Malware Analysis Report

2024-12-07 14:42

Sample ID 241007-w1dahs1djm
Target NocturneLoader.bin
SHA256 4c3fad8ea837861fe54356ad6e7e40cce2fe305b9cb323f07d8802c93a440b70
Tags
bootkit discovery persistence
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

SHA256

4c3fad8ea837861fe54356ad6e7e40cce2fe305b9cb323f07d8802c93a440b70

Threat Level: Shows suspicious behavior

The file NocturneLoader.bin was found to be: Shows suspicious behavior.

Malicious Activity Summary

bootkit discovery persistence

Enumerates connected drives

Drops desktop.ini file(s)

Legitimate hosting services abused for malware hosting/C2

Writes to the Master Boot Record (MBR)

Drops file in Windows directory

Unsigned PE

System Location Discovery: System Language Discovery

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: GetForegroundWindowSpam

Modifies registry class

Runs regedit.exe

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Checks processor information in registry

NTFS ADS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-07 18:22

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-07 18:22

Reported

2024-10-07 18:31

Platform

win10-20240404-en

Max time kernel

527s

Max time network

520s

Command Line

"C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe"

Signatures

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\System32\bcastdvr.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\K: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\N: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\P: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\U: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\W: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\E: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\I: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Q: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\R: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\T: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\V: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Z: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\B: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\M: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\H: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\S: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Y: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\A: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\G: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\J: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\O: C:\Windows\System32\unregmp2.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\deckufniw 1.1\deckufniw 1.1\dekcufniw.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\winver.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\winver.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\unregmp2.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\winver.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\deckufniw 1.1\deckufniw 1.1\dekcufniw.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regedit.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\winver.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\charmap.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\System32\bcastdvr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\System32\bcastdvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\deckufniw 1.1.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Runs regedit.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\unregmp2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\unregmp2.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\Downloads\deckufniw 1.1\deckufniw 1.1\dekcufniw.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
N/A N/A C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2820 wrote to memory of 1888 N/A C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe C:\Windows\system32\cmd.exe
PID 2820 wrote to memory of 1888 N/A C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe C:\Windows\system32\cmd.exe
PID 1888 wrote to memory of 2732 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\certutil.exe
PID 1888 wrote to memory of 2732 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\certutil.exe
PID 1888 wrote to memory of 4088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\find.exe
PID 1888 wrote to memory of 4088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\find.exe
PID 1888 wrote to memory of 4588 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\find.exe
PID 1888 wrote to memory of 4588 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\find.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4592 wrote to memory of 1324 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 1940 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 1940 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1324 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe

"C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c certutil -hashfile "C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe" MD5 | find /i /v "md5" | find /i /v "certutil"

C:\Windows\system32\certutil.exe

certutil -hashfile "C:\Users\Admin\AppData\Local\Temp\NocturneLoader.exe" MD5

C:\Windows\system32\find.exe

find /i /v "md5"

C:\Windows\system32\find.exe

find /i /v "certutil"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.0.1660385604\709073362" -parentBuildID 20221007134813 -prefsHandle 1748 -prefMapHandle 1712 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c860986-0c5c-428d-ab7e-ef85a9cb06da} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 1828 1aaeb7d3758 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.1.739171703\1421412613" -parentBuildID 20221007134813 -prefsHandle 2156 -prefMapHandle 2152 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f036f63-5a8a-4626-996b-0eddc14e7401} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 2184 1aae07e1858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.2.1338661163\1420234201" -childID 1 -isForBrowser -prefsHandle 2808 -prefMapHandle 2776 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8d1f0456-0e49-420a-b475-b78b117be0f9} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 2848 1aaef993158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.3.1485453225\1637987468" -childID 2 -isForBrowser -prefsHandle 1048 -prefMapHandle 3268 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bb309a8e-b857-42a3-ac1e-25f73343c83f} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 3492 1aae0761658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.4.1421642801\1658569979" -childID 3 -isForBrowser -prefsHandle 3924 -prefMapHandle 3920 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {99361cbf-4a41-4707-ac84-bddbecb8c689} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 3932 1aaeffac558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.5.228404010\870671746" -childID 4 -isForBrowser -prefsHandle 4740 -prefMapHandle 2632 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d937a99b-e3a6-451d-990c-0ad91323469f} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 4760 1aaf1ffad58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.6.400917625\227737214" -childID 5 -isForBrowser -prefsHandle 4976 -prefMapHandle 4980 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c776ace3-f46f-4ef0-abb7-e89b96620e20} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 4968 1aaf1ffb958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.7.550517390\622019378" -childID 6 -isForBrowser -prefsHandle 5176 -prefMapHandle 5180 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7975b719-4520-4c0e-bfc6-6174cca26eaf} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 5168 1aaf1ffc258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.8.1454548880\1691722515" -parentBuildID 20221007134813 -prefsHandle 1592 -prefMapHandle 5536 -prefsLen 26593 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {08a2f8aa-fd78-4c11-b276-98ee3990c5e2} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 5596 1aaf30ccb58 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.9.795776263\412644232" -childID 7 -isForBrowser -prefsHandle 1592 -prefMapHandle 5524 -prefsLen 26593 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a82e87b3-da84-419f-8e1e-9c5c385cb7d0} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 5604 1aaeccf2258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.10.1281147820\998251830" -childID 8 -isForBrowser -prefsHandle 6028 -prefMapHandle 6024 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7a918554-d03a-45cb-bb51-2ca02d5a3d47} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 6036 1aaf3e17b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.11.1708693397\1766233041" -childID 9 -isForBrowser -prefsHandle 6148 -prefMapHandle 6152 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9131f9ec-6d91-4e69-aef5-d9ef06399e31} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 6056 1aaf3e19958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.12.155392467\2138114382" -childID 10 -isForBrowser -prefsHandle 6044 -prefMapHandle 6196 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1292 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d556d09b-944f-41c4-8b11-c1b5bd463438} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 6368 1aaf40bff58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1324.13.186937975\1790539657" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5248 -prefMapHandle 5188 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {65583c84-eec4-46c8-9b81-3c1d7d3f94cf} 1324 "\\.\pipe\gecko-crash-server-pipe.1324" 5156 1aaf3658958 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.0.1313012627\219521726" -parentBuildID 20221007134813 -prefsHandle 1604 -prefMapHandle 1500 -prefsLen 21136 -prefMapSize 233583 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1a006b0b-a825-45b0-9a36-7e43753aa560} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 1684 1c6d41fa258 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.1.1835538498\989477263" -parentBuildID 20221007134813 -prefsHandle 1980 -prefMapHandle 1976 -prefsLen 21181 -prefMapSize 233583 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {611cf1a0-a1d1-4ee6-9912-5ee356787cf2} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 1992 1c6c1fe0e58 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.2.1157096436\1470476352" -childID 1 -isForBrowser -prefsHandle 2800 -prefMapHandle 2796 -prefsLen 21642 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c9404440-bd87-4ea4-90a4-402bd246714a} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 2744 1c6d68a8058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.3.1806263980\1685061228" -childID 2 -isForBrowser -prefsHandle 2712 -prefMapHandle 2736 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {351ff29b-84c1-4ab9-bcbe-d5f06cd074cd} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 2968 1c6c1f62858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.4.904481459\619738987" -childID 3 -isForBrowser -prefsHandle 4036 -prefMapHandle 4032 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e091c524-62fe-4bdf-82f4-d66416f1f6eb} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4040 1c6d939bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.5.1867539389\1641836715" -childID 4 -isForBrowser -prefsHandle 4540 -prefMapHandle 4544 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e4d7bc9b-d2d2-43a8-aa07-3bd2abf62e7a} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4472 1c6da49c658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.6.1351460074\311191050" -childID 5 -isForBrowser -prefsHandle 4640 -prefMapHandle 4644 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {46141f73-d3db-4713-a38a-ce2748919ae7} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4632 1c6da49c958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.7.214215071\1185676404" -childID 6 -isForBrowser -prefsHandle 4832 -prefMapHandle 4836 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e587e4b2-5822-49b1-892c-21076b2c602b} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4824 1c6da49cc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.8.211286088\173994106" -childID 7 -isForBrowser -prefsHandle 5188 -prefMapHandle 5376 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e3e675b-258d-4b01-9c62-922f5fabf580} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 5400 1c6dc46f158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.9.104890731\126622347" -childID 8 -isForBrowser -prefsHandle 4148 -prefMapHandle 4108 -prefsLen 26820 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f39285d-c89c-4cc1-93d1-d94d45701678} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4172 1c6d8f3ec58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.10.1219552637\195917715" -childID 9 -isForBrowser -prefsHandle 4372 -prefMapHandle 5720 -prefsLen 27520 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7bfad339-995d-48ea-a563-b1d6a4fdb2bc} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 4304 1c6dbdb0258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.11.1887553777\1669512564" -childID 10 -isForBrowser -prefsHandle 1544 -prefMapHandle 1552 -prefsLen 27520 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2148caf2-38c3-4a4f-8973-ebadb84f607a} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 5748 1c6dc9e6b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5316.12.1685039045\1199075623" -childID 11 -isForBrowser -prefsHandle 5972 -prefMapHandle 5976 -prefsLen 27520 -prefMapSize 233583 -jsInitHandle 1300 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8d159c37-a1c4-440c-b941-73ef5fc2e50d} 5316 "\\.\pipe\gecko-crash-server-pipe.5316" 5960 1c6dca32858 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\deckufniw 1.1\deckufniw 1.1\dekcufniw.exe

"C:\Users\Admin\Downloads\deckufniw 1.1\deckufniw 1.1\dekcufniw.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0xf8

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService

C:\Windows\System32\bcastdvr.exe

"C:\Windows\System32\bcastdvr.exe" -ServerName:Windows.Media.Capture.Internal.BroadcastDVRServer

C:\Windows\System32\GamePanel.exe

"C:\Windows\System32\GamePanel.exe" 00000000000A018A /eventType=5

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\unregmp2.exe

"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon

C:\Windows\System32\unregmp2.exe

"C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SysWOW64\winver.exe

"C:\Windows\System32\winver.exe"

C:\Windows\SysWOW64\regedit.exe

"C:\Windows\System32\regedit.exe"

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\winver.exe

"C:\Windows\System32\winver.exe"

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Windows\SysWOW64\winver.exe

"C:\Windows\System32\winver.exe"

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\winver.exe

"C:\Windows\System32\winver.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\charmap.exe

