Malware Analysis Report

2025-03-15 06:07

Sample ID 240726-rlmheswfnh
Target SheetRAT2.6.zip
SHA256 9417f9ba7340e2f47162941f8eabb08fb1a8852f9865a4c69d9754724f2fbc27
Tags
????? ???? njrat credential_access defense_evasion discovery stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

9417f9ba7340e2f47162941f8eabb08fb1a8852f9865a4c69d9754724f2fbc27

Threat Level: Known bad

The file SheetRAT2.6.zip was found to be: Known bad.

Malicious Activity Summary

????? ???? njrat credential_access defense_evasion discovery stealer

Njrat family

Credentials from Password Stores: Credentials from Web Browsers

Downloads MZ/PE file

Executes dropped EXE

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Browser Information Discovery

Unsigned PE

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Checks processor information in registry

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

NTFS ADS

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-26 14:17

Signatures

Njrat family

njrat

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-26 14:16

Reported

2024-07-26 14:40

Platform

win10-20240404-en

Max time kernel

1196s

Max time network

1207s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\SheetRAT2.6.zip

Signatures

Credentials from Password Stores: Credentials from Web Browsers

credential_access stealer

Downloads MZ/PE file

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\winrar-x64-701.exe N/A
N/A N/A C:\Users\Admin\Downloads\winrar-x64-701(1).exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Program Files\Mozilla Firefox\firefox.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\winrar-x64-701(1).exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\winrar-x64-701.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Browser Information Discovery

discovery

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Generic" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0000000001000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Generic" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616193" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 14002e8005398e082303024b98265d99428e115f0000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616193" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e803accbfb42cdb4c42b0297fe99a87c6410000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "2" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg C:\Program Files\Mozilla Firefox\firefox.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\sheetrat2.6.rar:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\winrar-x64-701.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\winrar-x64-701(1).exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4212 wrote to memory of 2148 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 3104 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 3104 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2284 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2148 wrote to memory of 2396 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\SheetRAT2.6.zip

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.0.2059797587\189019246" -parentBuildID 20221007134813 -prefsHandle 1700 -prefMapHandle 1676 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {edce94d3-4ef3-481c-8826-84c99d7ef437} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 1780 243f2f0da58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.1.1227573930\1827375123" -parentBuildID 20221007134813 -prefsHandle 2100 -prefMapHandle 2096 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dedbe601-1bfc-4c87-8631-7a77945a5510} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 2120 243e6b72858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.2.137395183\239654847" -childID 1 -isForBrowser -prefsHandle 2784 -prefMapHandle 2856 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {59a4441c-51c1-4444-b2c4-e680b80b9cdf} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 2768 243f5d9aa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.3.689633887\964701312" -childID 2 -isForBrowser -prefsHandle 3696 -prefMapHandle 3692 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3205a17-057e-4622-a434-3c401dfdeeaa} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 3708 243e6b62858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.4.421090172\1053649094" -childID 3 -isForBrowser -prefsHandle 3968 -prefMapHandle 3964 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {05cf2192-d5dd-411a-92cd-c31abc1c58c7} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 3980 243f7509458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.5.118899052\272323645" -childID 4 -isForBrowser -prefsHandle 5088 -prefMapHandle 5084 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b15c234a-9438-4244-a575-bc2c6f5392ff} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5096 243f63b5558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.6.1015756440\1772906551" -childID 5 -isForBrowser -prefsHandle 4884 -prefMapHandle 4880 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c5229fc-8aff-4d75-b593-2c988cdba146} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 4892 243f6e18258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.7.899520444\803900795" -childID 6 -isForBrowser -prefsHandle 5232 -prefMapHandle 5236 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {253ac6c9-26b5-435f-a146-7e107e80b637} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5224 243f86db558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.8.129555366\56509106" -childID 7 -isForBrowser -prefsHandle 5556 -prefMapHandle 5620 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {452ee4cd-e1d2-4a7c-aa17-1186d92d5b80} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5560 243f8620958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.9.1128915233\1789612823" -childID 8 -isForBrowser -prefsHandle 3016 -prefMapHandle 2672 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {11f02349-0dce-4b9e-884e-b5b44107000d} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5244 243f4460c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.10.1261454063\227700357" -childID 9 -isForBrowser -prefsHandle 4980 -prefMapHandle 4972 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {810fa48f-336a-4209-9ba9-648951fc408c} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5000 243f1f59658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.11.737121869\203965886" -parentBuildID 20221007134813 -prefsHandle 5088 -prefMapHandle 4944 -prefsLen 26503 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cb9d5244-dbf4-43ef-ab6c-f9da7cf5805d} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 4060 243f9d51358 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.12.2011637091\1953513635" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 4572 -prefMapHandle 5900 -prefsLen 26503 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c31bd5d-0a16-46be-a938-5ba93f147d41} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 6008 243f9d51958 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.13.585695106\1297393408" -childID 10 -isForBrowser -prefsHandle 6352 -prefMapHandle 6344 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd68e99f-0056-4934-9b8c-a09eff9708d4} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 6360 243fa37ab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.14.1423965679\1770563282" -childID 11 -isForBrowser -prefsHandle 5472 -prefMapHandle 5380 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {266594db-90e8-4566-8d98-2ada4a7fc0dc} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5368 243fa684658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.15.432662670\2124068655" -childID 12 -isForBrowser -prefsHandle 5328 -prefMapHandle 5344 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2eed612-89f9-4a5a-a310-81b54e5dafbe} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 5320 243fa684958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.16.1945921304\2071696796" -childID 13 -isForBrowser -prefsHandle 6612 -prefMapHandle 6652 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a21229ca-3940-41e9-a936-3d02b65be4f9} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 2512 243f755cc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.17.183650224\1616865078" -childID 14 -isForBrowser -prefsHandle 6728 -prefMapHandle 6732 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e078e8f7-214e-49ea-8ba6-5fdbdd7d9a38} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 6572 243f9f9e258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.18.703177180\1504681629" -childID 15 -isForBrowser -prefsHandle 7112 -prefMapHandle 7108 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b77580f8-9164-4248-8a6e-7f1197ef755e} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 7116 243fa5d7158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.19.1110875094\1454747046" -childID 16 -isForBrowser -prefsHandle 11312 -prefMapHandle 11284 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a3ca248-3966-45d6-a69d-318d59ab399f} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 11252 243fa7fad58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.20.526926596\1110183483" -childID 17 -isForBrowser -prefsHandle 6740 -prefMapHandle 11148 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc58388f-1fa1-4780-b9d9-d13fd37058c3} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 6832 243f7509458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.21.1464683089\1795242255" -childID 18 -isForBrowser -prefsHandle 11240 -prefMapHandle 11272 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ea0a5c1-5be8-4c4b-8bce-9aba85189daa} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 8608 243fa89eb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.22.635046943\1529147638" -childID 19 -isForBrowser -prefsHandle 6508 -prefMapHandle 7080 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {99f44ce3-1cd3-421b-b388-b86be22ed818} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 11276 243fcf71158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.23.728004802\950554198" -childID 20 -isForBrowser -prefsHandle 7120 -prefMapHandle 7156 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {be95e653-3c9e-4998-a1ea-4c098c941ff4} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 11084 243f9b03e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.24.810061548\558645411" -childID 21 -isForBrowser -prefsHandle 8528 -prefMapHandle 10852 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e531e22e-2407-441c-8410-9986d8c2ff2c} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 6780 243f9b06258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.25.996444628\471032628" -childID 22 -isForBrowser -prefsHandle 6900 -prefMapHandle 6836 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4ab0c599-ec74-4cf6-b085-b8d2ab2e95f0} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 8480 243fa04e958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.26.1599584679\1414753774" -childID 23 -isForBrowser -prefsHandle 10584 -prefMapHandle 10588 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {50133a02-f509-48be-a3da-07d6cf4ef0c6} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 10612 243fa2ca558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.27.1902660743\69143550" -childID 24 -isForBrowser -prefsHandle 10568 -prefMapHandle 8364 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b45ea024-3dd2-4971-a4b2-b0893b853c72} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 8376 243fa2cab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.28.169859480\994942594" -childID 25 -isForBrowser -prefsHandle 8272 -prefMapHandle 8268 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c726e538-a10a-4fcc-85f2-a31cbce36669} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 10536 243fa2cba58 tab

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.29.944586418\1220550278" -childID 26 -isForBrowser -prefsHandle 10764 -prefMapHandle 10268 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7c95d7a8-2813-4b65-80f4-ec76fc3991db} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 4064 243f8254c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.30.711132815\517458907" -childID 27 -isForBrowser -prefsHandle 8136 -prefMapHandle 8132 -prefsLen 27508 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33233119-0117-460c-b56e-0ec0a3641da8} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 10576 243e6b6e258 tab

C:\Users\Admin\Downloads\winrar-x64-701.exe

"C:\Users\Admin\Downloads\winrar-x64-701.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.31.929476116\18416034" -childID 28 -isForBrowser -prefsHandle 7332 -prefMapHandle 7940 -prefsLen 27517 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5bed20d1-c30b-4925-9128-cd829bd722c7} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 7932 243fa04d758 tab

C:\Users\Admin\Downloads\winrar-x64-701(1).exe

"C:\Users\Admin\Downloads\winrar-x64-701(1).exe"

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\0730d027136747909cde2dce68c2e757 /t 6960 /p 6956

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.32.1635579178\822764728" -childID 29 -isForBrowser -prefsHandle 8016 -prefMapHandle 4440 -prefsLen 27517 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {19fc2584-7766-46fc-8ee2-0e924af8cb6e} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 10056 243fcf70858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2148.33.932171175\2030489997" -childID 30 -isForBrowser -prefsHandle 10200 -prefMapHandle 10184 -prefsLen 27517 -prefMapSize 233444 -jsInitHandle 1284 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7d7df05-1f8a-489d-9d0e-878eb2c5fa9f} 2148 "\\.\pipe\gecko-crash-server-pipe.2148" 11204 243f96ad458 tab

