
SHA256	def7d655fb8373ec9561554a5dbe1b02cc21f237cb58d4a312ee14d5e31cac20
SHA512	6d63233416ff349ee5672aae372627790d926e2e55adb8a88726a8824f68163a9b5a3d3a1ef2393c32b0a7da2013504210c1381924a0b871764bf8c740612ca1

C:\Users\Admin\Downloads\bomb.zip

MD5	be03f51462bc11dc61281143fface17f
SHA1	13970c25c7dff766c304d774e3a494d39201e2df
SHA256	3019395cb40f361703a51fd984afb764549e4294b2ad9ec4539e417fd3b0e5e3
SHA512	ad4346e286fc19bd01698fe9a61280a4e4b556b2b97a3432296328e43e5a8e6d8281eab6356d76534ca2b157f07a242035c572858f38738c7fc76b67e17d0b3d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5	e371deedb38c1acfb417c64525d940df
SHA1	b20d40f82d16e3852a9b2c96c92291d04442a65b
SHA256	8ebce5e4c0e85f9f4828dd889077962347e2931934f3f4a2e5a4de2873c1f901
SHA512	dcd54979b95f590211e945dce6fc639a8896150f8b9e7399715d14b08d6e0ab4268fa5ad210beb0fd6c2253d58a06f2b1028dbadbc43f0f107b89ba92cd33e29

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5	266ba946f88e8ac627def775dc3b24f2
SHA1	e5ee6708ad81dba6b9390e03108f0176f32dc4e7
SHA256	770d326537e7f22074ac338cd484afba58042b401ca8a27445d3a50ff4db94d1
SHA512	3d2b72356992bfb0af454549be2a0c5c54e969bc47614ae7af0d1f10bb134c4c707a95f254997375065da4e2f9a83d9de1ba4eabd80bbf6eed5fb5c4bc4edf5a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	4c04151d5dfb84ff45db21cc7acd0417
SHA1	a6258a55234825185da0977a35d506623f3afff1
SHA256	a9c38de8f878ef30572d71a873b1a835299ff3385e12586e50a78494684cbc9e
SHA512	9f097f9446fbd56580fec602e54caa8184fc6a4e995fd9c44715a09525716683df4ffd90fec1cd0de0f7a2483df4bcdf38fa0e8e09a9792cdb8c05728fc22394

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	a430f989b989da8904197b8024199ce6
SHA1	ca94ecafe726df4b5bdea4a9b1ef40b969e3c089
SHA256	2babd454011c50aec9b316f7edad63df3081539c838a358b0010fae239339f9a
SHA512	da7c43f0d5a39266f232969b8fb5d2216eb1dc447055d2a4e75df99bf025c1384d878096150973250a69eaf7f01773f993891a94a30dc6b873f7a13d6d5b42ae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	5a5253219435555e3402f4fad51d9aa9
SHA1	5958bf2f752e2b1c5227e05521952145fada8374
SHA256	98f561702d165f7702c52d7f48c07a8a8b4e560c8b2091ab3c3f5987b4aa09b1
SHA512	edf64f3654b434f010e6c9ada1613857c5fbffc1a1f0ee65acf7c6d98df6090e728be1deb7fa85e410e4c558e72652e0bac9cc1c1c5b2e2feb025c24e93283e7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\8488

MD5	aba631970bf949bef4b11a12d0838006
SHA1	83dd60b815957151c786a85444776977a4e42553
SHA256	9df299b2319aef6ce9ccbe435231ceea770686fc717ccebde5b1b4ac11eebd6d
SHA512	58a906c6921729848c22949fb6775cbc10236078c49c1e5a23e92286e1b9fa46fabb259f295e25b8d242ed06537bb331b95d89b5ffd1bb3cc013d29f120abf0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23798

MD5	8da5ccdc903b64bc92825d558d722a22
SHA1	1b4c95ad11e75ec9a8cd87f3d83103448f754783
SHA256	8690ed4ed95619201b02392ee69a83431ea17b99f924c4e66c07709001e23815
SHA512	14751610f9bb643e9d721e73f08d242e99c9d2c1b762b38e709c18f4dc95dab045aed7a7c747aad7e13c2ce65a89e3cc3f48b322338cd7e3c18c7e27cf87dd8f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16930

MD5	269560955d3efc6ec1378d7561405116
SHA1	26b4afe3572a5a230c43b6abee6440b44ad5a189
SHA256	2f543958db0e7e6c0f8c5227e68826fa4f0d2dccd871e92700f65d58a7ad573e
SHA512	dca9feb17a7175362b9785aa5b4d0b61f6cabab198ed58995994bac888db3f744cb3e31eb27984aafe74f8fc8fc8b4d7f1e4055e984a85e41cf84a93c39c92ad

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\25941

MD5	f05e3d2ac5f1cd7ea5962498bf33820f
SHA1	2f7beddb2e4a3952bb15b19142b1728d725174b1
SHA256	5f9898e1ac5d3395a444cb7ad6665e37c4b68d961384613358d215983e783625
SHA512	be6644f532d22dfcd725ca3f801e65913da1cda1e7a3289fd5863255cc71cafa191af14b192097595a43e7aa07543b980014a95c8c8073b295c2087ebd175058

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\29095

MD5	6ef21e7f84f2ee3a3fba2d30888d45c9
SHA1	ee7111d643320cc9e1da78103fbaeee6f4cb74e4
SHA256	8a53c7def33bef4eb34f7f03ec9fe382f39a968dc73802b84aeb2110f1ba446d
SHA512	568e1cef03c312c0fa842b0e6d4bff0e80d05df0131b80e9f8ea1ebf10937fc3b7e353d8b596fb24d6dad6b16bcbbab14245276592f16348c5795b61631972d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\6011

MD5	bda5c621ad9d0a0fa1c4fb9a10f50ea2
SHA1	243e4b6bce7d458479a49356dfb793fdd5a0331f
SHA256	268bc034416c17ce0e9230f781e5c61dafd5210e49fb1ddc5e58b9e82009bbf0
SHA512	2d565e05e59bc61ab4c80c5c367799f561186bf27241f36e825e428a659ab1652c1961146f3441f597b4ee3ebe7eea744d323066180453929f25a62cec531f35

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\18961

MD5	f08e1291e01cdc5d5e77ffcd8aeb0e80
SHA1	ed8bf75d38d4064dde820c161b16c69ca171a941
SHA256	2229738149d50b3caab0d7614484277b020b2eab211fbab837b98cc8db51a98f
SHA512	d3818a7691762bbe6ef13a218e24f958f436039dfe76530836d2c9ab6d3cdd144363d86cf14dcc6ab3bdb9a25a29b87a8616317e99a20f18d63b8e95903df549

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\15696

MD5	4f5caf8a887743bf622041833bf85eb4
SHA1	d7c5d87134fae0da804cd962ddd6f9cf589475d0
SHA256	a681d28e68fa1dccf69142c6c1d6edb15fa6b1e9b00716b72973cd771f6d0ddb
SHA512	62e02f43433460f45b0780936cad1496b1a968054781515b80c290a8da3663293365e7410cf586f3686f394fba7487f2083e227776afe1eb9dfb44efbf849076

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\17874

MD5	0a9489dc5bd3eff297f685f114327dc6
SHA1	23889e06fa2df6d5fecccf7bc60f4969ac45372d
SHA256	e340336b9e76b9c1bfc38bfebea71c229f12bc5a2ef17706cae82e730e081bbb
SHA512	ada39e624140f6c08347109c2da4c5f38d969250f347fd02cd9224365d2388d722ac65a813ba9bcc940dce5f34e94c61e5cd4265b29c78fe9ff6f2371597d776

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4587

MD5	3813e6d48f30a96798def91f4452a000
SHA1	bbbe330d2990f30c26df5ce7eabea897337ab086
SHA256	c733bd357fd9f012db0e147ab5b3a4059b855bade371c912538ae32271a38d50
SHA512	1e9d032d083ff238e364b35d1263b494f1d4c2632163b8c042ebba5eba64f098871abba27edd24a4021f22a8d0c594dfc8b10f6bd974be03306114b3c5c13725

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16976

MD5	bc99f14c2c4af5726d3c08554659087a
SHA1	795c157216d8b6517bb99dbc531024ef5c6bf347
SHA256	ef9bd2146790827235b4786d697982cbce9924c5fc9f785604d23b00a28ac705
SHA512	a6ba859f08bf1b70e6d115e2adc7cf2f3d4988c6d1dffbb2f330f021907f061e155245f0efddd9d385ff7c8c04947b10b97eed3a3202cf054c92217186545886

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10333

MD5	70355505308b0e3063659f9d2afcce5d
SHA1	d06971d2f4464d4e289ede61eef715c12d38f7e7
SHA256	ee6e5550247f26f7093d8a614fe1ccbb81209de1d45834d9ea10dc7a65ed96e0
SHA512	65aa8fdc1158d35baba41455132fdce45d9ff0bc34c651feaf539756c7baf84274e5d0611802991e26e4732191b41273fc74729c942c686653581ede41945498

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23171

MD5	553d82ced6f679b8ea5aaec6434783bc
SHA1	173c210ad0ffd374d5bf1f2c1ec2dbef3ec214b2
SHA256	01a0d9daafbab7bade87a695db0d8a771d22d63fd4aac76eaf39b1e2818e63f8
SHA512	d05ea4504a5aebbdcf3638cda4cd4ea772c86f5ce2a9eac4bfaed160fd5a6e55d5e3f2e720121b1f0c24de25cead22429db406088459a3b7d4fbafceee8876b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\3465

MD5	02d744f77ed945607a65262f756c3937
SHA1	abff4b19d93e1668be0ad10c7b23e80a3b010626
SHA256	90461be385ce480898dc368c5765b4041b2a6f97857370c07958241b17c2af7e
SHA512	f1ee061ce8786add891d02c1f21c4eca0979c0538036b3991504a76015780b03460cd91d97ac9b6fc9b7bda222843168046ab7b40c189a084ac28d8574cd2cac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\29590

MD5	060163bf29794b3864e42543562116f0
SHA1	a9773a8f9c65a0fcf3657374870c3b52b7220600
SHA256	15b459441dd08df3842eb1d2f3e54045cea55f115eaff8349c3552cba27420bd
SHA512	07d7eddefad23cc17b1b023803ed5a9ec71347854d35e9f5ae6fa449c1dea74cff034f6ac7338d9626ad8eae8bc5f871a74c6fcb71f91692aeccae245d2d5410

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\13856

MD5	39ef26f61fb30e17254ca6845e584b58
SHA1	a10ecc4227abdbf6927fe751c89f5396573eaafb
SHA256	76360bc53872404e17680467fc88fa04cdd0ab437c71b803e96c95e1278ac31a
SHA512	f843f6731dca2e2cd97691fbc6e3a273459c81e4bfc7c9d3235a2f1a43b9a71f58d1a2b7f6d63c55c32c59375745fd1a38ffe83b5654e3c0e5e8d34b23e4ad08

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\569

MD5	17d257022605628cd880feb5028392e6
SHA1	225df8029f64c6a5f2fd98e69b9a3e237c4b2d51
SHA256	b7afa4fbbaf081489f436fa7af047f0f56a68b44979c98d21fac899c2e7286c6
SHA512	2d16781ffc6544f2c4c9ad894e0b280d05c4574ffdacaaf48d3883dc4080919c7af15a77d24479dc5a7b27c4a1e690ee0e12f3239853e831ce94e42b0b31715f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\20275

MD5	f612a3abb222bc1456ec105d7a13ceb4
SHA1	149de083c59a1d37f674c4b7bba1414e4dbd6463
SHA256	028826e12c6181297c12ba7c093a4a048fcb128bd9b03195dc57955de715a8c9
SHA512	f44d75be12ae0d2c0396647d75f276dd9fa003d60c390eb94f8253d494ad40b4d25f755e844b7fa744735fbbb8f6440edd5934969f49044c43d71a450efcb20b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\7213

MD5	71da1dd48c81464b986abde48eb7d3b7
SHA1	fe07ec4654c2fbde838b2b8fb3785198fc44cd82
SHA256	b42957dd832bb2cefa4ae2d9894ce812f1598bd20cbc42ba40cc5ee78a58f937
SHA512	d789afe40f78861f691ad3bf1b2ffe4b8aa84d46c345f2454a40630f04fc981526d2a3f9932a74c6237bc617f1c6074f074f3291688f1ef6b92338e942a291b0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1686

MD5	fdb7d78fbe8ffe913a0265762ec39c5a
SHA1	67f78de3f709e5d1926c1271e9e3f65449387b1b
SHA256	aef78c1619191cfad0790d1658facbec1128ed44c51db401d969675a6476fd14
SHA512	bd1bf4f11e233e082e327c258f1df45de18b14739df5d7d399ea1ba471cc59d391b9e4f2489e8be9022d17a8bc76b5f87e22711bff76cc004c076a989e053f94

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10615

MD5	1e4488046b605edd89b1e0311bcdfa6c
SHA1	ebeaa5aab4621be9aafbedd58120302cad787c96
SHA256	b6360b67c27f7770bdff193f4532a8e00204db58e69e6f53451f6c8a64ce9de5
SHA512	78eb007c16a759a46eea522188d442d179c1e17576ecdf47ffdb1669d96a84e3ba170c29aab11fc993f28df213ddb205497bc8d4c72a8c1dcf9507976feee281

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\26918

MD5	68c87aeb9e346299d4047d4db98b0f52
SHA1	82251978d695bc8130ca54166002080fd45e5cdc
SHA256	7d35b78392e4f8a722045208c95e9fed9d3e13ae656a0dd0ea6b959d54a8eb88
SHA512	eb098b2a207281b4330c7c4ac5ec975d95ac5cb5f3107054c3abf2d4ad08e17288d636e5e21c251d183ee12ab051c32752698c46ab6c8512302ca6a6ddc466df

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\21219

MD5	ec412b9c564f7004ddea0cd694938a8b
SHA1	ba9ee5a873ebbc9afc2b35152423be879743fe8a
SHA256	83b8ae506c9e9276c608a293f921a54f2d16df73e63752c539cab8c32b0dd154
SHA512	6809bcf1c2338c2b77530e4d721dc7df1db1ec84cf40198a241d2f7273e011331caef28d529213b57353f35fbd10d45a05cd0b64fb26ff4bb1019f5dd7e1ff14

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1513

MD5	dbeb86b7d2689a5f437b0dcae43135db
SHA1	2fe578349bc53edb91f08f910f1276689071e2de
SHA256	ed216e81063dbf8c820fd4c2c23c2ef3afbd05c48142f6d33fce819a4fb3c4d2
SHA512	a327d5beb5b8c1c9482f360b383a064e075710a16196d4d9f509c49499bdfc2e6d92ea4acbc341fc012e49b25c9cfaec4ed7ae2d3398f0c0846bbd0a2dc7601f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\17841

MD5	9f5338df1eccf54249a7703e31021b83
SHA1	63e054d7f28fa9b9cfa7225f5b592c438157d686
SHA256	bc36f48dd3e3706c2cc0f93cf3bdc02e7c85ae2fe52e8f4020db9707b031fe63
SHA512	dbb189933d7963e8f6468292bd2278cacbc2359a46e144a517c357c2df7a7c6eab4cb6594d467e6988e9f6c29a570f61c3ffb22b060467dac2b244bb2addc636

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\11198

MD5	d548ce6b50593ee0cc7c226a65b4803a
SHA1	96e1d5e643d0676d8cf2a9be9274af8f0b7d6b49
SHA256	03b7492ff96af17c839ac785ef9b183fcbbbc2e4445aa148c60aa4dbf288be34
SHA512	65db0169ff152236adfbfd175eb5dba04565a2aee07deec9b7914f9c1f47ab6f98e27948ee363306664fff840ccd9b526ff53ace86305e57365970039203b77d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\24260

MD5	ad894da34a87cd1090bc8a81bf8cb4a2
SHA1	0f9b0e0c4a5a8c943b83932cd9167ed7791f4980
SHA256	8c177d627ed9946e55b5e2b9bd078893b43235ec05a4bfaa2df9a0548b494976
SHA512	025d18a34f3837ae143f434ed05534c45a9bec9d6e89c19013104de7cd8f15d115e8187cb39dbff359a5af5da56b1cad09af8e81677333c9bd803ea00340f00c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4554

MD5	22aa3ba0d8a041608c3eb2e1af06e410
SHA1	dc4059ca809826dfbdd155d49f8363f963f64146
SHA256	5ad828d451ee9e3bcdfa163da8f295e41a664e6954c60a3ede8e3b0ac01b04a5
SHA512	ead4031a879080c0d1efe40658895c9f39d1d0e21a61e90eb7e0c6b8ae0885f6850daa03326a3cca39ea12c2cfad20df3cad9a9b6aac3b75000deaa3b40a6da7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23811

MD5	c769523e6132fd8ea462820e029e06f2
SHA1	23b0b0012b014482897440ca86331f7cf70202f9
SHA256	b13a6ecbd303a78b23fedbaa5869a71d168150d544d9749dfa900e206cf67259
SHA512	2a39001907c8be65f8442fcdeb4bbed6eb2be978be91631ee3e3b1728360cb23f3a426c842f73779a792abd0e5e57b9e586f55918e35439559b40c74c1adcef3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	cb6cee3b793ec6c9d77e3fa14a5d0d2f
SHA1	a7f8ff397d5d78b9ec1d8bab0f6682320d7804df
SHA256	c95e87095c8ecd97a173cd9bde55a04e81bde60be61aded8ab4f92ea54e29b46
SHA512	2f550f2bcb6dc97dcedb2f487f0c44c634bec1d13bbf2548d2638a7be26873bc10be158eac27bd98d35388707f389e05950f9e61d39b6d19a05620c1febf7628

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\26092

MD5	c99b5c23641f28bfc34fae22bdfdc606
SHA1	20ec111cd4db404401c5b09a486b3cedef8b111c
SHA256	5c1a496e2804230055ca43c93ad90b013f20259a085e24be3037aae2efb0fd91
SHA512	24bdbe2eee887ab03af6833ddf7fead948795a8fa8ba93e130c38739dbdaf603382a3c5b26274d5c508d7afaa0adc3f3396be2b1f0838da1abccbff5f9ba72db

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16902

MD5	ea326943c70405d76a876d44cfcfd665
SHA1	b937eec003e7d387f17e3f4080047ac075537dc8
SHA256	fb9b3b67055ddfa307975476e97697168d2f5fda1c1d7e086bbf358693b1bb7b
SHA512	1168818a6ca0b587b27d67effb99cf1cfb308db991d55b1016884e6f08bf7ed7326c5ca9ae3fe659bba86ab2009b6a5221a82cc0aa85bcd1c9dd60aaab3c9ba8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\3840

MD5	852b73f259bb80f20ea8cf9775b5ea07
SHA1	7b16ab69be174ec42754d60d3afdb52cac3c60e3
SHA256	aabf28f86628167ca11b3ca5755f768c7c416375e6985861a21e54bfe039f04f
SHA512	4bba960bcd9143326311fd157f59e16872fb54ab382d242d4dc2c34a6101bd35738a47091a73ed4d36c52cc3eb97b865cebda0f3eb11b3ebd71fcdc8f273ed22

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\3615

MD5	631740d09dfbd36c880758b187847e50
SHA1	5538740a2254b03305837cc4179b8cd85b8c925e
SHA256	71bc978dafb8f2352a455bb27542d7a612b7510315794b1d404c73ef01dada80
SHA512	31c2c6363d57ac32c9ea6213e2e3f682d381bed381ff59a4ee6ad4450c832a1c24e69b05dab05ffb1a41f14d4c578c46d8607b70b6bd615a288597cc81ef7152

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\350

MD5	a83c9d23b1c5f2558c2d6e661374a5dc
SHA1	01fd850b2d7f48c0b413eebdc02f782a33ddd95f
SHA256	ca3baa6bd059a37cb420229cfe36a93f33474b717e79372635e9b00dbcfe2f3a
SHA512	befb1ac42e746f6ddb167fa6cff7d532baae2f64fcd36b5f42153e47b9e8e36db5b43d161c155d01eae2526340df4d86596f8be3152fa4784b628cf9858a344d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\27605

MD5	44888c69bc3c62ad9b1ee963f669628c
SHA1	bad0cf3a489b998add7e5c9284c7472a70f31606
SHA256	60b088e534ec8d55167e82970345355877feed0706c2294a68c2a690eb252928
SHA512	1cdf7e64795a8d7ca1a204d0c2c65191827e229877c51f258d1c428813b36b555e1035d2150d1fb4c73015fd63ce98768900688e03110b9b04aa377faff27de0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23546

MD5	5a9ac3012853c0e6e4e38320a9620852
SHA1	c9ce083761fd48fa15cb5b3e61823b687cfa44ec
SHA256	3992b82e08539ac82e6603bcfe9ec3556d94f4e9faaa5802fdeace685a9cf4d9
SHA512	565dc93987399e9fcadc047aaf9b025cbd6ce58ed4aea4e822e33d0a7c9b9528cdc9b990e54f0edb798a4b5a7bd899b259603e2fe1dad483f9c081d2d6e14a26