"C:\Windows\System32\charmap.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 1.173.189.20.in-addr.arpa udp
N/A 127.0.0.1:49763 tcp
N/A 127.0.0.1:49769 tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 23.148.238.44.in-addr.arpa udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 pornhub.com udp
US 66.254.114.41:80 pornhub.com tcp
US 66.254.114.41:80 pornhub.com tcp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 pornhub.com udp
US 66.254.114.41:443 pornhub.com tcp
US 8.8.8.8:53 www.pornhub.com udp
US 66.254.114.41:443 www.pornhub.com tcp
US 8.8.8.8:53 41.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 static.trafficjunky.com udp
US 8.8.8.8:53 ei.phncdn.com udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 cdn1-smallimg.phncdn.com udp
US 8.8.8.8:53 media.trafficjunky.net udp
GB 64.210.156.20:443 media.trafficjunky.net tcp
GB 64.210.156.20:443 media.trafficjunky.net tcp
US 8.8.8.8:53 static.trafficjunky.com.sds.rncdn7.com udp
US 8.8.8.8:53 smallimg.phncdn.com udp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
GB 64.210.156.19:443 static.trafficjunky.com.sds.rncdn7.com tcp
US 8.8.8.8:53 ei.phncdn.com.sds.rncdn7.com udp
US 172.67.177.254:443 prvc.io tcp
GB 64.210.156.20:443 ei.phncdn.com.sds.rncdn7.com tcp
US 8.8.8.8:53 smallimg.phncdn.com udp
US 8.8.8.8:53 static.trafficjunky.com.sds.rncdn7.com udp
US 8.8.8.8:53 ei.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 media.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 media.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 66.254.114.156:443 smallimg.phncdn.com tcp
US 8.8.8.8:53 ss.phncdn.com udp
GB 64.210.156.16:443 ss.phncdn.com tcp
US 8.8.8.8:53 ss.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 ss.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 a.adtng.com udp
US 8.8.8.8:53 20.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 254.177.67.172.in-addr.arpa udp
US 8.8.8.8:53 19.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 156.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 8.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 16.156.210.64.in-addr.arpa udp
US 66.254.114.171:443 a.adtng.com tcp
US 66.254.114.171:443 a.adtng.com tcp
US 8.8.8.8:53 a.adtng.com udp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 a.adtng.com udp
US 8.8.8.8:53 hw-cdn2.ang-content.com udp
US 8.8.8.8:53 hw-cdn2.adtng.com udp
US 8.8.8.8:53 hw-cdn2.ang-content.com.lds.rncdn7.com udp
GB 64.210.156.2:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
GB 64.210.156.2:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
GB 64.210.156.2:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
GB 64.210.156.2:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
GB 64.210.156.6:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
US 8.8.8.8:53 hw-cdn2.adtng.com.lds.rncdn7.com udp
GB 64.210.156.6:443 hw-cdn2.adtng.com.lds.rncdn7.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 hw-cdn2.ang-content.com.lds.rncdn7.com udp
US 8.8.8.8:53 hw-cdn2.adtng.com.lds.rncdn7.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 171.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 2.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 6.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 216.58.212.251:443 storage.googleapis.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
GB 216.58.212.251:443 storage.googleapis.com udp
US 8.8.8.8:53 251.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 142.250.179.227:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 pornhub.com udp
GB 142.250.179.227:443 www.google.co.uk udp
BE 74.125.206.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
BE 74.125.206.155:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 155.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 ew.phncdn.com udp
US 8.8.8.8:53 ew.phncdn.com.sds.rncdn7.com udp
GB 64.210.156.23:443 ew.phncdn.com.sds.rncdn7.com tcp
US 8.8.8.8:53 ew.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 23.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 pornhub.com udp
GB 216.58.212.251:443 storage.googleapis.com tcp
GB 216.58.212.251:443 storage.googleapis.com udp
GB 64.210.156.20:443 ew.phncdn.com.sds.rncdn7.com tcp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com udp
GB 64.210.156.18:443 cdn1d-static-shared.phncdn.com tcp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net udp
US 8.8.8.8:53 18.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 pix-ht.trafficjunky.net udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 pix-cdn77.trafficjunky.net udp
GB 64.210.156.17:443 ht-cdn.trafficjunky.net.sds.rncdn7.com tcp
US 8.8.8.8:53 ht-cdn.trafficjunky.net.sds.rncdn7.com udp
GB 64.210.156.16:443 ht-cdn.trafficjunky.net.sds.rncdn7.com tcp
GB 64.210.156.2:443 hw-cdn2.adtng.com.lds.rncdn7.com tcp
GB 64.210.156.16:443 ht-cdn.trafficjunky.net.sds.rncdn7.com tcp
US 8.8.8.8:53 1564415456.rsc.cdn77.org udp
GB 64.210.156.6:443 hw-cdn2.adtng.com.lds.rncdn7.com tcp
NL 185.59.222.25:443 1564415456.rsc.cdn77.org tcp
US 8.8.8.8:53 pix-ht.trafficjunky.net.sds.rncdn7.com udp
GB 64.210.156.17:443 ht-cdn.trafficjunky.net.sds.rncdn7.com tcp
US 8.8.8.8:53 1564415456.rsc.cdn77.org udp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 etahub.com udp
US 8.8.8.8:53 evtubescms.phncdn.com udp
US 66.254.114.62:443 etahub.com tcp
US 8.8.8.8:53 etahub.com udp
GB 64.210.156.4:443 evtubescms.phncdn.com tcp
US 8.8.8.8:53 evtubescms.phncdn.com.lds.rncdn7.com udp
US 8.8.8.8:53 etahub.com udp
US 8.8.8.8:53 evtubescms.phncdn.com.lds.rncdn7.com udp
US 8.8.8.8:53 17.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 25.222.59.185.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 62.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 4.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 smallimg.phncdn.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
N/A 127.0.0.1:50408 tcp
N/A 127.0.0.1:50423 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.200.36:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.200.36:443 www.google.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.187.209:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.187.209:443 csp.withgoogle.com udp
US 8.8.8.8:53 36.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 209.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.200.14:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
GB 142.250.200.14:443 play.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 216.58.204.78:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 216.58.204.78:443 consent.google.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
GB 142.250.179.238:443 encrypted-tbn2.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
GB 142.250.179.238:443 encrypted-tbn2.gstatic.com tcp
GB 216.58.212.206:443 encrypted-tbn0.gstatic.com tcp
GB 216.58.212.206:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 142.250.179.238:443 encrypted-tbn2.gstatic.com udp
GB 216.58.212.206:443 encrypted-tbn0.gstatic.com udp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
IT 92.122.225.225:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 225.225.122.92.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.204.78:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.204.78:443 redirector.gvt1.com udp
US 8.8.8.8:53 r4---sn-aigl6nsd.gvt1.com udp
GB 74.125.105.41:443 r4---sn-aigl6nsd.gvt1.com tcp
US 8.8.8.8:53 r4.sn-aigl6nsd.gvt1.com udp
US 8.8.8.8:53 r4.sn-aigl6nsd.gvt1.com udp
US 8.8.8.8:53 41.105.125.74.in-addr.arpa udp
GB 74.125.105.41:443 r4.sn-aigl6nsd.gvt1.com udp
GB 142.250.200.36:443 www.google.com udp
GB 20.26.156.215:443 github.com tcp
GB 142.250.200.36:443 www.google.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
GB 142.250.200.36:443 www.google.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 redir.metaservices.microsoft.com udp
GB 2.19.117.143:80 redir.metaservices.microsoft.com tcp
US 8.8.8.8:53 onlinestores.metaservices.microsoft.com udp
GB 2.19.117.13:80 onlinestores.metaservices.microsoft.com tcp
US 8.8.8.8:53 13.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 143.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\83f9a690-3708-4d96-b88e-7e149dbe6152

MD5 110a5dac56a9bf2df4ddf084e4166b6d
SHA1 901a786cc6fdcde52d0770b1024d730229d8917b
SHA256 2f0c3d22c5f1c74b521764663f1ea06bb3328dd24ba822b279c3fbcb60f5a9ad
SHA512 29d23ad75db383e737cfd0787e8a84b6acf16bb997ed09f2d918ac258791f4d7fc21a82fa4424f4343debe937c4e92cde20d8782e88918aa44142f1a4598a67b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\57194f7b-f909-4455-a677-3a71dd95e72d

MD5 2ebb6c42ad9ed3eb4dfe413241487916
SHA1 249afa0a789b5ee597016560e43dff840066830e
SHA256 e8ce9e3d46d39c724e9fbeda9ff81a81e356a183496f28f8eee6c254bf9b84b6
SHA512 3b26f67ec0dddb055ac8d4ae577fc1ae5ce2735ad5ef44f6b888fb557ce197b4921c8dfef9f0c0d8326f6a9fb019b57f18a8f2955d36c644f8538dde7813f004

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\db\data.safe.bin

MD5 ddc20fe5b246e433dcbf33a4da169e8d
SHA1 e13929f81b797a7f131e463087c978f88f76c880
SHA256 0aa75541a06afe2db3aa8d2b8d486e68c8cb092f1034bcbf0b6700a270cb42ba
SHA512 14cdb9670070159b462fd9f14f5db8a99d7ae10cee9bf6285a1fba3031a08d3fd34e638db3317bcff4a758ee9df18f5871c09a05e92c118e4f66e90074d5b5a2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a0b500a926ea5fba085395c4ceb49fdc
SHA1 5465aaedefc157753805cd1511fb19cdb26f3079
SHA256 3f38aa1dd501f9aa4fdf42e07784e37deca00c02ce6b66a13abad6b183e96dee
SHA512 96c61ad6b9d2b731dc0bc8ca3a42122c6df414f41656dec4a230e0fca60e09a0060d58f64f4e808cc46787d0234286fa1fc0a1d8bc05d4a780961c553c5487af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 731c0e733fe1e3123d366af7c8e578ae
SHA1 9756304ea773dd9cd96e5996dc79de2ed6a9ae9c
SHA256 8f426b4be5e3440fa14d37480f018b7dc3d1a547b0e91c2fbfc6e31d9054a359
SHA512 d29e0f2356a3226f64692b390c122d4d70f09f677d9f5d086f2babaeba6574d670171edb24ff52f928871ec489680f57910e21fac1ca8ec08783a07d21b1f427

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 e1510e68d4cbbc02943a9a84cf06b536
SHA1 3930d59c10a7b448c618ca4669eb9e6179a92779
SHA256 7766e40e2a5458190750bb7a485758d75841ba5d25b521c40ea5b424f54d1ba9
SHA512 32d7fe35299fd3458dc008d109d86e1d64ae80d2f0330bc8c4a222f19ddb0ac469c3b6a4b77120925b22cf3ee8c1345656604b52bfd5c5bb7a44173ba1f95b5a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 f34a666e75dd1ef59d369711c6077481
SHA1 2bb2fac749a11d4fa5aaeb88b0b11708998b1828
SHA256 f2003e6408f61d94918eddf1ee1b167819dae667dc476b29b7fbc14a6fa34008
SHA512 ccf7660cad506d604194d4061ef2828346b2298b6120fb5f4d120ee368fb4f3b91f4f94076f9f5dbf21a335f981004012ed7ac93516051215f9d6e880d775aa0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\default\https+++www.pornhub.com\cache\morgue\30\{908501d7-4a09-44ca-9928-2c59d07dc21e}.final

MD5 4849126d62348e96de9f534891ee372c
SHA1 04208116ad7cb0edcb2c7c754042554104172d10
SHA256 92930e52c17a5e42a09f648d090ba0e48384fe2b6f4f6b3e3fc70bd8a0e6ac5d
SHA512 bd7769637a8707a21027e442faf6911019a2c731bff17fc11b9da0b74490162ea4eba2fca41942a7c114cc75ab1941f208c1fcc789bdc0a594b5ed269f6e6f25