Network

Country Destination Domain Proto
N/A 127.0.0.1:49768 tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 58.33.36.52.in-addr.arpa udp
N/A 127.0.0.1:49776 tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.228:443 www.google.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
US 8.8.8.8:53 youtube-ui.l.google.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 142.250.180.14:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.54:443 i.ytimg.com tcp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.54:443 i.ytimg.com udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 54.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
IE 74.125.193.84:443 accounts.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
IE 74.125.193.84:443 accounts.google.com udp
US 8.8.8.8:53 84.193.125.74.in-addr.arpa udp
GB 142.250.187.228:443 www.google.com tcp
GB 142.250.187.228:443 www.google.com udp
US 8.8.8.8:53 rr4---sn-5hneknee.googlevideo.com udp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
US 8.8.8.8:53 rr4.sn-5hneknee.googlevideo.com udp
US 8.8.8.8:53 rr4.sn-5hneknee.googlevideo.com udp
US 8.8.8.8:53 73.8.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr4---sn-5hneknee.googlevideo.com udp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
NL 74.125.8.73:443 rr4---sn-5hneknee.googlevideo.com tcp
US 8.8.8.8:53 play.google.com udp
GB 216.58.204.78:443 play.google.com tcp
GB 216.58.204.78:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 216.58.204.78:443 play.google.com udp
US 8.8.8.8:53 consent.youtube.com udp
GB 216.58.213.14:443 consent.youtube.com tcp
US 8.8.8.8:53 consent.youtube.com udp
US 8.8.8.8:53 consent.youtube.com udp
GB 216.58.213.14:443 consent.youtube.com udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 rr5---sn-hgn7rnls.googlevideo.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
US 8.8.8.8:53 rr5.sn-hgn7rnls.googlevideo.com udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 rr5.sn-hgn7rnls.googlevideo.com udp
US 8.8.8.8:53 rr5---sn-hgn7rnls.googlevideo.com udp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
FR 173.194.18.10:443 rr5---sn-hgn7rnls.googlevideo.com tcp
US 8.8.8.8:53 10.18.194.173.in-addr.arpa udp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
GB 216.58.204.78:443 suggestqueries-clients6.youtube.com tcp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
GB 216.58.204.78:443 suggestqueries-clients6.youtube.com tcp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.212.198:443 static.doubleclick.net tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.212.198:443 static.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 216.58.204.78:443 suggestqueries-clients6.youtube.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 198.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 photos-ugc.l.googleusercontent.com udp
GB 172.217.16.225:443 photos-ugc.l.googleusercontent.com tcp
GB 172.217.16.225:443 photos-ugc.l.googleusercontent.com tcp
GB 172.217.16.225:443 photos-ugc.l.googleusercontent.com tcp
US 8.8.8.8:53 photos-ugc.l.googleusercontent.com udp
GB 172.217.16.225:443 photos-ugc.l.googleusercontent.com udp
US 8.8.8.8:53 youtube.com udp
GB 216.58.212.206:443 youtube.com tcp
US 8.8.8.8:53 youtube.com udp
US 8.8.8.8:53 youtube.com udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
GB 216.58.212.206:443 youtube.com udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 rr3---sn-aigzrn76.googlevideo.com udp
GB 173.194.137.72:443 rr3---sn-aigzrn76.googlevideo.com tcp
US 8.8.8.8:53 rr3.sn-aigzrn76.googlevideo.com udp
US 8.8.8.8:53 rr3.sn-aigzrn76.googlevideo.com udp
GB 173.194.137.72:443 rr3.sn-aigzrn76.googlevideo.com udp
US 8.8.8.8:53 72.137.194.173.in-addr.arpa udp
US 8.8.8.8:53 i9.ytimg.com udp
GB 216.58.212.238:443 i9.ytimg.com tcp
US 8.8.8.8:53 i9.ytimg.com udp
US 8.8.8.8:53 i9.ytimg.com udp
GB 216.58.212.238:443 i9.ytimg.com udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 27.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 101.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
GB 88.221.134.155:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.46:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.46:443 redirector.gvt1.com udp
US 8.8.8.8:53 r2---sn-aigzrnse.gvt1.com udp
GB 74.125.168.199:443 r2---sn-aigzrnse.gvt1.com tcp
US 8.8.8.8:53 r2.sn-aigzrnse.gvt1.com udp
US 8.8.8.8:53 r2.sn-aigzrnse.gvt1.com udp
US 8.8.8.8:53 155.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 199.168.125.74.in-addr.arpa udp
GB 74.125.168.199:443 r2.sn-aigzrnse.gvt1.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
GB 142.250.200.54:443 i.ytimg.com udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
GB 142.250.178.1:443 lh4.googleusercontent.com tcp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
GB 142.250.180.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
GB 142.250.178.1:443 googlehosted.l.googleusercontent.com udp
GB 172.217.16.225:443 photos-ugc.l.googleusercontent.com udp
US 8.8.8.8:53 1.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 rr2---sn-aigzrnz7.googlevideo.com udp
GB 74.125.175.199:443 rr2---sn-aigzrnz7.googlevideo.com tcp
US 8.8.8.8:53 rr2.sn-aigzrnz7.googlevideo.com udp
US 8.8.8.8:53 rr2.sn-aigzrnz7.googlevideo.com udp
GB 74.125.175.199:443 rr2.sn-aigzrnz7.googlevideo.com udp
US 8.8.8.8:53 199.175.125.74.in-addr.arpa udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.178.1:443 lh3.googleusercontent.com tcp
GB 142.250.178.1:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 telegra.ph udp
NL 149.154.164.13:443 telegra.ph tcp
US 8.8.8.8:53 telegra.ph udp
US 8.8.8.8:53 telegra.ph udp
US 8.8.8.8:53 13.164.154.149.in-addr.arpa udp
US 8.8.8.8:53 t.me udp
NL 149.154.167.99:443 t.me tcp
US 8.8.8.8:53 t.me udp
US 8.8.8.8:53 t.me udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 edit.telegra.ph udp
US 8.8.8.8:53 edit.telegra.ph udp
NL 149.154.164.13:443 edit.telegra.ph tcp
US 8.8.8.8:53 edit.telegra.ph udp
US 8.8.8.8:53 99.167.154.149.in-addr.arpa udp
US 8.8.8.8:53 oxy.st udp
RU 185.178.208.137:443 oxy.st tcp
US 8.8.8.8:53 oxy.st udp
US 8.8.8.8:53 oxy.st udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ads.themoneytizer.com udp
US 8.8.8.8:53 smatr.net udp
US 8.8.8.8:53 cdn.adlook.me udp
US 8.8.8.8:53 contextual.media.net udp
US 104.22.63.227:443 ads.themoneytizer.com tcp
US 104.22.63.227:443 ads.themoneytizer.com tcp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
NL 88.208.46.222:443 smatr.net tcp
US 8.8.8.8:53 smatr.net udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 smatr.net udp
RU 95.181.182.182:443 cdn.adlook.me tcp
US 8.8.8.8:53 cl-7c56f4b3.edgecdn.ru udp
US 8.8.8.8:53 cl-7c56f4b3.edgecdn.ru udp
US 8.8.8.8:53 137.208.178.185.in-addr.arpa udp
US 8.8.8.8:53 227.63.22.104.in-addr.arpa udp
US 8.8.8.8:53 222.46.208.88.in-addr.arpa udp
US 8.8.8.8:53 182.182.181.95.in-addr.arpa udp
US 8.8.8.8:53 cdn.themoneytizer.fr udp
US 8.8.8.8:53 ced.sascdn.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 adtrack.adleadevent.com udp
US 8.8.8.8:53 tmzr.themoneytizer.fr udp
US 8.8.8.8:53 yastatic.net udp
DE 51.89.9.252:443 onetag-sys.com tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 yastatic.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 104.21.40.15:443 tmzr.themoneytizer.fr tcp
US 104.21.40.15:443 tmzr.themoneytizer.fr tcp
IE 52.214.173.56:443 adtrack.adleadevent.com tcp
IE 54.217.97.89:443 p.cpx.to tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 yastatic.net udp
US 8.8.8.8:53 ogfna.net udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 a1184.b.akamai.net udp
US 8.8.8.8:53 counter.yadro.ru udp
US 8.8.8.8:53 system-notify.app udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 cdn.themoneytizer.fr udp
US 8.8.8.8:53 a1184.b.akamai.net udp
NL 88.208.46.222:443 ogfna.net tcp
US 8.8.8.8:53 tmzr.themoneytizer.fr udp
US 8.8.8.8:53 cdn.themoneytizer.fr udp
DE 51.89.9.252:443 onetag-sys.com udp
DE 178.63.248.57:443 system-notify.app tcp
US 8.8.8.8:53 ads.adlook.me udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 217.131.154.178.in-addr.arpa udp
US 8.8.8.8:53 15.40.21.104.in-addr.arpa udp
US 8.8.8.8:53 56.173.214.52.in-addr.arpa udp
US 8.8.8.8:53 89.97.217.54.in-addr.arpa udp
US 8.8.8.8:53 adtrack-php-loadbalancer-vpc-1246401395.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 tmzr.themoneytizer.fr udp
RU 46.243.182.93:443 ads.adlook.me tcp
US 104.21.40.15:443 tmzr.themoneytizer.fr udp
US 104.21.40.15:443 tmzr.themoneytizer.fr udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 ogfna.net udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 adtrack-php-loadbalancer-vpc-1246401395.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 ogfna.net udp
US 8.8.8.8:53 counter.yadro.ru udp
US 8.8.8.8:53 system-notify.app udp
US 8.8.8.8:53 lb-prod.adlook.me udp
GB 95.100.244.20:443 contextual.media.net tcp
GB 2.18.190.77:443 a1184.b.akamai.net tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
DE 91.228.74.200:443 global.px.quantserve.com tcp
RU 88.212.202.52:443 counter.yadro.ru tcp
GB 95.100.244.20:443 contextual.media.net tcp
GB 2.18.190.77:443 a1184.b.akamai.net tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
DE 91.228.74.200:443 global.px.quantserve.com tcp
RU 88.212.202.52:443 counter.yadro.ru tcp
US 8.8.8.8:53 57.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 93.182.243.46.in-addr.arpa udp
US 8.8.8.8:53 counter.yadro.ru udp
US 8.8.8.8:53 lb-prod.adlook.me udp
US 8.8.8.8:53 system-notify.app udp
GB 95.100.244.20:443 contextual.media.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 match.adsrvr.org udp
DE 178.63.248.57:443 system-notify.app tcp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 185.89.210.82:443 ib.anycast.adnxs.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 15.197.193.217:443 match.adsrvr.org tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 lg3.media.net udp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
IE 54.195.184.161:443 id.crwdcntrl.net tcp
DE 162.19.138.120:443 id5-sync.com tcp
GB 2.18.108.20:443 lg3.media.net tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lg3.media.net udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 lg3.media.net udp
US 104.26.8.169:443 script.4dex.io tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
GB 18.245.187.126:443 rules.quantcount.com tcp
GB 2.18.108.20:443 lg3.media.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 script.4dex.io udp
US 35.244.193.51:443 lexicon.33across.com udp
US 8.8.8.8:53 kvt.sddan.com udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 20.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 52.202.212.88.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 20.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 161.184.195.54.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 169.8.26.104.in-addr.arpa udp
US 8.8.8.8:53 126.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 kvt.sddan.com udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
US 8.8.8.8:53 kvt.sddan.com udp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 8.8.8.8:53 uidsync.net udp
FR 51.15.145.116:443 kvt.sddan.com tcp
DE 157.90.33.121:443 uidsync.net tcp
DE 157.90.33.121:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 s.cpx.to udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 s.cpx.to udp
IE 54.217.97.89:443 s.cpx.to tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 s.cpx.to udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 104.18.23.145:443 cadmus.script.ac tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 ads.betweendigital.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 b1h.zemanta.com udp
US 8.8.8.8:53 ssp.otm-r.com udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ssp.ads.betweendigital.com udp
RU 194.55.244.177:443 ssp.otm-r.com tcp
RU 194.55.244.177:443 ssp.otm-r.com tcp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
US 104.18.10.176:443 mp.4dex.io tcp
US 8.8.8.8:53 mp.4dex.io udp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 ssp.ads.betweendigital.com udp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 35.241.34.106:443 c.4dex.io tcp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 c.4dex.io udp
US 35.241.34.106:443 c.4dex.io udp
US 8.8.8.8:53 116.145.15.51.in-addr.arpa udp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 176.10.18.104.in-addr.arpa udp
US 8.8.8.8:53 209.30.22.104.in-addr.arpa udp
US 8.8.8.8:53 177.244.55.194.in-addr.arpa udp
US 8.8.8.8:53 106.34.241.35.in-addr.arpa udp
DE 91.228.74.166:443 pixel.quantserve.com tcp
NL 188.42.34.65:443 ssp.ads.betweendigital.com tcp
US 64.74.236.159:443 b1h.zemanta.com tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 gbc5.fr3.eu.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
FR 178.250.7.13:443 dnacdn.net tcp
US 8.8.8.8:53 gbc0.fr3.eu.criteo.com udp
US 8.8.8.8:53 gbc5.fr3.eu.criteo.com udp
FR 185.235.86.150:443 gbc5.fr3.eu.criteo.com tcp
FR 185.235.86.18:443 gbc0.fr3.eu.criteo.com tcp
US 8.8.8.8:53 gbc0.fr3.eu.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 35.241.34.106:443 c.4dex.io udp
GB 216.58.204.78:443 www.youtube.com udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
NL 81.17.55.160:443 ww1097.smartadserver.com tcp
NL 81.17.55.160:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 65.34.42.188.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 159.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 150.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 18.86.235.185.in-addr.arpa udp
GB 216.58.204.78:443 www.youtube.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 download.oxy.st udp
RU 185.178.208.137:443 download.oxy.st tcp
US 8.8.8.8:53 download.oxy.st udp
US 8.8.8.8:53 download.oxy.st udp
US 8.8.8.8:53 160.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 boot.pbstck.com udp
DE 178.63.248.57:443 uidsync.net tcp
US 104.22.1.93:443 boot.pbstck.com tcp
US 8.8.8.8:53 boot.pbstck.com udp
US 8.8.8.8:53 boot.pbstck.com udp
US 104.22.1.93:443 boot.pbstck.com udp
US 8.8.8.8:53 93.1.22.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.pbstck.com udp
US 104.22.0.93:443 cdn.pbstck.com tcp
US 8.8.8.8:53 cdn.pbstck.com udp
US 104.22.0.93:443 cdn.pbstck.com tcp
US 8.8.8.8:53 cdn.pbstck.com udp
US 104.22.0.93:443 cdn.pbstck.com udp
US 8.8.8.8:53 93.0.22.104.in-addr.arpa udp
US 8.8.8.8:53 s.cpx.to udp
US 8.8.8.8:53 s.cpx.to udp
US 8.8.8.8:53 intake.pbstck.com udp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
DE 178.63.248.56:443 uidsync.net tcp
US 104.22.0.93:443 intake.pbstck.com tcp
US 8.8.8.8:53 intake.pbstck.com udp
US 104.22.0.93:443 intake.pbstck.com tcp
US 104.22.0.93:443 intake.pbstck.com tcp
US 8.8.8.8:53 intake.pbstck.com udp
US 104.22.0.93:443 intake.pbstck.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 s1.oxy.st udp
US 104.21.234.182:443 s1.oxy.st tcp
US 8.8.8.8:53 s1.oxy.st udp
US 8.8.8.8:53 56.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 s1.oxy.st udp
US 104.21.234.182:443 s1.oxy.st udp
US 8.8.8.8:53 182.234.21.104.in-addr.arpa udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 104.22.31.209:443 csync.smilewanted.com tcp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 104.22.31.209:443 csync.smilewanted.com tcp
US 8.8.8.8:53 static.smilewanted.com udp
US 8.8.8.8:53 static.smilewanted.com udp
US 104.22.30.209:443 static.smilewanted.com tcp
US 8.8.8.8:53 static.smilewanted.com udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 secure.adnxs.com udp
FR 51.178.195.216:443 sync.smartadserver.com tcp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
DE 37.252.173.215:443 secure.adnxs.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 ice.360yield.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
GB 2.18.108.192:443 e6603.g.akamaiedge.net tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
IE 54.73.87.223:443 ice.360yield.com tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 u.openx.net udp
US 35.244.159.8:443 u.openx.net tcp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 u.openx.net udp
IE 52.210.35.250:443 ap.lijit.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 us.shb-sync.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 209.31.22.104.in-addr.arpa udp
US 8.8.8.8:53 216.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 223.87.73.54.in-addr.arpa udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
DK 37.157.2.233:443 cm.adform.net tcp
US 8.2.110.33:443 us.shb-sync.com tcp
GB 108.156.39.126:443 s.ad.smaato.net tcp
US 8.8.8.8:53 us.shb-sync.com udp
US 35.244.159.8:443 u.openx.net udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 us.shb-sync.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 250.35.210.52.in-addr.arpa udp
US 8.8.8.8:53 33.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.228:443 www.google.com udp
US 8.8.8.8:53 rarlab.com udp
DE 51.195.68.162:80 rarlab.com tcp
DE 51.195.68.162:80 rarlab.com tcp
US 8.8.8.8:53 rarlab.com udp
US 8.8.8.8:53 rarlab.com udp
DE 51.195.68.162:443 rarlab.com tcp
US 8.8.8.8:53 www.rarlab.com udp
DE 51.195.68.162:443 www.rarlab.com tcp
US 8.8.8.8:53 www.rarlab.com udp
US 8.8.8.8:53 www.rarlab.com udp
US 8.8.8.8:53 162.68.195.51.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
FR 149.202.238.96:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 96.238.202.149.in-addr.arpa udp
US 104.22.0.93:443 intake.pbstck.com udp
DE 51.195.68.162:443 www.rarlab.com tcp
DE 51.195.68.162:443 www.rarlab.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
GB 172.217.16.238:443 www.youtube.com udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
US 35.241.34.106:443 c.4dex.io udp
US 8.8.8.8:53 winrar.com udp
US 8.8.8.8:53 winrar.com udp
DE 51.195.68.163:80 winrar.com tcp
DE 51.195.68.163:80 winrar.com tcp
US 8.8.8.8:53 winrar.com udp
DE 51.195.68.163:443 winrar.com tcp
US 8.8.8.8:53 www.win-rar.com udp
US 8.8.8.8:53 www.win-rar.com udp
DE 51.195.68.163:443 www.win-rar.com tcp
US 8.8.8.8:53 www.win-rar.com udp
US 8.8.8.8:53 163.68.195.51.in-addr.arpa udp
DE 51.195.68.163:443 www.win-rar.com tcp
DE 51.195.68.163:443 www.win-rar.com tcp
US 8.8.8.8:53 www.win-rar.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
NL 89.149.193.113:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 26.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.228:443 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 metrics.biddertmz.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 metrics.biddertmz.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
US 8.8.8.8:53 metrics.biddertmz.com udp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
US 8.8.8.8:53 227.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 168.22.248.34.in-addr.arpa udp
US 8.8.8.8:53 convertio.co udp
GB 18.245.162.61:80 convertio.co tcp
US 8.8.8.8:53 convertio.co udp
GB 18.245.162.61:80 convertio.co tcp
US 8.8.8.8:53 convertio.co udp
GB 18.245.162.61:443 convertio.co tcp
US 8.8.8.8:53 static.convertio.co udp
GB 108.138.233.85:443 static.convertio.co tcp
US 8.8.8.8:53 d13bnt6kor75h4.cloudfront.net udp
GB 108.138.233.85:443 d13bnt6kor75h4.cloudfront.net tcp
US 8.8.8.8:53 d13bnt6kor75h4.cloudfront.net udp
US 8.8.8.8:53 8.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 85.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 connect.facebook.net udp
IE 74.125.193.84:443 accounts.google.com tcp
GB 142.250.178.14:443 apis.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 plus.l.google.com udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 plus.l.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
GB 142.250.178.14:443 plus.l.google.com udp
IE 74.125.193.84:443 accounts.google.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 157.240.221.16:443 scontent.xx.fbcdn.net tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 157.240.221.16:443 scontent.xx.fbcdn.net tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 ws.convertio.me udp
US 8.8.8.8:53 ws.convertio.me udp
DE 136.243.174.103:443 ws.convertio.me tcp
US 8.8.8.8:53 ws.convertio.me udp
US 8.8.8.8:53 103.174.243.136.in-addr.arpa udp
US 8.8.8.8:53 16.221.240.157.in-addr.arpa udp
GB 157.240.221.16:443 scontent.xx.fbcdn.net udp
GB 157.240.221.16:443 scontent.xx.fbcdn.net tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 64.74.236.159:443 b1h.zemanta.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.98:443 ww1097.smartadserver.com tcp
NL 81.17.55.98:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 98.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 35.241.34.106:443 c.4dex.io udp
US 35.241.34.106:443 c.4dex.io tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 104.22.0.93:443 intake.pbstck.com udp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 euw2.smartadserver.com tcp
US 35.241.34.106:443 c.4dex.io udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 b1h.zemanta.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 nydc1.outbrain.org udp
FR 178.32.210.227:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 euw2.smartadserver.com tcp
NL 52.142.223.178:80 tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 57.110.18.2.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 172.217.16.238:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 172.217.16.238:443 youtube-ui.l.google.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
IE 34.248.22.168:443 metrics.biddertmz.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 intake.pbstck.com udp
US 8.8.8.8:53 intake.pbstck.com udp
US 8.8.8.8:53 intake.pbstck.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 kvt.sddan.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 kvt.sddan.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 b1h.zemanta.com udp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 chidc2.outbrain.org udp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
FR 178.32.210.227:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 81.193.149.89.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ssp.otm-r.com udp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
NL 89.149.193.81:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 35.190.72.216:443 location.services.mozilla.com tcp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
NL 89.149.193.81:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 97.238.202.149.in-addr.arpa udp
US 35.241.34.106:443 c.4dex.io udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 b1h.zemanta.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 ads.betweendigital.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 ssp.ads.betweendigital.com udp
US 8.8.8.8:53 ssp.ads.betweendigital.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 172.217.16.238:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 216.58.201.110:443 www.youtube.com tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 c.4dex.io udp
US 35.241.34.106:443 c.4dex.io udp
US 35.241.34.106:443 c.4dex.io tcp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 intake.pbstck.com udp
US 8.8.8.8:53 intake.pbstck.com udp
US 8.8.8.8:53 intake.pbstck.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
FR 149.202.238.97:443 ww1097.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
US 8.8.8.8:53 ad-eu.p.otm-r.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 216.58.204.78:443 play.google.com udp
GB 216.58.204.78:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 kvt.sddan.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 kvt.sddan.com udp
US 104.22.63.227:443 ads.themoneytizer.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 149.202.238.97:443 euw2.smartadserver.com tcp
FR 91.134.110.129:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 129.110.134.91.in-addr.arpa udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 b1h.zemanta.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
GB 172.217.16.238:443 www.youtube.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 kvt.sddan.com udp
US 8.8.8.8:53 kvt.sddan.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
GB 172.217.16.238:443 www.youtube.com udp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.160:443 euw1.smartadserver.com tcp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
NL 81.17.55.160:443 ww1097.smartadserver.com tcp
NL 81.17.55.160:443 ww1097.smartadserver.com tcp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 c.4dex.io udp
US 8.8.8.8:53 ww1097.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 51.178.195.209:443 euw2.smartadserver.com tcp
FR 51.178.195.209:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 209.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 intake.pbstck.com udp
US 8.8.8.8:53 intake.pbstck.com udp
FR 51.15.145.116:443 kvt.sddan.com tcp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 ads.themoneytizer.com.cdn.cloudflare.net udp
US 8.8.8.8:53 mp.4dex.io udp
FR 51.178.195.209:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 51.178.195.209:443 euw2.smartadserver.com tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\4ef8faed-6a15-4ac2-bcf5-722c1c31f8c3