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10483

MD5	c50fd13fa4d988e98fbd2a6c3c082824
SHA1	41a0f54026730b53d7080b4b8a1a3260144026c3
SHA256	105bde992cbdba464e0835588bb3c3f99093951c42285383c98801421eeb71b6
SHA512	45952b6be0b8065456de66fbebd0b7df2cbf10e326bb0096c5a0f1fd58c2dab2a01ca0feb7488ba63eaee238b0248dd5280f2baeb4dfcd58c1ebd300a9a660f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	5b037072b6a6a0a2b08d9e9e13112e45
SHA1	f2d5f82efd8b6293886f2706e2b8598f7543736f
SHA256	498ba5eaa3d428af9646ecd38efb525c685759d8093569756a6e4cfba90159f4
SHA512	e38d4cfaa6c97854766ce2bf4b7dea1cd294696f2455addb4fd2919820338025e0ae6c9e003f678114c3bc806220928f5d4eb9ed632550048d09fb3bcce16897

C:\Users\Admin\Downloads\YhDdKPYQ.zip.part

MD5	1df9a18b18332f153918030b7b516615
SHA1	6c42c62696616b72bbfc88a4be4ead57aa7bc503
SHA256	bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
SHA512	6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	576760039bd6bda1b4a50055ad4ec9a0
SHA1	92563c3412febee62e31a9c91d6032e016303217
SHA256	94c1248766fbde8016aee4d697b4d5201aa354df13b2ecac1d86d4595573df47
SHA512	744bc4d21dd6e706f3b26be6c5b49d5067e9323b5567af4c94301e9c5096a58546de07fe87f6c0446d670e096d557775982a474954cd39311ce929b8bf1a2c54

C:\Users\Admin\Downloads\lib 2.zip

MD5	0a76bd3e26768bba68aca3d210997069
SHA1	753690994a18cf58ed0fe3749d16448b763047b8
SHA256	9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78
SHA512	14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	6769304c8b174876181964d4557e48eb
SHA1	00d9c5587159b11a226258d43c8d26bb4d8ab3e2
SHA256	441b5e5c6b0da1ef517f5bb29553d9014e4b71c7f2d58688dece8e4424fd6c6a
SHA512	1f78ece6a3ca890dfedbe9942a85e8161b68122f4caf1e2f71cfa8af64ef202d540161ad09a924928479575c22f76da264901d8a9f71f09bed10d7284a931ef9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	58b581dee70977ea402be8b5c4f56b01
SHA1	d9dff947448d21b3b2c6a2983d957850a778252f
SHA256	62d6e94610e1ae76191519ecfac50c6dd3df6cb42f363b94524d820dd7a6513b
SHA512	f6205e48075c441cf70afbc7e07eb8bfabcfb9bed7dffc4bcaf57c14623de42357bbf310b2c115947ec969461bad0d88ab440424585f4242ca925fdd40fbdba3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\FE04DBF82C858B4EB1D0FEBC1F2E0C4BD80670C8

MD5	319d522c7c4079a0f9ea3fae461f608d
SHA1	7685d918073c3de096412e98817c82c1a557a25a
SHA256	1452258537eb5a4a95339939a2627cefb682b38df704b24fdb0fe85e4ef9ee15
SHA512	5440103968485fcc6b61dd9e24dbd7c780511ae45f4b58bb7daaad4b5be84a13dfd0fb258c31c58a4a339872c080209cd14da4e463b0f9239826bf82e0a7905c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\67807D41376A4D925EBD7D120F3E8B27CD7D2721

MD5	a7fa038a4f8b996c0f7d034f7e87fe40
SHA1	82d1374b5c469f94b115fe1002bbef9827887d7c
SHA256	e6fcdfcb44c100ee2e29879c10eec4833f64014a23fc83e5cd77a1605fc58fb6
SHA512	87f8a226d91e01cb12a88562c2bdd22f5a3cbbb3f45e580ca363eca252779fe42b8484051d4228bb2c68b174b8c7b08e2a102ff2504c5d970d02c8b0f345abea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\28084

MD5	430d9e0e576a4ef61909f2ed549670a6
SHA1	8a25a4acf42164c4b20ecb05238516b8c05e0da3
SHA256	03a5e0d3135aca843f90d249acb1d71f5bff3540d7fdcbd9ed96b10df39b524a
SHA512	65b48b5b4d7b5d31cae311ca51b0715c36089c3c22188f11872313a022cc05e7a63bb66754373f792fa215595b6b55d513590cef8d5048a85b52403cc10ceffc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\560D03EFC1B9547C21931150BBC2E769F37FFB2B

MD5	ad29ba77e2193c6d65253b3947cf4ba8
SHA1	5d14f10e1276de02a35d8b51a80f826cdba667a3
SHA256	a1acc5a701d9efc8983f4129bf03ed5a35b2cd5c0f586c703726cbfbb7c97bdd
SHA512	fe7d87157937d8b122fef51e92051a709e7e36231effafccb90ecb0a0c27a661bdffa3eeea7b2ca9d1e6e14f82c578dc605e849741581ffe60dd37e636620297

C:\Users\Admin\Downloads\winrar-x64-701.RnPmAKTY.exe.part

MD5	d3ec96557834050f9edd29c3ed88cabe
SHA1	af26f02653f4a0d2a3c673517b6c517ed529051f
SHA256	bc7747c8272ce56edc0d941e81df1b9e93f8c03be786be59d2c240b985a6793a
SHA512	77e5121874fbb294bb072dbb4b823f0ec343952b49adc96c357090bee6758944f52d09b817307b5e84921ec679449d3049009e6ffe572e9104172f7518f2cb87

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	577065891efdf08f5be4c8bb73e27711
SHA1	c04fcbe076146e7e884ac94d0e9eef52616a6545
SHA256	e4aea4487f372f8157664c27d4a05fed5dbf53f47d2b869f82c23e0525cd467d
SHA512	91e981d3b5c47891457e63434d55877d8bee73f559d8ccfebe87b98b192006670ea052508fac2c2a45133d3843b892214be8d157320f401caedfabc941f4a80d

C:\Users\Admin\Downloads\winrar-x64-701.exe

MD5	46c17c999744470b689331f41eab7df1
SHA1	b8a63127df6a87d333061c622220d6d70ed80f7c
SHA256	c5b5def1c8882b702b6b25cbd94461c737bc151366d2d9eba5006c04886bfc9a
SHA512	4b02a3e85b699f62df1b4fe752c4dee08cfabc9b8bb316bc39b854bd5187fc602943a95788ec680c7d3dc2c26ad882e69c0740294bd6cb3b32cdcd165a9441b6

C:\Users\Admin\AppData\Local\Microsoft\Windows\PRICache\4183903823\2290032291.pri

MD5	b8da5aac926bbaec818b15f56bb5d7f6
SHA1	2b5bf97cd59e82c7ea96c31cf9998fbbf4884dc5
SHA256	5be5216ae1d0aed64986299528f4d4fe629067d5f4097b8e4b9d1c6bcf4f3086
SHA512	c39a28d58fb03f4f491bf9122a86a5cbe7677ec2856cf588f6263fa1f84f9ffc1e21b9bcaa60d290356f9018fb84375db532c8b678cf95cc0a2cc6ed8da89436

C:\Users\Admin\AppData\Local\Microsoft\Windows\PRICache\1601268389\715946058.pri

MD5	30ec43ce86e297c1ee42df6209f5b18f
SHA1	fe0a5ea6566502081cb23b2f0e91a3ab166aeed6
SHA256	8ccddf0c77743a42067782bc7782321330406a752f58fb15fb1cd446e1ef0ee4
SHA512	19e5a7197a92eeef0482142cfe0fb46f16ddfb5bf6d64e372e7258fa6d01cf9a1fac9f7258fd2fd73c0f8a064b8d79b51a1ec6d29bbb9b04cdbd926352388bae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	19023d18229d7c30d36681f3ce1a6f0f
SHA1	18854184d10ee90f2f9ef00f5c59329d2355cbad
SHA256	c7e0441c4a334c073b52507f15162e1c957000e2a8b846a57f6680988d5d05c3
SHA512	01c7e79b544581c8f06f96eb20e9ba67812391190b4993fa355524b6dc86a34cc0427247fe301165ba197803ff375124d41daca01f469751ea5afce55181b54c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5	7c28204d2d9d336a53572e0e36be24f2
SHA1	6174aeab3680b357f8fddce4c8a0343bfe276e4d
SHA256	517d94e7994348ca9c82529062a8e8f5c6669f2bc33eb774a2c7a380cb2d67e3
SHA512	01f8ffedc211316bacc6815984cf78337ea8c0f7a60c31cd9846f65e0f72a8f484fc517609c1eea978cf78b8161195f37149eb2f5446daf60f1af3d1c2ca34a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	868c20168bcc483adfeba77ffaab1074
SHA1	06844e6c95dcd8783c77308a47b6dddef64da74a
SHA256	0d1e36bca87a5613ec374cf232cbd6efa1d0692a4448e75751f06b6dcab77e6d
SHA512	f6fa2ae82346e5dcad1afc9c89c755fbf94d0eca78a963d426c021bfab3e425785a46bcc953a8bdec9baffc57195005eb449ef6528a5feaf6b37c9e338a34604

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5B23235D54208C34AFF88FC6F18585FD8A8F8FAD

MD5	4a3e2d8fcb1bd1f36648147372f1f14d
SHA1	415146aab62ae6025a2923e6f49ec4bae604e3ac
SHA256	30b13025a60013a3da5c2e261d2352a4c3a68bac9d95ccb0f7531ebeb87c2c8a
SHA512	3771abae6c067b6d950eb20e4c968e128d0c5c474cd85372eeeb39ad40951089a0a837050079d246568edf60583e9822c3f9972e4f62340ca78effb540d50c1e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\CFDED8F63AA433652E85B1A2609A92AB4595F32A

MD5	24da5f9465c3bb768ed32a3c941af0cb
SHA1	c6241772aa1ad29264696d99a16539fba73edea6
SHA256	304e10929aa298935252acb2f6f976d79bbd0d6a16b65ad099254ce10dc6a42e
SHA512	2c9ab5684fcfdea3cdab657dc279df89e05c67617ac704d8a8ba4850aba21450cdf1130136362fe34eeb2dfe2d7f996c714b7a76e560e2cc935110603462666e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16757

MD5	fe7f78e5ff777a920ada0da6c30d50d7
SHA1	b483abcb8d1cd2b9f8486d40f6c992dc7e5b6496
SHA256	cd2ec4fc10a046be7b33dd9430517e83895527b7ab7b80bbfd072da11b9060e9
SHA512	73085d57c7a485a7ee93e4f10d3e5fe2fc0e6d69384c22b80270ba6fac1dd17338c8084737fdbcb976529c5ef4c65cdf292aae1486c411d0b65f1196c069b4fd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4751

MD5	ac46ef311be1b884650ac030764fd10d
SHA1	0924588367f4e2cece3e998b77673bd034d5541d
SHA256	c84f1518fa1c78b2512f021b9e7c4f3d43cc73688d661b67a52ae095b0e9bc73
SHA512	5f76f5deeed3b6d65dfac5148dfef404026bd32b25f2e7eaed5e09cf32e02b300206d308b7cbbc3725e228bc0b5ffa9f1ccc2dbb288696c833826a9ab714a7b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\30875

MD5	5208108275da43300e7a6c17f644f6ca
SHA1	2f4a1497c133929778129dd7384d3b19fff2fd54
SHA256	03ff0203062f4d778ad2f79eab9106b591bf13064382f992da518fd0201a5144
SHA512	3e7600311242f44e7d1966069b5d742c75d1af3991f30a263f8cffde6ff507dbbaef7f500e2ad025949eb758e83234ba0734ae31841b87de13e469c9f94e01de

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4526

MD5	6ebb3334d38fbd392056c30273e2a626
SHA1	0293618b5829b66c1110c8453d2f18db0f9e838a
SHA256	55f36d821856931017919ee4d7e01c966f2fc338a57df5bca55cab036d24ed58
SHA512	f7c51c3e7547c78f6a63a42a7c7ee6ded9b68e066a2f404bc130d6eeacc2248a71ed17d0a85f4608f1f0159b0a22085b58d7e8f22792746189cedaab0266feba

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\20854

MD5	fd9b448167005a0a29dec7fe6f41c828
SHA1	a16429e64f34bb3471eaeb7f1c261439092a891e
SHA256	12580565d47e409741a2bf0448b4cccd0c6dc3f970bf917412eaa3ace50ef269
SHA512	25320e6e6cfb0e5fd70860fc64d9992a271fe172c9caf6f55d897b35ba8aa97cc635d6235c25e1235b9cbc49f896b0c919b63929b6c451b6ee9928281204142f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\11170

MD5	80f315fbc04d27dc800b53f76670e563
SHA1	1791dc6d575b2b67bb79eca80b5197cacbd92b77
SHA256	fdba2b024415086e88a656ce69490055f2a65555e50cf13d8f44f6eb6bf60642
SHA512	1e9524de91813c39add23641837b30578de7041d71b84630f48e17f770ebde68ec11efbeb8870bdbcf23ab2002c4a22e1b4196248b3b285d41bd1499c88317f5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\13054

MD5	8347df545ad3add33f67aed70d88347b
SHA1	1eabb324a0804fc26b0de72158f6db7efee24924
SHA256	e1a4003f614f9c2b4a006d1fe5429db73482f7c72b40b8eebf78f607bff3a351
SHA512	95959eaf2bf082e2a72e66bfe44034fe22092044d8757a0bf5585560c5050932c74c464e2051a6ff90c089bc7bbc4f7605f6001214985905cfd0bf104969bd66

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4302

MD5	0d846f8383e0a1b85c475edba2b73b1c
SHA1	093d2c3ae141579f87c35820b7e2e567a257722c
SHA256	7d51c06a49da224b228d3c7551d076cc8214676828640c4cf3f6be65775b9ec2
SHA512	99cf5982819596e6e39f575a14bf16aa5bd0d77acc456a8e4e8245cc7f7e52f9dfea1b44536570b9f400eeae9ca0e47b5f8dcdd16ef3748e6d2fef81c2791767

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\22023

MD5	391ea36c58cc783a4f3caedf06917a68
SHA1	4c91aa412542da1d3d09d08fa4c1c2f24b2f35d2
SHA256	d10288885b38bb5c16e60f0f0e95cfe684399ab3c860b0110cc19b0a404f4e52
SHA512	2616e836ac5343b37b056cfc1a421f92da24941dbaec4492bda76e4ca28177092630f8fcc40053e91c9a3d677dd76cd8f1cba3871d36dbe20ae72b8a1774c99b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\2317

MD5	1b1b86539c355e8484959f65375126d3
SHA1	5067d9bbac778ab7a336b6eb7aa0a2d881d74f9f
SHA256	968fa4c58bc2040a537dec2c606815e18eddc36b90e2c16826f6c21142c7a470
SHA512	0cbe5155fce3ad058f17b4b0122ba8f5ce643d41b0f93e46ddff7592bb1d216de61f3825df6357c26145fa17aa74bd54075d561718c4c086e9a6d3b233a569f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\8736

MD5	b69451ea182971e4e3dd4136b6ebae81
SHA1	a67459273cde0d2b00f6c18b723b20b792acc718
SHA256	16e28bad45e52e8273e449f0cafafdf4db9b5983711378765d153b67225d5edb
SHA512	0e75e32ecfd15bc48dca2e40a2243840de50915be9872e6b2206d6630dd14013382cb433100e7e46c8a90926dbe4e9dcaadeb39003b6d89bb126e3d6cad8f2e4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\21798

MD5	df12a05ef7d63d7b696a44e33c70ead1
SHA1	14e624a85a90036c51fa74762075c042c48c1ff0
SHA256	84f5b6daec7c069b10b419f8297a28096193178a434eda2cb2f4d30b316b8240
SHA512	9e1036c2efb07cba1ed516fd1c7b625ff3c3708e806f88c1ef3dce8a7bd4c27f22067bcd554c890c3fab46678568ed91d4d4bbd0dca2f96dfe1b77d153ef7f25

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\29837

MD5	e8e60be142404dcdacd95b1be687f90b
SHA1	66f1c2514d8327a66b91e3ed6c9aedb6f012db84
SHA256	84920d61dbdc207bf317c9f88bba27831943fcd691075439f2070a33d0818c7a
SHA512	3c8e793d8068093ba07e1980a45ce21b42a15c29acdd6d6bfa58dcc17d07f094505ca2ce117d19e386f670cd1c7d020324a34e5a26e4602187fa947c20c927c9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\15155

MD5	8da0ad967e07e016c9a45fb076b0121b
SHA1	c87668f17a92aa6f5d87dddbbc71cd6f82dc7410
SHA256	707e76a9e435e76e743a71a3f65087caa2e75136c53ef0ffb2465e2d5fb07402
SHA512	0249c23b38828078c9f88ad1c0487034086a41b1d4a63b93aa0fa8694b1b1d391fa10c6903336e7c45e311b6df1a688c0432ae895ec225420543ec49cfb88a02

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23809

MD5	70e615ec0bec401c4939a32ec970f606
SHA1	b6640a3902cd5a596a3f20091cfdf178a453d277
SHA256	56d30f7d24f3a7384760a13fe50c3115b5fb287832cb5888a9a2b02382d98f09
SHA512	5888ffc08c3b9a9522cebb50970197fd20a91e619fb766116684cfed828dc5808e6b1d6d72a494c28ec4a5ac5fc3b8d9fe2bf9ff51af71e2e135f51eeea25dfa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	66b0a284968596259ec8ac688f9d3191
SHA1	fbf5fa537144eb1a360c5d836bbeb4a323c71bae
SHA256	a0b5ff0781c76cb95ca0376c7151e2025cf6f53dd8b3d9fe4d8daca63ff74aab
SHA512	9c9e6a879051cb67c1595d8c5422ba90b7c17a30c9de4acdfa06776a47673dd0283d3305d8c7f47805a7f19fece0385e5fbd004484f85628f1536c88ba031d9d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\8393

MD5	21b6866a0087b52a70b7730bcfc10d49
SHA1	1da3e0740a4427f236bd39b32c236a1679407b39
SHA256	8915c9fa749854827821bdd081946c053b0372a3cac163c41525be74399798c6
SHA512	af2ae64848b28f09f23185e93c1cd7602af9135430641bbd54e8c3cf194a142c30fddee9761d9d7bb30729fb0adcf2d49d46059302ed10baea9ddf337a57f42c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\886

MD5	38ecea1b47fd83f2c3510002d4dd2be8
SHA1	bfae282d9464ae05681875ee0664c40cfca7e121
SHA256	7916aae2d776fd7a5b5d9f6a62e6c149b029e46cebe41ce27d6c467240b1550c
SHA512	fe27d525b7915ff1b42912b703ef03d9b0be6c3f289520885cfffe20ab0c5004f1d316c7e4e5bbec860d327d46704d807f1c97a8c77819364eae06df7141ca78

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16990

MD5	d594695ee80e4fe711a59968e0cd1c30
SHA1	6519f521cf3cd0aa4dadd9a1b959d80dd837ea80
SHA256	32c94fe2835d69743f85f335575ddd939c12d28ea1a33e4893fe1160d1112610
SHA512	0a2a1f13e56f74eefd5ae3897eebf6ae3773c666d23810c3e83c19e3b5070ec4387b38f1448dc7b165e4f7a2bb36c4a3b6ce39388f6ae61f9288405115df87e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10459

MD5	a5d8949020a928cd20e38da7df5cbf73
SHA1	b20da29764be8f9db8db66cd2a97a33fd0d54578
SHA256	b2785ccfdf1bc310a7f4ab19dfda8eb4ab0e812226e159d13855b847d3494c1c
SHA512	cf5d33d3e118f0ac6dab9416537dda4adf72e7ece4e6b81b601043ac19d49e124e92f4b33734b31341f39af320da9ac8c8c71485badfc3b4140f9e6b2808c3e2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\13612

MD5	c9ac9558de679f8622904b48680bd9f7
SHA1	f9f0ee8b6292aec23f1fab16f03749aab7ca8363
SHA256	735ee0240ebc034875251e2c70b214ab05c24ae4521787484d9fb819bc0c3cb7
SHA512	9f8d8a56ffba89f72cfa6f3ecf5ac1e63e5715b09308d6e74c7255cd495d4afb42f604f773dd7fb720c2079347dd2949e1d98e2d8bd314afb515e2c47ae894b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10347

MD5	2dae803d00a6a764187838e048079a01
SHA1	d366762d714c1bb212e410a0ddffff9ba2b49583
SHA256	2b091bc5b7c866812ca3ec2acc2226197d77d83f6cb504739ec3bd9ab9d09234
SHA512	6ced1807cf99b78adb124bd77b710b3516346baac48dd7857a21268483c6abcb5897e3fc2f7181188904f60ecc60dab0512aa70a18ad0870eaea4c6529e2056c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23633

MD5	18e47e04f2561fa63d68995a45b7a2ce
SHA1	ef323397da66f277c515d33388faaece9f73a6e5
SHA256	dc5dbc09b2f3a15cdeb48d29e5861260415a804ab1ff736806f603e2600173c7
SHA512	d21cdd87574b3846a8dd6030f24eefe8cf06462ba0ba887a4d4b2c8f0e6b92c183e592e180d5fdffbdabeb6a5f6f923546a7d97dbac208add948f048ec5b33fc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\23746

MD5	71963d64561899c53769f975ae63fcea
SHA1	be31ffd838452d22db479df3c756ed9c37bbe707
SHA256	112cd786726b971f8cee9f899af24de4de4f12fe1a2690580d0ca79ccc90290f
SHA512	4e9afc7db81faa1d7075f15995be6b7af41f85e451622183dbd8e3c1e2c8ad702413405ebb8ff41d1f2b12b4281aa8cfa61fdb113e5d3b8e87f42d854e66a671