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a1ae0e2c3ebbdbd3542c7a1b4c4d0d9d
SHA1 ba9e7e3b4152b0fba52f55f2aaa21791f643f9d2
SHA256 f4335a2c6a5343ab7ce94ceb185ec03aaf4af58acc2856193c8dedc99e73bdf0
SHA512 8002aeb966c338d0fc765cdde32a3dc922f8ad319f8e1ca2d8804fe2915c33b14cee95b8a5fa0e560a58237bf86d30c54af89db1b04426ab712096367cf7badb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9553f93c6c0f213c9262568a85982c5c
SHA1 40a6fa89508443c00b715fa73ca4dc1b254eb886
SHA256 9b10a4332763449ae1e84c2b8ec62effcd3ca14e5a371b44eb30ee8fb0952f86
SHA512 9c8bca17300a830dcfeffce0e2c27f77ff4b48e205c7bc9c4c5e519b0b1592c9e102583b55653c6d4301bf7286d430657b9bf29054bf05ef8ef2ce3fe17a993a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\default\https+++www.pornhub.com\cache\morgue\56\{e08b1b2c-7821-41e6-9d38-7c4bd5c83938}.final

MD5 932479fe19d996a5e8f139bf51085149
SHA1 da374dfebb658802ee62fc8ec320c3442fc93192
SHA256 c57de29d8406c0e2534d96c4c23199b127d8ee9bb86dce5230bf8157894b4f84
SHA512 ddbc216c01474d8ccc4f73fc78d228e68600b2bc148cdf3b7d12108b9fbdce3f2c91fdddce4841e669b1a2a609a8fae927e2a551efd11877e6513f7849edc05a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bd46f215099de7a7623b0ed68f49fc81
SHA1 dbce76942041e98ab0eb147a8a05f0a965fb1fab
SHA256 0bdddb47d07bc9d96c578766da3eeb81a7ac7ee5c57288e2b226b38a20e9b60d
SHA512 cea6f95ec09f1b571bc70ed82bf7cfd918a5e6d360a37bb649cbd3242cdec1255f021f6edcb5c368313266bddd3a4782cc67c8f57bbc424794e467216ed96648

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\27184

MD5 aabb407f8314b0b11ebda2fff05de4c1
SHA1 c4f78d17b3d0aa520bf28d633eae738e637af777
SHA256 5f028c719d0202f360a966fc8aaa869d49f1d5ee6f71e2545f5516ff909bda8c
SHA512 038c1b4cd58ed1f0266a8978db6caa475b8aed3d8b13f2eee03632ed781c4a9d5fe65e4be800920700598ccfdbd7a09fb5409965b2bc31a1622859550ff64f5b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore.jsonlz4

MD5 8f2ca27f3481c42eced41705ecd4dc35
SHA1 bcdb4d04e9992848e841b59148d86583b7496b70
SHA256 cca6c3cc12b88e55006a8b670d9ed50dd9cecd8f2c2ca2eb59166f6e9d5b672c
SHA512 397226f2153036d78233eb23a6c6b746273d0a79dc29bd63c53a252c041ad386ef6e8439d85affaad472fe7bdbae521a87c5e7a24d8b13bfdb5acf89c965c24d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\startupCache\scriptCache.bin

MD5 f0832224967733af8f5b9beb0daef776
SHA1 8efc7c92fb7bf2e0e33a718a8d6f2b34bc44f2ae
SHA256 ecd1224278eec0e3ae4faf1a03e01716c28891873057afdd840424ecee333677
SHA512 3460ccb889d72b7aac5f9904fe05f1616d482742ee3281eb6edf12af5f728a4c3b49ddea405bb5e845c5accd4b33980863380ed7db46d063057ad7dee0ff0108

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\xulstore.json

MD5 58e240288763218d12bf235d34e5aee2
SHA1 89135494b57f590011c09668dec3b90d2c5ee9ae
SHA256 615f80e71dfde24711e7fefc1b7959f7592c5e5cf9ad0f3aecb4235b93187176
SHA512 caed2638902987aead199e73cffb90881bf245bbb616cb38c46b281d4aaaa54dc20a54e9bfe17a8d6e68847394c113fb7606e94b64f44ab0b52bf7846f26e936

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\startupCache\urlCache.bin

MD5 af90cd617ad3e778e3cd02819b7f627c
SHA1 5ddd5f72c5ae034cb5cc92afb9711967c162ca46
SHA256 0f74ff85ddcc919b98889449f96eb62933a1eff091037f3376826e192d935d14
SHA512 e1a8880a2975f958aacbadc107932e2c6914f5e1afb2f10f849d829d91f176c88d5ea0012d58cc7f41cd80b0feb693c16e329609f16ba2fa9f050a45a726d542

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs.js

MD5 1cc637792de5c84f6866d238809ac40f
SHA1 547e4d3efcd93dd90745b709ca443fc2e0189134
SHA256 ca3b4a5c3ba6ce994cbb463a24c0af0b8bc26194fe690cabc22771dabaa73201
SHA512 3f2e680c57c8effe00a7be24b91bffc6aed97d27c8f71e8d2794bcf068831545a42e949a061ce750743b3bc84c99dccd8022cfcc0d5cb45335d864e292b09c91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\permissions.sqlite

MD5 01a189c1a096c866a4cf677765a14344
SHA1 331457e0572fe276c0f82175c7585d4d8fb6c8b3
SHA256 cf54abf0e261df3d0662c0d3d2f5765ef2b3096ca36b5e471a2a98b33b2bd799
SHA512 31d3b2319dbebe58de0ecc561aa3cb02147f755391f6adc5acbb2f3f578a2209b7ee8dbd5c1a7c0d82901a29c11eda1e2510ee13a641ead87c17e3451f2c9bab

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\serviceworker.txt

MD5 b04e0434a42a5a15ef824690d2bf294a
SHA1 5d5c330a62942569269608b29f2b50040649b5cc
SHA256 20e917f8653c7a20c5972739cab0a961d0d1f00962d0af8673fe8534996cc718
SHA512 f4adc5893075de52c4344c44e6a0b83266deb1086129d1e161eaa95f05816fd5031b7ea7a93d7923aca5b33868da39a964a46854904420da7c4fa68d406fb64d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionCheckpoints.json.tmp

MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionCheckpoints.json

MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\cookies.sqlite

MD5 99267430ddf095986159929aadbf6413
SHA1 ad07ee8211fd783b51dd5a39204c79240cefe639
SHA256 47f40ad1373e3e8e91e90c23c1ff74c06b71b37295304f70109f40588357e96a
SHA512 5a6232a4b80ef7dc33aa54d9bcce184ac6820fbe9413180650ca157b0e6f95d71d18a0bc9cfec9568c7bfb35b2e683750f057fd2eaa856115b9a094af35d7983

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage.sqlite

MD5 9ad637accfd8c80de873c701032aa876
SHA1 7cea1e314890e114eb78feae10e72c32d8f583fb
SHA256 42b00a8dcdecf957639b89b964bc6359dca5eedb88a18ae9081ae6526b8581d0
SHA512 d3ade6b585900ad6661d31ed60088ee16b287efea9485050db8a56288a79707475aa11d8d1e60adb1cf73f27dd500a756848ff9a6f7be6aba2c53640b62fa7aa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionCheckpoints.json.tmp

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\SiteSecurityServiceState.txt

MD5 853163a43dbbb4d83010d9068780db50
SHA1 b87ab481f9ff6e88230d99b6b0d337de8996966c
SHA256 24f5c579ce6acf5ee99b3754a55ad60f774446f032778bcb94d2c9cbaab29f7e
SHA512 bda778a9432121ad6ee46d0f11bc5b24040554a62a3a006128dc7679bd704adeadc068bf47483e940f514a05d3536ba828b56448b4ffb97d5531dce989b0350a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\cert9.db

MD5 416853804df354c7662027284be0469c
SHA1 945f7f1b7e45a88d317f9377d4a1c6adaa26ad86
SHA256 f9435c050bc507cadc4e9964ddae11715265ab030485684ce8d19ecd4b4c35f3
SHA512 335dd3c44f8b6672bb9a05f4c24ecf26103315948aed4819839448ae28a0a3b63874863cd9f770a4e441789c0b204df604190fa7dc06673d4223af18e4054072

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\favicons.sqlite

MD5 c52958799bc11fd0f1c32a2f15f6a0a7
SHA1 504c400130e14817c1be4d13c789779fb347f587
SHA256 d1ca30c8270e89ba95128b384d836aefca7fa9abb37c5370ed8d7b6209f895c0
SHA512 259745664eb5dde0bbc1df130c6f7ed3c4c5ac5634bfe67b9db209614908115bd24784b2199831b2bb02ff2f3754dd978a20dfdaadbde21a65a921d1da204010

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\places.sqlite

MD5 2759d30ca64a5b6dc742a07fc8d7d7bf
SHA1 08073efc45255139660cc9dd29369dfb1b67d55c
SHA256 86e4c799c5644acbd6b4bc269834a526fbad7c58564c23fd54598e271fb7c5b4
SHA512 896db5a3013b6a265d03771a9d9e86068d99bbd45005a9e322066f3e6c56d70e66adad9520a81117ca3c8348ae6a23db439f78b7af4f45941e0d2725ea2fcd87

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5 28e03b8bc3e04cdffa96ad4ce6d88949
SHA1 1eaa20bc471e89d6715ad7fdb803615fff4e58a5
SHA256 67cc82d39e76722b23750a580dc181d9fcadfae84bece4999a9d33ff1adc3bdd
SHA512 3b35e78cd3802e41bb9fb2a4967f8dc46715d740fe40ac1ed0c652cb9483bf30cee76d8267d8f3895bdb888d449b89b743b199bba47adb8cf80cc9316b09962d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\protections.sqlite

MD5 49397db0486dc59d607907a086f40c9b
SHA1 08742ce9db9569062def08e99eea8470702feb7d
SHA256 890033ea279f13478e655150a823a5f84176d2f8f2ec3724dc61dfec775707c4
SHA512 fc8dad1ae2215cd96c41bb3e683670bb9138467677da46c19d1e58972775842a995b70123c22ea1efb659d043f5116d0c9dca422035a6646b35f81033c9f5f53

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

MD5 78a0cdf009f7333a0da3840ba9efd237
SHA1 13c1c9daff23d8655b75b7beb3f7af2ec8b31714
SHA256 9c1637b43b9deb71f44a68930343cf02479e7cecc223115caa8e11340108a697
SHA512 6dce38643d346eb7fb1a202011d862f9188996d2f309600a4cd5cdf15369a4ef658841a965896d530218a6b32c3d8b4035b9d7ad0f2ce97da38c690b456dfdc5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\content-prefs.sqlite

MD5 f0e88f0a494fbe845cf22265583eefa0
SHA1 72a8f01410e17e39dbe428bead48358b16babad4
SHA256 a88245533b8dc4c3a5c7e703010367f27f2ded17ea3f8ecb3396b13dac241e83
SHA512 5363ffc25203b4019c1e2840ea5b55c3a3afa72baa159d119d248949ae3f57fdc71225543f74a65cf86033cfb4606b03966ec7227b87b5b6dddd560fe3188c3e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\AlternateServices.txt

MD5 f14abfebed579d53e0b95f260222b0d2
SHA1 3e4eb9fb55a2c8077f48ec1d5bad2d8088881866
SHA256 decb35f4a107f42dcfb55a55521ee1d18f7684ef0b3c485a93a7ea42ba75fd99
SHA512 b94085384af3c3042504b7e16a98fb0ded0483169b81b1499230c7972f78cf97ba27d255f1f79e8dce36112924c7b8fe03430ebc23d1011558253136f709075f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\d47e3c35-26d8-40c1-9e89-9082b870825f