MD5 3dc1e6f0c23e705d441edb1fd94770a2
SHA1 6bb4549fa0fb39bfb2bdfadfcb9f56a3588910de
SHA256 93f965063a0b5483410fad0417963cdcf5215f1317546c5ef78842fd43872f07
SHA512 a7d57c52edf69554de0b3321d2df449dcb200f733974116767f20ad83ca0da94773dba98af17cb6452123603de13fba416f101cf6e29843beb81222ade384e61

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\3437a13a-c665-42a7-ac15-4b4d52c7eb66

MD5 02d0b15cd7f8ebec0c377721292975ff
SHA1 02234a6148ac2ed34ac49f1f3e6caa5b97426da1
SHA256 2a1fc90a00c5e1acf3f2d9958f0c22b8271e2d5a2c37f67f974889f560e8dc8e
SHA512 43de3455b6f794b7e10cd47f851c8dfd45fbb369929416e975a151d2ed10d85bb350f21fb69cabcb886c156c8f0ad0ac5d9fa4d3000e5aceb1b141d81bd37e06

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\db\data.safe.bin

MD5 8416f91a13f3f047bc88a91d0a24fb6a
SHA1 25a3b471424e3d9e73a299b76ab7f73ad1d2c01c
SHA256 4291641a2d7ffb8e7bced48641b355d5514c0d4a28ad3815feaf21dab7ce497d
SHA512 00e24ae2c01f4b21e948a557f456bfe660c7f8041468942e44b0b4b41404810e4a11a58106fc44dbff63c07e00afd48ebd3b5db19d4397feea61562573efd02a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs.js

MD5 d5353b8a237cede279bae6324e500d69
SHA1 b72a06ecb566006a8e516293421db9d7501f2268
SHA256 fddc4b1bc99e931da08e92d87f5873f3bea2971c81a636d582ccee9de95d8254
SHA512 2a8b90ae6d93a596cbb330e0d41a040a8066472afb47142260dc94695232bfac1839344ef0e912f33045b9dae0bd7e9b5550fe2e0c873a1bad214704e12e3744

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 e7d901ad03d22078f4c42ecc83c3bd45
SHA1 13ffe2ced2026e6b99c39a96d006c7832a72ba17
SHA256 fddee54013f830a84e74dce5679f6e4c3c71b4c5c51ecdf58bcef7e27eba4f17
SHA512 8e7373116183db845f03c74e28effbe85b53c6c109f0a1a867fc4daa2944c099846644c5b6ecfa6408091d097a08b3f1b8cedcbeffbdcfaa14147f6b76663ec9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 9e13f04c0cb80869880d14c0905d96a6
SHA1 bf73a22f0d78c433cd0c1a06fba725a5bbac3cad
SHA256 6d0cf13bb80d05ef54bf929d7c1619b947d15f18c1bae7c4fc0e39dad96f90c2
SHA512 c0c366f9e2f5e56c4ba682beda65011a8092eac9b47ed5074ff98655eb8dbe4064e381204cfa1a461bc717914398adad73ec10bf90f8a581ae2714934c2fac93

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d610f0c30b468578ff46f3cb7c28ae5b
SHA1 e1803c7c4221742a7cb529ed2cc1f0b7b950b332
SHA256 86182a6147a78fee5f7584185b3741eff787b7e57e3cccd95d29a08f2a913e75
SHA512 745e33e45ba29ebb8b874eb8074cde43ca991b12dfb7fabcd6e193034d76ec76ee4dd1062a0b51a2b78de0af197c835a8e0d726e82fa0876bda54c004ea11c32

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\169\{7105216d-c88b-46df-87a1-15fe014daca9}.final

MD5 2a252393b98be6348c4ba18003cc3471
SHA1 40f75302fcbe4a8ac2e33a8d9daf801abc2a9598
SHA256 04cae3c7b208fc55b25763913d0bbdc99232942086efdf705f2a27764be6f5ee
SHA512 07af4a7b0d10f1b5e1fe0877b21abc98483d78797608a1763cfb71e25559fdce10d20f03c16f4284d7ae7ab90266f45240425e3a264de9525ec1657345b85198

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\idb\2576277383yCt7-%iCt7-%rce4s1peo.sqlite

MD5 a2d3a4ced6248aab11fbe6139b467626
SHA1 cabe8ac620e2d5a17d3a39707770dc249deeda1f
SHA256 16ce6f3a15ebd73dfb62751a593e8445b9237da6c47ed3c2d91d4a9c56187b6a
SHA512 1eea38f8d4cdf248fb628856f8d5e9c0932d64e5b4ecc590338bfdd5a03b027df21223568329c9acf0836cc5a5751185e2e817f66dbc81ab8084e492c1432ea4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 e17ee267d5a399a682b2286891a1de2b
SHA1 522d59763553ce7f239e948a6781eefb5b3486d4
SHA256 02e76fbe95624879c4b60755c0f601c002751ff8f9759f5dacba2d72394a44d8
SHA512 3bf3ffe9ea234c4daa42e2b81fd6cd38fec75389511a9b1b6fff59aeec36d3ec7afebeeaa7878186ded3f4bd8e872f274edc60c088a68de0dc64ca1df51ad8a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fb739febf28ed29955b47638452d875b
SHA1 5481af5d54b753175dd434be7bbe5c8b8560eca3
SHA256 6de99cf4d1ba5e08a59a39625f1fddaf8caf216837d7209180622511e8cd3411
SHA512 3081a940b6f80975f179bf12e49882b3dbd17c4c3c30fe004dad88c9b8d4634f633fdd35246fa26fb50551d023391aac84bd99708797c93969aea20a4f450d0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\27279