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\5096

MD5	7a9c48f6dbbf834499fed951c454e187
SHA1	43dde5487e2fbd343efc5f7ae79fb01043b5ef1b
SHA256	f821fa8dc1484f40a670b5301f3be2c03a11aae0d8c8ea90f15f0a20eb794832
SHA512	6a700c0619159ee9406fed0faa06dd710ff7cd828d858da4f71b18496d75de5ccfe608d3081d56b8c83214369b9d818ced637d2a7d34184b61e159a8dd5ae400

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\21424

MD5	b88e89804ae0c6f6a81aa2852adfb17f
SHA1	f108ad0ba9d10fb0f088617038a861d15ebc6b2b
SHA256	d4595d2dcc167d3104890083b3d8aa168fdcd27560c9411afcc38a4cdb82c77f
SHA512	6d14603501f337f06a5fe122297b4d65dbca52b47b7b3337a265c39e44bc9ae70315860bd5fc432be05278190828985a51319f24fd5ed9b99093e73bb556e6d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\4984

MD5	d262296e838d4a259fc2bd99aba58170
SHA1	25bf59a8b4e54db2c6e3819640dc26658150e259
SHA256	a53574561e392a0620974f30024a051866ad52430d21fabd060d15adfc4b78d7
SHA512	66aca10bfcd169506c9a9d2d4f7a9f697395e2aad353a3f757deb06c8da2f57054546e5a266a41dd0fb81e88c3bb6c7012022e52f5c148133e84883c8d5d1dab

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\21199

MD5	ac8010c24e55aa0d79507c6dd0612c8b
SHA1	707acdbc7c1f8dc3fc9bc13fba42250dbe952690
SHA256	cee833ed09fa7beec94764230e1fc14a5d9d1bf9bc173f75ef95a0c0e85a6fe3
SHA512	19cc7116a36f579d52d80ccf105c3466817e6feebe66a88b2ae97338f16cc9ca2c6577d4c47ffa995f93f7fd30c13fe5612744ea2523b121f86be271e08a8ce2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\30996

MD5	e521270837d813c1c5ce137f12b3c390
SHA1	1c0d79260eea1b42d5cbed638e2ec85f987df1f4
SHA256	1b9454b7b9ac51cb64422d5311ce79aefb263edd0fd2b948193e6482389ee9a8
SHA512	a135737daa65c0781dec4f2b12e00c98ce474318f99a12d3354c7149ac6071f9a7d596eb8020469a10796e9072ae983ea5d2c2df4b3923ca130d6add1f1a1902

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\7913

MD5	332c37b18fedf1380e130685ce7955c0
SHA1	b13cd261c4fb733d7530daed378c795b4536528a
SHA256	bb8381f8e8913a97738de3a9125819205e0bb7cb6a080f054ee662d9cce15472
SHA512	1c452eb66277e062688e5ade0acc669ce9cb0a89fd49042785519e776c62593551f5fc7e9cdc3b36237c249374394c83dc147e665ddb368939637fe1a2565439

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1382

MD5	b271983d61e5dffd71beb9ed97078774
SHA1	e510882896e9757534abf4dbbee0eaeb08e1ce88
SHA256	94197ff57dfc70837be8a44a478a1a00f4abd14ead9563e030e12b4fda274fd2
SHA512	4e096026bffa901e4a4a796aff76bf7b51fb83bd4adf167b7671940c24a27f0a2b3a610cba4b577904dd3697632f4bff2c3ce8a251f7e39e574a21c56fb8bf14

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	e21a9414a068051b0746322d387b5440
SHA1	9cf592a3e80465a86d2bf05f503bf406c5989b41
SHA256	8bfdc39c7a93fcf5550b86e80c50d70d1d96f062162dc63c239e1d10acff9263
SHA512	b020d10f65448ee96034fd74d4de2c5013c8e2b7d8374c36dd441b47a8a926edfc32ca6932cbf084da54ee5615ec80428dfa58a670b3a1890d062a032dac32a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	c9c17adaadcafd6acff46200b138aef1
SHA1	3880789b94323c44353dd9fa5b49d5c183b61bf5
SHA256	3adcfb5a5362aec074b312177cc9fc69291ed7dcf51560c61abbe3e0ed977c02
SHA512	778a7035a08eca076708fc1f64f52874330bc1a921a04c80491d1c22958b3b6d6ddbe34eac48352515ea51b8f9a6d0d88bb40d4975f7b7099615c089a58e4016

C:\Users\Admin\Downloads\42\lib 0\book 2.zip

MD5	38605a41eda691b378c8304bf914c777
SHA1	75f2667ccacce7c7947c186dca5029ffee720c01
SHA256	f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a
SHA512	d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\jumpListCache\X8iuVWiKWlT3T9EYI5hZcQ==.ico

MD5	42ed60b3ba4df36716ca7633794b1735
SHA1	c33aa40eed3608369e964e22c935d640e38aa768
SHA256	6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
SHA512	4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013

C:\Users\Admin\Downloads\42\chapter 2.zip

MD5	4c12c87adb8d806bfe26134e70a4dcf5
SHA1	541df8e3bd1a55bcf3dc9839a0a1bbb7e7737eb7
SHA256	37de37c1e00af3f9eebc6409515554748916cf70ff0620b22a1639c227f07243
SHA512	602b44f7af49b8b15c74e75011e0035321350363444066c178c2889203137fe54a1a1e26d2995d85710d1687f9a4349ca7f061f9ff334eee552e31b0daa17eaf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5	5e364d0c4bc11d7c82397907e3e2ce3d
SHA1	e7e8fbb1e63fda54b9caedd2b24a8676d335c6e7
SHA256	a2e69ba083b04ea1f61c43a2f11542544a7cf595ebfc92e450a87bc6250c304c
SHA512	fca9a9699ea1f8b8eaba7d6bedfff1af5b1be563c8cefee1347c0161949a32f70d3713afe397dee4b3156aafa52028805968963fdd458189a422afdefc370e51

C:\Users\Admin\Downloads\42\lib 5

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\24972

MD5	4b4c21a6527540cc38622df5c3466db3
SHA1	f42da619c66397a88adccd38961c6a10b73df9f3
SHA256	2cdd07066c1bf1efaf6f549dad8fc7ecabc61bb74b85d998caf76aca075efd5f
SHA512	d8830af203b689d7c2735ca80f543a85d2e689041d2b775eabfb547610877f9514d61e06af219ecaaf24102da3e6238e45e97070eab7678b556810ee9dd04e9f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\20932

MD5	347bedad3b9392a4ea8beb64c08a625d
SHA1	ece97505e7fe1a8f3887fb2d23967092e3774472
SHA256	a53e5ac5c576ef1c1efb7b21a66509b47dbac69a8cd67e3f3c57e14ba58d0656
SHA512	9d93d501e61919457a6010422d8a1a6834c985a1d0f72d25797f317d22a4bce61311c11e200ecc46e96b5bfe884ba82cfc31427d5c2bd1b46c59fc172df363b7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	09378e0d65f83fdbd490b90ffb99959d
SHA1	412b8ec2128152f786b6b7363ceceebda40e1110
SHA256	5f545f698eedb9d5443d607b02f2f8e2f5fe145bb2bb9f5cf39722be5b55f8d5
SHA512	39c9b291ece86d87f16853b5977a778495adb9683b9632d7e5f65e41a21b441310de58f05d9ee1ddd2e25299e680a4948d13c3ace660d7a7df35208f488e26b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\43790E717D2ED86D56C68D75F081CFEC6EF9F9FA

MD5	96317122176d308f4e5ccc584f29c341
SHA1	36c1637ae74a36521525ca5d89d68e305a7e2f0e
SHA256	665c200968da9761dc53626747b0c52765b235d90aaebc439fde8a71026fd663
SHA512	3c1b374e435b662f111bdd93dbb8a8c8ef7fa35b99351b72173ddf4f059c212fcac1983790a727d0d1cb2b699ad99dc1d4b4c75c321509e598b8c189ecdbbbe5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\370692646C383B1CC22EDCBA9F8DB753461D620A

MD5	6cf7194fc021edbc8a6c57b5878e9e93
SHA1	b795673acad8490d88dbf86b79167320a5a75d8e
SHA256	e5a43b3ac8080b8e545ebb1f7188b0feff2105bff2b06acdacf8329915a171e7
SHA512	ac221fc8fbee18abef2633389f178cdae5e13a434ad7fd9c6afd1eca3112296f5b15d512ca7d1050d7e88c2abdc4f82d9bebb4767f6810b4fe7d0ca383a633be

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\F63C822E7AAFC0ED25190A22B0F0D8103B08D6BD

MD5	a8b6fde2b016ebdcf2ad3a4e9195ab54
SHA1	919c138b435f3b6de0ffb49f6f2d2651155c8947
SHA256	f6fa8741b243b8eab5233886f989b531bd4407e175a24ab89f7c6d698881df7c
SHA512	5c19e48bb76fda4e26f83f3ca6d1ba166c371d42ec1b66b5873642b06bd0e68618c6b690a5bcc4f66b43a5d38a7f7078d2e7e849f9119b812f85c3e11a178c6a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\175FC1F27DF5030D57F8D0FF3A5E0CD7039CB332

MD5	466758686b95c957ae947c89d838364a
SHA1	b03d98e5966c174a22c38b6b93db8e0957e59629
SHA256	23b188262eb6086eaed030fb6db020021ae3e08e0a0a30b492c927f44986de73
SHA512	cc8a3533e58737460800acbf408bd420a01dc50d0da680ec38ca0a18ccef3495471fe92a1d0f338f43c8baae77680ef9bea241c16dabf3ea7a1e2e40365045c7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D35C09500437DD22D7C72D16F29F6C78D8E3C45D

MD5	93f5be001670d21b6602cc3d47647ab5
SHA1	93af6d71b3c370442838be8de5177976b9c5af58
SHA256	28538baf95542670a94379e8a391821410af20920c6f957ef28fda444a32b077
SHA512	268242401b09968b173da8fdeab835a8bd798fe8cb38516070dc959d38485a37261f35801edcf383d50f2bd6707f60995a07796b1c241809ce5684472bd09679

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A8F81FB9FFB275885344E5349AFED2CE12CF10FC

MD5	46b084e6452c77737b8037d16fcb91c6
SHA1	c5f9f8ee81ab292ea3d478033d23bcf2ec7c963e
SHA256	99e3a616239e7bb58da93aad301885364696faad752ad59613b046b25cd58da8
SHA512	b8ad29790a23047db39e75fd2717cdc1d657a2e9abfc71f2123971d240e9c8b3bd6c166bfb02c84a509ea827ba892fe14bc3d196079107ce5973cade43138502

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A0D91930D3248D88263AC1A5FE6FAC60DE487747

MD5	10c93257247e019fbd9394af466ad183
SHA1	c6e72cbdc3e72253e3efdfaf674c82f72d42c75f
SHA256	16434aa215bd850cf5cb5cb3e757fec885b9e5499820722810491e36e913630c
SHA512	12a83743efbc6cc924d35208f3f578486bac9ece0b7c9fd77b8a10b5673084e5406dc1bb146acb2cb52cd2f9bf79a77a2a4530de755fec418b940f211d8f20a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6D298E98B21ABD32AF71E40D60A916427900348A

MD5	6db3c5f3a9a9d5368d7068a613d4ee08
SHA1	954d9550c31099b39d55fa618f41ae7276ad57ec
SHA256	5762131d999cf2069570a266b2d0be201c7bbab0c9dbf65dee28bba95c75f236
SHA512	cd6e958e3f1807a0f3e9f9b130a722d8ac8589da63d4a5abdcd1bdff7af609d4830d150d4b487e0d834c4cbed940700aa5125215f8bdec6d6d12949fcbb8574d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6A02DCD5F756DE8DF6A4CBB7CAA8037FC817B107

MD5	ad137ed0c1bde64e62db35148f56aba3
SHA1	82068e6f99e7ff6cd46f9cc297ab080e2eac76eb
SHA256	64d57f5afcc53fde97862e88be6a858b4f4d2b1e4df350162c91bc42cea62a85
SHA512	be8a5b331647da1e6128658c38d2b47d2bdcd98dbfcd8046e9fa9194b0ad8dd4fbd50e633021b9e43d38b5d2dcdc123347fdfc44d1692628c3e08291bf6c5f02

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1ADE0F7864B0440E30CF49279A74CCBD26BA928E

MD5	d8a97e1e6c71690fb2e96e93750c57f9
SHA1	7917e5d2477e0b6edcda20dca07cf04555a1e5e3
SHA256	d7c3f4382ab603977aa2324134e799ced6e1288461408bdef79e87675edf4b65
SHA512	efa3506bd477ac36aaecbff3f090f53b404b3cf8fac0c2b61503d71d4dd4ec90e0726c2de460e50e3a5800cc1e43d13ae79a555fc8dcf45e57aa19c62d5202a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\47375858E82A2DCAD31131A75BF7CA6150133B59

MD5	e7c48cfd786b7140238f549c83a1a9c8
SHA1	58d14a223c8170f9759907e17d244f22541bb973
SHA256	fa1e73bfe122d1fc603290ddc56c9d218c0b3b146cb5ed22c77f5658b11b27f0
SHA512	9d7d567f7c1f7a2b7b66cf9bdafe4e69fb1b61bb2aba61b1ce83116b48849aa8a9297749509e441f13f700a4176962513ba59b9db05b4219e6976b0100c83c17

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\ADFE7F0D448B8809192AC294D31518F1530DB0E2

MD5	0a29974df6a2ae32190f128ddc109bfa
SHA1	b3822a5d01e3a3fb67a9ea47d5585c5c320be7d8
SHA256	f10499729d86185e74d6f6fbf8a8feb13a4bfe99cfea37c1609ec64c417876ff
SHA512	15e72058f1b2e517f05ca8358e3818018367ab0a866c0434c6f29bc284f30a1d672870bc0e3943ffe17d10baac3792619cbfb8c7df4521ed7f856b598a35d555

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9B85EC67973732269C5D1A6EEA2C58CAB8237701

MD5	395da017167df6734ce9e36ab7188eab
SHA1	56c965a2af19f339642068b67c9d0b9aa3142074
SHA256	e70459bf3fa86484925474bbdbeb5cad466f3ec1991df270add707a62dab974f
SHA512	397c9c06b141781ec96effd148f94f49c3ac1ae42a2499756e3af10d519f23cb978fa4e5ed8525110d8a7082d718dec8cc721714194bc6482c68980df5e20c56

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D964636302D374DC68C4DCA2362B6B75D9DB1ADD

MD5	5728edaca69535a6ad00312fafd69bcb
SHA1	7ed87d01ede9d26030f0b44f722bedb87e882dee
SHA256	a6886715ea8cceccdeb2d8f6d481dccb91178cd072fb1681306ff9ea502de6fe
SHA512	36adec48de55287214ae21a86caee26d9907aff4935821a61f1bb7ad7a66849f2864deedff9f876456ded8a80e55d8f4a754d2d1e96647a7548a7213d1535b0d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B22A3FE57AF2D9A5AF69032E135FBE4D40CC7504

MD5	f5195681827970fb7427369d588c662d
SHA1	291f3680814542d5d2d1c817c47f927e71d86fff
SHA256	1e5acdf5cc8f375d3055b34fde35952717b90a79d0dfb01af73fb42868be2f19
SHA512	e27570a0f94fefd34ff41f2ea9ad538aad918834c9cd069a69eae9b78e7a394b7f1ffe350131b1cbed7aee49ac5985c584854dab23cbc23cd714475b0d93228e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\7672C49DACDA27C85B31956D670A430E3D5497E5

MD5	1e894bf36d2bd2fff55250be9b88afb5
SHA1	4ee0adcf03d58c665c5cb9fb07d69c8f7f6882e8
SHA256	08cac252f854d861836a429e7edec49f8e7f49fc880bfff64f6dfc33a8cec698
SHA512	6b7f7e6a160d00d1a0c11610ee3643a49c6c5bb731cb14db73755f5da120269f6432bda377a24fa472fddbd77cf584b560b8dacf437cea3332612961ed0f932e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\44836238049E96471D6554497813EF38374771D5

MD5	015a35eea6dc1dbb385cf431422a6441
SHA1	a337d862da6c8cf34340dce2fa1e99b95bc79c39
SHA256	3f7d3cf44c48198165e9a51ed1c1b46dde9e9cd9068f78f7bd08932a536bf840
SHA512	aa8c164cd0cc799a337b9f2473c529cba43c488563ff0c07142455c7d34d2d95f90ba0c10056c03c3592d63a7aff5942e3cbe08d3eaf19e4a63659ae0a17b9f3

C:\Users\Admin\Downloads\MEMZ.exe

MD5	1d5ad9c8d3fee874d0feb8bfac220a11
SHA1	ca6d3f7e6c784155f664a9179ca64e4034df9595
SHA256	3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
SHA512	c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1591

MD5	08dec115d5818dc0b962125c526b9aaa
SHA1	e1f95d9be16707a66baad294c3657f973b80832e
SHA256	16e1fd4eef1e888a463d79329e66a06a5f9294c51976336aa735b69fb075f8ff
SHA512	b5e216a75dcf885fb700f64711b9bc7e86373c7f668df539bdbb790e28d6a224712280cb895fae3b26e11681e89ff62aa4e6814df7273e64aef2ae41c30dbf8d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	9ae1d4f7c6017ab9fad0b31f45dde77d
SHA1	877842fa145aa6e42371bfec268c32c4c0eb2a0e
SHA256	12a6deb1d8fae192eac1ae992f00ee295473e72e6c405cd5ff258db83e8c2d4e
SHA512	3333521f2cc465e3461585e10e78b8c354f021f0c318881a57564f7279d8127b376936fc9a98cefa84cc1d94fa4d68c310dc3ec5322725b6d6089401c6381435

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\29558

MD5	cd3b0586469f5ee138288e59a40a3b02
SHA1	f5c7e6da14121bf62ee7d85334ee04a910d143d6
SHA256	369b6cac2ae5300c53206771830da60d27e6fcd6abb2060ff50ca0ddb333025f
SHA512	a991c461a48086e92649f265124eaf078bf8d6ff64798e5ebf92a5b0e466fa04cf99e2b9ab9ae9e4c84d7bcd4fe34001e0e86256734091a949fd25a603976ca4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1910

MD5	4a134c7643d95f4de05e1877c518a40d
SHA1	f5e1648f1519fd9916e470deda55de438fd9eedb
SHA256	6a9530d5ac5000067d0676af3848ec05b04fc9ac21662166e6fac51988a3e0d1
SHA512	988ca170174a742fbc5749c577a790383904d541abcea7dcb19a9c28878c405a8a2e79ee483b57b7ae4c1a09b64f8f66b38b12ebf56f09ffa49b3c113ef8e37c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16271

MD5	5644871616189806832caa044829507c
SHA1	0e8d05363448cbc875b42bfc8a107983147102d1
SHA256	f615c62b55a56cb4e4446ea0d46b391f2974b630b48c92a117e6f68a2f63635a
SHA512	46add708b5ca9e74a5140008ac21a7a7c116c84722d9f0b70ecaf9ec5532cab4ff02a7438e52d2da3a8857610a0e40d189e59bd00250d869ce9f293753518f50

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\3209

MD5	42355b58856c5c837a4b5370bc5edf58
SHA1	4cff31097f9250a5906184f8ae0915dfbf5d2a26
SHA256	84a4765b0434fe956f7beefef1e0474e93a1e383fd3ca11c1d5cddf0df834ad8
SHA512	04d08d184e9eb8b7584543b855ab72227a76c1b10a3b555d29f997454cc9a811894850987a53c82f353cb3bc8ad51f888a18c319fd1c151cbd406796049c587e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\16047

MD5	8bdd770e999cab0dfebed0f83770f8d4
SHA1	5a310d4ad20d7a70e134cde31be5bac426e4238d
SHA256	3a6e26617fa900dd6acbd3c312bbfef5d9c8c79c97e5d3a9f8758352adfa7a6d
SHA512	db526934e5b5c8ba5d1d442c223ccb76c99d7e734b7c67be745343b9074771505e7407c84b5fc8f1998bee4be0a7ccaf15de4f0b4646371a11b3828a2b7b9774

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\2984

MD5	432478d335376d6a27da3dc0e0b59872
SHA1	720b086c56bbbb99e3b85e40589acacfa4e97664
SHA256	07804d2619802f0f63db0d935ff4ec4fb02aa66cf2ea11d80ea233ae206d5213
SHA512	7deebddb4aed850e102993359582eb3f97165eecdaae57b292b06a771d61e4a66360649a77f0dcaaefc94452eac9969dcf0bcfc7b006a0f2d52443fc6ae9a379

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\9852

MD5	be841a12133fddab245e001bf49c61e1
SHA1	724d1d103e6b9371434a68e7748102882e657844
SHA256	6d0ad15d408608384f01e698447c9e4db2b1c51c9f4d2835e3958c3ddd152e90
SHA512	1ab2aab25107c69053f709b1b5c41c8ce3f92dc309c03753342a0afb42b5b80d1768cf2f584337afe4422eb5b5df5df740d5b4d7ce84f418b30498b8b9ff55f2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\31337