MD5 09007e76e02429803baa2f7573717219
SHA1 bda8a109b009d4d03f665f7e029080ed7b54154e
SHA256 495758cdee34fa0072fb2aeef9046b4ad500a3f4a32f4bb5f29f928bf74c9c4d
SHA512 6055944429e9014c420effe45fc5f7d4eb8a4771bee343a6203e0a95b2426c454523aa6a3df756302ebf2c6b22f0beb76cb26f347ed58521cd7419e0809f030e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\5972b3f3-f9c9-452b-a979-531e9392bb9a

MD5 d501f8f66ca66e8cb8d0994e6ad85c10
SHA1 6d700362fc35f6236ba37624f36935799b62bf0c
SHA256 ff8597d44249ff09ad4d230a62f79b1c6b9691dfb0dcf23dd82f6200a98075bc
SHA512 afd765aa3902e941c028f557d591b340e2e6480ea700e07655cbe4cd06ae8abaa40c6c4eb4cfc2a3690aa83ae1a13755b9924929437401f68aa4ad4c6a4b6ee4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\db\data.safe.bin

MD5 c203bd17e35c301856fd2a604891c674
SHA1 5a31c07da75c48db6e512af4c3a1c054e6880de0
SHA256 89887bbd2c995b3e00ec4bfa8260c66f74ca5f86fc6af178f9008aa8b390ecdf
SHA512 00674a09fce786196cee14a710fb47a6dc8e80fe8ccea65c99279b4bd872e0c47c06c60cce22a204f7ecc0c8ec75f9799de67c6db88353513e07ce1710f8db12

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\events\events

MD5 9757d7c8fb6f95e0f4bc3ad3378531e8
SHA1 f40dbef4c8efe1ad69c1a7303b5dc93f008315d1
SHA256 111551accc11602ddac539645048688eb4b464494d270b293ae552d15d0372df
SHA512 ff56a6636463f5060c91f1219270814362d52ace4a5eb0c111cbf9a1c840a49fd4ada923ba787a6f7b446a3d67a39fe9c7db16569042481f59b0a9d473292133

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 765ec0ceb339c3f3118f2cc52f538478
SHA1 d6921c3311aae6aed859dfa5ff3fc31f1239b45a
SHA256 b9b5e9c86d92ab51be4758a6f8a14638bddd6aabfe055b92262cfb2c95c4db69
SHA512 03c439d838a031f50fe08453108312eeb08644da6b0897d920a7be029dfc5afb0e7480f5816ab9f654289c7664c6cc6c402680efd8ba4afe17406749e5025cbd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0b278761219142945fd07cf52111f4f0
SHA1 fdad72c49eb554cac9a9481563ab24266734d7b0
SHA256 89eabfc37e2ce36f76ff45841e00b8624e5e90f5b55b732d5796f1f40c4fe428
SHA512 61d7c82ee948a548002929417eecc767894caa64dc6d85516a881f5a253368dcb9d827760c3dbd7f03df6e1c86367de464a0382ca343645cf20d57f81ff618db

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 fe3164eb7cbbf7f146978e4b14ffcc8a
SHA1 cda9c263eacd9053bd6633648f9673d408732c5d
SHA256 9aec809e61eb448e616be0635b5ce0e5f35ec9b17d7de9c2f7ac3704a8557d84
SHA512 d3bf1c3ee6f8ee41653bf30e8204bd17c52c91f7ab56e1a77652e5169cf2ce6ef21c94ad65390cc83b2bb537423b1e13987c622f56cb8c6d1166b939a25f5995

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 77439b47b3be030f4d5482fdfb9c28cf
SHA1 35506f0543a4bcc7824ccc183709890552a66ba1
SHA256 94efb2bc26def2327c84a2c8ee0f60bccb15db43cce5e316ed4d4ff99704f2fa
SHA512 1f4f506527db66e8631f2e35f852b199b6f12ee65c287657e1f959343bcd6215a83eee7dcd5a2f3dfa209546122270b319cf245a9d5265bcaa62ed714f902b8f

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs.js

MD5 408aed1406cbff30631108ac63ccc578
SHA1 87d2fea6f4f243bac62785f1b590c9155ff8a809
SHA256 c8cba4cd8566d996ac6712e7649ad97a6f37274a9baf8aa39f912b73dd9828f4
SHA512 9ffc8d05f57ebfe96124ead75ba949d9efc0b93a9ddeff40f778fb9e2a91f5c447323fe534325ea9ef164522f7874dc400e008fbfbb1ad1d94ace15d2100f2f7

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\23714100CD99C7DFB3E866E9233FC149C29D0CE9

MD5 d2c6816df98652fd60fdc899dc16ea5a
SHA1 a59bd8b03342fbc60618140458f21012c828dbb0
SHA256 9ada43668e6675dd03b0e2643c30c5e5f9df71a0cdbced8ebf7268149a06cb29
SHA512 ffc4d0aa3311b834c5afcf10f350995468811bc356a67dfa8f5d03c8dc194df4a6789dc4c8fd3bec73fe136016340b8fa2c4bf62587711385d7a6f6cd78725ba

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\34B4632214CDF6A1EB44B0C8A22BA1F6795ACB34

MD5 364b99b6355a76695c55609a8a9eda2d
SHA1 21d6385727214449f0ae3f5a4dadbff0decf1c8f
SHA256 b8ca93428459c1ccbbe6d4157368716df9e5d38372ed6298520f47fde90e1672
SHA512 755f3a6511b4ea20deaa3b4f402ea38511134bb77520679288759b6d9558e82d8960c992e7cbefd3a320e1985397349016bbda16da273d76241f70ee6dde445c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\336A5D9F0393CD0C9512959C504A5BC258DEC61C

MD5 eacc4688c9b6d1d1c0471a5969c48a73
SHA1 266d72a6868b9635f736a85501b28278455db041
SHA256 4706c3ad8af6b84a938f5397c5fc8d19eeb9d4740020df5a42a6503068557175
SHA512 07ecd5a787d7eaf98ba08a9685069a98d0bdb6e6e68f96eb4c06100fcfb3bb6426bd2f7be4a03f5a37c47d8bbb10b05d6ddeb8e8abd8c9d07e221c49ed133751

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\3232B5BF3CF53BEA73F6D3216537EDE0F1CAD296

MD5 0f8007ead6a14e89f11ec064d0a7a181
SHA1 035375987fd849c1433fe74e1aa4fbb11a74f034
SHA256 832c1454cd31c7de2d3f5531834f48f86c407a28cbca7309a62d51a1e2632161
SHA512 598b1897e218b5ad06a3d6e1f8c2397598d0bac009ae3838b2c7b0173b1ea17c9b236d9094462c764151c6c8da31b67b21aec7f61996933616ab4174bc321568

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\31D36EF6F654D379A6963CCD841A9375FCA0CCFE

MD5 abf2e12ecd5d9706c6a541591314985d
SHA1 6c6571773990cf2505b92f9f4baa369e113e0bc9
SHA256 a58bc8f465f6a9009b19a949dbc4ed32280098b3c8b842b07243ec5840f21cd9
SHA512 ee66ee6d80d4d008ec530596f5eb7feb0e82be02ecf59f314a8100bc9d0c167030ac90a207f41752250d0cf1394cc3ce32ee545ee94d2cbb067270a5e730eb31

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\306AAD42D1904F9DBB63A64A2758352114298CB9

MD5 9701fd38f0d2835e54ae09a19fcffde3
SHA1 d76062702f39a182f50414c652fac2974a2eb5f3
SHA256 a0a38ecfd576b842833865e24b9a2899974e80b390b5fbf8c063ead4f97a8273
SHA512 b1e6fcc4b2113b7d6cf78631d70f63785c146b36d2c1337519ea6c19bc8d03424c7b4e1f2bd8644d0515437829ce4d6e579cc6a937c337e79733f3d7e914dcc3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2FA6D8A061516C3E128611832F0ACF87A5CBDDB7

MD5 1c97f3edd564ed66d5c7ed93067124d1
SHA1 bf7ca756ca0d8847a03505c724c115340e4a9d6a
SHA256 406c4b6d94c061545cb34aa4c171124d46d10650009cf2d03f994ef2e5aec35b
SHA512 0940f794242f48ebf280eb8b2f245daec9263e830761ff23375140d7721b413ae3e6a77194f7383062bceefce9c9f22c67153b2c8e79301d3fbb5935a3519819

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2F091CAB38F13E14BFD2C79EA235424EE4551112

MD5 2be0779b2e0a48f61f9c768f6a48b106
SHA1 38d9bef3ea1da61013f8a16f755fe05e0245f831
SHA256 db68c699e13e42fd05956b91728f88c25098af79187a201c8d06321654652905
SHA512 1f2aae31081c56826f79a94034671d2715bacf41e6aa77c89054b39c5eea6f5c9e195600bb0de883cfe023c82c55e3bf06d96490e1e2949f7bcf33e5d85cd95b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2EBC19C166F4A6F27D39109C3B1619C41DE7D4A0

MD5 cef148c9863a9e94c54477d077ef6ed9
SHA1 ee523ceeaa38180b309425a558c4a4df53edb502
SHA256 ebcfa0d94905b29c4bc7a2ef10d5ebe7e09f40ead201d7643ef497e3b248f878
SHA512 bfac86b6ff15245aee39fd91b241377452fd0a011e40214ecadd3d9749e5993c4136e4f1df5c091453c0f6d6e0fa9e9976e500ad60a0557687c715e11b28baef

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2E81AD72F510DE323918762240DBFA47671611F9

MD5 f957d8efd47be7df5e43c4a8b3bde43f
SHA1 542283ba28904e5543b72ce86172633429a22e48
SHA256 404797d6288c10eb19a4e438d3645df531cd9b170cf881081a59cd53540cb7ee
SHA512 2b43c93990e6dd4b17fc72a9a9494fd2afb4cb509a744030d38914123b39caf7b347f06b3fa74b9b3cd50b1a389440eff08ed9bf1fb222ad86c1a01273a9230a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2CC7DE06DA1E2F306511E8B0DDA46619A7E9F821

MD5 a8f9ae2ba85d0288d1f3ba50194d4933
SHA1 5f2b22523327eeb6790733710baa5718ea5e57fb
SHA256 68534ab29b9cc6171b883abfba93ca3a829dcf3c070b311a458231ffb6b19cce
SHA512 fafd3736d85d462c028dba9df0d1843bb48ed43b581a35f2d4a921eaa10d9df7f5c4a3b289732414899db381681a7863b2c282bbb8d51075325330b788bea22b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2C6E6B484C78FA350276EE4DC1D32F9A2B9EBB42

MD5 7915e5e209d38e1206535c111874ff84
SHA1 ca8648bd19be73c100f890c9e3cd0cc3ffb19cf5
SHA256 c33d535ba59a94750b7d7a5296eca980c7b62d94a9e347e5290d5499191a9524
SHA512 8d0ddad1962223dd92833a2c00184f1fdafc6dd7ea0df4785a245921aac951ba5e8230f1549f53a7ea33d10c156ebf4b69bb01f10d98a921bc6b9197eddb413f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2AA9D2E9C9F2DF029190D0EF5FAFBF9616B11A17