MD5 7513e25f656c7d47d2ae14137b99a589
SHA1 9daf43185852aea2dcb1dc391f2dcebc070699ef
SHA256 bef1ff3c83374cbbbe599aa8fc7c8d40aacd49212f4ee0a076a94c9e19377b4e
SHA512 e02f833fbae7f7c36c18cb991b34041d23587c7505ab85fd36fc25643d540da3bbd29edceff190d5486c88dd1f2579665f8f7e6834c12f443a118b20617d2327

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\157\{460aa255-3fd6-454a-9d1f-9ac46137749d}.final

MD5 d244991f9e3a0f1132cd83441039da12
SHA1 37b7efb59d6035bb2a3350ce92a81ffaa7daed85
SHA256 104b600fda92a933e4dab4643c092cf46c2dd45c8f4c3e3698ec9c412fc8ad4d
SHA512 9f2a08a6db14331061ea870443588bf9f2b6e417f1e4ee4af061c754942ea18b1a265b2dfecafee2d530cf808f494f30d11c53dc046a3306aa3100103207ea4e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\200\{db244190-5afc-41ca-8e4e-dfec7cd89fc8}.final

MD5 be203547ce77fa7a91259437b55c0d1f
SHA1 cff2ff2c9469ac96eff7baaa308cdc886fab804d
SHA256 e5f9c781a4756c64455652d9b4bd944aab9ecc1eef556814c00b1797209f4840
SHA512 adf00778a63ea8a143f8fbbf61188392a87a376234e17856339036854cff3a5247aed0b1c0b603332e244d348d58402ba58b32f6df6cc8e18f9d8242f6573f71

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\41\{72caf3c6-5e01-4ecd-a846-b394e5e20929}.final

MD5 45e25bb134343fe4a559478cd56f0971
SHA1 79f18ad0b7e3935c3231ced0edd8ea3c7997ca93
SHA256 dae4dd8e56ccc952312b3b238a1db294d4d7ad4f532c31cd1c2e5f9dee881678
SHA512 9b32b125c4183fe992630bc6ce9a511157959556fdce53f8264aba2aa8fb7b0e53b408b505da2cc96cdec771470927e74cba3bbd6eb71a5077e9f933cdc85292

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\168\{9291ca22-4217-4736-bd1c-60c4a1bba9a8}.final

MD5 5b0f165bbdb71faa1bb5b26c4f022e96
SHA1 704bbe81e0d8370e675246e1cbb347bf8599aa45
SHA256 b95a445bd9d295276e8423f1ad3fc50c740512a634f2115364217544bc87d44f
SHA512 6c521b2c55135ec98f79193bf9c62b73cfb1801cdeed03a9871878f677aacea46cae165a4290682768ca1c1192dff2e87b63c39228164d72d2c7abbe732f8d20

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\186\{a145e1ff-c805-421a-ab68-5c77906f9cba}.final

MD5 51bb0fe00991a2ae6707b3aefc583918
SHA1 21ec201ebf41ad57faaab02f7961ce5a746e6dbb
SHA256 97dc140355b2b45b54c3dab1ac66b951afae0bc742402cbc342be117f4424e0a
SHA512 41863cc0f1252366a5514dd62a06f4bba493029b8c7a35e19173b6d7f9114e7098fa35d284623b6641d28f7d7bee1ce99064987afc985dbf0354368f71f9a39b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\25\{0ba3a4b9-e811-4916-8fa6-41450de6e019}.final

MD5 cedfd917c042bfd5faea22058d451ad1
SHA1 5a98904fbf1c9bea6d27f75c42aa49c66db8c54f
SHA256 9cfc9e25c7e723abf5c14049886f33d836c6ab91b40218920efbdc864764f3f2
SHA512 5f7513b881549aba1fad170019ddf45e780ddb6a576e08365f4c9ab2c8bf4e7d2d5053b1db4ec6a2af570de21a182fc8981a0790881172d8605c023fbbbba4d8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\72\{5a6087a8-8773-45e0-a8fe-e8d4a229c048}.final

MD5 3183686d3a59ab0d15fab2be7411e186
SHA1 22d29c6b9fcfa649773e12680f00d868e6714485
SHA256 2a1c50b6d5014af422db7ff5661a5a68cb0c27ee9cc4768c99502ada0eb63867
SHA512 eb7dcb18d20e28d283ea7d4cfdc08c0da81e0499089117ac068194b1ca2be661d380fe7d938d5828c42d711842bd3793b2dc2a3fe6285fab83b90be4fe3c7b16

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\24\{d67aa193-1305-4cf2-879e-9e18fe8ac918}.final

MD5 2300eafff09d478fbf68f49fdafbff49
SHA1 12f127da15a69beece4f71f600975e0503c77ce1
SHA256 f8c94c9f9dd4455eb89053d024bfd28afa482a9c697732ce5acb2df3144e885f
SHA512 93d447b0a87e4c25dbca71a80a198693b12c684c0a96b370693d693899230460bbd8c85c137dcc0b4872bd2d85fd0d10bfe3f4137c1b08f01da3a9bbfa481447

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\176\{b37223b1-f0bd-4fa7-8000-c6ad33c728b0}.final

MD5 321ea72e49df8692233391c1f36451e6
SHA1 2f016758fc5830a806ed9891e574936db521c034
SHA256 8113ef313d8a5519df57034e29db538c65721112804bf1a1a446b8302ae7e0d0
SHA512 86d5a408e472a62c2cfcf69a5fadc122f7a62dae866a36fdc4a7381de6cc8028af4ba51cec9c827b9815c26f75db82c4813ab25682c728c1f03d3bfc7ff21114

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\74\{38d6d805-f999-4850-bfae-227da9d8d44a}.final

MD5 f8a4486578289f338eccea68bf578c6e
SHA1 6cbd17168a35b3f10b74a28f1fa3a83e161a7e35
SHA256 264c3ef4f7bc3f390875ca49d87ec35f9c4f0bbb0eabfdb38073951253ca721a
SHA512 e896ce1bbfd145a4c38f7e81a8afb12c3f354d5632f24f26cf19e8b5f1a466fca8d098e7277a4c0979170c37be25b6cdcc0654ae94f46908bde1810d4c03c3c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\31\{e24db2b9-3f20-448a-8c3b-f4ad3ddb671f}.final

MD5 d0d1672cc7d147f9f802ebefdb01e914
SHA1 22ed7eb147f695ec1df8ae6f43cb7787dd0ea652
SHA256 62efa98b135e5ef8779b99489ab8200b60026a5b1000ff3c997f3be230febe2f
SHA512 7f8ef8af3f57a6aab90ccda6ab1079e43630de11d14a780786a1b0f1ab057d7cfd5ab512b53ecd8ddd1bcc669fa56a0c260b2df421db64e3855dee7d63251a68

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\169\{0c768407-2bfb-4431-b47d-a72bd89718a9}.final

MD5 440b8569f0166adb464f65b587fc1864
SHA1 bd9ec70774c72144b24d6b025169adcf97f4100f
SHA256 7679aaa38924228f58794ffd76387e65f03fb1a7ed42ba79a369069f2da4c13a
SHA512 2a4d57dabf61b213de49a46569ad00401afeee417d28936851c1ea346d65d5019be0b8092d1857b58ca0bd0f2a1407452920a2f3e0a69688d61bef25b419fcbe

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\141\{0e6bd545-960d-45c1-ad79-a8f18125ce8d}.final

MD5 9f99c5db53c5fab1bcd32e05ca06def3
SHA1 6b898b3b757218e0bb43f98266f14ab2ecd922af
SHA256 99daba8f81f9cff4feeea76ecec876840213816b0b53a16c60b9077c640e6831
SHA512 36d66379ced9bb670957e4a1705b8edc22ff433c601c1acd34b96efa900d58f1971b73ef8c7ef0ad7e07d15fadc97b68ac182d4ce5f592b67cc5134976be4b9f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\98\{eb54ce29-b599-44ec-b70b-1ee8accd7662}.final

MD5 b85f318ce844cd0ac2d4ccfbfde4d2bf
SHA1 f3eea534e7b991836ce9eef594480ddb1bda1987
SHA256 480677e695c4b197a66db44b3d42f937f304e44fc560c6690885827cc99f4a5b
SHA512 1f8ed38e5dcc51daab4e6bc8af64e6b1b8316436519ccf21b2a8414f493efd374bc541a4de3a00fca1b9f48d113b235b657a94d9bb8aba4eee58d0802c1e10b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\158\{d58df14f-b8ed-409d-94a5-7c49df4ab89e}.final

MD5 0c93d244125f8056cc0a69a4ca53f049
SHA1 e35678e1a49498e40e1ed508b521e79779a6d25a
SHA256 f286ce18e4e82f60816536d23dd2b1708cc45a3d1850b132b282feb1d5aec4f9
SHA512 198952bcd97b9497f6cabd7c9dd6cf0b8e75416fe5a2eaea15ca1e30919b7219be5b28985752834f0b8d501b9d6f6b637ac799db078a16f1e7e95480dfedcf5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\163\{50270ac0-c224-4c71-af34-d1a534df50a3}.final

MD5 4281c6880b38580a12983db6afe98254
SHA1 052f3dbcc36e439f4f23b1e1b608d92ee8e72654
SHA256 98cdb9a3eef1764f2034497868bc60328364b1a414eba55860fc1756aa5f85b3
SHA512 6b92b3ccf7ab00db56c0cd6c7c180741e1a154be3cc04199b883e7c350a818a6b0357454116ddc86af433f3afd57cc8dd89efed7cd0dfda6c3d9bbb270dba533

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\137\{d354b77a-a395-47a6-a90f-eaafa8c0d789}.final

MD5 590de80c94ccf9eadb9c7d51be8e796c
SHA1 e2c967e833e34a61c7bbb2cacabad6743f3d48c4
SHA256 75b7670458b285925b57d33949d24b515dd8fe50466ef7e4a4cbd9a402f168d0
SHA512 d06068e443b20e3778c98441fd8fab3bcda4fbba3daa683e3e7c18c0de280d59d4261de63ef47ce8fb9a819b3c7f8d612f7d6b7c6fed591be25c19421ebd7a91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\152\{641d4365-3330-427f-be77-6fa05140d598}.final

MD5 c4e0cb3d3de8b6bcac527d2f0e5ed241
SHA1 2425b0c4ddb89f31d101257662629cac0c3cf0af
SHA256 3135abfbd2020a12ee327fd81c3739da37a6fdfc11d2032634ce5d33e916505c
SHA512 29e026c7ece58ce6c56d64073f3b0f6a008286edfef920973b7e399ef57f042780f8cb5a940d8654c41abe2a6fc8f60e4427d70fc285fa7fee5fdf473ae66fee

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\206\{6eb0a2c0-533a-4718-9489-fc706a9b12ce}.final

MD5 25bc26013ca16ec022cc26f5370c3769
SHA1 0b959045667e2ab2efb992cdfe8abf8d833ffa83
SHA256 8e291ff624d1139db9423256f8b7637e909580a54b8838c81119b12cc631b84b
SHA512 ed775d60df5dfa9d6fcabeab00e46d6ddd421f19c8de2ba3d1a78786cf70ddcd86e3dfce18519d916078a36a23f64e9db42149a4e3c26d58ffdd565f3dd9afdc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\44\{27fca51f-e402-4895-8615-b10b65db862c}.final

MD5 103a3bb224f38cac909b8f5719ac61fd
SHA1 a2f0ca0141add7d8ccf18e2cfb38acfcee45a0fc
SHA256 63f1c1eb498439212024b5bcc18287e503b28cf7d84c3723d153a78f1cbde45d
SHA512 00c640a963ab78076b97323b51f2a3e8fbcfe288bf3cb52c97d4c3e5cb8e62e29affc9f616ed35d3ee978027ccc9d8d23dbc9d7e78f48abe8dc707fc6fb215c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\97\{5bac32df-93d8-43f8-8425-8343dcdf5761}.final

MD5 1a840973aaba0bc8aa82cd789f229983
SHA1 dcdad762a070027acd4d167c919a8b12eb7cd4f2
SHA256 fbefd71795c1a773b199567dea99ea28a5bd85ed96abffee7e3f4c1cf6f57c6c
SHA512 871508335ab32879d045ed3309d52512edd03c69e3da9813de212b19ab3ef2e4939f7f108262f12bbcfb593cfff2f1b3774bf4a84076111569fba0f306dcb773

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\40\{7133fe33-d387-4018-80da-0a21bf785b28}.final

MD5 3642d5820ca7ce4525164aa44f5d6beb
SHA1 b8d4c651b067c3bd08f2fefbc9cee8fda03c9354
SHA256 9624b4751a170b67e592dc6b20f93a13ad959ca57a74bdd0998871414f05e512
SHA512 3cd72c8df0f244da5aa0ae250bb9ced273a45c30374864ea662b4e518dd03c6b7ff8030bbe1ae5ffd078ccb8b8338d43b7ee61ef7545059e87616c56fd3a079a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\65\{0a74f48a-caa9-4733-8db4-7c07e4615941}.final

MD5 501e302df1cacf7ffe388900064433f7
SHA1 d044ddda684b1a7b8acb5d9a887f1b92f77f10de
SHA256 baad1d86dab561f7abf009b62005456a15797550fd0dd565328f8c1e7e7c23ca
SHA512 8a75f975a60c979627e4f325e7ca6b8af17df51e425b7df27ea45ccb45b0b37b8ff339a7cb1a22108f1085854c4bdfe8694a6009a41df07ffd93aa7c6766c80a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\206\{cb3746fd-d74d-46d9-83eb-5347db449fce}.final