MD5	78d32abedbfaad1d8f1d41be95286bac
SHA1	c70c93ca4c2d6c2d42ba33cb5fe23ee04036e83b
SHA256	5bca6511b598f871b9abf9e6bddf5b15d326a90268aab77b943da92443a7d48d
SHA512	a976ad16477eebc78f0b7d2d1b11797af21cbaf220c11fbe34bea3c0d5a1ae38daad91020b97a1608c224a0d9d7175d4f65be29d2059883b59278bff41329538

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\28741

MD5	5b82902dc02059c14b1b8e9c620016d8
SHA1	d4899a184a4aa0149bf7172137ad576a3abc80a4
SHA256	94021467a44b55b51499db8064a7f4f4d4ae89771c0199cd5a927c9448ee5451
SHA512	057cc28ac8e9fb7e3cb844909d438c42138d38513402a6a3edf8ab6211ee8700ab09462ba5e8c023fcc3857bc845071cc8ad176b6d8d7bc20fb991942209272e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\20480

MD5	1208e593631423d54bb60d6c113a756b
SHA1	bfcc81a02f5758db4e1dbe8a3f8755da2d9f768e
SHA256	75494c635d6f8d32750e0d92ee012ec77dde7def3991992c22c12ce1b59e6214
SHA512	fd5e0ab7b2c13988bd853bc800696bd4da528ea857e8f1dcac2620df19c23cff3d5ac97ea0e00ec141e115573d12e8355dc449d57cfb25dfb150424cb1434190

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\26731

MD5	5069c4f20a10b08a12cb2454456db37c
SHA1	5ae12ed37ccf0043473fa4c7503e9cdb0f90d61c
SHA256	9fe45f8c2f60bccba6f59ba8927fcf79c021d3a5c3fa6c45554babf58bbda166
SHA512	01bfc0e83388e40e639fdc6a591a35d9639a752286503e4af374c64cd97f7ad16f7f247903ef71bb45d9e3c5fcafe193acb20c297565b380c0f7eec7334b2a2a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\7418

MD5	2d29257b51276acbf10923fb0e5b831c
SHA1	b588f0ee9f03c9faee61cc0445c3bee5603c044b
SHA256	a1d97c7ace78c888b017985eead3c85fcccfdede72d9c28474626d7dabe68311
SHA512	3f09e6e1b6d2ed641451c7cf4464455546f4f3b9d8b7d1cfba9b64ef35903f8b1620eac95c1c10f4487c59a5dbab3815b1b0bc4cd0d988b1b8cca8f5178d67c0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\20256

MD5	31ac1534c1d1fc97dd18403d07a44033
SHA1	ce249aa809df24ca6bee849ca4be66e5d3d346e7
SHA256	8156c1aaccc05e48f4a06e1d8f52dbc380c2c2cb275a34fd8ad068ceadfcc035
SHA512	d59162d9d8d0625f28bf8400c4bf0fdf5a089a58d47c11facbd082495932c31be2d2f4c1eaff6244217682b5c7e2b605ca6f3cd1449d585870b6c11085647312

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\550

MD5	f9e59f542b2f1a2f22c0c4c59c19047b
SHA1	ddd7c55e913abcb4ad39c1b5c4d1a7e27275689f
SHA256	e2f494513123d95d6fc971b820c28ac173d4136c1e1fa0b3c49ec248ac75fbc1
SHA512	0cb70e2d32615fd2c95da6189730d9b107e3df9d727d81dc96170d7bc6f669245a75388b9baf243facd7321d6ef3c2c1eb65beaace127e2204a1deec149055b4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\316EE0383FE4B951859421F284036056DC4513AE

MD5	00f5cb6ccd581bcb623ace2042a91e35
SHA1	3b5afbe13f527cb24c7d6d8967e591dc9df4a727
SHA256	e91eaf6d86df7b38fa1e3da891b36d0d393d61bb93c9da220a1e7558d7723206
SHA512	c904d762620e86468f4554183152e7f9d8ef9d00f3d4d52ec354dd9e1c1dc2c45e726d01fc0961fcfa8ee917f2ce6cfc98ddf9f3d1d344bdcc066c9772fb3c61

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\E877477C8A281C453992558949B24F22377FEE8E

MD5	83fdf3a335fcf03c4a0e168afc8a6d86
SHA1	d126a05a7038ea126112297a8b7344385019b811
SHA256	3a2d9c5699a95dbb26f512c0a35a3d1698b3d75e35d6b569072a332be1f975ea
SHA512	2bbf83c4f1075751d32e91be8831e2a9c705a18c15d7560ab3a69c229ab253edb5dafdd3c6f0dfe30a1b81910154fd30a4ab2b01e2909094788f79bc136fa015

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\4F0448DC970B7F7D5370CAA1463D4E3558823B75

MD5	b30f9cfafdebef566b2a2296016920c5
SHA1	9ca0d3a233c2aa7be02ab3a807aa761b1cfe342b
SHA256	eba91b79cca59498cb676fc935e73dcceac9ba464e323fc57340df4d06182f68
SHA512	2d7be312811d7d325a1c11c64787ec80b9a917b2d87099bb0f6912a8bb4568096294e4f86173b53bb30aac6ef3edc35dca9678a0e86dc67ba05e84cda29950b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\99A5B4E3ADDE21F3F7BCEE8E889CCB0C6351498D

MD5	9053c4e622d471707ad4ac92627ae9f7
SHA1	9f9cfdcb8fbb529fea4f972aa29ae22b86789558
SHA256	24aee4cf8f12f84c4e453b68df1b2968e858126e775b6987783066b2650a8161
SHA512	db8990e83a35a634836a4d1d5a9a2eebf7fc8e28a4b36a7ff1a391bc5595248cd9b4f1ce127a6bcda8cfd72cff0b05833fcd35eec8e545ee19e6da1269ccd6bc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\C4F957CE6E35BA2E65B7805D47A10BE4E03C67CE

MD5	6df4770d8bf85fe905cc0d0026e280b7
SHA1	e7c02047277c30a849ca37dd577b6b21f9bc34d1
SHA256	191be4df582f734c203e20b39b850860e9c6e4f1cec83c574055d97ead61681e
SHA512	49efb1c5eb943c7a6dc4b29efd2d2d29708569ce89f441f8026203491ad740a8df71d24bd81538106ec8fb07aae0c4046e17a8148b8e0340e2f0a274950f3c09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\340A20133DA586CAE303E3038240B49946C0BD4F

MD5	b20c2b33f34fcf74bc6c390c38d69dc0
SHA1	7d93c65231931494413a6566d2e0a55f1d5b84ee
SHA256	9c34c2c7f366d2373ff9d270ff7ad039dede886c121751e8392bd501138569c2
SHA512	40cfdba11605842dd3338ca6a6a676e065526b579f47387bf73c04aa15eb3cef2544d3f08fd1697f9196b587d5744ffcea819b1cde553dcb0cde713822e19d5a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\63E61CB148465CEA73C890C24FCCEF9F06AA6DD5

MD5	34a4225e40457e2cfff31ee7a6f66c31
SHA1	29717880c18ce938cbf3b2809bcef257e23a7109
SHA256	081879547a2169bee48e8b80ef0ae0496d43dd18553917a5431cd8c67c437b21
SHA512	d52cf66d2dec27d4d1d67c4dae401978d8f46936ca4d98ad796df49f8c9f6b29fbfc03c9183edf8e0ce306a17c8efca47a629cb28053cd7a73121e76fa0e36c6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\17622

MD5	d18c735fb884a071b6e3ace5909f83a5
SHA1	8dc282c9ea6a482bb13d9b1a9e32d403361accde
SHA256	d4bab93eee516a05fd5be38d7c4f3e6bdf51dc7e417f9ac3a5f3819f5f60dd37
SHA512	dd4faabb384d96a5638007ccffbd2141bd3a43463a4bf260a1c51f65792749ea10f6e472209a062a38ed86b18f45a82050be9ca3b575d35f300b4225b50cfbb4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10837

MD5	527805aa841b7ced5a13c8664a41029f
SHA1	6892b6f35b5e15cb8ea8a3c399ea4c538de58caf
SHA256	f8cc6b0071ad2dea9a09439a998f877c18a4b39fa01c1974cd2ec0e9021c3c71
SHA512	bb90b766cf86471ab5cc43d2d09c66e4b893466b40669d75ed8a876d7dd609ed9881941642e0b7e6de75d748746d4394afd9592b57dcb68f5657634cda1bbe35

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\30543

MD5	6bb3eaf2d3949d3d91a4a5c9e3e716ba
SHA1	8693b90e7b4de8b5cce495b86e08385df64bcb4a
SHA256	87596c274d25ac7e8e03ce51c59794775814bb2e9ba567297c6fcf41d8b0bf63
SHA512	0506845c2585d8efc60ec2f4e6163948ce74f2cfdf3812fad1fe6f895f0c853ea96d05da65be1c211052d516f3228553103153868636ec0991be3df75e44f398

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\27670

MD5	9573e0997af9b4ffa15274b5533bb826
SHA1	a3cffea61e8ede42477c58190e1e5e2bf9225067
SHA256	109d04a707687183bb93d7931dd3c75570e8d37aa0d5c303bf4014e1d4788b2d
SHA512	4756197755f7bcdcba5d3ca833adcb0f375108ef5ae1c9614f74fcb84ca9ec792ad6cef230c5bcca379b8d5d971d269493ecf639bcd1290bc63dc099a35d68d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\10613

MD5	c7d4ed0b3b84f9f79b340cc11e84d284
SHA1	15d89ab7efd4473d0c7ae97ef06b9c9282a02143
SHA256	bf2c6871991642cf95f1925d233a44139dfd3788f40098d1006e7a852d010d89
SHA512	9176fafdd74a7459abd7b54053a28c9e11aba03ef468a2c06270b2a17696368a0cf8913fa819208b11b17c88830723f64210e5651475c26eb52f7bdf28b2d4af

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\30318

MD5	55fcaf820d359bc329af02e54ab4fdc3
SHA1	c775fcb769f97fe544223a27f23e776aec4ddf5e
SHA256	bae71e41348ac13f73c66ccecfdfd8680cd57ab2e265fd634554ad355e8ffb50
SHA512	9552382700d867038de3522fe6942ae42024b0c559fc57c48437434d66fabdea68c7463d15ce8f15017495905d8639d58868f5c634446bba1d859868afe3538e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\F09BEC8A7122511C59C1272C674CC7F61C16CF19

MD5	216638c51c663d4367bdbdaca0247df8
SHA1	03a76f75906f1e285d55b5743e7366d58d33ed57
SHA256	b8db06ba1cb532ecd3a61d2fc284093929f892380e7ae23d8e46213e2fa06956
SHA512	83f4b79131624f624b362546bd9a9fa6407c458b023915bf0bc9e80f3645055927252cab487a37c1062a859ba1fb0bf61c7a15324074372291892672330bd616

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\22F2BE6046DE71FCC15A701DE0FCDEC5259AE136

MD5	041edd75580bda1793cf73d18a4ce0f4
SHA1	836f8d2c80b709507a4cc9a27ae9ec4e717992ba
SHA256	ac1f4eb2b15e98c5c5819c69b441b5b86d78690ea22170a8342c000b4f811520
SHA512	42d3a6720f86118515fe79252859976d1706c1c43159d18fa59629f83307eb7dec496021ba602960dce14f4dea9e416f64c57a760bff1f1c3c811b0ab243dd0d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5BC40C3149C70152E2C9DD95F36A70A6854F251D

MD5	5a838c73ea8098c6e703f330ab6e069b
SHA1	fb5afa980d51320416ce58f4176c8e7e68e477fd
SHA256	76cf80a6e37cd6fe751e159d61dca383babe54d42fc3fe3fe528eaba57145c3d
SHA512	e6b86287a453fa0f9b5c71a86038e042beb38aedd5bdeeb3ac20b837c49a92d787e7061ea65fc2059cce4f178122662b6a68094675268c53c1ea9111183554e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\765D57250BEB53B4DA4F8C5BC2722666275C3A05

MD5	15d31fb472c8432a7791dfa77a88f68b
SHA1	b43147c81bcb2591f74b3a515254dd63f0062ffa
SHA256	926657bccbad9849e3c9bc7ec46760c506720ec4f38f62e54791ecb3d5da906c
SHA512	b0b406073469a8be87081c4e088bc8f143eaf54a5f9b76c5d491f000d6dd4dcbdacf1e51879855f8d784d64bccb3bc33fa78b86f7f9c8f14659ea2f045dc5795

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	9966a5e5de7dd9be87f70641696b7488
SHA1	dd51c037ce584a6a3655d1d6af368334c3d0744f
SHA256	08eb056b9ad4ef2734bc6e108c3f8d2220734eefe0c2b3e6cda4b1f9f7ad29a7
SHA512	fb11b4a412341136c1015bbb10fa7d95d39fb7a22dbadaebb50be629bef22b3ba8c4b05e6956910835a6cac9fcb242b85a059a2ac15e83ba2f60541f5850cf60

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

MD5	efe76bf09daba2c594d2bc173d9b5cf0
SHA1	ba5de52939cb809eae10fdbb7fac47095a9599a7
SHA256	707a9f323556179571bc832e34fa592066b1d5f2cac4a7426fe163597e3e618a
SHA512	4a1df71925cf2eb49c38f07c6a95bea17752b025f0114c6fd81bc0841c1d1f2965b5dda1469e454b9e8207c2e0dfd3df0959e57166620ccff86eeeb5cf855029

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\14337

MD5	1f3405bcf8eac9de549c75b377960491
SHA1	1f22824636b5f412ab23c23afcb490a6c03826b8
SHA256	0ee3696b29890861db0ed0bef9dbc7b53e68d213bc270b19951701a9cbdd41cf
SHA512	da5d75e3678da15bb0d6c49e003170b8a0fede17c9bb2e04df835f623661d84d46b8c047dc0786e394b01c43154dd0d736f8320d2a29fb332f76f5e1335863c4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\3E56F165DE6B98958B91D4F477CD75568AC8728F

MD5	daa5ed198dd8e504e63731f3a1b02655
SHA1	2d7868ba8997c14a10be0e32ba35e928fd12c38b
SHA256	d3a44e71e7f3022ca140e285eead5079d5d4a250f844260d478dcf8f7f18ab20
SHA512	234b5caffcd2e0392625cce1abc14d679120f327ce316cc72d2456355082075ad6c12fc24cfb08cb956a2a109a613126ece46e79e43a0fcb105098c32e22d4a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\2E4784715F7BE988DE0637C88BA6A2ECB94B6130

MD5	3779f469c639927a1f91cf88939d52a4
SHA1	a15e594b93232b2697e94cb6c6b906131b4fd8a5
SHA256	fbcd12b8a494445b27a571d95e6334604ecc19728485d81b0c77e57ede878789
SHA512	9aa5a2800aaee6ddf7f19eee1b1233c919e57920aa7c08b829397adda1d94c67a4ecf6951692b29613f12c153b2a7085746e70c05dd9b6a8d6b6b558159e6dce

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A6C74BC2260EAFF823C7AED38BBA607C962CCB55

MD5	c8d5a5a1f04e64b572f4808d7d1d349b
SHA1	768fa2641e900a712364100f442e509f9e2c235b
SHA256	0068b6f12eab6934784b2a0f110d2a1535603dbc795fe5346fe36d3dd222a2f0
SHA512	76d2c6651628f2eb7c23591bf67b1dd7688033f0eb0231faca33e5c1c0e5646e2e97e53b9ebf0c8efe46b3a48eb631062f2716db995c4941446c7f9443769ba6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5	2d748a64d1a3cc7860521df65bd74f06
SHA1	65a68b42175a122fdddc647869bd656091c0f0a8
SHA256	a2c66edd7c33807266e3bc163c5921222510815150b8d88cf489aae38bfe79ff
SHA512	394e594924eb18ec58a0f78b9edb77e4d537e37183e9391420c280f23add9e07f3fed396a803459f7c42fe13308409d6a995efda2c262079517bedbb53b750b1

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5	85430baed3398695717b0263807cf97c
SHA1	fffbee923cea216f50fce5d54219a188a5100f41
SHA256	a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512	06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5	fe3355639648c417e8307c6d051e3e37
SHA1	f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256	1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512	8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5	3d33cdc0b3d281e67dd52e14435dd04f
SHA1	4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256	f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512	a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5	938632617d939a0244d02fc98fbe1339
SHA1	4c0b47a4b8b30eac2789b224638685a951adadb0
SHA256	7fe7cf879aff8519f057a670a00c1e9d3d232db7a532f8bb1c4e60da29a33b65
SHA512	8016513399aa748c83447a295017bc753780e4bfcbba9f1e0d6f66c85b6859808e2bc9a6a94610190447386dcc8314ebb59ae64f7533babc9704c0e989b68daa

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5	a01c5ecd6108350ae23d2cddf0e77c17
SHA1	c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256	345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512	b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5	8be33af717bb1b67fbd61c3f4b807e9e
SHA1	7cf17656d174d951957ff36810e874a134dd49e0
SHA256	e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512	6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5	49ddb419d96dceb9069018535fb2e2fc
SHA1	62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256	2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512	48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5	33bf7b0439480effb9fb212efce87b13
SHA1	cee50f2745edc6dc291887b6075ca64d716f495a
SHA256	8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512	d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5	688bed3676d2104e7f17ae1cd2c59404
SHA1	952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256	33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512	7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5	937326fead5fd401f6cca9118bd9ade9
SHA1	4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256	68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512	b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	eb390dbf282b94cf8d9c61b920e50a13
SHA1	332873d3b6e7c23340b08a0bf1bd97806fc9dbc9
SHA256	62496cf01f0e77bd27abba197b9282c17add67a69c285815974f3692f070a475
SHA512	3a3dd89549d15deb2be17c23f6c7e754fb79aebc34827f120a528be15efe7efa84e0c50fd83c02508cacda1dcc6a3272d9156993d53575994f67b3116850b765

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\C01A5A91B3215B34E7411A2001698454305F7026

MD5	93ce63abb9bed5e14e6730a8cc86343e
SHA1	0a81d233a2ff2b1fd154c8410c1846c83a84bd8a
SHA256	c82ccb5963db96a5eaa3f17d1dc176ec93afd8874d1022d72f99024b8264ed82
SHA512	71888d2d6a18df938ee662ec1dba4b83a3ac796016db80f43ab023faa54cf86b548fa3cecdf086d3c8cf4bb37837c67c486c6013d33d26ab89561beed561c724

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\21072

MD5	3aabc88f43ffdfa6a76ec1b7e4e6f12d
SHA1	bb05f4415b4019fc2044acd743b421aa2979967e
SHA256	b5fbe2f7f2c320680414fca7617c8b21a7d5745bb4e80e35b8b2b19e12afffc8
SHA512	4554101fb79e8bf668d3ff836eea01d1ac01ca3b5da4f34e7b9d8b940ffc59c9b5406e3641cd0075b07d066d0c187dc38325e6ecffdd8e77b1e1ad3530a13494

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1B1055F09D84EFD460FBD63A7C8E7972C777E122

MD5	6b7aa5d13597132972b623bfeb1ebc2d
SHA1	46ee1bea6f31ca4ad3788c2ed857916bfdd322d3
SHA256	efc2f3015015e7a64b999a8f92de669eacdf7386ef6a8d512014d06310aa2370
SHA512	81e6c0b004dd2d8ad2dc250888983b5ffe89d3010acdd40944f16bef8371ae99e3fcb66f1cba861b7b0bbeef38482b5ac36c711715b8d3c76427820792125ffd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\26852

MD5	9bb90c45c755336ce00244d0ee06135e
SHA1	361fbaac45708a9142cc2e9c7c692026b72f65b5
SHA256	8a81f6d784fd16ac6bf132ce93a544af8d40b3a1cf3fca03e4580d154c737c45
SHA512	6e9bf0ebc9aefa5b3f7fda479eee99007b13317f111fda708f3608d6a175c2f7e66f32975918a304dcb0f66ab68f005563c6b780b810a1c8176ab5ef8a8cfa48

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\31796

MD5	87f1c30aa50ad842a14e7f02a94536c6
SHA1	5603395d052b5ed3de396f088280f00ff992c373
SHA256	687fb0488ac4e67ce5e4b72f13adfb20b617f523af6d04632dc4184f5e1f8e67
SHA512	90b9730ecdfc8d717a575b811ac9d9900af44ca474114506f3792e3d9869b1309ccc139c3b8ae46950e157b68facf2f775aa5c0ce6421b03270f120b8daec731

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\279

MD5	4eaf7318675076e9a559c0a2ac9b1646
SHA1	37b6ea253cbe81180dc25516fef966a92dfd0e0f
SHA256	62356cd78fba3f2c097b4e135493f5bb5b0e3cec70b978667b3342f93dd52c9f
SHA512	afc17ab6eca4564853c7f34eda10234946adf28b998e32a61a703ff90fbec6b28b092738a67b4f2698d2708f6e198240c4882ed23c7561765d3ff58dbeca678d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\19984

MD5	cda886b98c43ca1fbd644dcdc691970d
SHA1	b8e6cbce904c20296198dd3c8b12dd2cf19048f5
SHA256	486250abd21f7c4debf8a614f8b8c7add037961a5d60b0a74321fa102e989d4b
SHA512	b4d7320f7cd1f0923a6da8fd6b50fd976b03de2983c35dcd5aca154b5811f8e451bcd62a174e5c21b58e005d68bbc5ed53dd618d31a337f2562a33e13c8b1e6a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\6922