MD5 1ea5a17ba8c5a98b9193c4a7cda468bd
SHA1 2c8ac4d3a1c46984d7bac8aad843335d70e84290
SHA256 fad382d992a42ebea247be06743175705d7c36acaa3e0e47ece7ef1758cd209c
SHA512 c4686746446a1b1d2c611b20595899c59695f7db21e35b2710d2bc54e2647f85d0418bb803567cfd306f0d518159bbfe1e1ca2af63b1c55688059d9760675b92

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\26EA895960D82B65062675CC8B6F95520E76D547

MD5 5303353ec777aa591439b7ec98e92a1a
SHA1 3686d8a8c3ac79d3d99057ed330cca205e8ce165
SHA256 57616dd129f226da20ba1b65548bc9670c43b13a240b5aa97fc70bf7bb039eba
SHA512 8ce7a3fa27c239416e97bcbb53b31e8ebc21f49dc7517954c07f3f414f98270ff3250243e4630233938b36181c0c4f975cd91bf46b440bc9a6843bfbe21b46c5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

MD5 d2ba7d2e7cb042ccfd484c3591932948
SHA1 12f8e7a0b19d9e920e1faebc18f22625b29ff336
SHA256 67612f5aedc649afdf876f53f5426de902c06e24a6f56991e020d95f7ac9e0c8
SHA512 ecd96f91684d0c7fa69fa73eaa87ff4acd3af0b4b8063b40264242718103b8aca1aec0d6ad3fc048ab3a488bbc46c3e2999d2ca31d24b8b2cb87a4a34b393a49

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2527C790BDF00A6FC2FDD33B63C707B20C6D2311

MD5 f7bf69278bba5a650cdd8ce3d046b72b
SHA1 e54ec7e4af68be3b179df98a0e017ac9b74bfb78
SHA256 e9ef699cc6882cbbeff6ca1d5b886c1fd3a15ce5620ecd529b130567826d5da4
SHA512 8370d42d77b1a9a30cae795564303641f3648949b2efb3c1ae861df8ae5fcdeaaa2cdcca7447bed5160a36eb6068ecbb11cb27f9778605afec8fa2c7f0ffc82f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\226BEC94526554011C9489B88F5A3F1FAED22D7A

MD5 1c6d827287c77ff98e976dbb34ba33ed
SHA1 b9173710ac01c43e9c1b23c825bc6e0dfa71feb5
SHA256 8788d283e9f5191dd1f025c94cdc7b78e1d61dc226050bd6750ca0b62e053431
SHA512 b14b061720e32d6969f799438d31b71da20c1afd8513fb1d97ef602968f3def9d3dc742be487b5578f7171c3f1677bc7d4df680ecaef484348e1bf0aaffe2fbc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\1FE35BB03DC127ABB97DBC7877F23ED190AF7EBA

MD5 b39cb6123c63003a92f6d6ef5749ade6
SHA1 72eac915355649d1d9567556cc92e006677fc449
SHA256 1ca0f3fd196986d829accb2518f636962ce872dc3d68bba936a8ad89e4b8cfd3
SHA512 f2b5e3bf9c316ef9654e49d02dd407dd8ef363e5d57285c11f62b6af3c905e95b3fb77641797a8e425153d5099486482110d1d3f8ca81cbcd33ad68fc1c645b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\1EAF952809CE3F2333546E31811C95AABD2662C2

MD5 ec97dfc5c11f152a57f0fe3e50fc0e1e
SHA1 0497766f8bdc674490c6bfeb3188a0ee580eda86
SHA256 4e0c8c6dbd6b15cc0148ca8d03379b714aadd200efc0a9d4cc25892db390399e
SHA512 8bc816cc54314b46b6dc15bdba38442ec8b7731f062342f6559e56232480e8f4cb326806a53729850ac8dc7614ac19e5a596613519ff9caeccc62620c9c06452

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\1D9D490B4360AE01687233085D8F626219689059

MD5 8f1758ec74373e06ec72cfd62b774599
SHA1 88ffa1952397d2600bfd4ad0639549af811193b9
SHA256 6eca2410d635a36a4a0eb110cec6a7775279c5107e944d0825eb963b4b3ae60d
SHA512 4163d1043099c7c007d62a42a1683d7c4388a603a694377ae98928bbb3b96fbb3743aa0e0265f294c462a9515769090904ca550f17061d8ae5dd31c963ca8c3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\1C3E37D45A60C21928679457EEEF1D504FC4D9F9

MD5 9ee596a6aecf501ea3bc06cde8fe2afe
SHA1 0c6af9ffe33d9f9307396f39d7326ab600b71bee
SHA256 811c5c6cd78b143610bde2d1097c4d6729acba7fe5e4ac1e66a2dd2120bc6d8e
SHA512 2cf25b47ad911765fcf36d47bb1e8dc1d4abbbc98c72c17a9fcdde929ed602b599d2ba8dd82098e9f09259e7db5cadbd42add80b5c346642dc64a21cd994e951

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\1954C3A38F2F57954B3136BB3B02DB8DF6934AD3

MD5 ccac2ae786fbc3b687bfaa4c023e2ca6
SHA1 4c8e1cd66ced2276b2ba49ce7e923e5ca052d2a5
SHA256 71a198f7dc49d5b31015b348a7322490ff8231f46b0d32508ac55e3e7a6bbfce
SHA512 b99bb429247e18deb072c10bb18fafae5772e92f2f991abb1f6eaa2c404cf8e24445edb543f2c4db05b78aef5fbcb436dbadc944cace2a26113221bb41fbc4d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\190CEC310764DFE41B8A64F2232A3FA75451D148

MD5 814720634e56cd1a0e00d52cc4520c70
SHA1 d34a95b944d54a4c68efd7c113f972454ede4c45
SHA256 fbaed36f1452901e2ae9b5a6b237f24686446896d1e82836a3e215919878a832
SHA512 4a5e28c39455565c8a41320d4a1c7126492e81faa432b3bf32b0d2fca1f04d56f889aa0399043e626a89e2a7b04888913535dc594ae07d9c0f3561d94166dd73

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\16D6C7A437BBA567533C35D47EC7F6034AC73251

MD5 d7c3bd64d499018324882cdb2529b167
SHA1 521c76a5e497c217b72a0fa6bc0db5bd57903db1
SHA256 80a3627355e8550119022d267b07d0f35a72bacb2c45e42b707ebb29f847cb48
SHA512 8b7320f9a4e42c709a13a12344f837ab26645ab31021c426d6d2de0ec50fd6f138307c0bf918fb3c1af72e16342c2758a27575f5dc5f53207b27cb64c18ea886

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\14D9EA420D8B7113871335E7B6DCDC297BA78E56

MD5 af303194691a785ec3607ee216000a71
SHA1 ecaa717dc7b4cb9060057ff46588c98e890d769c
SHA256 8093bf304b166ec72d52381480aa1e903e61c75ae4e1a24b4fbb073fc9633909
SHA512 4e434d89fafceae8779d9b9202cd0a0d6c76a9b799cd5ef9aecb6a471748d256ee82cb9c90e49e6dd2cfe3c6e18245b1efd2e4cc39c95749e79695fa965afa27

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\111602F8D77AF6E5F05BE1FE3F565839E71702B6

MD5 f09c9b6ed63d5f2aedb622f4a3de5916
SHA1 77dd754ee29dd1f076f00fce1e8c3815b24ca98d
SHA256 1297df3743c25a3bb50c2ac1eb9d58ba0e09a2e33a100ea990f4aaec1200ae5c
SHA512 ecf81061f2647a224af04edcc5b51fcbfc435d648f93fe92b3869a87d22aeedfa567f2dddbd3060ee14acf44165762063063451d2f741cf5b6cea3494b9b6844

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\10B93CC0D273458B298903B0F0004318F10F9388

MD5 853cd17dc8f3e3a36f99753ce014fbba
SHA1 d6b003ed60fac9b55499c6a4ed143f3d6b7807be
SHA256 31ef9b95fd996af835dda4d963bbfb05a0a71049f5acd84b89c6054531828a56
SHA512 3e506862989934d3e67485896013297627e66d603c6db73795635f49345ffddd1558c2730176f3b972b56c6dc0c9b556d80fb20b715db89df687f58bedceab20

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\0ADADB63FF4347BE8882A41CB30B8960FA6A87C7

MD5 1c362feab5a174689858ce00405b17a8
SHA1 6671eb2c9fbeb03c319e899ea05d1af8eaf31b1c
SHA256 10ac084270a4b2a12321526d3636b79052d0cf54c391733fc5a21c4a9232d344
SHA512 c25a278daa914fedfd0162801470e675fab800bfd575974c26d2ef6b785aca3d535592a34cd78c0f5505c350358fe7baed68af9e6c31c2891c5b49fc37ba36c4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\06782790526C16716B03172F12114162395C58AE

MD5 0e1327e3b335da5d0217a36155069b53
SHA1 5fa7b3b1e6dfd3e9ce0401b414b240e080099470
SHA256 468691f732b73e17b3ce148dbe6b677af746cfc931789d6c3e18b3301b7ede9d
SHA512 58ef5ee392ad732f1c537de3e145d6164922b66f9f124c7b55c918716ebab5e5ec1b7abf2925dd5a80f4c57362f08a7b5da86204da6118137149053b02a613a7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\037778A55E1B7E9BED3390289866D09402D6C913

MD5 82cef06d2b3fa5f6176caf68059ac841
SHA1 9ea2af80fb524398d63e4b7fbf59036223ee3dbb
SHA256 5e1f904c578dcb937f590fe4d3bd3799c2dae70a58cb33a94761c603f6ea685c
SHA512 196c528e0ae9a780be3bc44a388c5863c87046d17e497030ffdf8194510995ee9530c89f6a2f347d55292202220a9810a3b5df16ea3253121c1e29bd9399c908

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\0305BF7FE660AF5F32B4319E4C7EF7A7B70257A3

MD5 fab1bdaaaddf546aa96b2c88db242376
SHA1 a061cbda3e837827d28e0aac0e9c865fddefb791
SHA256 0ec1d214671e6e89f6d3901658e2832f623fc5bb04951412c71c1f82f9bf33dc
SHA512 cbdd3e6c4c8a329cb350ebcc0049bbb4c1dccbc4534ba4ef55efb1174a9e7bce63928e554a7ca42bdebeb316da49147b53085d2253af3b4cde6d74e9fceff767

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\012CB6CDC829E7EFEDFF271D53A08355FAEF42BA

MD5 c69c5d5b52837d7936426fcbc9acdb5e
SHA1 42d99e32c15539f257c8b3205b4d15a3143b062c
SHA256 287319ad810c247bbc3876a3fb7549caf49ac20bc7fea565ecc423a2b133e365
SHA512 2900daf1b261b00f1223ed3bb0bbce463c95788ade22bb5aa5d72ccf1301ae08a661a409013228b62023eac8fe0beff94ee3951680646bee83e081610d5da114

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\001E78BE0F46E747FAB3577D5E57F354E7488E2F