MD5 ff1714439da5865eda7a26d7366ecd42
SHA1 d05ac8350fa53bcb01c187b349b9c0b6cd990da7
SHA256 f2406a6799cc1538f17a8ae8eb0f6b053fc8f8cc37f77429de1fb638bbbebffe
SHA512 4d76e9d3676913d82fe7c85f4f481c2508eeb7bdc76f61507353e6af12c70dd2721d43d3405809d518f29b87c0cfdc1658ad688453e37aaceb4e6cb68669204e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\158\{32c174b8-5281-49eb-93aa-560cc466989e}.final

MD5 d53cdfdc78bbfa83f76b88fec1baf8d5
SHA1 44fdfb015f2e0ef773b74c91e7aa3084f86be4b4
SHA256 b60f85072330edde455cf9a62c94958d66793b18f461289da8a88b6bc0e29621
SHA512 07f7f09c3828e81d79f88d768dcee3d8f91aded0b408bde57daf82593eee49a1ef2dfde683b0aef1059031b5f9d701dd6a20673020578801a66555eef720f023

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\47\{bd5a9fee-730d-4c28-b23c-02946cedab2f}.final

MD5 4a514bed69506c494569d2de079a4565
SHA1 cfbcb0c9ef303e49adb4f8c85191593dcbdd95f6
SHA256 9b16a083b682783c5014b9a1f4f6914ec9399100e86fd5e56a82fec41ea96a68
SHA512 c2d81af256d7d5e8bf9b4c2ca467a1972aa625511ad0d63c5da573d0916b85b1b09babf4a606d94f6b79f3db26bc00ff8c4b08db485224383d487749881b88fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\213\{82bd45fc-97e2-42d1-9b3e-a4197365c8d5}.final

MD5 5ecad04347c2a8c59c4b6a885e947fcc
SHA1 ddfcb94ac1af832b6a831dfabd66b47138534ee0
SHA256 9fb212fc86221efff20faff19c616c41932108a588078ed6a6377cde48e81d4d
SHA512 9a79703298ad64b902f6a0328f6c80031f540a7267ce4f4c96cc33b6b9ab2ba23f1b190f0ed1a51da1ed7306dab020ef30f87331da5cd77d01789c5e8887faf4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\198\{ab0beb17-f528-4fde-a983-defd3f9f19c6}.final

MD5 5525a3d889a5f2b22309572b81eb632f
SHA1 75570ecf4e74c8094526263c3f8fcaf09d4ea87b
SHA256 82b1f81789c3cf58f4985bcf3dd14d3606a9bda013bc08501e36bf46c4fd4e52
SHA512 d1e9153d5da3549d63b5833648191ec199a616e64c343b2985a11626465bcb728e39a3a04b906ea5bd42bff8b7376ef1a26e65c4e62b689af0cba19487fe982c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\159\{52008264-db9d-476e-a7fc-411a2ec41c9f}.final

MD5 a5a12471c60b1660512fce9579675a2e
SHA1 d702b7183c27a6b08b626c9bba460ce0e20a7395
SHA256 2b8ad66d9eb14d6020cc86c9472a8d32859faec20e5bc971bbbe068753b378c0
SHA512 ec69cf09ef623b7971bf8a42267e23c4f5265127608a70d1ea8ee7a910982e075723a0dabd7053022905c9d0e44cbecb4fe2fb1005258fac9a0bd5a33f3b6014

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\223\{a78fe7e2-db17-4ce0-a327-71af7981e3df}.final

MD5 fcaa7f35d0b6f5dcc3edf6ea35b7ef98
SHA1 37eab86381cd122095b712d205eefd4c15ff49c1
SHA256 67b688b893251d9e52650b3cb720b6f8be62c6e1afec8ea4b223a8e975d27b1f
SHA512 becd339b63fb55676cabeed67fbf4e28740feca0995b8734a430359c96e14b8591d4242a526d920ac8893d9d22ac125288e8ae8dbfb0a0fb484ed8544774958d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\231\{d746648d-ee73-422a-8eba-5fa694bce4e7}.final

MD5 a5b6e175f5a577af3302c7029593adfc
SHA1 7b21982420c602f2678b28d3eeb7172d5c491903
SHA256 02240202d841f7910cfc4d17aebdef67a1084e704359fdf544d80dec3809a8e1
SHA512 9e62f4350403815e642a70d746bac7c8862238a8f108491f6e33031db7ebef4ce91a9a97d83f9fe9c15dd70333bda1229dd7d1ee709f964dd8c65071833b6544

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\158\{e4aa1b91-7732-4971-ae20-e04effd0699e}.final

MD5 3f7a4ebdd9e533cda0125618ad02dadd
SHA1 8f024e90ae75e5926e0f9d0847e2a1520b4f8eab
SHA256 3408ed8bd0781a9ee0576ff0ddf30150456e0fa59b40406b21248613602c1043
SHA512 6257799dd555ca13833a2320b10056a966f1f384d474cc66e6ead51a76b726e66ab64add92d9bf3a85456ec75b5b97404bf7574eab7d3e6090b8f60d2799c1ca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\121\{fd432dea-2095-4221-9293-24c473d1b279}.final

MD5 fe5981f30c81e299a4b3cbb8d54c236d
SHA1 86d257366f84c5da701ce39084e8bd6b54a644c5
SHA256 d94c2ef736a7e46e3c6da5ce1b0f4ae07d1aedf5de035104fa48c3804f5cc86d
SHA512 51bc339682768b4ab038325bc12186aa16836e7179d36ecacdc8b4559b70e76e7868bfbd1ae19af5fc35ee36299060166d5c4da74f70c0816849510f93e2a403

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\59\{3276ba3f-0d8f-4d03-a6ee-afcae3b30e3b}.final

MD5 ee0078268c18aacfbb32f121a2bc2902
SHA1 413487a0a575c27405b739fa8938a66b61a24149
SHA256 9718aa5eb454fe31d59fb6cb2d7bff3ba1f7e73b171c76390ed97b749493a85d
SHA512 2d776ef4276e4f8cbe7782e1aaa91d78f1154cafe818b8fb507e7e5f823c1ace750e8b2214a82448fe0d3be43fc25f1c15eb93d9198ca4c6b1962d19af45ccf2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\6\{d47ed5e6-710a-454e-b7b0-265a95a0f606}.final

MD5 184e8de5f2d1b10b1cd688026dfec0ca
SHA1 dd632464c3ad026e57bac8efc3348eb7349dad84
SHA256 e3aaf869118c6db298d843c5308262f88ce5ba474d88e7043badfdea4471c93f
SHA512 e3495544032b7f6760967b0ccf57861ec5454bb32e8f5f7d2165fa63e6ab580e278275a1f719fa55fa17fc0a3aa9788e15ba60ff2ea0e25557f0160607066143

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\252\{1152a3d5-a2b9-4ea1-afac-6d7cc517a7fc}.final

MD5 41d7c0ee3ebd3ecf60e8f06238d8976a
SHA1 313d08e7b04eefdb0ec87504462f522d7cb94d4d
SHA256 7b48b7ea9af7535de272491304ba8988db28c4cdf0d50c800e7d461666e73efa
SHA512 9619b290dd7e07d7a4d9768ee35dd564e37f1b0f4357bd2cb8a39c1289772f275f23f260114fac395974f544ff70efc168285a34611f40950eded0735d2ca6ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\26\{0c8d6d8d-df1c-43f2-88cb-e252cf161b1a}.final

MD5 18ea68569ded72b5f8f681906febe6a4
SHA1 5797e923cf4e23b0c5b834923ed11b3fd101ebf4
SHA256 3f7e5effbbc5b1d293c34e82334eef3f6f20195436b46a97c9322a406af63cc6
SHA512 e32bfa8081fcb47042097617f10454358b0fa206db22cf3d4ceb09c7134ca97c4cc3d8d283e1dfe7b4db13c0254ca9aae2fc2dad38d50cff4375373d76d9e060

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\227\{954857d8-9e4c-498a-a2db-fc73304dd0e3}.final

MD5 a601665adcb4c6be23f3f43db3ecd713
SHA1 daf1dbb4c74201e6e986283fba3603b508d576d2
SHA256 38f281885066fb223a840e11199c5fe053ce470857cb8ffe5fdee25e226e2e7a
SHA512 b60b5afbcafcfb4d4751dda855ce4e40674ba635a28dee30b9ee8dae0cc1a751623ebcc3f1657aa1e847ba317dbb4bcdf44e73fd68b96ddb9ebc3d0a73bb5ae8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\30\{aa0afbbb-1602-4a2e-811e-2bf54c31dc1e}.final

MD5 31f682f3d011c942f1c41b7f915eec10
SHA1 0163e4cb475138b8f6ef221cf0bb15055f628f4c
SHA256 00392c87ab0206705a7f066ab9b2cad308eb3b2d0b538fa535d053b0c662c48a
SHA512 da32317bdc01471cf7fe107c80d3b69646aafbde3ba9ef7d4fc674c56034d78dfc08ef33d8c133cdf198e4ce265625c8411cd85b2cc6d57016af360129db733f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\202\{40149068-767c-4bc4-826f-0324410ea6ca}.final

MD5 b0e3a03d13d45c1f130df30ee51eea72
SHA1 ed19adf38b3978300a958e5287546be08c8fb371
SHA256 ab156c3358cd6b946718508bda5099c8cba2e4583e3d03fbe0401c0e6f20e5e7
SHA512 3fa2fbaa7f78f69d0df8e3b8211ad56532cb0a68a9ac89c37fa5354fce51e114babd0673f2f44d109fe2e518ad7806b7ff3040a840e3099be4cc5f6dc07f8154

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\120\{8d744c05-203f-4998-adb2-afa324621d78}.final

MD5 93215d67966bcb26afdfaa76aa00aa91
SHA1 aa3252645abeae4e228d6595c93d829afad380a8
SHA256 aaf4281ab5534bf37010c4e3ed86dab18a9f4cf8185f85ba7b0e6ac59c844849
SHA512 52df1847b0b802417b245e1fd51197349639fb25ece34a48003120b2920255b52848b3318f0f9602f8d8bf22bc7e761082befcd21b9d06b6a1e882a23f8c9ba6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\119\{4292213e-9697-43ea-8e1d-02ca2206ab77}.final

MD5 8d9443186ccb116d608c8970023a6c4f
SHA1 c280277c0344161167dd348d9267548041e95124
SHA256 70feeade7e05a69d4604df99cf1ff6793f7aed0879ae06b50a69b86906a892bf
SHA512 66240fc8a36102b8d3cc7cf157dc80981bb05ff707efa775b82ad6219fcb72fca9a3c45f30aed6147b222356a06a9b4063c9967f41f1a246735d68bd502eca51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\211\{83fb108c-3127-4564-9e77-68dc838c9ad3}.final

MD5 9d8bbd70725c7ef1461172bcc4e85c13
SHA1 a4c4db2ae4f58c81ca1de7fced23b522d6bb8f73
SHA256 4fd302f56fcfae608964aad2038a1570e38e96b82d52d590387ac91915a8c8bd
SHA512 fc90e23b5e86c1d6aab537069159ce5eeee5068817b6923bcfa33d93e54358fc38c5dd8ec4638b9eb5349da1fed4679af0159ef958cf48227efb14dd67511811

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\119\{3a59d529-27d7-440d-85c8-ce3b33ab5e77}.final

MD5 c6993227cd75c082eb25aee8332d888e
SHA1 a2e27914baf9a1a4b8579506f419bc7167dff937
SHA256 75c2bda8599570de972a83352d94cebc61a2bf66c8470a0461f0803c59dd8223
SHA512 bc37854e6471273085bd3ee362ede016fea6eaccb11194f749c3a092bc803df07c7dfed2d0a3fa538cd447a21d4875f95ccac3ff4f278c96249e7110cb968b39

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\177\{48ad659a-4121-4650-b7e8-6badbcd050b1}.final

MD5 f5ec5b6fdcb0fe6f76aca19310305268
SHA1 46d30ca75e110987809f6cd78f52b5cb35302754
SHA256 c9f94f5a2384b5a253cbc563cae021fb1d15762412fabef25d90b4f0c60814d0
SHA512 d22ba260c9738129d976df698208c8cc7a9b70dd89c0f81f995f0105940a2956e3097adfd2c300c94387ebbff54af720429795ee1bf4d81f3a1b6a6cc666940e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\60\{9bab85e5-d0ef-4b4c-9192-94a05ff7193c}.final

MD5 c65b0ec9f20fa9e69df1fad2b2a28e33
SHA1 4449fe9d195163e22a0b205966b402058d9e8bd2
SHA256 0500a3b5295d9ecac1151418dd4279da2aeda76e2b9f05ac56967fcb882dab01
SHA512 19a870b77f57e555b2d67116dee5487e700bc64ccf689ef98fa0e54fac162351127c09523f8e8d9a3c3587ce089b84eb5e81076486dfbe93171843b6360f5516

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\53\{b80c0974-92ac-421e-8520-fe2debe76b35}.final