MD5	00a84c947f2ba524ed0deb005d5bc9a1
SHA1	fb47f33e8e98b63e4978e935f9452d2dad8e1a15
SHA256	84ed174137f2ed4f5f155a31bd7910e9194e92cad07bdd0576a287e6fbcbfa62
SHA512	b9545ac6b2d77810655ff85bdf0d5cdb0c4ed08225270e840695bb6f090d97736f16833c621f02e153375482126b7fd39815829b2667aaf1c27b06ee4db7c56a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	60fcf1adf7c06d4d9bcb3d5842873d29
SHA1	a334012ad48396a3359a991714bdcbd164aa43a1
SHA256	f65068ef7e8be5c404f5c8e95a8b0eaa1ad10fa07d49e7ba8fc4f5c5ae9c3818
SHA512	94ad5805b522d96e17e18f8803702b77d79bce827a604f007acba3a614a1caada0b3dd6f6a98c37286876099b10217146e68cb2f6fad05f31c591adc304aad50

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\13565

MD5	ea3d5e4f7e8d773c6d80bf7bb2bdb1df
SHA1	0ccd5d6be76ca034fea88fd0a555a2955ee0d739
SHA256	04593a9dbaf03eb554685a355be65b3b7e6b5b6430161926491289f805309f97
SHA512	d66f5bd1f862ef018b4936505707538fdbb3ca50c94d56c1046b206f0e5290c798191a4f46833924aaab7fba145a0a9004b44fbb214b8a9f34487e38d27b5255

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\503

MD5	97bcb2d84288d79385fad9606e83bcf8
SHA1	74b2edac714bbbec8edb9d667c8e23c66ae2fbd5
SHA256	1b2543323ec1d4d5bf3b2efafeefd14f5f45e1261e2df4d3e93a32b26de502d1
SHA512	b17bb251ad5ef3fa65b60a15b61d158460390bf3b0cd8bc2b5c9ca17b11c790f1289e69386ab88cce8ddcabab5cae1f509a70d0a4580cb62ee1fbbf10efed9d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\14621

MD5	5016aa66496f50be1f50d35f9dc6edb3
SHA1	640bec0ced3d7e1898415db3510f9305ffec5cf5
SHA256	f557efad682362f07e49fff1c935dc95a9e383b731d685434260d3c3d04c201a
SHA512	228c017fcf19607c3417dcd2698477b0ebd344f1b93165067ec869b0488746a9c1ceb438094c04d1e8aa17b27873370b762bffbd1ea59e26d596bc9916181400

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\11356

MD5	43749f70cd88a9c8fd1867f2f9b57c83
SHA1	fd8d1118af01e1e562be2fc145d2549af472ce41
SHA256	d24468418fd0606a9c0e0be1946de58bde68b3e047b126667621e9ff6891ba8b
SHA512	67b41408ed1ba97e16eab0fa0c9506995c4f80f6b8bb520ea5b4e08e7ba19a27452dca6a4c86ff8ec10d45af66e072baa78b5653a51ccbd7d62f4d5bdf588930

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\14285

MD5	d4a4b8a126959dbe170afa88e32d7413
SHA1	ffc97ac3ff2fa4e2297fbb391d431e5a34cc4238
SHA256	61c45df64c9f446e7255085997398a9c37b8854c7a84f3f73fd40d15ce176672
SHA512	5e933d86e62538416a747f3e383434e12dfc374344e964854ca8dcffa6610a7f7ddb018ee9529c14015404f0c688587b0a495a1c2d9c61a8e5c1d60be60435cd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\2419

MD5	29fef7a45309e2c7ab461d19935f918f
SHA1	1d6cad18edb1ce0124a866368c8dfaf43d19d14c
SHA256	0a65b0f6c9c9f36a696b51da1c46bc25743934fd73b99e421eec9529d3ae33cf
SHA512	10c66f15616c1ac3b1b684f767101c45dc96b46a06b17add2f647a2ee054c70fc0bf987fb5ed7d0634658552c3b4b2373fd74a689bbb27afd86fd4def432e322

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\2636

MD5	7a3f56832a2aeac1e1e4f5ba07b2a96a
SHA1	14ae71e9f3214b3b66664fbcd3a5481e93c5cc89
SHA256	b10813cdca2b8b459f935bef527299f3d7f13f9be72bec891f0ba2ec74a480c0
SHA512	dd779c01c422fb18745e27c29d097a8f5bd1231a9614d5aca91eb5f7ad50a712de3857d1a32e2f97558832281f3fd8a2077aeabf6fa4ced15281fc206b50f739

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\1222

MD5	1d93961f311dbd5100aeab51dc2bd733
SHA1	9824a4f0987806aa3f5033e7664fdb2c4ddf9e33
SHA256	31a5821259f9d451fae93a46fc47e83ea3bb2cd938266fac84ae1b52cc54aef2
SHA512	2b701f921524e4937f1ba31d85b3bcfd17879fb16b432054cbacf51a126eff8350899f4aa58eb6ec1f5dc08c0d7bf392108450512f18b9ddc7837b9452c8eb56

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\998

MD5	4f5c4001f237e7ae525cd7b6b053ff40
SHA1	5cf8cfd98aad598b221f541198fc1803da54474f
SHA256	4d43a9f5ec89b199d51e1f7173429f253ce73da6375922d0f045ec1cb9a7f0fb
SHA512	a8548c963c91180ac9706baa566498221439b0bee2ce3e00b01cc9ffdca65eb6e2cf979e000a141717fdafd8706e469a1a5fa5c4dcab032f70adeed0c900e917

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\FE7D1928B3E2CF3485DE568C5068FCB1E9DB2FA4

MD5	6bab1766b6a8081e6e64db8be22a7443
SHA1	d22caedb3e3a42ad85c51e574d5aa1f71ae62a66
SHA256	934d963c82529e3da522c0513780571fba2a9a7010a7fa498aca59ed55a600ff
SHA512	42b112e4f8c27726e8eab0f00b8eb0db79581bc37e271b2e52489e070c7f4aab9f5fbc68ee6080a3ae1139bc36c181eb86ecbedf48034182f4707c1e3b2dd79d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\CB9CF4108A9539FA661E37765DAC9CC2BEE29E85

MD5	5ab9b18184e24bb09038fde5001680dc
SHA1	437979ab990ca5171e3c569ebf198e8ad3858569
SHA256	82eeeb909698ea696dcca29fee56cf20c5ee5627d010ebf9cda9809818b1f317
SHA512	92f69f000afb49d1e2e85a9741dfa75f449f04f40f8a1a1dc9032c7e3734c32d40d19fbefa4df534edb09b640e756cc9b000cc23649a6cec03255a7995edd7ce

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\FB2C5B1165204FE1877CC36C820925B8150D23F7

MD5	39154a03b8750b03ea4b52bc32c550d9
SHA1	779f6ee11438a7a060c6c1727e934faa95e51e83
SHA256	d4894d1023d73f130b1dbf2fa6200a220513c83739b9a899ee79dadb9369e2de
SHA512	820cad06b31cbbff4bad1eac76efa88f969330eb5b95b008bddd2439fff71c0c8020915f377917e7ca5f58dffdccf7a11b1e1a137db1cd1e47a03d0710e131c9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6D85A523C81276B578E9887442288ABD7C9A201B

MD5	207d1f682741daaefb8a05c733678ac4
SHA1	d121dbd235185b2c4b15042476ea0bf417117ec9
SHA256	32353588d8bc454017ac57d4cd8cd5e5c4b8ab680ff214b267fcf35900668d94
SHA512	932ae6927921634e07f8f63212f5ce7d428ab4f6140b4f79e7bdf9d9cbf184b06bb055c04b4e96c31985a4105f827cadf6412dbb4ce8986d6bd85a9ea576e8da

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\AE23DDC117F2ADB8B1C27782E2BBA520D794A20F

MD5	f01f4ee93e7b11419dafc17c71cd0f03
SHA1	aaba514afcf2a4e08e5c9a7bd2fcdcfafc39fb67
SHA256	dc668956a34f3729ca8c6e960698bfd23d951a9c6407796a471d85e1eccab4f5
SHA512	556cc49f6b51e157be1852472e22c39a200b222869d42e2c241055f2c0303a1857166911634578ce1623dbe32ee9eb480e6bd88a772faf70df0599dd8c04cedd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B873B3C7DDAE91939513F735B2050BE0FA092BC3

MD5	8d5afd2a03cfa80d183184a20c2ca76c
SHA1	fae663887eb5d163d1bd490d359fcb960cb4519c
SHA256	e2b1acac42c29be646501e9971838a477839cb5a11068ad59d02204b7529101b
SHA512	db448fc0f5d2c2fc9bcdddf4e710953901b759d36923475ac87d8dfdfa29b4ed70a775efb8a89b4fecf80732d12d9b8b8f7d4294493e78f82fadd48088a63ef8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\313D320AF8174C4E3CF756D89660FB5A58BFCEE6

MD5	e66fb19297080b364732bead1fb2b29d
SHA1	9666c4b717643328df47fe13b6e76f3ede1065e3
SHA256	1dd4377038477bd3092196be03242f31fbed59edb17bbadfda1f1cd74dc9d4d1
SHA512	d1129112f60f61474eaf91e9e586e987c66addc6dbe3d03b9a3dd1f77653dd0bc9d688baed78ad128db1076f1217759e04e7456e3f97f66c89f351c4ba1b5fc4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A18AB3FBE5FC5E1A527BA36FF698DF26A7C382BB

MD5	52a4135a8998510cf78aaaf3aa247f1c
SHA1	faa1dbd371cf0a901d7576046b2e30eaace67e2a
SHA256	063640cdb4d7f33ec1e91aa5493d0d416144dacc10502d5958a878c830918860
SHA512	804a25700f7ea9f3485eb476f79f917ab07bb1c54ada8c3355ee369275f470aa4618be95559615f442e8a0cd459f52a92d530752dcd14909410abf29ceb5b0af

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D901E729888108B613A20994518164F9CEB23D90

MD5	63011af48cc69660d6b3d09f6ea74628
SHA1	764f7f0b81bb4cf8913370f89de1a5f673af832a
SHA256	c894b649d49f07e5f5a72241c7637b19efe673eac99e1691b866e32ebb494b7e
SHA512	38a6f8e3ed37a0643d88cdb775da7100d982043141a610c6f2ec6957fa467fe0add1bb3c1e0ab67967f749ffc0199cfd48308b093888620d2de2300327b78b50

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D1D59FB4C558CE2A8474DECF1A3849FF49942A48

MD5	6fb0a3b1372154a7f83d93cfcbb71f99
SHA1	61229ee1e8cde9ced757a33887a8fac63d7b5569
SHA256	04d5a066406f124404a7760e2caef67cf662b053e52b324b2f63aeebce6c6edb
SHA512	7ed21f9233399fb1ee8f87f1306a6220ce6a02375917df5c4cec5292eee29480092cbc62fa41bf4c6946da61964d6aad45a5a7cec07c6642af37a186efb6eb9c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\C00FB0563FBF261A24291645DCE1A88BDF9E0E85

MD5	232bcd088096f7abb81d49ae29ada3c1
SHA1	4757ba825a2c9c0d95c6eb2e230aa13cbd3c622a
SHA256	ebf00630b7c2f457fda3f2f8ac89d2b242c69e002894aa03c6d35fd11642983f
SHA512	3c0837fffe384ea718ccfc008bb6a43752a2852685bd32ed1079ef05c30e3d622a76dd5d49f83fd6fcf22f12a43973dbb3068bed12fd574c7c3d1cd904eadbaf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9B9E98D8EB4FA51D5DA814D9195B98BDB3BB958C

MD5	ef16646344371ce14c420b3876fda32e
SHA1	ab959c3ad404a98d9eb19229d9c4733b8fb07abe
SHA256	cd029fb766dcab65b5c5b731416120839d91c34efbff0a708b49696c1d38d2d6
SHA512	08d6eb8b2c8a4a2f9734c3891c069d4b86f7a5f6ff248ef3eb366493009d2c3d1694896f20c5735353349fa81eee113c52a3b88b98ddc619a71c8c22d21e9966

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\8685E97418A0A0B44DDFB3FD006B05501A9F3AD8

MD5	69e3cd42b437d2dcf53433254eb8928c
SHA1	202e3878204bc52569f2e70677579df0fa63f3b6
SHA256	8365d3e5efa6952bb5dcd53661bdbe84ac797b118035a13d709da50f72bb924d
SHA512	a466e1928b87cabf4b05b73c4264861f44e1d6f6f52ed29cdd3902dbb1c6197ab9a13d29336cd00aab88b7835b5869204a7606d9529616f0f2c197e939d6e914

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B5091955209EDFE6F9E151E0F81D9BDA612186E1

MD5	3bf48aa4b17661791a296ddaf1149ff7
SHA1	9deae256f01333c737e7cbef6a85b72930626d44
SHA256	11c5142fc30a3f28aed8c4dfb891d5959700d85e08d83c9a8b89371a8ec8ca5d
SHA512	e1b085fe6a7b5755fad15aa52c0adb8ff4e069f9fc2d0ed1d1d6e5428973e1f510f65b082c063320455b62d7f7c8455b10c0dc62974b8ff50cc9902db4d8043f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\42DC9748C2362A5B6AD95C7DA24858BE529AA2B5

MD5	0660246eb0c3cb4cc539fe1d10926062
SHA1	d6de93d7d4e1fcbb30bccb2508b71355bc889568
SHA256	e47d553d1d1f3888addf93a4b0404dba8959c0abaccc7e980d4f9fc41048be2a
SHA512	08af938f9e4e11352518245c3a664ee9f4eebe93f67d18895c309a233b937fefd5bf666a4dbd3ddf6fe2b27f4433cedfe4d97c47d24e20a661ababc7a1c72466

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B45CA4C223E7554F32D850766A29D9A2F7D872A3

MD5	6b12749e607cdef7358a5cf3bd5f80ca
SHA1	895f70a4e8bfce36ffe5b3ca96be22837c0ebdce
SHA256	bbce0af8360aefe6a8db0f125907c8e920a28a909289d227c0e24637097986ef
SHA512	ebd3840e2d9eca674e7f051cd019b8878e5e259f0b274470ca773a2e7832db1a4f177f2fc949770b7690c44b4525ba47aa2f2357a80a17a55c34fd8c084a6ad1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\8107661E821032A9B67FC2BF2B10824A0EC8E0CE

MD5	ea26cda24e86662bcec1cf19e53601aa
SHA1	7e0a9bb2495a4c32b34c49ec6495a79e2193701d
SHA256	6b655d56c2bc8351e1ff967631c41de2fd56d5d4baffdc8e3cb218245cc8656f
SHA512	6fecbed978b2418b2bb4a47cc5ef90e2af0afe43f3cd665adf505e1e8857501cd674189deab90f28e90b8f23121fd57d9c3223c5c0a2945a5709ff6aa21d5227

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\38722C98B62E7EA08F4C1BA42A92F9F843326059

MD5	4521a00914b0a1d2cd175006d783224d
SHA1	b34e530de45468cee1093b3a5a293538560d1146
SHA256	5b2a1499415b88a299974bb21f71675d8ac9304400eeec27d3a1790e4ac25b6a
SHA512	5bf75982be5b7afdee6274dd2f3553bb5662f76d1bdc8a6c71bb4dfc4bf59a6ab2fdd124934ad16f008ea87cbc0a4c78ca46bcc7057215a349c11c7024679195

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\43A37B38496846726130A1142F90ECE247EF0472

MD5	1693715a30cd0d3a5c1bd6c8bfe1475e
SHA1	b775792c94cfafb3ea3656070e93aa003989a220
SHA256	6a74b23da4eea3e045b0f55373b5c4bf8533622c0c36684d62e6879f7617b6d5
SHA512	15639a5fe9c5450b7d3026dc97004eb70aebd50e4c1c73145004d0c8088e2ee715b7654e6eb21ea2e8448014633509a5fdefae984c2e5d3bca3396f68a979bfb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\25E742D1986D7BC125B270A172ED152222A6F1D5

MD5	ba15f735693672012b0d31d7b721733f
SHA1	cfa59f670fa6a25ed9c0a8f348d281fb2ba9b2a8
SHA256	c00f7da3baf423166144e1414d2c33cc9c2c3af8916191419cddcae2c0ab1e5a
SHA512	9ec5364496e7ae7bd76ce0d3559fdee88abe6751e3e172320645979b6a8461cb635a442831a473d7a970fdd721e4676a67605c6c04d31504cc005156d9ed5c9d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\E37F0C9F306DC48775447C1CB63D24537A2B4D38

MD5	239bfcbe0eda684e25fc0d691325927d
SHA1	2e10cb5220dd0eb23ffc20f13f8884d3ed982786
SHA256	8aceb62887b7a6c2e82d5f696650335147a40e3a7ea94df843d78051d2fad311
SHA512	7aa00240198a904e728f9a3d73730c3084c9dbb1b2bb657666424a70563e84bceadf227041dc4cb5742e048740216d39331550d3511a41c75eff0e088f4ff11e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\49537DCCEEF66155A1604708A2AF4C181370BE1C

MD5	900e859907a1c76eb20a8df61dd1304e
SHA1	64462fb89bb7e96c5bc0e225bde0fb542fc8f12a
SHA256	ca47f4980bb5d070415eb916f74c4a31ab3c98bdc6eae5a876e19837b506aaac
SHA512	7e3656c1227c28b30ef0b95fd8b6a14e2a89e9111642f6788567fa78fdb00cc09372274e0ff1bfba3dece711a622d286bedb495a4907d667b65c3e49a0f3664b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\54D3835D6500312DC32426C51CC18817E1F23B98

MD5	30d9bcd766f705f72a0bf4167b136429
SHA1	32a39324a2f34ed6b7068b6a69042f0c5fe18677
SHA256	5cee0564f3cd94675bc448616bbea7fcfff3c8b61737dfd703cd76034459fda9
SHA512	f81ae1caea9d9cab9c10406d553e0d5730b18efd4e7117f5dcb6d82c92cb3706e76e3fb1b003de2806f8ded53a7b835bd9e4b29957a4265593ce7f4d941754a0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\E023456A23477BC8816E43FAF08B541C0EDB959B

MD5	abc71176bbc2bb2a026339c35e4bd3d9
SHA1	c880559d40ffd2c9f15c56e3a2ea750091185ad5
SHA256	a2f24eeedcb67fd1c8a4a3c7518193080ea606c2a3172d5d4e513ec7e79081ad
SHA512	97034594b931b3380c455d47deef186a32917500a1e5f48b89de480294403f84ee657aa0529de91d4f9023f2533a1c93dbe0db80a53501aaf0880cedb2d93a2b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A18C0BE936B5133CEA136573926B7461F3C8285D

MD5	a111381034b2890c91963c1625bd7eda
SHA1	e0f03a22b83d6e10bc696bd68527d580a5d9df6f
SHA256	9888fd0f9c4a5c9dbb0523085850210d5510f46f4edced1f80000cb29d8c392f
SHA512	b621626894ef08bdf4cd93330060babddafdab7c880ecf435880566cbb7e8f11efb774b1517d0ddace51dde2481cac2b0e7a6579e0a94e493620de21ef099b00

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\D1A2F93ECA0D2F68A4FA3894A6DBF43B836FCE68

MD5	7c620c4d00f9a70faf624e2008c3faa1
SHA1	47f11989ef2c5af3375c8b3c5219cf349485c370
SHA256	23910eda2cf0d4dc7c0faf410e979317a67d25855d1c38be8a97dd6c199a1817
SHA512	e45a07a0279d5253fed823dc5923ecc376cc2587f0b923a05ec202bec6bac17dc58d9b7b1dfbcd766427ffe738f66bc83442c2521a10a4be01e2a25a0c76011f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B78B77C2C77E708DFB5D8C396A37A1621F10071F

MD5	823151198c024d76ec4e54f6b1fb1dd5
SHA1	9cf16061ff774211bc03c5ddbdc5141d3cfe3101
SHA256	c56bd7b13bedd73958d9a2a4fd244c9d9a13df315fda5b90e41bcc8dffbe4ffd
SHA512	bd59842a0aeee5be2b956e9fdaef07370e2627c6f251403aa18b4d10acc0de761ec3bd0fb6d3cca1be4c06138c25610503584d35a1c99e0d1b0b4b88d12a96eb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\00706E58FAD6F5BD6FBB8052CDF9A0A961E67F8D

MD5	d1e14d2696c8fa8e733ddd6c500016f8
SHA1	af94c6b6b5a2ba7342f17ddf872b72bc399aa6e9
SHA256	88bfea19f7c6f9e5afdbad67a749b5fc3e61457791145d8704751c8c24b7218f
SHA512	71613c802bc510c2c7d986f0a2ba9a0b26de2a5efd47e45257eb3c00e624b5707a6704b6b95530744e83f62c850439f745e708282c3966807475ee156041ad90

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9C96235CAD726D63F60DE1389F02007E7CBA3632

MD5	f758578203b7fa2e349cea37a3eea3b0
SHA1	9d77be138d6cfb9b61a533860e7bf9bc76a57f72
SHA256	2c496137ba905b6793338acdb3b992a84ffdae7a9afe464009670ae9f09d9bff
SHA512	0a3c2465ece7c743b74dfe478eed3f91d5bab8cc0d54a73dfcb673a84d8a0df5f27b313a3b5cdaa28a3c0f407c2eecf10ae56123871a418bc052601021741017