MD5 784a05b2778a92faf3c2ea65327673db
SHA1 64b8aaeb775c23e62797615fa41c87d23931ca57
SHA256 b7a28c9aceb8fd0133dc91e2c48ea59c0cbf264ff05feca5dd4b1096179579d1
SHA512 a217d151954fd8d9d94df29f5ef70710f14ed11d3a511bcfcb77c8f8fd1b4855547f37620b843bc6769b89939567003aaaf2b72729e5d07f6bc04ee0d016198c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\crashes\store.json.mozlz4.tmp

MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14121

MD5 0f4298a93a1d2a11c7af5d9d1165c3df
SHA1 1e2350e6036f2ad5dcd48a891ff1c02a1b77a346
SHA256 ca035af1d14562fd6c6bc30cb106597a7a449d42dd2fc2cd888506f63b13f173
SHA512 b0476d4c40729a104be2834f3dab1ef64eb0c4e3fcbe19aff0a048fd263c1ca255299a79aabd57c4f0b8b0f8b5412e4f16296f945dd0066eea9d7f1b3011fe4e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\79679B23E6BBEB689E1C79E27C32C20C5EC9DF47

MD5 3e6a265d1b47f023e01170d7634055f6
SHA1 f8f17bcef81d030f2ef61aae46bdbccdcb099770
SHA256 f3c89ffd4ba6465c0ba11246396886f2d8fd2b0d002519b94eb04d2c23d4422a
SHA512 4582f1a270d21dc308055768a6a525f168a8858cd9f2562bc6693b59168310fdf86ec164c38c22bd7f3342405134f374aad3e7edf55b111c6c39114f23fd70fe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\549C94847E35BE89DCE95DF86EA39378F22E5078

MD5 cbb436e855d2e2da0b906fbcbe928229
SHA1 140e7f4f7a9e0d6f3b358b3ab2091b0d7793fbf9
SHA256 0d00156342055063a372ebb01c722af210dcc1e22354b6a0ce290acb48f0b7bd
SHA512 9983d889f5b2cb0dab390484fee8188e5b1b6410c3bd36739ae7d8c1920e3817f915d191563280c663733107292a7774fd1ecad43dd566baf6294545dc90f83f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2492994A253B970917AF5CDF605580B1C2DC16A0

MD5 31154b9b3684b7ba6250e0f4d0448941
SHA1 6932aab2de2c371395f786c2012416b2ba3de7db
SHA256 73ea11ac86aa4f08c035b5a13bfdc43dc8f0709a428134b422bb3a5d8909c579
SHA512 a2a5b9ee5a83af7950a9ef80acdce621d94631212303272459789d81ce00f1c99ec10137ec341b1b666fa2485a439878b49995459862bca59882681e7fa53f0f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\B08771B6E8690B9A3CB12B3DEC8BFBED017D08C2

MD5 a1dd8085d4b7e270cc080038c406b7dc
SHA1 96acdc741fddc9def77e646c3771608d459b9276
SHA256 4b10e5319a32011ce4bca532d81047d315522d54af2b06f4cdf7e400961cbb65
SHA512 96084114631f1351da8d58d65b140d6d3d800d97a1c824d13392414e8474be67afe7669b08a8a99dd9b3e9eeaaa943ce7e63c68115b1a6f3b681bf105d159761

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\73A861CDE699EE431D74FE52208FA22781309C1D

MD5 7cf494bc7da24bdf78fb0d5e6c0fbd32
SHA1 bb00c885aff2b7c93eed222f94ddc956e4598b56
SHA256 a1de4d76ac76d5322b6d5819ed5c31205d31fbc6a9cb920cc5548846e715f892
SHA512 3980bb5f5085764a643ea33fb6208692c87de54c97f5284966d7d0f0b01388b60751564717d43f87bb8b95c3552da7a9ce0bde6e92bbe1dcb2a5cb367c1f6a9f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6838fd881474bf3164726cc996cca3c9
SHA1 270687dbf1ceaa70f586818dce5f3954858ef949
SHA256 2b7f364b4a7238e54e0592efe1cb9277b93f881c4ab4af4848fe3c682a1e753d
SHA512 e545ad73fa9acff0491f029ca6087533e5667570c3bfa7919b8c3f11e7fdf0160442ed57ffb13ac1f967086cff0ae1b39784d496947438bc56d7c479e6edd630

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\8038EC24B8CC057EC6438D49ABF23629E90324A0

MD5 9a5fb02603b22b071b9e3aef145bfecd
SHA1 487c9ef92598ee633845a1939308398f74dac008
SHA256 82db5b7a39afaeeecdae88e21387ba606f2a21ef9d2c69feed14b864b0915ed4
SHA512 e2a41ea6bbda50391aa3f6a0989e3871a1fc478d80a6f435b1c342da2462b01814fbe38b406e74c1972d0cbfa52e6395451334662cf6953edb165db92334962b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\23998

MD5 bb50ff6d033367356c46f4acde9b2793
SHA1 948d1d0f13b43c2ce9a0718c3f4074ee765ec948
SHA256 0aae1f946fae545086dca2e4728688aae510238865337c1958dd5c43d9a32ce2
SHA512 68379fb0512c554e4afc3cb9cedcf849e6c1a78057b1902305a27658becf036de7a40059c728bb98413aff3383794afbfe36d5fc3937f50225e8ed3231dd9007

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\5763

MD5 2e5d850d516d3e0698cefa8069ebdba5
SHA1 03393f906e3a6208bf22a65540068cf5a66578c9
SHA256 86bd16c9ee5dcdbd5ae4ffb06af8533457943bba366bb6a9a3a4ee047764e89b
SHA512 f660b12f1d43379756d8a380410b8503c8b2da3544efc915a1388e5068e41ac8e88d65abda8906bd5b7864ab4348dd1126ba2123db62ff4e74c0d9c1e25f4141

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\18152

MD5 2f8c0f1c502601024a59b73b73e25e2e
SHA1 a27175b1206cce276811aa2cc15cbf401dee6d2e
SHA256 895d638d959e82157195cceac16d517bbe7fc2d11124025f5a529fa10ce52de8
SHA512 67c44bbe2711f03cb94e97876ce16e411a045a14a46f6817dbef5ec98e68a901e4e299f4f6e14f25cf17b8b7113d0e24245b0219790e37915f9a97ce2dd54d91

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\30777

MD5 ef552ab4439a6bf3a88025a507813e84
SHA1 4532aeae76711b4029c1ea0ce0da390eed691823
SHA256 a56e37a7e892e81461730e3d9a80a448c547d8cd0ce7a048b20acc538737c806
SHA512 c078e1a1c541be63b626c1814dbbb24e63621d1148c93db64aa7b859527c7d853f9d021725308adc6b6ad2294e1aa1444930231b173e552fa6054954f1151ace

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\3281DD4C79ACB61B312FD94931181EE61FD498DC

MD5 3b2960b8ce0115fdc7a225ee637be0a2
SHA1 b94afdcbb7e5cd99d0f6b16e6a48c42de96dd115
SHA256 14ce3d22e0049c502e405aa834ae5519b8bdf99258e0dcd93c517054d7720c8c
SHA512 751dd8912647860ffb62330c81a8492612cce1405ac4aa589e19a1dd138c7d0748e24f8d80714cec612aee90b3405bc5e7d8a37fd591b7629bcf24a9333fd15a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\24818

MD5 03c64c312cf8508591fcfe728d3e0a0f
SHA1 72900c7cdb7269c3b5c0f9e7bf09ca0286b17f29
SHA256 5cc7893d579dd700bd6470a2cbd8476dbe746cd90556c54bd42cbefaa2948748
SHA512 d618e5708e7de701276ca76bcadb011c1a936f19acab8bdc8b1b91e08655dcec6f0fe73f5af34846bcce65fd2c604fe3e9cab28e8cd83f1a9e35cecdc7d6add1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\4A472A1677BC1843EF62A5E99F0318F11EF48A12

MD5 f0454072f2678cdda033b12a526be835
SHA1 dd5d5440ec284581d5c3f0f9a8183c61ae0eadcc
SHA256 8a37cfb1b82248bd08a37b50db41903b3799c5b7d14460b39ee9889b87f30922
SHA512 0d8dac3f9c91dd788563812abd747bc896645c1f2f6166ff2846b871d73c3069ac8e6b5a1e3bbc1e4d8e73d2e68fbb129833933f21ec1835c425335ae6ad6fd3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\30AC9E9C28EC1FE2B05598F46EBAED7EC52CEEF8

MD5 9ce39e73afa9c3b213cb31d9168c6ae4
SHA1 f22ac7449acd10b88d8de4abbf18338df00e571e
SHA256 8def2e41b3f6ba52cee37d7af3a89114565170162cb98d3e3338d020c4bf8926
SHA512 f9c00a0627cb4411a1622d816f465d165e9fadd42958738b5d4a53c7d733e4b14a6214ecb6786a768b7b5b239476be51579d9eef69df7f1d6a1306ffec6320d4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\790CEE194F6BEB3DEAB304CAE478E69DEF115B99

MD5 36a62c1df08c73475106e4063f3e8f77
SHA1 421ba7586b8914bc46592a272dea71737e23fce8
SHA256 b333f8bc7022c05a8171f1994dc9be6ce712118168b44530b2f05726c39a6dce
SHA512 885e9ee6a94ffcb0d78518c5163b81e646d1a6b83f62b3b3264c37d14c27af2ca05c66844ae30d0b239e1e61a16842656f9325ca7bf67ed3ab7f9b5f0133fc75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\81A963B5CE2EEE7044A75A00891F99B197C85D3E

MD5 d12fb8cb06985f8177955e4358979307
SHA1 33894ecde80617fae1bbfbb312dd08d449fa733c
SHA256 3737a7146dae1649ac90961f472993d9efb87e73d108496b6486dc64db9cf61a
SHA512 3700f8f1f48a1b47bf8262f1f3e1ca101d8d65d63cc9aa9993f77c5c3ea2612cdd8b6e96ab1d2285e9bb98af703c82e8379efd05ebac8df2a17b30c634b5681f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\F8A175656446470CC4F58CF7C19FB1E9C4975745

MD5 8777af91a66678889a142e09f4231eb7
SHA1 bb0708b85413f0b69906b7334261cff6a3502ff8
SHA256 d7f8b7fbef725191c768a2cdc1782f422e83b472297d7a6cfbef2793383132da
SHA512 f7a1cf97476baf35af180f0c057520161809cdde45ab3d8d7ce96efe2cf2b24ea0429e18c6209f4f6d5ffc76b99992c63b38e192c1bec3a0d61fff587f1057d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\6606CAE172E2121FA3567AC63FE8C4C1FC439295

MD5 c20dc86797816c7de2aab2a7346e8f87
SHA1 e47a1703ccc6cc2cd9b679fe0f36fc2b5c907c48
SHA256 fa6762e459397e50f59cc1c1e147cfc56d500af522206c3ddfd671a457e461d3
SHA512 9663d3030ae30c249a1dbc1867c4509ab469f43a4254dafdfc550fcb2ba7c1330146f4ef0b388b8f8750e7b952a65b42493b9c559083a11eb84299ccc2d7d62c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\0A7E7594E69C439CD52608F096A141AF3C4BD6DD