MD5 32355676adf4c64f1fe47b92f9500b6f
SHA1 cc2a0c3f0da02c1a1ac32a3a5ba417010f89f73f
SHA256 f4b28298d53a353c23a88b0c82002f1036c376d22154ed21630a8c1d04e2a841
SHA512 1945dfb8bf90df999cf7aaed9c881b2d10df4a3550f2bceaef655b2379e79d8128ebefdcd4f37705c7b42dcabbbc4c25dec1c1f9559f4e727c6df45f769a2f95

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\83\{7b91adda-7012-4089-86d5-e8121175e453}.final

MD5 004c0529776665be8335ef4beb8d0eb6
SHA1 8b1fb58622c92f0ce3e490bbf21b532818797f8c
SHA256 493593022b630c1c1bdfc20479ebd34465a1bc79e066b04f388c6572375b0005
SHA512 6ee9bb5cddee2ae52ad1d3f068d08011ca5696975783fcdc816c0e16dd27c87ec0957d6c4b63cdbd76664899fd8f8df087db375a5eaca8b9d494430a6ae09efd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\75\{9b71005d-80ec-4f72-84d2-c262ffa3aa4b}.final

MD5 bc7d8425fe4aaf118642e9a60d1b764d
SHA1 7456f9cbd82c691a2832ca856873d8e00901fe1b
SHA256 0ef51d3deb46884c157b25b78667241a8809dee794e3402c07b3c5fe972c1d92
SHA512 0a2dd57fb2ea736faa79c3127af31ad0671a06653d5bd152597fff5275c38d816ad1633cfee6e870c2de82aaea14a976d627fac4458c688d3650ad8197173301

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\39\{d5faf5b1-3aff-4dab-b83e-1abb022dc827}.final

MD5 b6c6d354eb2e7e52adb948c0366f0053
SHA1 d7f4586d41fcee9be681c70bf002d36f6d2ed624
SHA256 8383e636c9249a611493d7c83a9f02bbc0d9566d5d3389d8082ad6042271ef28
SHA512 9a08680e4aef9e54a24e7956858ffea9871f874966cb36fef70b5e49f6126b2662c443b4049a3c4d74fdcc00c83d3af12072fadb11a96ecddbb87280a0a2303f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\70\{b28da464-ea05-48df-a50f-940bc2678c46}.final

MD5 253a9d7dbf4f2f8141599d38f58f86ea
SHA1 0766863065b6c57e98fb00fad0e6d8ca1c1f6aca
SHA256 fb659afa77a61d064962153784f63ba71e453e597d98b770c02aa31d1cdfa7d1
SHA512 379424e9196ca464ecff6e513cb32a296a63afa9fbb8d19561d0ce9cac304440896f4efb71956bc781cc51eedbda4f6d0e588e075ecba82e482ea2bf6aeb7371

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\200\{20a4b726-a09e-4299-b94a-43e78e1ccbc8}.final

MD5 7732897c3667adcbaeb632ed111b170e
SHA1 eee532cc36738b7e586c193db814a088896038ad
SHA256 ea06cf7afba50fefdb6b8ef1a084dab27ba0d9b578814b3b79eecf474b200b67
SHA512 08a7130e9b36e13b2cf41be54a7eef19d209c494d177dea1d11e2e224f17a611c649683fc5b49976e244dfc4d91944ef481fe1cbe08d130126817180b97a0717

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\218\{a0ba94b3-da85-4531-acee-05dfd6aad1da}.final

MD5 50af989865f9dad63f573c5f2bb66321
SHA1 91c2c613fe2faf799d1916e3245c8f7672926d28
SHA256 d36552977b70782f63c9fd0ebbadce131eb78616c7c5f0e0274746cb0adcde8c
SHA512 074f69af44958bf010198bdd2a37272d30da53a22d58313606f5c1f19d67597b98c6cff376bfebf63e199f3965bee93a0588cca0ad70a8eb9e9de3ad9afe5d29

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\43\{e89c64c8-f185-4137-9d3d-a6644e5d782b}.final

MD5 830028a05fd627d68ab70e41825f7f63
SHA1 721199e2f117990f999b2a41d91536aa4790fc76
SHA256 d7f263bba51f160914640b1310d713268e564d9bb1bbb878e67d442589edfca7
SHA512 7af9479e45a89cb49053df5657133a83b86553cdbac5be5fa18ed069c111021ad7d82b02404bb3c35b9e8dc1ed66c3c05bd8a5e8afd4c0d66a598be3ba24641b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\126\{84683e03-ed0f-4f52-9901-44c93de9917e}.final

MD5 bca3032426d23daed1b2d997b7bd5fad
SHA1 76a4776fcca6e6add4773481b6b3a82a7c3f5a34
SHA256 41b63a851c63d3c6ba8bd92548013e1a472973011f0be1b95eb2e29697b32b34
SHA512 67b6c14e89be76624f964eca71653977f3e4c5d8364fa9e008a6810efa9d0ba359aafa79570278bd80e57b6e31820d27dda06a588873c181ee96d8c868c4b822

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\32\{6c4da305-5a80-4ed0-ad95-8c1efeeb9120}.final

MD5 df74de9b9890000872199833e120bb06
SHA1 9514f328171b10d04003469f6dc8a7a4f7daa741
SHA256 3756c1dee77d8250d1431077670e560f38dd9081ec36fa0b5f7f17ad58aa1f84
SHA512 73b313870183d2fa4ca5c38d2192b902c7a79796af1fdbe5e64d8b2d212d2ef85d0bb57f2ba486ff8610f22a9e952bb15947289107ac0d1d307c00015f4baed8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\218\{257718b5-a0f9-4c80-aafe-9ba0ee7f5cda}.final

MD5 2d5401040d875e10273c9d8ca9fc511e
SHA1 79ba0a97214692e52090f4d2063deb4f20ade88c
SHA256 31342b78121940f85212b9b664588235affa0cc7fa398e80d5f3914ea12efe88
SHA512 b82ca313bc8e3daa966316e10c8303d144aebce1c00761df10790b93113b6eac2ebca429f099d88750427dff8de2a7448fa470e5cc2eb000c7cf71ee73c3edc6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\125\{3c9c5cd0-8cac-4044-bf06-bb1bdcbe287d}.final

MD5 b719a3c8378a40cb900349ad2a922921
SHA1 10a71eded94cf7fcf70bb4952a35434526264e88
SHA256 7d6082dff0e7a043a631ee1ac1c1e094458d7f7607d075db809ca60f531539ba
SHA512 5bbfe366cc072b80c4d35c45ec91c4ce60a6f5140e6ad7109554ca3dcecb765336ffe938bf490e99c8edddbc3571d41c8e2a34e1becdbd9adaf334b15207e167

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\25\{3c2c302d-2ebd-471d-af82-70c891570a19}.final

MD5 030dd07949fee4d5e67e6885b76ccedf
SHA1 a83002727b38d84882fdc444a3f5d7fd7963acae
SHA256 95c8349deca56128ead6daceb682594a737a5af8a03b70065e1f2c6c4fb84209
SHA512 f094815a8ed89bb7e6376238142cc13887694fb184d9ffffdac56b7fae2bde2ce7acf3d50c0431d14ca2e03620526cc21bfe1b6c44b467e079e30e9dc3a8e87b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\76\{cc5d254a-ee22-4daa-be29-c4f3e8f6e04c}.final

MD5 5a85b3ec969004ce7b23e6712c04860a
SHA1 dad284278108abf777290add4971eb92142d52aa
SHA256 bfa4bd5ff49d8418628f3a3c0da5b6d8a95d5436168b9482d6de954c0fea74b5
SHA512 37d836d572226967995b3f20557f98e4e55b89c08fdfbddd4dc45a6d4ee90a24e5dc8276d0e1971d7b366712bba3382086183e1498b006905169b758e44394a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\cache\morgue\189\{b84404aa-5469-4404-8151-652a958475bd}.final

MD5 45f12a37d9a30039a5bf82ba808c3f9a
SHA1 48e8131f0a1972b1d541eedada8a4708ece7fd0f
SHA256 b1f31f72f318c40888573ad87ec04084d4cceab616cc437e38e7dc167ae40346
SHA512 c44ed5653c8b211c20e54b5b803cbdba299fd5d5d4902cf74a47cc41dc430c37d79e95b90749ceeff01c6a36318e8aef55cc630ed7c8740ba976f350afa4fbe6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17949

MD5 5c3ee915e2c07ea6392917fb6d083f74
SHA1 77977008ef6cc0e3d4527060d643bb0226127ea0
SHA256 6886ad1528c1ea01930a6b9645a1305af19088e8e0f3f99390962148c7ba4779
SHA512 0d45504e95c165a08d1466e90a0725e7dbbc2ac50602eb2bed2ed92e19e9db49d3001880e8ae800c416416aea0a5c6a2629e29509b066d1b5039c6354616d487

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\idb\3211250388sbwdpsunsohintoatciif.sqlite-wal

MD5 1d6aeea5ae154b64b169a5fa3743041d
SHA1 14c4de99d6b3319e284e61cfe4f055c3bbab3519
SHA256 bd71a80081ef1fe6f55491ca7f7608d6ccad09b6ca681e3fe04a0d29877ba77e
SHA512 c0661f29dd56962f73dcdd99a0c52abc3b492c4aa9ef1d8db68008c4712c8a0a32131372cfaf7a8fbf1379fc1fe64a0a291db227a5d95e7134ff1b611f695b44

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b7e7b9e194ecbb7499aaf41a851cfb4b
SHA1 03803a1e568bccb61fa85346012531eef4adc78a
SHA256 9a4df09a1b42f069df85de60ba8e42dbfc83d4f13b040aae3465c9d3446b05f5
SHA512 8735302c007ee521d4cc92ef25f8707c2f146dc997a8c6561e54ed55221feb74bc3c6a27ca70c03e3f6a689dea936d7e93501c6bed8fb81af6a178f27aa29e6e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3b2cca1030729544f15ced1aab6cf887
SHA1 e3d5d8cbd0d52fcf4e05aa707f15933cf2e06237
SHA256 115a2d3e7c6c146b6c45e8c698a69457bc165530bb9a93a90623179bc24d4125
SHA512 ab4564fe28ba4d1eec8846d1574523768828fb496b77fa83df360e491f247795d9387d995c49f902fed0fd696180960641d17ad0fab63b1b5ec160e88667040a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\idb\1394358966yCt7-%iCt7-%reeds5p1o.sqlite

MD5 9069ed680075861f3308fc12e49d0f5c
SHA1 d946182740f1d7da9391b2b886b265b73476039d
SHA256 302b33748450417a4c4604a77499add96e37e6bcefe61bde06d352b0ed0c98c0
SHA512 09fbadb21f5a0aa234542cde3bf0da65620432882b056a4ff6d495ab130ce08990f2bf690651cb070e094da0cdc5cd27aef7b8107180b7aca7fec003ed43f212

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\6500

MD5 8ccc044fb549d9286157c528197b2118
SHA1 c548678be720498f1c210f4533b5f409db2b38c3
SHA256 2b9f5fd3e3243206aaf24464e29e118a6149ff40c22ca6fc57ec2f2b50e72eb0
SHA512 ac11bad1f20041f5984cfdbcbaabe58de1f9bb06811890dd0541898791143d3696a73251786ef4b349f8180ea48cfae4031ef32275ad88c0b1183aaf0407ba92

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\idb\2373857303LCo7g%sCD7a%teadb5a1s.sqlite

MD5 b275332c00792b2d8feb179d3d70cbd5
SHA1 76772978f3fe3229b92ad8843db33294ae744944
SHA256 579087c54f0f935e5fb5773515c86a8bf15293d97380de8e51c67c69418576a9
SHA512 12a8e11da5a35d04c2fd2088de44ce94f256280037460e738b4ac6a915901113f0a805428928d1097b548b602062b689f2786fe1e8284ee8f3ed7897cfee3f88

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b5f2db5329b1c075dc13e342ba7aeba8
SHA1 e53f7dd926af526b3424d9465c8d5302f5bc8f86
SHA256 bb1c8f155ac89d27ac6dda092f3e84d24d91a7002c60d650d5a7f8d95ecf9445
SHA512 ca2e5362a04b2ecc2dd1fddd722e38d14b3af474bc46f6c4f35f997838df52efae9b90413490abeee55e228988dc2874383b18ef46126221b9703d9aad13120f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d1bb3fde1f287d40ed305fd19a8276bd
SHA1 86214e519a4f404be01cf6bdd2cfaa0a78a78cde
SHA256 617996fe8f6d96f29d8f5d44b404bd7db6839a8a3f055edc1bf66ec96d288ff4
SHA512 2b7421336a010c7ae7439f0464e95917cf74900222e2699227b47a992ea38367f14c85118380bbbff3332c8b55c16e947be86971c27ad177ddc29f8a3fb2d0e0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 11ece6261a9a0b1a2198c1833b2f8928
SHA1 fbcdbda301f862bc3a3db5768b22b43f3a95e7b7
SHA256 52dcedc0b7ea771233d05de0c9f22b8289fae147af0c6e3fd05cf7fb0e53cf0c
SHA512 049292ce1dd23c562874cd9268dcac748e9f92766ac803eefa8d203296af595ef09f6e2ffb26ba158ad2d6d95a5a6841f9977765d07bd94862ceefe1735a9f02