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6018DCCE8EFCE22F8F648A32D28EA223F80C84C9

MD5	82614e592a852fda25957a22969818a9
SHA1	4b0c83aa5188fc8081cf6f886cf495c188f111d5
SHA256	7fc3ee4cd60d0b61419b15cd0b84b0e1cead7c6529eda962f9188d4ddd2bca20
SHA512	4f5d41cade17a97c7abfbc4124dee2c2df2a4f599530b2bbc9219e3670d6bff739ab520b5fb5a9efe22908b70084ec37cec536e984552107def3cc5ced63b2a0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\F54752BA70E6B181DC3A2F3DC16D2D58D965B72A

MD5	a3176b5025f2077f70cfbb1d175c5827
SHA1	36f028b68c9eadbc0ffb90923b0299cf7cc98ff6
SHA256	6bb75aced38de030f3f5f7523e796b04f76146570fbed2152df0746a6f1cc272
SHA512	1b1490121bfc95d8db1b97239e3719e8adea0142aa600db75e30aeb570288a01bcdcc0fc8200611c3d14d03d7bd42455a3257e16de694eda458b2654e3ce89a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\2083876FD580F69195476717B838C475852C0639

MD5	3c8a1425134cdbb58c6b2160f2db2564
SHA1	f0d7de82874fe54fa331ec2a6d27d0706d7ff027
SHA256	3807c66d0db1ac6d5afdb35c818888ba766812f1e4db830f038637491ed699e6
SHA512	b690fc4978cfdf7ccd2a6bfb12f8a682fd788115d64088283353836f7b4aa59ce934a8b4d01d26bd1402e9a8f62803f28e4a7823c8d335900b12bc5f1b7f6024

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6D7C1D6B4521B1FC7A02BCB3ABCD62A030913304

MD5	bcefaf4bcf6fece36057bca80f23ab88
SHA1	bd7773f9fce4b3dc4a820fe21238b8f7ccf558ee
SHA256	f33960d53f1b220ba638118552c55bc3fed0d554ed0a044f70bd4629d6919d15
SHA512	a014af9747e231a3b235a2382067aaa32ca168c311f57cf03a8df0cf5399c78c117158fceed9ea424ed5e4a9bdf125a1075c97f5b6287ed475130e2941880ddb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\9A4501F90AF209C4561EB5757D2AEC8EE2F1CCA9

MD5	565615b05ff0288019453bc8399db7de
SHA1	4d9be56da8587d262062a89b152b72d340c3f774
SHA256	6fad121262aeba8ec17e68001379dafb626f1c1a04dca28e1e4d067db0304f15
SHA512	ab93adb21d4c7c4715b12994740027b0641887569864a226ca3e819597a3bc7fac7abe980c78fc6ec3d16f65f954eaaac0e549e4db6b807956bee9364fb54ab1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\4DFF64830A7A8A4A37B1F516B6248103CCAB299F

MD5	c196e7061e30129968f917c2b7a48699
SHA1	c022e4d10fe8a47cbfdb6d3be81fa422186a3531
SHA256	629d1ec2167c702267d2c9b09cc63205a2d1032e7a6f59fa3abaf4504c2333b8
SHA512	ef0bfd4a878b930a02058c98ff4467b2288ffc832675586f9d0187095d0a578d447998b6aab84ad4431354a0e31bb903d670c712977f60c45ff505e6a0679d43

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\080826BC90485D44CD95746848AAE55401306924

MD5	2c0a203ef4d282fb7633a4fe1d2340e1
SHA1	97969e48f578e7307bb248f5d559706acb7c6214
SHA256	39ca83852fb56c1e837450495f8b6945b348bb9206cc745ce7c278348368548b
SHA512	e2d80e9d08beefc3db75ed018406510037cccd4c4eb0a491429cf8066e9c6e05948c60542cee1bbe1ca9a99648d642661c40f5d57f8361ef5f75df32d36a585e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1F94A3B019E2B2B47E2356E16C996C9287E700CD

MD5	03466df4e356189a3cb222483631b33d
SHA1	8bc14b5725444d6a8b3e80b6e38e7588abfd4cf5
SHA256	b1417b6a06a9eccafefd69a7d5a2a1b0cfc216a1ceb2513851fccf4c121b82c0
SHA512	a107b9dc06b155dbd7814014c0f996fc6107defa1f896a3e9ee4f4ed754d8c1f8d294b08d787a756e80134e1e3881a707e83ad57a24cb6b28febf2d2f6a9784f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\01E7348AEFD115549BF05069070ACAA006B73600

MD5	44308a6b28b4f68c90ba4db97a735cf4
SHA1	250e92433db00329654a81fab0a10d6ec0f700d8
SHA256	3d63413a61d72a33a7343c1a9355dc5f3434ae472f91186236eb3ae7c93af871
SHA512	c48256b063882978f781cf2f35ffb6a52270e70c01085a78532f5b533a0fb20d9b8ba03219ef347bd64fc503fb2f644800d848f6812ac97c243d1e619f94c573

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\BE66599129A393C8758759AE545432F765531C60

MD5	a7bfd9333740de65160dc20753dc6ec1
SHA1	4cb68f9b2654923879ff53caae19eef7387895a1
SHA256	2f8371f11c3a7db5f9e7615e8b779659fdb44d492b9406e06163aae9ef59b9f8
SHA512	0814edfa2fb8487788f24af95ccbc67ed665fa811a7b1f4a72c28eedb2505a7a0ed01118dd9910ad2e0bb39b48307e36fa080175f459512efb055dd4285600ea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\EACC426B4291A81D82B12E1C850EFEF5BDA3140B

MD5	b1f393d4e7bdbfa38f3ac339dbc42a4d
SHA1	85ac3051c2a618c120bd594210727ef788b3ad45
SHA256	bdeb2754becff3d018740639cd396706181e106acd3b41bb1031035185162208
SHA512	44f7e6b39403b7311cb6332e6410da89b575f345a1a3d17e0b1342ed67740126b2d3dcd6ad749933f59b7c7e9f8c5c90348937269492f83fc92e2dbb80eff6b9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\15B93BC621B274AC627F930BBC2A3DC1A7CF1BB3

MD5	3340fdf8582e0a908efd8921ef1f9379
SHA1	6a4eade546accf9f8fba16d9987feb92f4ea0fce
SHA256	859639dbf166a7f8c1645af24c17b7b5f0c1815bd984136be5427d14776beccd
SHA512	062ec506d1c59716e4c16d807294cdf4b8d6eb679a71a5d9e1288e9246eaf09bccb31f70b361bb395e8eae6f66ecb80396c155d02071dd4a25f4e8463908795b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\34EC8C6679C6F2DA38838888706A4BEBB521B79A

MD5	c55f3df80e1e56adb3e9eb32d4c86451
SHA1	dd61681d772868caa26dc216275fe974983a92c2
SHA256	faea52227ab2ec85cb677a7ccdc4c6e919b491965e73499937c4f0ec26c6e1c2
SHA512	97939cbb785e85d4b843f5f1ab2a10692979bd2f809d1ba03658f27aaad30ad63f246f6ba4a99eecff37409afc88acdd8fbe61d773c1bc7a2e5cade07c8ff54e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\2202097E7A1EE652D7DD105375C3215EE7209FA8

MD5	6b569eed9fd4b6d46aa96b17bbce0649
SHA1	f768e96d25686f473ad73d1eb443d88b2be21aee
SHA256	a0858f82a07cefbeec6b812b42315e5899e424439085fcf3ee03cdcf57c15031
SHA512	ad3bda65e7c1782217d3e824736b10e1f746e711f4157b3c9b0f419011af38aeafe818787caba9c6fb03de785ee4dffb033eb8c22048a2d7bfd5b3eb36429527

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6EE530ADAA10EC1C96475C94BA8E1CA0E01779C0

MD5	5b091668c6e2c22905f0548b0c8ddac5
SHA1	abcc1128d7e3e1c47f66048d704b5fd6251edaed
SHA256	71c0bf4e5cd025aa76f3dd96b70b8ed4303e1623fee1432fc46e4691352f5c33
SHA512	b30861b57339a144b3592ff12bc9481aa3b3e728072b8f2c359d58ce3d333601773d573d3190ff7debe5ce018e741070779d81ad1be98a3f8a381b9f3b202504

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\C6ED8996ACA706D4B50DA7B956EFB4F771BA7CF1

MD5	defb8a97ed2d2b9c4190e510665730db
SHA1	62db9b88c0edf4653e6d5ffaab00e55069810948
SHA256	b1215d937b6deeb7894c1df61abf966295824a46d519f3c54ec6bb90d6830ecd
SHA512	1cb3ef64e48e3538a23d15a42397e8c35f67af41c0bdf7f1b7f9e7bda59c8a9c2d5b36c38e52cec69496d83d95f5cf850d84dddcf755e18a01fd3c1025530f0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\DBFED0C4FC87F06F0E3BF1D96202CAD15F8709FF

MD5	87eb2b7956f302a5b0c799886368f57f
SHA1	d625a2a83d92ff954a3a44a7a5cfd2a0fcc14241
SHA256	fe2838ea7e20923d120610ce7a838b3cd4d5d7ba10c82956498443a1e8fa81a4
SHA512	4a369eb575c4536e7b75003534d42a11e03081d845eddab10b6d223b0427bd0c782b6a5b67c7d9bd192614f4c0c47d1b134be2e9320508ae92271399d7f077d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5958CF7451842CE8472A9B2D6F5DBC90549A8E90

MD5	922209fc580e74bd7e12821f958060e5
SHA1	38b5f20235ba123579a59c18a7afcf9dd093fcb2
SHA256	164faec263836a089b4b49369d6b28bd7f194bc0a7575bd0411da37bbdb94e4f
SHA512	0a7b7508fbf8d738297a543320264a6a231b5efcfe3aef0fb99ead3683ef310a77fb0e3ee236ab0ee646fa21562d486f7eda897853485988e9bfdd37e79f1c33

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\BF66B7D2D1974037AFC50A3BE4AB7709E83D7356

MD5	6711b7b35b53344a78fb5673a61e6dc3
SHA1	6410d470ba5dd81ba26473dea2dde4bf95cf208d
SHA256	bc1c9be1f314bb6e894a202a93476a7a3ddb83eb4f1ccb2deb2a4a9d884dad23
SHA512	60ac6d51a3885dfd9c12253c560269e28397138481b42931514571da4a431672aca0ed2479bb7ebd06f7f670d75746908117d203dee862dfa49da1ccae819d4d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1F58EF91BF8F09F8F8576E406FA99A0BAF240658

MD5	c9853a01e5c334678c766351dad95129
SHA1	bda71be0997068cd0499194f896f904d283b46b1
SHA256	950fd81c649ff1d18f8fc4062f5c52627a0172e2ab896c3a44f6ec427f5fc3cb
SHA512	3345ff09952814a6115b3398e06d33d700c47ddc0fc1ac9c34799c0dfb58c5a49227906a552d10516b3ab7b0193d0110fdd683d6e0e3e01e1938285f1f672c88

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\91B9751B8EF4F5BDBD4D4B8E58538ABB85A6B431

MD5	e3d08d6447b96c57ceceb78a6fc15700
SHA1	aab089a95ac08cabe0d92954c1a6b677362c4732
SHA256	f138ba2edf0cefaedd168e4f804959a78e5fc6b5875f595fddee3d9fdee3be5c
SHA512	cb47af415c0fe6d6b7e11b35cc91024565823d37356d073d5bef448c4d1d47a7951c810fe0dceb5f09fafd14a2e54cd12e264d8d5fae1120434730391ff91dc5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	1be42e041015f6035376a10a1f204197
SHA1	c4dae4dff209986a0afba296f735335fceec1547
SHA256	35f5e4b5d73a4e21902c2db6ecf312832700ad2cb6cf3ec9a55ad880ae0b2790
SHA512	545317ec997c8bff0c8b1965e572a40a1ef57319787906779f73e694b7efa53128d9d8e45012ee5cc469c41babb2eb40ab03f367db217876711d565a8a508577

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	466c77c1e2c5d138b08b6d637d9fc4d4
SHA1	3e9be79f57376996f40d15f9402b2d04dc40c7be
SHA256	690aa4e07eea1fcb7e4048608c88f57e47b1b49a767d511a4052928418dfaf7c
SHA512	9eb4fcf7eb45dcfb0c69bc07da1871975c5c3434959392214c92190adbbbed88a34802aa13b835bed9ff37ad74ff9bbb3674d1ab8db39ffd6dc80bea4c0fb51e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	8fc36122555c21da635e6939c30d52ed
SHA1	bd3ff1e354b69e26161d32e0fd5522da071414b8
SHA256	44b96db740a4ce8a751db7429f4e5fed928cfdce4b88d436e6c8a3b7ca8760b9
SHA512	3c8802d4441d16e37444d8e80e6967506a6399b1837c00ec31aa4225a6ef3e1b90735750a00ff15a930a07734e875a5c4d2c3cf76d1c152b8932dd480e7e54a1

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-18467

MD5	2514103fef2220a3b084945380b5a700
SHA1	ef2a8291ce107b27c70e61ec7a3409ebe2a0821a
SHA256	3f5bf1b4d86283396677cbfefcad89f72ecc50fd9c993b5f75812789f4d3d81f
SHA512	56135fd329db8e5529e1adafbaeabb3ec2604eb5b6292ef877bf2af0f291f3ea1470b274de437cf08101a997a28ecb3cceb82405a472ee1644b17ecd078b3cef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\34a4ad0b-a8ba-4d45-b5da-6a2c1b7a3648

MD5	4fab34929b49e9234e04eac368d626ad
SHA1	77a4a49385208d4d5a25676ed979b39af4751124
SHA256	a6e631eb4fd844478b75b89863b0419c9d4bcdef957b41f3d3d46d5c9faa4180
SHA512	ab0cdd0c689f850e7fa71260b2443ee39f22d476401e107ccd117355db86df8da21723f0966853d97d7081d7efac4ff363d7aa43a8a3d2dfa974ef2dc8ead7cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\e3387fef-6cd5-40c5-81de-30de9150ead3

MD5	02dcaa249128c09acb829efd4a1b8109
SHA1	e1b2b77863d1bea6cbc595e9d565c58c49f49527
SHA256	b3215b248ff417e3732a0cdd973f5fdf7b7e03086108c39235bfdf0561d6d500
SHA512	c95484e45182362dc7bc6083ba276615dd9c1e1ba7f7ee22c9f8bd13a96b99f9009898093ada9592326ae909c73e107cde055a5591eb3e481b8b1a9ba3622ca6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5	5f9cfff857d1aae61f51ff396142a5bb
SHA1	5893759b8841b5a4c7390fbcc120b995e0a1e205
SHA256	b195bc9b3578837c6b20cfccb6918fa17dc720a31b36f5d20196cb379d108336
SHA512	7620d67c3822279ce4d493f16e9d0a2418e2081cc31a4732e64b9f0dc874a338ea03f074db5e34fc65434c6bc4b078902d6644c18973092538ae194d614ca6dd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\jumpListCache\8z4jK0JMsexMBNxD8ZX+dw==.ico

MD5	6b120367fa9e50d6f91f30601ee58bb3
SHA1	9a32726e2496f78ef54f91954836b31b9a0faa50
SHA256	92c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0
SHA512	c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore.jsonlz4

MD5	c86d9520eab15b0036b8aa7cf1a4e892
SHA1	d142c9de30de71f3ab584e3deb4831aa57cf2be5
SHA256	6d48ef336c5a6dfdeebdfe23f3a4ff9a372aeb14a3bbcf0db23e36b171c9cb08
SHA512	bbbad6c36fa468bb5504cc8edae36abbe70d16b19bce68ba5184f36a7cf61a1ac83a8a2d68c7d3e079f51ada098323f8c267bbfafde0a47db40b54aea595efeb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5	ad9139bdf16458c635d6d15c46073010
SHA1	632ea8b3d79d3c631086b988ff87e66a497f6fbf
SHA256	ae10bd9561f0c1e3d56dc84a28442085ac609345f2bb3c00893a2fd686a7a173
SHA512	b8ab9ae073cce99e80171f6c6b8f1e854e5d4425915633a6268c3fa8af5da3d0cac4bc754c4c2c2f369508fdf05e79c1b49a35591133661b4538f5c326820118

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5	27fae0257302dc037ec21cdeaaf1cf36
SHA1	a013e7bf162b07f53afe2cd5238b1b609c6972b9
SHA256	7f3c4d97f89b571e4c14181249e35cc530dbbff582eee42977e89e0eee881b6f
SHA512	010c458d45c41a78c82790856d7c6c40747690117c227df1f24781dd99337ab33ffc6f4300f6717f86db5d6cd5d296decbd1f075e666802b30cabd5d926e8b9a

C:\Users\Admin\Desktop\msg\m_finnish.wnry

MD5	35c2f97eea8819b1caebd23fee732d8f
SHA1	e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA256	1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
SHA512	908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf

memory/5612-7422-0x0000000010000000-0x0000000010010000-memory.dmp

C:\Users\Admin\Desktop\@[email protected]

MD5	7e6b6da7c61fcb66f3f30166871def5b
SHA1	00f699cf9bbc0308f6e101283eca15a7c566d4f9
SHA256	4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e
SHA512	e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3

C:\Users\Admin\Documents\@[email protected]

MD5	7bf2b57f2a205768755c07f238fb32cc
SHA1	45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256	b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
SHA512	91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9

C:\Users\Public\Desktop\炟rs㮥q摋耖qmu

MD5	89ab1b00f46a7f694b80a07731ce4bfb
SHA1	1e5cff28a207dde8cf543a08de8134633862c8cd
SHA256	9ae8b5ce9bc7c5286a2c4e734c68c7a5a04a63d492ce8323d00668ae1cf8dc6b
SHA512	a27f8a07c22abb364ed91e42d64139e591f2c0ef686ad9850e771c159d2708b6173ac8927c31d1a1c09c1b2178e0258410e24f18c08769f627edbed9dccc825c

C:\Windows\SysWOW64\winnt32.exe:Zone.Identifier

MD5	dce5191790621b5e424478ca69c47f55
SHA1	ae356a67d337afa5933e3e679e84854deeace048
SHA256	86a3e68762720abe870d1396794850220935115d3ccc8bb134ffa521244e3ef8
SHA512	a669e10b173fce667d5b369d230d5b1e89e366b05ba4e65919a7e67545dd0b1eca8bcb927f67b12fe47cbe22b0c54c54f1e03beed06379240b05b7b990c5a641

C:\Users\Admin\Downloads\42\@[email protected]

MD5	9d0bfff5fcadaee7fed148e1dfaeabfc
SHA1	0c06edd81ca31596e6f237511e35afdbfeb72feb
SHA256	5a3e10d957c6aa912c560bdf367f0cb13dc6d064926b4924c6b20c222682ec31
SHA512	e0c29953b0912289ec83a7495d19562ea54db8193f0efe699db54373327bd18d42adaab67a44338199548e00d503a645303e0bc19561fb76658dad55dac489a7

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-25 22:19

Reported

2024-05-25 22:36

Platform

win7-20231129-en

Max time kernel

598s

Max time network

678s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://gofile.io/d/GfflS3"

Signatures

Downloads MZ/PE file

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A

Loads dropped DLL

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A

Legitimate hosting services abused for malware hosting/C2

Description	Indicator	Process	Target
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A
N/A	raw.githubusercontent.com	N/A	N/A

Writes to the Master Boot Record (MBR)

bootkit persistence

Description	Indicator	Process	Target
File opened for modification	\??\PhysicalDrive0	C:\Users\Admin\Downloads\MEMZ.exe	N/A

Enumerates physical storage devices

Checks processor information in registry

Description	Indicator	Process	Target
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Enumerates system info in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000_Classes\Local Settings	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

NTFS ADS

Description	Indicator	Process	Target
File created	C:\Users\Admin\Downloads\MEMZ.exe:Zone.Identifier	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MEMZ.exe	N/A

Suspicious behavior: GetForegroundWindowSpam

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Windows\system32\taskmgr.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Windows\system32\taskmgr.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A
N/A	N/A	C:\Program Files\Mozilla Firefox\firefox.exe	N/A

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://gofile.io/d/GfflS3"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://gofile.io/d/GfflS3