MD5 c524d22dad118c660aed7090b0309f5c
SHA1 39d97af715930b1c17b1d8c15776dba7290cddb3
SHA256 82280271d2f360c97656250ae8b829abd51d4d25562868076f675f3e0aa13de5
SHA512 9496b1a6cfd68310a944ed78b0cbe9b20751414d0d4ecd16f7df7a12a150c9cc48e1026e971a92cfcdd893ddcd898bb1a5a38f3e77e09767b8cc914f3fff29c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\32EBD18D648D0C2686A8CEA2660881510BCE9AFB

MD5 113911cc61686b5ae2ce5136084a86d3
SHA1 209e00944130f2a5effd9e0b8e565abbff1b07e0
SHA256 58fa75cf116203a721c2460c34c0668a6b948c5162ff2b4a5b146a7b86b30d14
SHA512 bc7de2e75351ebe25c535a56f84f05da4da561216547f16d26256e76f21abfc5ce5cd059f28102b632b1c8452a5c52cb1b995db669196146dd8de7931cce2dfb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2CFCC364A7B2E7A8E9AB96BD93785B6E9759AA7A

MD5 f9d0a2df64094d1181676c1a597ec872
SHA1 a96e7587ad727c14031b51d026f42436f79d3905
SHA256 eff7a44bee1ebfa11807772610a018799cf9c4b33857ec1f1f28d537490c7097
SHA512 3e5e949329effccbfa4539aa2c08794ffb50760773b7e4873a1957355783ba7564d2a7f9fa1b365d593844c002bda2cb1d5e5bf27d7179ade53218078714bd6a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\AA760A3DBDC90071E7345327E1D0D2D023C9E436

MD5 f26bd826f7945a4a3c1fb3fa22aa5558
SHA1 97505db34b844708340e80f801768c7afe4542ad
SHA256 94767dca28c42441c5f002be2e0d174130ca5711aef8952e767e21b8565c9cd5
SHA512 68170cde284cf1b5e29ed9d1e676ec57f9386a7fcafe1f60aaa81350db110c1edab2fa1a9491e5ac5776d231b3d3d9bae87f494a1e7750736b14da2a8e2fb3c2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\CF082F6E5E460A360E0559F4CA94ED1B2773AD56

MD5 2edb6932dbcc68fd860dc2a2eef291a7
SHA1 402264e4ba6a0ef0a7287e5a3cced80b3a6ae100
SHA256 62d1602474eb451bf48c340df8203f29929471bda2bf03396b4e7b11da13ba1e
SHA512 a5b9491aaa044200334f7e5e9e438a8be06fb462edb7be8ef168bc32de12582554e66731eb4ca8bc1177fbe26fce060bb53ada461d3fb7ee082d669745c63e66

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\3DDA16BC6DDABAD758EAAD1BB9028434BF62D323

MD5 7cfd93d7f1f8e67d69704e19ec1bc2c6
SHA1 5c4b3852c3fe0e1bbe0a77455e129777a0a758dd
SHA256 b17fc4e3d0fae0844ac6cfd17f5c4c3fecdcafc0376ec9c6cb7035d3eabafb88
SHA512 bcaf0a162b41c66a664cf5962a584d032c1bd6e8e111b2e3be233357531b0e50e1d516c12afad77eae1b0b1c754c2f317635c86766010de48e78961f7b477522

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\41E5E28E239A73B8F703C0AE66C16E2081C22433

MD5 7a7fd93104f745e06ad6107060bf4e14
SHA1 7746524f24835b54a3f209d5c990ccadac147c2c
SHA256 6013b615812686aa29038f005cd126fff1bb602a1de433fd9b0a8e36352a6df8
SHA512 a7edeef4772c3bd1972950a1137497086bf928426f856e23451ae1bff3e6117075b0f70a5e02964115e256ce8dd42f53bb3a56f872c37f6e8ce6c76ce0a9d32e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\4CD9C49FC10E182A85091D6202EE49D08273FEBE

MD5 314edb10db27be07ee0de8e6df78c208
SHA1 1cd2dc289338b3baa7c6ab54adc0a0776821c049
SHA256 54940806b51c6e53b67d7c0e5667754b733b8bed7600594a4a7e9d5429386118
SHA512 1602ea44719b19e450a3c7d84eaf6eefb9c9edd484c786ef5c6106559fd83311c8f9373b32919579379b8bc553e9f2df16fb134d310463734433a4d66c64a7b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2FBC4A5907EBCE391E0A4A9E3473978601B92010

MD5 bec8e6c9a9c8b7021da096bf6af99efb
SHA1 d365bdc42f9aa25778f4e709528041a16d458775
SHA256 322bbd869b79fe3ac27b7cb763d7d36d860f70ad715e2538b0d919709a378d99
SHA512 a68a0d46e077d302a8561bb0729b12a9b81fe6eeff2c55c88b38d39d32710150f9dd3dab71374c10dfc33b12cbd91b8d94433bd9c072e6be840575bc02e2b27f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\057C1333DC628F967582E9B128DACDAF1994F084

MD5 4a0078d9ad634d93278da0957249c1b0
SHA1 6b7a7b5a11b827949519ed9952b3bc2f47cb4340
SHA256 f393ed96b17f0ffd1b9aefb24296df79a63831c9cb25b4254e2b64bf248995cc
SHA512 eb8319c4ca00e52b4976f0d7bd06179c7a16acc2a3917c61105043e327c1e4ef4918c2e983c8ae4143c42cf1e40f796c2712f93131a8c318939270739cb70c56

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\332BF4A508B63940E61F1A5852056B0CBD0CED30

MD5 4cfd59ab983f8aef7b71f70b59823b5e
SHA1 eb0dbee8d3263a7eacb36fd4de8ed454028b5b7d
SHA256 fc701e3e48241edb99e80969cb8c820311935009693ab1484551a3586382cdc2
SHA512 704358613bea15eb742f8ef0ed71e038694e9ef9d9ccfd5e41f5b7e0744005647ab80361dbb70030e7ac825bb9959c732c9405024da5f9c144d6c70f57037844

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\C54ACE8094E7F19195E74F89175C458D5C1189DE

MD5 ff226fec96e7ed508341185c061e22e3
SHA1 2dfa499954532f0b099e3d5a2156ea04073fdd72
SHA256 7cb43dec3502e6643bfd060ff8b3d3975fe7248f80c4517406b85f16d38017ab
SHA512 f1201ae8446a9833a76e56b3bdad1c1dbc70340b3760cc9c3915f2d81eabde50c489b51392668fc51563185581089ba6f69730c1771645dea12037619f45ddc6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\E6C22A3DFCD18E3C6145370266896FF76AE3F7EC

MD5 9ddd8a92414c1a25535de0baf4ccc6fc
SHA1 224051123c4cf99959860d010f5eafcbefe5b89d
SHA256 4810af89e6bb2fc0f4ba30166405c11f2a22925fe13186cd7e920a315975ffed
SHA512 291f908d34935839f54c22dfd57edf98a67c7c72cd7a3617fdc0e6be47e25c2aebe1748ec7b8290473f1a4e4481ed27db9bc84e065755dde4b4a9cb33fa58fd4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\033841AC2962B7E17B0868429EDC03DC39DA8B18

MD5 80c93795207ab4765e388622a1c76dac
SHA1 a61667915370e54c3e2ca2afd3053569a4cf9b6d
SHA256 6de119ddb3aaecb1fd4c57eeb9874c10eb08a734f8cecb6f9a1cd226f3d8b490
SHA512 d8edd841f5439349ac525df39721411a788f6ffbc3876761d11af1dfb17f27731377bc01b9e6143ba4d11e84e819afd8b92ae63b105f0544984b1f7bd858cd19

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\7FB78C9D4678D3E57F04D54F36A2847939730A90

MD5 4c7b9a2bf91a4186731331f47dfcf5db
SHA1 aacaa6f63b565078c5f01f363a8ec1e6ef84d42a
SHA256 64400b6ec8fd723208469fdfe26998e0fa4047e4df476cc27321fc14272ca416
SHA512 1e8153622ade571535fb57c4b028a51705f1849a342efbf329de8ea03446ab1a28b466dd0b7b77eb6ee4963d52164b7a3901187b5eebf924e235b7f826effd1a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\E7D23DB542865758810227C2B9CD915A62AE3908

MD5 6d724bde4b18e0900b79c25d8494fb5f
SHA1 c3615329f828ecb525d935a8ee91c10b44f64a97
SHA256 3d52a8159a8027e92d6c0f6ab769f17df98799a1fca701c5b658d197ca90808f
SHA512 3a9e3d6edd50f4a87804c41e316e445aad3377decf5c88b1ffc357e5bab57c76da0496b2903acc597d3b70427da3f110fbbf754c73253d126fe3ca3a5b948eb0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\9BCA510CA69962AD895A3817A766569C1EA9F05A

MD5 d2a2eb33f1f96ac31a3b6a849c47e949
SHA1 0e40fc4327cbd29531912fea73e0f55f7e574775
SHA256 9644f61eac6de8499d1de12db84fc982ff59f51203d2761de12c276c6f2215a9
SHA512 532097e768124ef8a9ab1077edd45e1989678e68a8cff74e1be020a1a5ee6f70ab44b8237ee1ea5650cc51ab68066568f626fbc37833a32f6fb098023831cd32

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\84660A5BE92883C6ACFF2147774E3764661887B1

MD5 71e30b723bf8de1082598b233d5ec7e5
SHA1 f0fe056a03e94974260cfa35a17e5c751480f0a8
SHA256 6923a079946cd062bd925e61a42acaea0e739365b8a61869177c8ba2950334f2
SHA512 671c1d4956933b9bf6050cc7a7e06693adfa9eddb847640cbdfedafaf6f07da3741919abc6d4612265ab4f2d0f2292ace2f7ae1f476ac2c03e54f7ebc94d1c88

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\5AD3524CD3E03E9828B6BF5AB931CBB536D58660

MD5 2e8c810742d02ff29e0221969ea5b02c
SHA1 5cbe05cc00489e8c73974628dc27951ca8fc4138
SHA256 8186e524385e8af76784929083e86473d3c710eeb06f9c156f0d1356dca8836b
SHA512 a0053a54556eafb06550cc8e6d7345dc6a36bad11b9d7da171d81a544777ce9c9a93d2e2a2822970dd4b28a2b0d7e38f34b8bdd2f96b8f80867e95548899ae90

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\D990DA307ACC971FBDC29084BB8695BA7B75399A

MD5 916db3bae313e87a45ad23048a510c94
SHA1 5f4274ad3b070abb975789fd1c8c93fa175a2738
SHA256 1d9cd555bb9027299a6887bdebd4f1c65ab81e6c135b8c8560f6cf131fc70ebf
SHA512 449c4a65fc7943acf2566bebabc357897e27a0336ad4ee486d8492deb03f26f39494ee5cd3f27d82f744a1b8f80b93ef3e0a55a00e14a493d8f77e2baf1ab67b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\B71DF7208077F0E2CD12CE58F6A471674A82FB23

MD5 b795f7872667851c81b995af87cec182
SHA1 09e77400a3b0cd2980628b8057eaf4c919c115f5
SHA256 005dae047753aaa1f5a73e6cdf53e8b1b8703e5aa65facd37491652de3a8a5f9
SHA512 2f07fd42dcdf7847dddd2f2d0bae014973a60cb5df990aae8246cc2a586e06b5ad131f42cbff76c660bf92155fec8805e03f2d7a8488d5ede1db6820c8644a2d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\C17D35D42C50F412063DD2E9C71AF94136F9A11A