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 72e199aa6e63265035c7678a92d2f1a4
SHA1 58d9969f501c970264eac672c445f64094669e17
SHA256 9d1840a7fdb9fb8d0a1f592c9adce1c6cf70a6d80a69ca8011a38281674c260a
SHA512 c69d6c51c900f42f4d71b91fa80aaf91474f0925b6e43faea26c979cc3c228f560c29c3fefa4d3943d973d8f2c154008652f06c62795477b602927cef929fed5

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\19082

MD5 40449409dd682e5c39a9f98c32117f57
SHA1 a88d151db225bfcfb3040d586994c503b30c5187
SHA256 c5ad94948daa5f65abfaef53c2c8875860781df5313996349ac034bf733224f7
SHA512 c7c8368160ff7187ac66c0159bcc199fcaf3d0ffeb44a12165ac3065b233f7c4c12fc4d4fc49f8ab731477eed03bfc29d07baa4b330699f809acb27456ac0b7b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d76a920fab12355208d79e3645502a31
SHA1 a37fdaf6f4cf631b77ef1c048791b748a126244a
SHA256 623c7614d50868da2f261f76d7bd35b77d855f5e5586e2fa7868e1cc946c9946
SHA512 4b5f291d30231924ff936264a9f05cc4c9c207c82e2fd1f7a74cadc4db8a0c4e11b853979a75f85b82a5f36bf38dffc866264cc801942941444bffe521cec357

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\B5E623000B7ECBE471EA0A93703483A196FE2011

MD5 cf968aaed0a90a7cd2de44c536b4f491
SHA1 edf07813be7ef24023396ac39393f03489e49974
SHA256 4693e0aed29c65f57965d340e44ef8278dfd24dc6a4bb6840ad8f8b9e36d3e9c
SHA512 8e1ddbce2dba2cc5de20f7ac7c769472088879c5cde97d9ee94ef950d7e5a3353dd9829f6d2d85506b71836947d78ca964ace14effd0492e9c51fc7a9ef98a13

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\15051

MD5 4e104329dd6d652606a23e965886ad3a
SHA1 a7fcaf60698c3a94de093c870894f96359720d25
SHA256 abe96f9574a2de4093cf6d3cbb1968167b9f9b09e6c23c213e27a22c06d5534b
SHA512 c06b0dddd7b95dc320127adf203427a26ee15bd36b558c6833c8020c1531546ff8da4588abf234525df3dad3c8a9468ad61bb77eaa20676895046f48ff7cf38e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8224

MD5 2b6348024f0dc4cff97d4d464b73da91
SHA1 28a7676da196c1f1c22874eca8ccbf237415671f
SHA256 804b0c45e14b93adfb2ba19f442aa5bb2a2ebf6a2bd69c77e2473afe20ff9ae1
SHA512 68b795df8078eac8832b1fedac021b76b843bbca0039dd49930540edb0c6e048923abed1e3e0582b4441b933af2633da335967442b65884c1c4f15a3ebfde9b1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7a3f2bd3b9d83599c883ac26059c6049
SHA1 37ea07e51946dd9242331a3e906ad34050458534
SHA256 4b4a2cbd9546584b1f766db1b488064613cc45ed4b28f39f67541914836f206d
SHA512 9c1023c9a69bed5d22e80d410810d6ab2b51f1291088634a35bd3e95ea04f7a72c0faba40f15931add4ddbda9d60822901a830e196432b1e670f94aebcb1a271

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\13EFA2A0AEBD2083A85C899358878A2DC2AD7C54

MD5 8505dfcccf4372293072a049b16199e9
SHA1 df1cca66a062cc6c8eb49dd585ac705c3cd8ebb7
SHA256 ee4212ac559b225b431e73100bc1f2ee174707681b7fcae0b94e29ba8d44fa94
SHA512 21184f34f8319f43efe342441f6ed67ef3d45f888627f693e668763d97dc81094d30dcdb37880006f41ee566782d50db6e2aba9c056c9c3d17285eaa3710c4a2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\31636

MD5 a4c05e9a0c9761f6fb92855c03ab48b9
SHA1 d4dda6ce1a0d5ca89ca9008cc1ff305f3bb727a7
SHA256 b3cc3282702e3c631a0e8028deccdbc09c300e7d6566bce9b66cfcaaafb1feba
SHA512 30fe44b624a14f1225e8070fad4a708157d610248a43d1c763d2dd11fbc0d8d0d7592d1fc5c3e6eff5f99d751c0c69bf59c72ba9e61bef67b60e9466d37c12e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17250

MD5 939a622aca3473325cb2421b80b9f580
SHA1 f515068f540193059a459ed3350b2079a168ced5
SHA256 ce1e91a84f0b7a037fc65425cc93b28fd1bcabc5003d9d50bc162fcdd0af5f84
SHA512 815279f83b50c7e8c7c5603d3068de0da3082302feefe27301dfc9dc692c8eb23936c1eb008d651b8debdfc6f8e2972a68ded0f8938507a1ef585b3b7a8e1fc2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\27271

MD5 ac2e6b0832e86d5a4c58a5aa69739cf2
SHA1 944238caf8df3adf7372a690c79f376fbba578a7
SHA256 813d07aafb15c670adcea33a07850abff2f703261cb2286661346916a13c7a35
SHA512 f9634679ae24bd93daaf89688fda93fff8987a1d17f29623b9d0500f2829f2933704086d2d08051db4b0e75001e82f44200aa2347af76e07c8b692fbfafd2134

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8812

MD5 df9db383197a08b44c1eee5683ea6abc
SHA1 20a34b35b28d0069b552546e61098ae8b395c200
SHA256 69f07985663e8ebd43ef74b7cab79ea0b65e63d788cf174ad809930d4a14b074
SHA512 d443f3b8908464e7c524ab2ed7ccf290a99ae70559e008749f716b38eb09393945d64860ad34f97a1be603c8d86db1dbea526e1e26e2276be5b9d0357c4b44f0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24006

MD5 1016a3895e2bfd95179bafece1b4845a
SHA1 4c743dfd8c668ecb4a844552dd8bab41bdb237c0
SHA256 6ce1c37b2bce24819f5059f2e0c056541e0a7a54027d7bf2f869559ec9863d0d
SHA512 ffe8b03f3572d139a17612959e2b79e1edd429e0399a824249e276aabdccf4058dcbd7ab794954e649ac841a05a37ae7a6c23a38da5dc6bf78e1d8fd056beee3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\14917

MD5 c57059b0e381ce9e8bb6fa3aae1525d7
SHA1 00086f7e21ed9b8acb5277ca6305e713b49801ae
SHA256 92b6c0ee6ff82d2d5b31cf750d30c3c1aad72290232c4a4f331fd0805da5159b
SHA512 c558a0364c8fe0c175ee5ffd66676f987efb9028da3784300de4e6d20f8ae209af02b8496e6173a875a7ab439b21a176bb97cae2bd172743a35d8020095078ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\5267

MD5 99091a5dd488d824ff7495aa831e5d6d
SHA1 f64fc8cb9d31c52bf35f9c488f093ae1bae07b24
SHA256 68192f07553035f2bac278caba51dcefb6c7816ecf4a518e62d99aba2d5d2ffa
SHA512 49d3e9e518f7b84d719fb72045e695195bccc1a8a15b8d5186d040c18c32ad8c37996434bcdcd2b836e436d0a9b83848184c47c18247ff2d491be03a8c3e6c56

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\31504

MD5 c7e16b25363f203268956e5b7ac5fc53
SHA1 8ce8a5677bf0b0a27a00dc787cbbd0ab74911f8b
SHA256 d7c854dd3185a284f5a974eb4c9fed62c0f5ff4630f12c22578273cf3c9058ed
SHA512 d850fdde4ad1363dbc7259e4119ff4ccbbacd5778dae4d5472579ecb8cd948f75ad535ea0d2d3a658468d615cbbb5e30166b51eb911c7388fac54d164bf28c81

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-26500

MD5 020f4615619060521e3b6e5b5bf4e148
SHA1 bdf6b842253b6e56a544a877450513f00095f2c0
SHA256 b9645828cba49233ccec65d4141c44f80b2bc91ab49efdbae2610b3d0d1817cf
SHA512 6651fb26a95ec549ff95d64188f27a6908518bc1b6644151a4b46c279bf52e8a7c5a17ea88ae40eff1caf961de0551577131f64b634001b905e685774b388850

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs.js

MD5 7276d62de5bb3f6ac8fde3d110fcfe7e
SHA1 e8520cd341da1a818f1e6c1c30e259e75a86c777
SHA256 6f06ac4cc47eb9672d000f759ce37a8559f078daca431aa332e9784ca3938e65
SHA512 09ec2ca43a08baba95139db1fac0a5b1497e8e6dc7875802ef372c57f0e2e86fb190d581ce51a86da6aa70a3ae71e73ff0114a48d45be0c0cf65d1964e53b078

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 e6cd61f2d54647f88ff2e5e1afd8660e
SHA1 f6ada5c74b4bca9601de35c4049087efeed478e5
SHA256 461cf4aa3c693121dade77b3191ead6b88b0714350a2626ee0eb709f171f6ef7
SHA512 020176ffa8e624ac9fac89e149b86e8743b53ac935979f072c95f59ed7b4f6542a4d60ed185577dc5215f1a8b8718d94eb48be8e17a918ac1cd45ca02a758be5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\055BBB905A5045D20CA3FAAD45FCD316C5072EEB

MD5 40e9d2a89445d610c63c66774ac34a82
SHA1 07936b29e71400b19a7e42b27a5ebfd61b6df6ff
SHA256 ce8be8a7b9d04ef312116e05f695ba635dff8f806a49ed94845ce89e909da628
SHA512 d3b20455c59ade6848b50cc2a46979ff0e92390e477aa7a46eaea87f11f3b05e15e78ab5e23e8b5e65a999b06cb61496bfe01caf1ab6d21bfdabb3c7f88029fc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5865bb9199c0e3efa43d2a3b377447f1
SHA1 dccafafcd278ac4890575eaaae3b2301d911ce98
SHA256 b2a0761ac5cc1781f6e84763571a9aedd59d840b62dd2640dc2125fbb5365d7b
SHA512 67c6420dc4fced8c8996b01ad64582daf0eeb9df0ebcdd132a1922088debd7c4f654aca44f2fff67bed7a986e39bfd6b168df61d0059e7e2fe7c536211b74ff8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\NE0NDV9LNUNCUHGR0NXY.temp

MD5 53cceca56ffc9f3163323cf2f54eb032
SHA1 eeecca91ed341767398f3649452fa0b28aab7ac8
SHA256 898cec0c3f160fe8932ab45d1ecc826e575c48f681d1d338c8aee70138c23b95
SHA512 a6957f3ff30a2cbae9bfb88eb5f9bf39c53cd97da430e63ce35fb3e50d49df196d25ee635c80da2841bb6b0aa05f834372e31e1acbd7ca0d82265c0c8ff54e82

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\jumpListCache\Cm4DQXOpxxP5pXgqDPJtzA==.ico

MD5 f874852d50337d63834783f46a81e33c
SHA1 7802aacbdbc68c3e9efabfd90022ef38fc9e44cd
SHA256 21d54523be6772e2a59fc6422b968200d9b55b4137670ad03c9558e62380c966
SHA512 a1087fba85f1169e3ae79615e083ff469b0f212ee2b9e8b47f28b7166233d17424fb818be64ba45beec8d98f3f652c590019bc6310c9f1109cabe33bde653ca3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 21da924af4b6e11422b3dfb1cd50af7a
SHA1 ad73bd90bf64d5ab174a705f1b138dbdef9f43c6
SHA256 fa277b40e66334a4d05a23e1c116ba1de3c836217d731447bd11b4f8ecd7f7db
SHA512 2fee49b3ca1b07a444354f99b7f2f29f25112c5c5da9000d25a41a92798693de76f63a7a58eefc7060d73916b4f6a01847ac7a9ff313c6ed4cfb81d91c1d2e60

C:\Users\Admin\Downloads\winrar-x64-701.6-6tg_ZA.exe.part

MD5 cab7ab039f89b8ae3020c446c7fb8625
SHA1 f97b217b1a3e98deaf860d7038d46cbcc2d01d5d
SHA256 f8e312a18bfe61271b6716ab7d793df67a7f116aec32c60bc75630d000fb653c
SHA512 b796ac2ab0d6f0cbc96fadb5538283326ae2622c277f0c8b89be2c50d9d6a23084c6aeff8dfe5f41606dca97405a79b781bda176ada299ec3b1f91ebf500583b