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.0.1450921797\1137427334" -parentBuildID 20221007134813 -prefsHandle 1252 -prefMapHandle 1212 -prefsLen 20600 -prefMapSize 233275 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f4427eaa-2127-4a57-adda-5a4bf9f0248b} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 1340 10bf7658 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.1.118078733\1101288669" -parentBuildID 20221007134813 -prefsHandle 1516 -prefMapHandle 1512 -prefsLen 21461 -prefMapSize 233275 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1bc300bf-e11e-41d6-8692-d2681dfc364e} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 1544 d6f858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.2.710815949\62300306" -childID 1 -isForBrowser -prefsHandle 2336 -prefMapHandle 2332 -prefsLen 21499 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {60aa5b8e-2ef4-4925-b991-6a8d8ec3cbae} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 2348 1af81b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.3.1482025385\830729635" -childID 2 -isForBrowser -prefsHandle 2784 -prefMapHandle 2780 -prefsLen 25956 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba0c3c9b-05eb-49bd-a26e-245383967c95} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 2800 d62858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.4.1917487676\1253451978" -childID 3 -isForBrowser -prefsHandle 3716 -prefMapHandle 3336 -prefsLen 26050 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a678d794-32b9-4897-9c11-f2ed23ec6fff} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 3724 1d022158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.5.1962626519\1386736199" -childID 4 -isForBrowser -prefsHandle 3908 -prefMapHandle 3812 -prefsLen 26050 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {da46a6b7-74da-41c5-a9f9-f16f842b9e22} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 3924 1f3aaa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.6.2120316451\144574161" -childID 5 -isForBrowser -prefsHandle 4040 -prefMapHandle 4048 -prefsLen 26050 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {556ac86f-abb1-46fd-961f-3249de283d2a} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 3964 1f3ab958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.7.822822384\883757388" -childID 6 -isForBrowser -prefsHandle 3600 -prefMapHandle 3624 -prefsLen 27948 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d1711fc3-b33c-4213-abe2-c3aa7b9db4cc} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 2708 17e98258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.8.381517649\2099352140" -childID 7 -isForBrowser -prefsHandle 4320 -prefMapHandle 4324 -prefsLen 27948 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {08f86746-1898-4859-9bcd-d1f6febcee23} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 4312 144d0258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.9.868179198\2092552709" -parentBuildID 20221007134813 -prefsHandle 4600 -prefMapHandle 4596 -prefsLen 27948 -prefMapSize 233275 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd57f477-82cc-432f-99a2-4ddfb672002f} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 4612 13529f58 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.10.2095298705\492717893" -childID 8 -isForBrowser -prefsHandle 3912 -prefMapHandle 3872 -prefsLen 27948 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6b88262-8a72-4aea-9d00-ee8596887561} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 4784 13e48f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2344.11.227076421\1624126526" -childID 9 -isForBrowser -prefsHandle 4860 -prefMapHandle 4864 -prefsLen 27948 -prefMapSize 233275 -jsInitHandle 784 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ad79864-34d1-425d-a108-92f4ac59d3b3} 2344 "\\.\pipe\gecko-crash-server-pipe.2344" 4848 13527e58 tab

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe"

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /main

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6909758,0x7fef6909768,0x7fef6909778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1096 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1424 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1268 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2156 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2168 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1076 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3184 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3588 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3712 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4116 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1020 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1900 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4252 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4220 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4160 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4216 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3492 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4020 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3832 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3816 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3664 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3752 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2720 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=2712 --field-trial-handle=1308,i,749177677503935260,18355363373701892449,131072 /prefetch:1

Network

Country	Destination	Domain	Proto
N/A	127.0.0.1:49177		tcp
N/A	127.0.0.1:49185		tcp
US	8.8.8.8:53	location.services.mozilla.com	udp
US	8.8.8.8:53	gofile.io	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
FR	51.38.43.18:443	gofile.io	tcp
US	8.8.8.8:53	gofile.io	udp
US	34.117.188.166:443	contile.services.mozilla.com	tcp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	firefox.settings.services.mozilla.com	udp
US	8.8.8.8:53	gofile.io	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	34.149.100.209:443	firefox.settings.services.mozilla.com	tcp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	shavar.services.mozilla.com	udp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	shavar.prod.mozaws.net	udp
US	8.8.8.8:53	push.services.mozilla.com	udp
US	8.8.8.8:53	shavar.prod.mozaws.net	udp
US	44.230.111.112:443	shavar.prod.mozaws.net	tcp
US	34.149.100.209:443	prod.remote-settings.prod.webservices.mozgcp.net	tcp
US	34.149.100.209:443	prod.remote-settings.prod.webservices.mozgcp.net	tcp
US	8.8.8.8:53	autopush.prod.mozaws.net	udp
US	8.8.8.8:53	autopush.prod.mozaws.net	udp
US	34.107.243.93:443	autopush.prod.mozaws.net	tcp
US	34.117.188.166:443	contile.services.mozilla.com	udp
US	8.8.8.8:53	content-signature-2.cdn.mozilla.net	udp
US	34.160.144.191:443	content-signature-2.cdn.mozilla.net	tcp
US	34.160.144.191:443	content-signature-2.cdn.mozilla.net	tcp
US	34.160.144.191:443	content-signature-2.cdn.mozilla.net	tcp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	52.11.19.139:443	location.services.mozilla.com	tcp
US	8.8.8.8:53	locprod2-elb-us-west-2.prod.mozaws.net	udp
US	8.8.8.8:53	locprod2-elb-us-west-2.prod.mozaws.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.prod.mozaws.net	udp
US	8.8.8.8:53	tracking-protection.prod.mozaws.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	api.gofile.io	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
FR	51.38.43.18:443	api.gofile.io	tcp
US	8.8.8.8:53	api.gofile.io	udp
US	8.8.8.8:53	api.gofile.io	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	spocs.getpocket.com	udp
US	8.8.8.8:53	getpocket.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	34.117.188.166:443	spocs.getpocket.com	tcp
US	8.8.8.8:53	prod.ads.prod.webservices.mozgcp.net	udp
US	34.120.5.221:443	getpocket.cdn.mozilla.net	tcp
US	8.8.8.8:53	prod.pocket.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	prod.ads.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	prod.pocket.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	s.gofile.io	udp
FR	51.75.242.210:443	s.gofile.io	tcp
US	8.8.8.8:53	s.gofile.io	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	s.gofile.io	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.117.188.166:443	prod.ads.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	s.gofile.io	udp
FR	51.75.242.210:443	s.gofile.io	tcp
US	8.8.8.8:53	s.gofile.io	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	34.120.158.37:443	tracking-protection.cdn.mozilla.net	tcp
US	8.8.8.8:53	tracking-protection.cdn.mozilla.net	udp
US	8.8.8.8:53	aus5.mozilla.org	udp
US	35.244.181.201:443	aus5.mozilla.org	tcp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	ciscobinary.openh264.org	udp
DE	23.53.40.129:80	ciscobinary.openh264.org	tcp
US	8.8.8.8:53	a19.dscg10.akamai.net	udp
US	8.8.8.8:53	a19.dscg10.akamai.net	udp
US	8.8.8.8:53	redirector.gvt1.com	udp
US	8.8.8.8:53	redirector.gvt1.com	udp
GB	142.250.187.206:443	redirector.gvt1.com	tcp
US	8.8.8.8:53	redirector.gvt1.com	udp
GB	142.250.187.206:443	redirector.gvt1.com	udp
US	8.8.8.8:53	r1---sn-aigl6ney.gvt1.com	udp
US	8.8.8.8:53	r1.sn-aigl6ney.gvt1.com	udp
GB	173.194.183.166:443	r1.sn-aigl6ney.gvt1.com	tcp
US	8.8.8.8:53	r1.sn-aigl6ney.gvt1.com	udp
GB	173.194.183.166:443	r1.sn-aigl6ney.gvt1.com	udp
US	8.8.8.8:53	firefox.settings.services.mozilla.com	udp
US	34.149.100.209:443	firefox.settings.services.mozilla.com	tcp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	content-signature-2.cdn.mozilla.net	udp
US	8.8.8.8:53	prod.content-signature-chains.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	8.8.8.8:53	contile.services.mozilla.com	udp
US	34.117.188.166:443	contile.services.mozilla.com	udp
US	8.8.8.8:53	firefox.settings.services.mozilla.com	udp
US	8.8.8.8:53	prod.remote-settings.prod.webservices.mozgcp.net	udp
US	8.8.8.8:53	firefox.settings.services.mozilla.com	udp
US	34.149.100.209:443	firefox.settings.services.mozilla.com	tcp
US	8.8.8.8:53	aus5.mozilla.org	udp
US	8.8.8.8:53	aus5.mozilla.org	udp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	aus5.mozilla.org	udp
US	35.244.181.201:443	aus5.mozilla.org	tcp
US	8.8.8.8:53	prod.balrog.prod.cloudops.mozgcp.net	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	id.google.com	udp
GB	142.250.200.3:443	id.google.com	tcp
US	8.8.8.8:53	id.google.com	udp
US	8.8.8.8:53	id.google.com	udp
GB	142.250.200.3:443	id.google.com	udp
US	8.8.8.8:53	i.ytimg.com	udp
GB	142.250.200.54:443	i.ytimg.com	tcp
GB	142.250.200.54:443	i.ytimg.com	tcp
GB	142.250.200.54:443	i.ytimg.com	tcp
GB	142.250.200.54:443	i.ytimg.com	tcp
US	8.8.8.8:53	i.ytimg.com	udp
US	8.8.8.8:53	i.ytimg.com	udp
GB	142.250.200.54:443	i.ytimg.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	tcp
US	8.8.8.8:53	play.google.com	udp
US	8.8.8.8:53	www.youtube.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	172.217.169.46:443	www.youtube.com	tcp
US	8.8.8.8:53	youtube-ui.l.google.com	udp
US	8.8.8.8:53	youtube-ui.l.google.com	udp
GB	142.250.179.238:443	youtube-ui.l.google.com	udp
GB	172.217.169.46:443	youtube-ui.l.google.com	udp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	www.google.com	udp
GB	20.26.156.215:443	github.com	tcp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	github.com	udp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	static.doubleclick.net	udp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
GB	142.250.187.226:443	googleads.g.doubleclick.net	tcp
GB	216.58.213.6:443	static.doubleclick.net	tcp
US	8.8.8.8:53	static.doubleclick.net	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	static.doubleclick.net	udp
GB	216.58.212.234:443	jnn-pa.googleapis.com	tcp
GB	216.58.212.234:443	jnn-pa.googleapis.com	tcp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
GB	216.58.213.6:443	static.doubleclick.net	udp
GB	142.250.187.226:443	googleads.g.doubleclick.net	udp
GB	216.58.212.234:443	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	play.google.com	udp
US	8.8.8.8:53	github.githubassets.com	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
US	185.199.108.154:443	github.githubassets.com	tcp
US	185.199.108.154:443	github.githubassets.com	tcp
US	185.199.108.154:443	github.githubassets.com	tcp
US	185.199.108.154:443	github.githubassets.com	tcp
US	185.199.108.154:443	github.githubassets.com	tcp
US	185.199.108.154:443	github.githubassets.com	tcp
US	8.8.8.8:53	github.githubassets.com	udp
US	8.8.8.8:53	play.google.com	udp
GB	216.58.212.234:443	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	jnn-pa.googleapis.com	udp
US	8.8.8.8:53	github.githubassets.com	udp
US	8.8.8.8:53	collector.github.com	udp
US	140.82.114.21:443	collector.github.com	tcp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
US	8.8.8.8:53	api.github.com	udp
US	140.82.114.21:443	collector.github.com	tcp
US	8.8.8.8:53	glb-db52c2cf8be544.github.com	udp
GB	20.26.156.210:443	api.github.com	tcp
US	8.8.8.8:53	api.github.com	udp
US	8.8.8.8:53	api.github.com	udp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
US	185.199.108.133:443	avatars.githubusercontent.com	tcp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
US	8.8.8.8:53	avatars.githubusercontent.com	udp
US	8.8.8.8:53	raw.githubusercontent.com	udp
US	185.199.110.133:443	raw.githubusercontent.com	tcp
US	8.8.8.8:53	raw.githubusercontent.com	udp
US	8.8.8.8:53	raw.githubusercontent.com	udp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	pki.goog	udp
US	216.239.32.29:80	pki.goog	tcp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	apis.google.com	udp
GB	142.250.200.14:443	apis.google.com	tcp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	content-autofill.googleapis.com	udp
GB	172.217.169.74:443	content-autofill.googleapis.com	tcp
GB	142.250.179.238:443	play.google.com	udp
US	8.8.8.8:53	encrypted-tbn0.gstatic.com	udp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	udp
N/A	224.0.0.251:5353		udp
GB	216.58.204.67:443	id.google.com	tcp
US	8.8.8.8:53	encrypted-tbn1.gstatic.com	udp
US	8.8.8.8:53	encrypted-tbn3.gstatic.com	udp
US	8.8.8.8:53	encrypted-tbn2.gstatic.com	udp
GB	142.250.187.206:443	encrypted-tbn2.gstatic.com	tcp
US	8.8.8.8:53	ajax.googleapis.com	udp
GB	172.217.169.74:443	content-autofill.googleapis.com	udp
GB	216.58.212.202:443	ajax.googleapis.com	tcp
US	8.8.8.8:53	storage.googleapis.com	udp
GB	172.217.169.27:443	storage.googleapis.com	tcp
US	8.8.8.8:53	pornhu.com	udp
US	66.254.114.210:443	pornhu.com	tcp
US	66.254.114.210:443	pornhu.com	tcp
US	66.254.114.210:443	pornhu.com	tcp
US	66.254.114.210:80	pornhu.com	tcp
US	66.254.114.210:80	pornhu.com	tcp
US	8.8.8.8:53	www.pornhub.com	udp
US	66.254.114.41:443	www.pornhub.com	tcp
GB	216.58.212.195:80	www.gstatic.com	tcp
US	66.254.114.41:443	www.pornhub.com	tcp
US	66.254.114.41:443	www.pornhub.com	tcp
US	66.254.114.41:443	www.pornhub.com	tcp
US	8.8.8.8:53	static.trafficjunky.com	udp
US	8.8.8.8:53	ei.phncdn.com	udp
GB	64.210.156.19:443	ei.phncdn.com	tcp
GB	64.210.156.19:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.19:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
GB	64.210.156.20:443	ei.phncdn.com	tcp
US	8.8.8.8:53	media.trafficjunky.net	udp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
US	8.8.8.8:53	prvc.io	udp
US	172.67.177.254:443	prvc.io	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
US	8.8.8.8:53	cdn1-smallimg.phncdn.com	udp
US	66.254.114.156:443	cdn1-smallimg.phncdn.com	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
US	66.254.114.156:443	cdn1-smallimg.phncdn.com	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
GB	64.210.156.20:443	media.trafficjunky.net	tcp
US	8.8.8.8:53	ei.phprcdn.com	udp
GB	64.210.156.17:443	ei.phprcdn.com	tcp
GB	64.210.156.17:443	ei.phprcdn.com	tcp
GB	64.210.156.17:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
US	8.8.8.8:53	stats.g.doubleclick.net	udp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
BE	64.233.166.154:443	stats.g.doubleclick.net	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
GB	64.210.156.20:443	ei.phprcdn.com	tcp
US	8.8.8.8:53	ss.phncdn.com	udp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.19:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
BE	64.233.166.154:443	stats.g.doubleclick.net	udp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	8.8.8.8:53	analytics.google.com	udp
US	8.8.8.8:53	www.google.co.uk	udp
US	8.8.8.8:53	unpkg.com	udp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	104.17.245.203:443	unpkg.com	tcp
GB	142.250.187.206:443	analytics.google.com	tcp
GB	142.250.200.3:443	www.google.co.uk	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	8.8.8.8:53	pornhub.com	udp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:80	pornhub.com	tcp
US	66.254.114.41:80	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
GB	216.58.212.195:80	www.gstatic.com	tcp
GB	142.250.187.206:443	analytics.google.com	udp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
US	66.254.114.41:443	pornhub.com	tcp
GB	64.210.156.19:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.19:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	172.67.177.254:443	prvc.io	udp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	66.254.114.156:443	cdn1-smallimg.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	104.17.245.203:443	unpkg.com	tcp
US	66.254.114.156:443	cdn1-smallimg.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	66.254.114.156:443	cdn1-smallimg.phncdn.com	tcp
GB	64.210.156.19:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
GB	64.210.156.20:443	ss.phncdn.com	tcp
US	192.178.49.195:443	beacons.gcp.gvt2.com	tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\datareporting\glean\db\data.safe.bin

MD5	57b90c839d186c01ad6ffd58102a60a2
SHA1	d5bb38bc11f72dd4a0ec9c818264c000c9b7f5b8
SHA256	a6aaa7e66c20c6554b260616a26479a45203ba7ce615cefee0502578f7c4adea
SHA512	069a0e0b6f915228e933b29b5c3f2f3354bef4e55f63b5b0fef9dd30c55a5e99c03b66b675002070565518430480fbcce53c0596706f7d1ac6e7e0520430621e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\datareporting\glean\pending_pings\5c159f68-fc4b-4149-b0b8-735884861c12

MD5	e60aa24359c5d718fd2c40f85be9ed1a
SHA1	d5148a6eb1610c63a0f9d58b9e5edcf66475f2fd
SHA256	7b0ce5ed219394dce3798b54dd2658aa084018436b03520e6e4aeb2596e4a190
SHA512	e8c2ae2b605581d551fea884c9039151c0075ee5d6fafca5f60a8820c938d724edf5249c457842bc945126169d138f9d5f2e2812550686f06eb63c3f2ffc3e5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\datareporting\glean\pending_pings\4f21a18d-c3d8-4ec1-bec8-27019599bece

MD5	7d7e4cd2da4108b6d1b8434061bbc419
SHA1	4ce019b60ee2ed967bd68e80cb024ba18053a6b2
SHA256	b6c2d90e8f9e5f63b0f55f7686a146fa7ceb9220f3095cd661f750ef37ef0e6c
SHA512	22a6469648eb639608ca96d34b8889fbdf7181d7104a991564f0ac51e0c4e949d74dc99bce396c74a8126e0dcd53dc0368f9a23d6a69b97f8420bf39d8a61aab

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\prefs.js

MD5	4ed3029310452eca1f78026a0f1aaf94
SHA1	849f425667cd4293418af4ed231931e25f1e6327
SHA256	17dd730ad556b9c6205fea6e8388ed3d38d6247550f6825715d211193b36f480
SHA512	a97553935e517fefad40cca266d88904d1ae15e6d22bb48bc8d74e4b20f1872b17b52f5f606862bcaee6668a1c482abd2609baa5e903192b9938ccd91a62c6a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\extensions.json.tmp

MD5	e2b0c120ea79099e6c319df4c3fdacaf
SHA1	79cb2c8c05c127d2cce85bfb601aea1a7b51e6c2
SHA256	59bc53e3bea5669cc8983c7cdada3586a13538887d657200fbe446e242100951
SHA512	d426c9a1de30537c31fe2a36ad3a46ea8ba7fc5c8db0c748bd4ec51ad60e6a3382360e1acb87b2f7334ca2a674b58d78af8fa28888f560456d6187f1b6c7ae17

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5	297117cbf4ddf46736a0d044fde642a1
SHA1	53ca7a8a5a7144a8a527ef4d0984c8705d33a2b4
SHA256	0da7ca6ace999bf4baaff958c0cc01d1e1995c0d2d0e114ffac28a02bbc8931d
SHA512	5d46b4d379c6af519637101d0859d96b6a7a07d63d8128c8281608b2d3d530d502cfaf4a003dc8c255b85d3d0dd7571ffafa542a2c860dc26fe28c756c93bd99

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lf4jobx9.default-release\activity-stream.discovery_stream.json.tmp

MD5	03821a7516c6e0ee2bd5c98e992ac6a9
SHA1	45403d6409fb37351a9c4bfba4eb50bc54ae0377
SHA256	72dcbbcfe04646e5a745ae1136b713b255ea03f52342fc9869a53adcbdf4f158
SHA512	3cf676cb236d9b19a2a8307c610a71df2b86e35ad64f32d85fbc7f3c56f3ff84f4b966a63bc1e4aee1e63ecf344be9d88542fea8dd05a04074a6080c38950e2f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionstore-backups\recovery.jsonlz4

MD5	cbe2f4b5b5f63c946315edbdd2372197
SHA1	9ccb91cb12bde2dd8bbaf2617eec4a104c20c1fa
SHA256	dc7b4746ac3a7de793cd66d00cdec4d5de2f55e1f86607cb2bcdaf2cd2f632a8
SHA512	f060bb757d44898210f52f7e3e2fd2f3cf4a793388b7e31a6955c5004f013475747f1dcf7a50f7bece56dcf5e6bbda8e474ea69c4bee4c0b724e78a36b061621

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5	85430baed3398695717b0263807cf97c
SHA1	fffbee923cea216f50fce5d54219a188a5100f41
SHA256	a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512	06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5	fe3355639648c417e8307c6d051e3e37
SHA1	f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256	1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512	8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5	3d33cdc0b3d281e67dd52e14435dd04f
SHA1	4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256	f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512	a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\prefs-1.js

MD5	dd6c551cf0f03baa70ed4b9797c715a7
SHA1	09342ab22ac2e6a333bcfc6e174977c1790a6c9d
SHA256	23d7f19cffcb8a2afce702e2f6c2a6bc608d1b7e8623419a0d9aa7087d1e289a
SHA512	c402feb0926ab6bcf0f7385473ed2ddceb1104cd4a6ebcfa02c49374f1e21ee81ecf09072026e811c9d7c4d592339cb330b2ed10da31b7a959829029a6328f2f

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5	a01c5ecd6108350ae23d2cddf0e77c17
SHA1	c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256	345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512	b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5	8be33af717bb1b67fbd61c3f4b807e9e
SHA1	7cf17656d174d951957ff36810e874a134dd49e0
SHA256	e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512	6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5	49ddb419d96dceb9069018535fb2e2fc
SHA1	62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256	2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512	48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5	33bf7b0439480effb9fb212efce87b13
SHA1	cee50f2745edc6dc291887b6075ca64d716f495a
SHA256	8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512	d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5	937326fead5fd401f6cca9118bd9ade9
SHA1	4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256	68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512	b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5	688bed3676d2104e7f17ae1cd2c59404
SHA1	952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256	33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512	7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\prefs-1.js