C:\Users\Admin\Downloads\winrar-x64-701.exe

MD5 3a2f16a044d8f6d2f9443dff6bd1c7d4
SHA1 48c6c0450af803b72a0caa7d5e3863c3f0240ef1
SHA256 31f7ba37180f820313b2d32e76252344598409cb932109dd84a071cd58b64aa6
SHA512 61daee2ce82c3b8e79f7598a79d72e337220ced7607e3ed878a3059ac03257542147dbd377e902cc95f04324e2fb7c5e07d1410f0a1815d5a05c5320e5715ef6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 86bb82c02e86fbf497e804c89b07a008
SHA1 d201fc11d87e028fc8c64e36e19ca8a055f1e091
SHA256 d8308857eee751e1c6d6294c64ea7fb8ecfd5c1f11f70b6c63a3e9589a27ec5b
SHA512 06cf600657b030d080dfef655de9a0c34acc2e1f46dea9ee2795c2c79ee446dbdc711de9dd8734ea4293a9702cd95e4cb63573907ca63a42e4b44884191a79fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 61fd0e9d0a89fd973ceae965eaa9d24e
SHA1 96e7863806e98d542a7f1fdf6550bb62f41a62f6
SHA256 317a65902b3ddccc7663b5fb87d489fc225bad5318ca3bf2220ed0f495ceb1c5
SHA512 97436958cb48d4f12d3c79ca43b7dbdda16aaab537b1ab36afd99eee4e522a8b3159f2e2e697ce80e96dc1e4cf153925db1270f8589f653b3a98e2dcd96e080e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 942211deeee95136679ec112367da7b7
SHA1 cf2f73c3d8d5136c7156886a61cc81b3cf998bc0
SHA256 f4bde246f6e2304d7ee8c3fc188f0e931a655c982b86b624a19948e16fd5fb03
SHA512 33e878b245a38356ea83facd359cd3b0a8a5f6f20f11a87caf897f28c7c5c55fbc93f7ae95c9d589fe0b907f36bbdef695077572c834727e25874e68c840720b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\79B0DDE3FA8DCB1BD2B4CA2ED3EB8F3088226A6C

MD5 dd4f74eaf31e3da9d0435bd511d2ae1a
SHA1 651c862ddc7e7c8b703de567f8fd232d0d11889c
SHA256 074e97aec079dd564c025c21e8f50c012eaf2a82bc75791ca20a7d3ba1335a70
SHA512 664cf8bc8425e6440b59a9ff373d98bca37a8a14a55baa91c283c67f464a1bfb9b4f7c63c4e370b568de848e57d68c5e835f85c64b80e7996cdd6ebb098a4f83

C:\Users\Admin\Downloads\winrar-x64-701(1).exe

MD5 46c17c999744470b689331f41eab7df1
SHA1 b8a63127df6a87d333061c622220d6d70ed80f7c
SHA256 c5b5def1c8882b702b6b25cbd94461c737bc151366d2d9eba5006c04886bfc9a
SHA512 4b02a3e85b699f62df1b4fe752c4dee08cfabc9b8bb316bc39b854bd5187fc602943a95788ec680c7d3dc2c26ad882e69c0740294bd6cb3b32cdcd165a9441b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b4fdd23acbdb3cdcbe17c8c084f98a18
SHA1 60a752a64165df2367afb929a88d0916ffdc3f98
SHA256 2c9bda5740eb45da16cb86cd60f9ac58d9d4a7f2e4b44ad43055d708f5e1294e
SHA512 45835aede50de139db2ac34108c4e4c1e33d9996fc00364d346f4e24051da90919effa6ebf4e492573e1980e538ebafc89741a71f9c4508afe364018093614ec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 72d2d75fc560d665ad1cc92452f1e737
SHA1 0fb5322e742b5a3aab42f028036115e92ea753e1
SHA256 aa0509369c7289e10637f1e211469724d33a3a270734e72df7ef0ede9e363daf
SHA512 eeb3a25182c8bfd33c05cad98041dccf4474ffc3bc1791386231ff310452e28b619fb774d460d4fb258999f0512d5c9eda2171aadce7a4530e029f02c996d2d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8527

MD5 598c0c5c28117f27adb7ee3aeeec2398
SHA1 969a7d75159f984908e6e22ea6fa2f91308af7e7
SHA256 fa6deb1727641763e5c8ca7e55690c15ef0e89473a81fa7f9d73b8627125d5b3
SHA512 bb0ca67aa9ee6a6648919dafcce8779b0699be655aa72a97ce31440c172d57fc9c0cb04842ee23cf4839c9c125273a77c075418dab099edfd0c8bcf8bdaaa288

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\84521F87A67B212D786971864D13B946D5EAABF8

MD5 4ba79d4057b82f29c679dbb0e1ef20c0
SHA1 b8fe3ba5196158eacae24af4395989c00ea4d46a
SHA256 f3334eac7f5b20bcfa32afe8cee5ddd7186efc4a72eb7a27af74d5766bf6a965
SHA512 2d08a85d43eaf94fe15febf6eb1fbd8e0fb5f1da11161f581e363bf3a780a255141081f6c65e1d3c8f75d22d61b5ba925580f3901209c0528aeaa7520107eb7f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\3815

MD5 414841430d97b230c41caa199b6a851c
SHA1 1b867b7f75e6f17f19aa1e79773636ad93b0f5eb
SHA256 9605ec11b9fc93e4acc5236134825c25dedf542de4d36ca1bfcf75f6ea4b205a
SHA512 326bae7fb7bb5682d8c62d38b5945478b40155bcaf10cbb1f7e553a3663401450281c8b18d3f340489124e2eb8eeeb99a9d5fcd67c9ccf821c90ad2e683482d0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\F75BA6605419C72342396B10D508B5A64910E75E

MD5 b542e526bd672000e85ce6303aa41269
SHA1 20def18b169def9113b141da47797a494cecabee
SHA256 feacc2f674066047913a10c902b01f8ac89f9059d43d80337c45aaf88cad5eac
SHA512 0f5442c9025df777e5f0accc77ee8ef15dd9b79e689d4af4615cc1b28a6d88235ade540eff71ae22f8dc4299d44fedcbf1a9c00cf0bf4714112f051415ae8661

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c0bf6a931f684e89a28a940f66d1accf
SHA1 f73025afb76556f2d74dd6d4cc5140b7b5fe9776
SHA256 31d3eba787ba32cdcc1f85abdd771ac8577628af8c2984edb240e4a2289d8597
SHA512 095676f1d505ec6e976a8df584b0a478f80e97e7559b6daee57750e4fa934a9c5ccb861c9406d51997ac002baab1d6014515ccbdec498f418d955f0e2b6ccb37

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

MD5 3dd310d6d6b01db3e4163cfcf882c7b6
SHA1 f5d8844942bcaee2734ccc4d43107a5b0bcb2618
SHA256 28d61f6b067d97ff5d2851ea18dd5552d479582cae88f83f60e413898fb10788
SHA512 ce8daead59974ef2e4607c3829ba1ce014b2ba7fc38a8e38192b216bb30bed0adac676404552326220d699d517715988769a78d8a637c8601fc677e35a885f9b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\jumpListCache\KWnopGLTDWVbfVYJjgGJZw==.ico

MD5 180a2c257c44b0c5fc17e711e028e113
SHA1 a3820b6c60d3695e7ee23ecc9db84fbf71c98a8f
SHA256 63dfb4b8df6f971be76607a5d56d4fa9570f7dafd6bd7c0f0efa3dba163471c9
SHA512 67e85cff042f54f62bb5f8afa1f40308bafaa74afbb7e0807269c2f6e4f8385685203fb497f0eb6e95c3f53dc894f3c9ea6bc913731b0f3b688291c6625f38d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f38df694a3353d40f75eb05302a6cb01
SHA1 d994f99d167bbd31efc47961b3792199852f19b3
SHA256 30405e9463ec4561657a967679ccca3f53ba93c15c1966725623833d5b5e64d7
SHA512 027decd46b8521e092201f426e139cb802428a0b588f6874f337125e9d6ad63af16a0a611941f40ce85929a802117727c20238d8dbc1b839e7c6b10070df72cb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d24567996956f689f4298c6a2e437ef6
SHA1 e532782d061b1fc35570d40ac33d264b69d5e811
SHA256 7464ec72f56613440b8dbbd0a2c0e1ce2dd06e428cd07d062cd0d0eee124d9f0
SHA512 0e3530d03d595efd06bd6c6c8347523af96afe7e9459989fd7a4877237fb7e2b0a9d8ea06cdffd4b30b77c4f64a22aa768ef250e3d90d75d52e2c5d320170765

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs.js

MD5 93e2cc12a964b8a04c0782c5e6beccdf
SHA1 edef932ad99c0ec40fc5997b8df0db6f9eed134b
SHA256 74a0abc29cbd6823795fd60ee981b798fe94caaa1664af9944e93349ec933bb1
SHA512 5e8dc3dec3f3f745636bc5dada23dae9b81ac213a9bd9e642cc7cbce26376ae4fa991c6b4dea2b459411c875cde0f890f16249365e51cdf98161af7506ebede9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\31051

MD5 80bfe50234d68c3b8f44bb179b322892
SHA1 2a3467dfa78ba9ddb054b489af978ca0503acc4e
SHA256 bbaed37bb008e7a3ba3fccbd75efbff81c4d802a4762b4add6ac693a4cf07f11
SHA512 0ceea2ca65ace52c4ba233e92138a22f896f95133edb5f870ea066d66d3a916df15d461ead10309a38063efb9f0cdf05abb020a2ca88a443d4cee6b70c0f1334

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs.js

MD5 6e9375ea67d5fae4275a3d7fa8210a1d
SHA1 dc0c89e534f75bbe35153c6f87e40247e963daac
SHA256 5c671353c21728447148fab5624765446ff0fe6ce9a5cf75b3bfe78a9a70e5f5
SHA512 8a6923c4e55f48d79a335b57ae5ad6e8c9290de6c5e7ec381096efb21f06f86960f0c920199de4f87cc6f87b3c4c6c31ef12fcf677361baa114507900763a48f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 e5ab5cf8bc83550c34856b4061ada5ed
SHA1 d4d6c4cc9c3bab3b2817867b815bc824a097cd1f
SHA256 aaf481fe48c95f61659ba05e8ebbd10190b525af3ddd5250f3c0b39313d95443
SHA512 bc8bfbdfcb924080ac531f57733f99f4ac393b8ab23c866643cba70bafe05269ad015f3d1c8155b10f61533b28d5277460e6b50f33b3f22284c924072a5e7b28

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\broadcast-listeners.json

MD5 72c95709e1a3b27919e13d28bbe8e8a2
SHA1 00892decbee63d627057730bfc0c6a4f13099ee4
SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512 613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\targeting.snapshot.json

MD5 4be8be3547da53ad30bfe33c41caf1b3
SHA1 62912e2b100424e8dd1f129559c5b9c73977331a
SHA256 0236bf5cfd49909542d4ab37c5e813ba4220fbda5714e70c1c0f0747be222d2d
SHA512 a377fdf812c6299163496f7408ca37779e973e0d8633685ab3d12c5808bbd49417f4bf5704f54b5ec236517eaf477bf986224c380c1602b9fbdd90366c4d6a86

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\xulstore.json

MD5 1995825c748914809df775643764920f
SHA1 55c55d77bb712d2d831996344f0a1b3e0b7ff98a
SHA256 87835b1bd7d0934f997ef51c977349809551d47e32c3c9224899359ae0fce776
SHA512 c311970610d836550a07feb47bd0774fd728130d0660cbada2d2d68f2fcfbe84e85404d7f5b8ab0f71a6c947561dcffa95df2782a712f4dcb7230ea8ba01c34c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\SiteSecurityServiceState.txt

MD5 0dfe93dd803529a8baefb8825bb06006
SHA1 56bb7343f3b7fcef266f54b2e03fa007258c05e5
SHA256 3bbf0c768f76c60fe418ec57803d67871f1ab9e53d950ae9788cf030b7f33ffb
SHA512 0f3b874af1cf33f50189057ca1af513d7737fbf014f3c8f3784c33538e2bd4a7b90b2c9734ee3a36ab23a0f1bcb2c0f230b62a788658db461668e309a005f16a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\bookmarkbackups\bookmarks-2024-07-26_11_+ftwiIQfjYtrlniJNZ3V4g==.jsonlz4

MD5 5454384ec38638981ce5e67157b8f07d
SHA1 20da940d1b48d7c555b5f7d050fcc26b9fcaa217
SHA256 faa28431b2b70bce1f1552ef63266622ee731b9a30a3b314c9b6d6e0bdc07e11
SHA512 5526c70002b23f106dbb494742fce905cba27979f8bf8f2a92832232fb34b6bf873043f0b54f88567250f358e5fdd93438f5211318ee303ad71615ea85d1f2f6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\AlternateServices.txt

MD5 c6598221b8188181a69707e279db661c
SHA1 a09cf5fb28a745fa4e6a95efca38498f47423338
SHA256 d3deb270d32b8c0ec27b1eeeafdde38cfec5cacb3eaa2d38a5339bcd2c0e78b0
SHA512 d20f941213d40ae212e664d604e6d15c7026946b17615a7fa302d7ce6f7def79d73be2d9156b6008980f923c1d85a7c2aea8df5f7abc8bd4ac0c8754be0efc7b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.youtube.com\idb\2355093635yCt7G%cCf7C%oendf5i1g.sqlite

MD5 20e6d90a6dfaba1e412131d7143ffd8c
SHA1 d0be33a2634be88e369b0be0470ba3f0f77f999c
SHA256 5baf6aaca9d5a349d3a46e58f50f6bf07077d8d4e9df2da82f2c17b64170eb76
SHA512 413b2839d8d30f3e2b8dba3d61e8b466a2482b5e21a81ee4ea9387a7a2ccb8de0a25fb1d766e5e07701d33092d688c5580d3b60196fba507a48b0370a0670256