MD5	a878c6e1c25df598ae731576f2265e5f
SHA1	fa1a0ee5eaccaa1141859d56d0efa2bb212c9418
SHA256	9635a169bc522ac15dd0d1296a26be278c2f275f0b6c131c519fc0dfa5ac5a72
SHA512	63fd980eb21785da02b66507b6efb7554bb184ff8658e317768dd91152aec8a3238de080bf9242477b04f1cfd1e52a15b2ddccbb3884cba85f5cf46ae38dc395

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\prefs-1.js

MD5	2ea5ad36f6bd539f4150360cc7939ae0
SHA1	1226c00f20ed2bcdee8bf354311d3e17a5dce0a8
SHA256	dd58ecbd2b60d160c46648bdeb1f726a2325ee5211d3f90e3a91149797480262
SHA512	c020aa3a43e28399d09e318f2833af2789f05d3ea27239da11dd53726cc52b0e1f3bf7f80d67ab6fc3bc0053aa43c3cd8440b90e7ad26dbf097238f3b39c5b9b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\broadcast-listeners.json

MD5	72c95709e1a3b27919e13d28bbe8e8a2
SHA1	00892decbee63d627057730bfc0c6a4f13099ee4
SHA256	9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512	613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\addonStartup.json.lz4

MD5	35860b7440797fdf92b6b343858fae39
SHA1	62c24f43eedf6e71b226f0159dbbfeecc152f47f
SHA256	fa8d0fffa1b53a2ef40a65da9e28fe04dd91f053f4784f542714e60b4290f498
SHA512	5ae3d1a8279ae0fdf7954c3cf2279ea9c525e36547c4ed92049f741be6bd46bfef82b40763c7d01e0620dcf356fc9fc45b12be4dce319d4d9b354f6fa15d1a69

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\extension-preferences.json

MD5	0bcf208899396bcb6e659783268d3b67
SHA1	89b0cfdd4f7bfc36e9263cff6432080429a3eb49
SHA256	0013ff84e9c5a777f6f161b7cb6bafcc3fe1ec554300e97be2361196af214c21
SHA512	f45d7288b84b08c977d55ef0de766aabab0223f027b1ee6cbd2e29f179d4e6555a479c13abde15a73b1335b37721a17c32135ff3f8ea04323d6e9a68e1c4ab24

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\targeting.snapshot.json

MD5	1f987685783345cc2962185f05c89ed7
SHA1	d6f87b38683144bb065926ee6dba58d02d447bf7
SHA256	d8555156b7bfbe458381572ed9caf92f7a9537db3b511cd96a7857f820e97b33
SHA512	15c464ab6fec205f78dbeec7c2f9e6a945c1771ca83d534de26e9166786837a477008bf68a8628b4d21237778e63042fc39eda7fc05c32f92b2e7ebaae1d9e84

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionCheckpoints.json

MD5	c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1	5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256	00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512	71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\search.json.mozlz4

MD5	e4b66478ecde473b6d9c95d7a4350d37
SHA1	cf125f3ec9060bf59a3e4449b0fb151eaad01c5e
SHA256	4510c82fc9289533b0dbaf0a2a70a45589814c06be7e9adc395100ff18d5fc73
SHA512	0fef6926821a19f686d0291db9e7efb1a60cd6d13d94d4cc6fc3eeb06be3807d697debde0a5a264b430d449482bb26666b8273c7342e99d592e9b516027c086d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\bookmarkbackups\bookmarks-2024-05-25_11_mUDMqzp9jbRt6ySnwvoA3w==.jsonlz4

MD5	20be0665130ed556da4834176282d8d9
SHA1	2e90b493924bd112c82dca176d8ecf30bca37f4f
SHA256	d19af3cc7ff4ff9d3debfdd830d6009485c59b9018e3f72da8998c9398475df1
SHA512	f982351d34fb751d3e4d130a0fb08e4bbfba590ba9fc889c85b20f4b604f652073becd30c68190d30717904ff753f18c060df03a5fde0d663a0dfe3722820a19

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5	684b36da4bef701dbf398a4cb3dc3adc
SHA1	0784729275020c9f4efe4a82be2d0f54b493b07f
SHA256	55388b340594df651b89e9685a3449025bc0070f147a4e219fc21c07f2306a9c
SHA512	33ee4ea8ac35039b20c73faa9bcfb21bff2d422b70ec9db4358fd68841ef831426b9e2db137ee934b37b5c8b021c71a764ed2dbde3d7cfcdc814850810c5ac7b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionstore-backups\recovery.jsonlz4

MD5	ef845b43c665b085f6600bd03df69613
SHA1	fbd64468f68ea7672a55fc1021b29b43122142ae
SHA256	6d68b0817210c3c7ea28401c53fca0125919fe1dd7220c2450b98345a37435aa
SHA512	1495bfba70681f147222fab6bde1222c70d21c004ae1a638ee044ec996d99c544c362692a36bdeef4fcf47642eb39ef034dc65f53ae1b424317467aa57c9b552

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5	c9defa822ff6fc810766ee417738bc4b
SHA1	c39ecc77b4dea4043980407df169eeb21990c679
SHA256	d9258653fb70cdc1ba02272e0518866cec07aca811d09552377e4cd6e8781d76
SHA512	49427a4916e8bfe6066bddb3533abe09b704a6947dc1c1c63399f2ae1b2b3ed9ea9da9291f08ba6cb160448835a4990c4bc116d95e678d390466bbd2d33e5fa5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\lf4jobx9.default-release\cache2\doomed\6095

MD5	e5fcdeb8472f4d93ade347fcdc8a282e
SHA1	5b8846bd02d3affd4fdeaf35d116f8be484a5b1b
SHA256	7afa1422b75c7f9c1b2cb84c1a45660feed327ca0c14239cf2a8c27f5ab2d423
SHA512	0b2b87f13b5a7b3390ec5308a95155131566f26f629114c342c89384d1de7b9adb5515dc1620459e3fae548939c4aff76c26b72b909c50f37a45f3663d219700

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionstore-backups\recovery.jsonlz4

MD5	2ef20879889285fdbea9549ac3986053
SHA1	4bb45e6ad768451d187a83ae6eae12a1abf948b0
SHA256	4cb09337ae98443db2cf233dd44c23eec1146a0991317511a18611e7ee2f1896
SHA512	ab4b3f5b2157aeeb7d4d9fff299b0ad034e0ef745f2e68c0fae3b9f0eeae3ec62a22e79d2c97b5ab5e8b9b4226be70354526f2904b72b8d43401b32e8a6f3a20

C:\Users\Admin\Downloads\MEMZ.exe

MD5	1d5ad9c8d3fee874d0feb8bfac220a11
SHA1	ca6d3f7e6c784155f664a9179ca64e4034df9595
SHA256	3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
SHA512	c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionstore-backups\recovery.jsonlz4

MD5	d77363829f9daf535fc15dc801d0dd80
SHA1	81dc519d477baab64326b0cb276f0468f6f852a8
SHA256	67451f0d64a3c1a96ed65c5e22f79e4ff8ca8caaacb37f62fab92eb55e5918e2
SHA512	fdab4ca67a0598a75c1fe9ea5a2d4dc251acd924b1ddc7bc56f8e5d26bfcbe6cbf281f5c1df85c8d113d3d4cacf843c0ecbdc9c4e33798d660525b209314fdea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\sessionstore.jsonlz4

MD5	b2741f7c5b826f544ab1d50a8bfdc947
SHA1	586dbaaca719950410b8cf4865943b6f5364d53d
SHA256	6d602f18e3d6b0ac3204009639fd945d320d82c7efc9341c7b5678c71505b7b6
SHA512	464c6c9664649df4cb8c38a5897b19717af43b6ebddcc16569df6578bf175f6e8e4fd3bc4395e637eb79cce1135a8d490a1f810b1db252b5997764487df862c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\prefs-1.js

MD5	857e895301aaf79a43b5c56adeb9e419
SHA1	809a59532f911969ebd8425b96451554a4214512
SHA256	332d721c260b8bc84e53933c90c36f3d8bbbb0677bc2d48bca94f9aa1f78c112
SHA512	c2ce943454fe628628a9ca157aa5d169eae4a8483e49b6188063959a9da3e635ccdca0f9c185d914a74d1512f113cbaae979efe9415b2474c7a7aa3cb303dfc8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\favicons.sqlite-wal

MD5	e48cd455059233dafd16dcd71b0405f5
SHA1	2f80e2bef008aafa8ba555161af4235db1cf4268
SHA256	ed22f2ba5ddcc3b0caa061221d8550540e26bc49296a1fc92ed15ebb8ad29441
SHA512	22f26a53170a4e7eec4261d38af50ea956a09254ba8315a82368f79cd240e5c75176c068433c772cd8dd012d06eae4bf574c54c62528f55be88ce0a6258fc376

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\places.sqlite

MD5	4813c1792034d224f32bf442b9726b47
SHA1	ebcfdbc35ffc885c58b4a89648c539fbfc9cd80a
SHA256	1631d9d7cadda9e3a1a249ec810abc624b85d676a5a292c8a342a1482264814e
SHA512	638ba29a4cf98461f0fa92dd598d19c6c607d783bf95831c9f7eca7b19c14ff3c4d882bf859971e16aecf679eaca75ae7d8397c446254c5363e2cee49fe6daae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lf4jobx9.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5	cfdeed9871cf965680df75552bb5fde1
SHA1	2e68317970b06b26c3eb9b998a1d6dee3020603e
SHA256	2f6d6bfe9f55226fa44e44aec1681cfb3676fd91494798a509feca8064747120
SHA512	9ad6e10c41eb75330d54f3376e66b0697d2da1195198c75c12810ed5a4ca281e69984ea5a3dd41f6fab4d4bb46e1cebd34e2ef891878a638954ee3c88a27bb7b

\??\pipe\crashpad_1260_GAWZSDVNZLCGUMZG

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

MD5	18e723571b00fb1694a3bad6c78e4054
SHA1	afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA256	8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA512	43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5	f50f89a0a91564d0b8a211f8921aa7de
SHA1	112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256	b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512	bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5	29f65ba8e88c063813cc50a4ea544e93
SHA1	05a7040d5c127e68c25d81cc51271ffb8bef3568
SHA256	1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512	e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

memory/2328-1060-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1061-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1072-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1073-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1074-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1075-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1076-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1077-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	88e235550bfe7cfcf11d7a79610f56dc
SHA1	9eb3075726a3a01cb4326a9321315b8d1bd7dd4b
SHA256	a101bd9af13c81d4715d9911b04f9a47cfee5ba8cdb5558478e4b84958147425
SHA512	0f8d8cda8af9ebc53fbc16927a0cd9a9421e62f97fcfbe12197e575c07cbfa54a3bb8672258f5f9ad2b1ec66880fc8ccad3c0bd28881ad6d67e40fdd765ff99e

memory/2328-1085-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1087-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1123-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1124-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

MD5	aefd77f47fb84fae5ea194496b44c67a
SHA1	dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA256	4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512	b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

memory/2328-1149-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1148-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	d0c26caf7b584bc179bc20937ad863b8
SHA1	e88dae544d70ab663cbf75c53b79023562c8582c
SHA256	15333172d8e9c607e2f075b2ac644af5b548c8299f3dc5ae9c72ae5d83487235
SHA512	8ea6670bb4afc56bcda01b55aff521b072f66780ff33df28352e454d7bc788ee23295a58718160d7df1a280377bbd0bdf64c9cdaf7a5be6b83f14cdea1c4dd0e

memory/2328-1164-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5	0ed8278b11742681d994e5f5b44b8d3d
SHA1	28711624d01da8dbd0aa4aad8629d5b0f703441e
SHA256	354730711c3ca9845bf98ec5dfb58a16e50984f9edcf0e8f432742326334f8a2
SHA512	d296ab1f1b418b125f09598ca6645d984a1cf67092a914956b8879d285ee35521b408363b47da195de79086e3be3ed9b1709bc8f9cd2e32d5dccb720a010bc8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5	2b4ba8c3d2dece31057235c60fbabc0c
SHA1	f0ceb959cc574728eca15c6193dff7210e65cf55
SHA256	0f500babf80deefac6a1900f675ff4b8b1c055299e8e321e670a869776f17793
SHA512	c32fa1d9061551fbaee36118dfaf8b69dfee3213dc5acb17ce791c6396e5f4011f090a739dec547df1b4f5cc984b4a7e88045719e1a30bc4e8589203dd6015dd

memory/2328-1187-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1188-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1193-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1192-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1239-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1240-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1246-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1247-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	0debb6f59744c2292dd15064d29e3922
SHA1	09d24d1de166f04e902006bd6c16cba90ae53c76
SHA256	89a60ce08a3fad42fe6a75f99f1890c09bf8002d744a366199eb59ca288e8dbe
SHA512	689744071bcbe02bc0aa2674e2f33c09cb99a96d343aac98e0bebae2289f8ed41a7c05ef32eb026c10b111eda57248efbbbfa1f29ec29e264ae4fe8e34a72d76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	773493a3eff15b6405d09dd97e056f13
SHA1	3cdfa5221fec2f7ae6fab9e57bba9e5ea57c96fb
SHA256	9bb7efddd8db2d2beb283d79c3d5905982a350527b51a1217dbe2ff34379944f
SHA512	5181a386a89da843d0926493df15b3566a378d7a9c3e8df2d63a989a07e2fd1b351aeeaeda7d2db12c96d1083ab2422bae8055f27bf33870eea1308df644fe96

C:\Users\Admin\AppData\Local\Temp\TarD197.tmp

MD5	435a9ac180383f9fa094131b173a2f7b
SHA1	76944ea657a9db94f9a4bef38f88c46ed4166983
SHA256	67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA512	1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5	a266bb7dcc38a562631361bbf61dd11b
SHA1	3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256	df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512	0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5	6f355f853a052840277298941486bce5
SHA1	a175da942e55749b3ed4417ed2fa15440c6f3814
SHA256	8626e139cd64ba69007d1896ae6737f7407e695c2928a9dbecc641235e6469d6
SHA512	bba327df58119bfbde6274451808acb7963143cd787da762defe2a4a1c0f743a78f444a52e1665dffe574c4d9b7b685d8b8cc444bd3528525dd5e845353baf54

memory/2328-1345-0x0000000140000000-0x00000001405E8000-memory.dmp

memory/2328-1349-0x0000000140000000-0x00000001405E8000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	84158d2455e3af1cacfe09ced372f3a1
SHA1	44da682e2b65842e8ff59ef4c52fbb423624b81f
SHA256	acbcb44b5ec741f477b792cba8dda1c7c0498d43cfd4883532d86e20bcadee03
SHA512	6fb77a9c713a211a6233b2fa4acc57e79e5c95c7c6e219d1c9f59ddd28042d44efc4c6d3895b084892a588d593fde8d2e8560c849b75bb29e2e58756300e894f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	29e8628f2e04dad6044abccace54aaa1
SHA1	1f1e6a59fc8d215304ddb317d8cd3d261c5c7fb8
SHA256	43c2ae8495ac5ef026b5db2d3e22f136bf056d6e58f99316f9c7667501e5e50c
SHA512	935af6c2325927dc2c0ac47372878203f5aa7308d59d8dc84339d732d491d7b73ff9851cb6382c3c456729cf33ad5753020aa4011c835c299cd03f7fb2a1ab65

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	06c71999f4f37633bbeefad334c72185
SHA1	844c5b99aa550746bf5dd43af06b487ae21912c2
SHA256	7609a6dba8a84fc9da0f96416933835db8d729649387631e780d6bb5d9b56928
SHA512	b85b4a6e935966bae9e90e7395e2b4fd6bfbbfc0def888848b6d10abdde3b9dc11d2e8bc860961b6f110434c23565aad8646fb1e4f55b2c4a8118f690361df6a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	ae3254810dc09d74f1a9538e0b5b55b2
SHA1	46ecb7d054d9a046e4cfbbd135bbabf7632a4d03
SHA256	6ab981242871430624f29336c098fb72a1e13d4394969d39431f1c88161f670a
SHA512	9ac9d5d709fbf3d6a29d3db8a8a5623ac4eafca641d03530b793755cd3eaca83bd079ca2e8d2ac43b91a32bc1bdcf213979e37c15d665a5aa7d2d3ed2bd65243

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	7374c60bed487bcf610f7cdee831ed5e
SHA1	ae98895ae97bd803c47bb32397e2b3b9a389fe29
SHA256	4c8746975a0c7d2eadfea4adc7a8cad17cf169443c0296ba4d2471c65cbfdbc8
SHA512	1dd559e61fa61d5bc4e8c0a19b7d08d0eb92f917fc2dbb8cf9133d18da9ff7b59fc414f54a7e8caa3956c46f9dabdb37040c21d2f32c606698d4724f617605ee

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	4faedca1fa4e69dda0dd476f208e467a
SHA1	9df0b3b584e37aabbf7b43c2993a26098ce0180e
SHA256	1bdc00a77cc64ce1ba8c743a8849f9dd04c2a04257e57321049e90878e190973
SHA512	baae6061c67e30bc28b5aa28424b46b9201576cf03503e105c849b5ec8fb1ec88203f2bbecf73bad9455f634262821f2bd83727b3002fb3c349132883a6e08ed

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5	56710b24500b58d862e4b052ad5d9aec
SHA1	860f8239a93ce8a015db43d9d92d48ff80aa414e
SHA256	336e8a074e01ca5dc1f6f9dccdb19755edd21b6dbcdaaff3e271f0ffae608a64
SHA512	078cc496b95b44cc87c1a3483375abe32828b3f69e6287ba7cae911c9b55a13e0fb01fa1144d28478e218d07f3ac57555fdf166126f41f172127f487e5a53b0c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5	e4a68ac854ac5242460afd72481b2a44
SHA1	df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256	cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA512	5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	5bed615d0d7031886e7294da0fc7ee4c
SHA1	d5e6eb35e236dd5d5ee0abc59ab9b1d0fed3173a
SHA256	db94e0d0a11bd25d7461ef729cf97a4467aff830562d6ce3198473c8ebe3d3cb
SHA512	990e1db2986ed6a8fad9f23476719effb11b11c6f45bba33f0865c648dbdae7443142a67c17bc747894030c9770cc0bf80db816ef6b0b2c6e5dc80793ae78ec2

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5	cc60a630cee9745d7c9bc41294bf1db8
SHA1	6cc4703f9d68d476e7cce87a0a16ea0e7ecaa9d7
SHA256	883fc2298eec49dbb020efeb3e338ec4a9bc89e96af7eca4d31f15fea9eeff1e
SHA512	a4beb1fb9606d18e4042107291912dc8db5f4ff73961257500976aa79752155c9be9664f58fa381f829dcbdbeeaac53524e40f5a2aa8198fe90d5adc81f27ed5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	27b13f13c5a25c1583ff2cacb581e8ac
SHA1	11d47a249053bc7fe62d7503f3ea8b27027ec1a2
SHA256	ff802aa3a01f702e82f435cc05947f71b278520dc85f6852269d8a1a3e73aee5
SHA512	f5ed58d8f4a9a3e73301760207e0cff6293a4d3e09f962d1928027acad2fa59ba8b56bdeb8214708f66d693265379f8d9fbb370244f06a85a2c9c57d5638a315

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	a2af138fc9c88b4c3c54788decdbf36d
SHA1	7977f54b114f434a3ecd04017a3f80942af631e0
SHA256	ef1d331e893ccaa7c1141f6c65cc61bee319e3178782e528777c7ace40d1d219
SHA512	caa16ee8c1e28f15874d391bf1d47f16fd99f888af1f41eb4dd03a58102158cb917625fbbc1a61e9053200d3b5b68acbcccbd37dc7c1ee8dbe9807131b0e74e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e795acac6ace13cb9abd0624b4f69270
SHA1	b496f20c031549fbf0e7f55d37204ccd9cc75ee1
SHA256	98fb718b6b1d8235df9c3cdc6ed5e8299ae2148efd146e032df4c011434eeb44
SHA512	0040be09f742bc249417627cc64542054255bd66486ad24c96c5f5a5fd76f446348d7d27e257b0b71dc6bdee9f4dc2b7890762b3b322b21340ac2cd3085ea766

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	8e363edf2db7f92561067016ccec9385
SHA1	d5450048456322ef19bd221c63e042c0a6c96d84
SHA256	53e38f4b5670b5eb2a81c46ff45341d4cd66d9393894358ae53b4435246300ad
SHA512	203d68aa983a01d6b0c2164b1dd38d3fa982c8010dccb5d9317e819ac5889ba4fe37c413a618a2660609c4650c12798bfdafc9a3c2b96099622fdbc27b5190be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	b0d8646316f484162b796d8df57540e8
SHA1	9160d2d0f76a65d05b2551785d01df5d0c6ccd04
SHA256	00ff37e6945e25e2fd8764ab3ffc8626e2c1c723fe6eaf21a76687b49c813c97
SHA512	91c5745d4ae3087e1cb4863fddcd90f63d0e103b833df2cbe63e5f0912024fed8c030c08e002e5694cbee1997ca99803f422081200b49132c2a9dc1cad24c2f5

Sample ID	240525-18gp5ada67
Target	https://gofile.io/d/GfflS3
Tags	wannacry discovery evasion exploit ransomware worm bootkit persistence

Malware Analysis Report

2024-09-11 06:12

Table of Contents

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files