MD5 bfc077feae01ce8469c89a0afa5eb7a0
SHA1 51b8ae6d6611e625a3b3157d3100ff78d49a6242
SHA256 3fd1e341679ae3e9075b79fa4cb26624cc07f70b454d6f0f819f234f4ffbae61
SHA512 99ca63b7c6284a3e2c3ff4cde69313a5b197fef5562e839d6825f8956b38bc7b7f6aa01857a16c7b30c092d9bb8d582a292ddc4cc3d5e2d271cf8933b6455b06

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\053D546920FF6B35326A6017EE390EFAEDC9C797

MD5 82d34bfc67a2a7a7eaa8980f27cc96fc
SHA1 2eb7654b5ec7d7dce1340ff32f446ea133e677f9
SHA256 3f048ec785cb5425c4041fe7858d3b846d39def6255e0d97caa997e9178246a0
SHA512 ac5eea02afd9477e96e3aeefcfa2336436d400f7575f8aab72df4e9355f2b55b56994b3766901ee657bbfd273ed648829346955795217f1a6a94109be74511e2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\BBB470D50753459E889E7FCCC857470B09FCD160

MD5 f8c70cfa40a279b1abfc2af035d123cc
SHA1 a496e0396496003657edc4ffeb05a69e44a9982d
SHA256 599de4aab3ed57ae4275c4dbf59ac93d0deeb397cc031f7d879ea8cb61eeaf4a
SHA512 94811b8e96ccc908d6ea53327f2850157af5c43ca9e9bd93cc73e44ed8609e29c96b4b7e606bea7d61f09f232f2aa5c1bdbf802549546d16e51a7044d43a94a8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\4542597AB91AE2D1ACB3D29DBBEF48FE914F167D

MD5 13b8d4902996b3f268fbceecf5ce0c4d
SHA1 44d65072e5140de72035477cb09ec866e44024de
SHA256 9d683dee91e9b4d9a553bba3839b8a44ffd0eff881758180360259e3bc60bfa9
SHA512 3572db26d6361bd92087b81d509dbdbbf18e2d231f459264380bcf1987ce856733441570e2e5425801599cc96acb0a41a91b75bf22c077ac99e53ca0e36d7bde

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\0A14640657965B8513D3F26C8B0E6802EF353192

MD5 42e2f70ffda23a00be6b3d7962e27a11
SHA1 5c823d3823d3f3b027680c180a3f28ca97f8abee
SHA256 efe9dfb275be988f0ed6bd988c6f77580b37744c759c48fc48e32a24cc6e23a6
SHA512 adc6ccb56a306ebd8343f683399b17c8cd44b5fcc0b0510aa84a098b8463b66caecece27bca76709e90a724d37867ef4e4b9eb7ebb3c4e2ad65793e2ae4c5d2f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2D5AA65374A8C26D62687A1695EAC1912ACFA61F

MD5 ae881db753279ee13a87fd8457e1fd63
SHA1 f892fd6da5061c1c821d1f61f733173f1cdaf2d6
SHA256 8574486cdeac9967684f13ed0c3b8f3a8a904a2fd53bbff48f36faf5f5e7dab0
SHA512 6fc402b6b53728fec1c95c958bece2fd81f8157f0717d20879100265d7b310c3e74ff34901042bd415e34efb81ae2aa806b906f8418a3ae9fa210f23be79ee6b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\6B62024006BFBD3F36449DB21ACFB07490B17572

MD5 79b7d6e2bf152331499a1dea9b7a1678
SHA1 22593c5a7a76e1b05066a65ccbef2603d229d9fd
SHA256 741c090b4e85bd39f0837cdd56ae6d6c0e4cf87c2a6a50fe6198a1f3a93cbb06
SHA512 92c204f27a157b6afe66e9d2bbc8d63f0889cee918a11bac58d063ddbad97c888083c8344e0cf1a8f03909bfb9586495a0bf3b095c0240c6553acf54ddbc29f8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2BEC24E1E075B1E86BF90B93B81B86CAE7592B90

MD5 ee47c176c75456231e778b3e7bc6acbd
SHA1 3003a02f980d820a814ace87e669bdf13f6560e0
SHA256 3b665bd91f29d0baa597cf7b8ba5f7331d50f2c0909551ac9e11bd480b23cdd1
SHA512 f78b59af20fab433b77c9c0ee8d04647a927f17fc8b8d900b23d3cd7ad4f1c0b82fe81376f537c1c4afe2c1c9b39034d7fc4afd7721f69ceeb338e26e9aacce9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\FFB1C613F97E9BD5371E2A03C268B7EBDB4CB1E1

MD5 2303e1b7b203bad17b19e27b9138fc90
SHA1 16492a3da871ca4edbc95eb9e20052466b317eba
SHA256 e5bc6eb5141fb1ad43210d6b8cd7aa26c14bef8c2146f8790c1b58fb490df36a
SHA512 75710de8931bfe5b7d2c4edf05803b6f85a9213c452809b414e1c7d097b1443e37315124ef04c02b0ae2ad15687f4b8d038db740dc0eebdfa0ed91695b46cbf3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\AE7D082987F75E3B9B71ED65630784998ACF2E96

MD5 ad60eecbee3cbc580651d81e7732d2be
SHA1 451c95da82b1e20ccd9ae304664cebae5d03fef8
SHA256 de5228ab10bb6c7d2f241c9f79fdf92b1f337884e254404e2a5461ab78b146b3
SHA512 23f379a25f5a7e5b50747cc321d7b0668ac47a8aa2c627775160a9d228a22e059305efb20a47b4a2d33360496d9b9cdd22c54e96f2cfb4365591607a348145d4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\D207CA89781848E7ECA4C658F22D4AEF1B168DD3

MD5 b77ee741675b6d8831fe9f83e0b5b94f
SHA1 aa5f3a720c175bae15937d95cf74b5101c7471df
SHA256 374feebb56a5b09ec38ab7b1ef6d05c52634742bb559bca0a4a21b070712f8a6
SHA512 206fe4674359c5150c752b39c573b482e0e8c0299ef1d56df660f628b206bd20ab59f9b4cdb3c5957487e86304d10876d558924a26a16792a91c62760caeba02

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\386EAC11CA4B921A58AF901DCD97B7FA5108EE6F

MD5 e3bf9e5b38a96c38c0a0fd00604a362d
SHA1 a79e9f610ade4362c7b55e1573f4adb49f52fb71
SHA256 3f87aaaee6d0dc4d10f326d688c5e1e668de7690655596de4c03168059125fa8
SHA512 d9ce9cf893f20d17a300fd12b5a4cd9c4bcb873b05177925ea1cce2033e65e1ee776716220b552a1346b05c14a79e7686abcffa6b8ee9eb2a873a4190c131451

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\25E61D0F193C12CBBBE09A429B66070577263AAA

MD5 7b340a8925424d858e45d8410ddb2cce
SHA1 00114a9422b2591b819ebe83c9868ace007095ea
SHA256 40a854c86741b145aa1b71e7e167b44113e5978a06e4c030c481cf33594c1896
SHA512 251705b1f93f5ae499cd428c9ec71fd38787980f4f6f7217168a95e85d7cd00e9595bac04d30cb99405d14484336374990a67b17ee380c94fd42b3facd85bf3b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\775F3C5258C9FA5A4E0F43C2810FA82967B85D3D

MD5 0edc1605696c78d858659271ee378670
SHA1 c8ba891f2a31ece3d05834791ac38de7499f3d6f
SHA256 54c8057e69b29586c1a99abe3b96c2cc6dd29c88f4645a1a1f9837ec38808f3a
SHA512 f407099c66b3274093f93acea78ad537de77a59d6d97709fecabe5648f5657943b9da834a0b44c7448dad9239879185368f647ecc3b6180368be04cd5e252843

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\68CD13CDE99B33434CC16167C7B0B073A64EC360

MD5 82a59a2af298bd0d14027e13a0325306
SHA1 58ca01353cde7a40e1a8143912b5ddc8505c3352
SHA256 b589cb5ba036da7f5bd6f97e8c1ed256acdec72d443db1c2e7c68ef2789e9a34
SHA512 8c0072ab61a639e72ab2d6cb9577f306325841a74fca53d8f50659ba5a48e675a075b15448f68330566b8543560ce3e02b71f95c97f7aa36225e85b1cbab3008

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\75E10B6CA912F3DD72B094B84BA83E8A0158EE6A

MD5 d7f1e010130f9b1593ea9e4819089170
SHA1 1f6e7d7fd709641059c1d0eb19994f76226b81c1
SHA256 fadaa9f594846404c8fc559627787690f1e1d38f9b72904ac8088a8fd11c9607
SHA512 fcd2709b9716d11fcfc6c8023b13b83d939448b2a02a83182f25d6a0a04c2f67e77c6d0f56649b35141868e6ce9d3ee45448c33667a5a20d3ef727e25fd23ff0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\A7185B128F37007861637E9F7A1F3A17CC67A193

MD5 c33d5376688f383d7472d39c463ddb23
SHA1 fd0fc7d37bdf0be2aa358b80648d86533dc8c842
SHA256 2d174a000a57aa555990a418a5030f338abacec74eda88c88c85e57982cd0c41
SHA512 835a1ee6d8a152a5e0a31be319e919e608594a4a4dbc3cd3231af45f382184f186db71c9c377ae42894f15efc07aedfd897d05037a56f1f8cecc7eaa60e27f6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\B8342474273D37A8A890CF968C26F05C940C66F0

MD5 6291cfad10cf61154a0901ca02b06719
SHA1 6d1949014c25b382d48e08634a217c4a7464ed63
SHA256 606d17e36badaa4a4e07af7457d3cdb3bcd92da7e2c6af830f2892a3248e45b6
SHA512 f91975a94bece3e137ebc551bfaf1ab1ad139014dae76e77ff8a1db1299b7d255146215083567a3787338d0cd9fdbf75ffb136cdd6ecd18fbb997b3f0f310b98

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\389079DF64017435469749E3A1C4109F84A76C82

MD5 012e662a7c9c72a4d697fc62c2924578
SHA1 d536bd2f4f494878dd31a8286a414b2ed2ce4cf8
SHA256 4ce3d10a2b5219a83e11f256fd6fff1ee3bccf144ffdec602f30508bece06ed6
SHA512 cc0309966792571ec2a4875da03fab5f3f3852f95a922ea0f5b7167d2324ea20668f0556060eba6469814d3ac94b863a6a52fe6c0360fec6c72e44477f62a15c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\9F73202CCBC4D299254FA58CA5A84115CD3120AA

MD5 ca6cadfdb4f6b5266bae713119de159e
SHA1 a8b8d6c354ebacc7a58cfb0b87011ce48fc5a938
SHA256 dfe5b07f90ada41f045750631d5822ef1afd410ca9f98f625ca4e9bfc5e508a1
SHA512 a3b0c0eab00390fcb0ac09fafb3ba08ebfde8218928a2c1d1d57d10c590e8a4521f3b59aa0e05da82f2dc5e71f4aa78da6c4350090f86b472249272dcf2c4e97

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\723F8F873B9356F0EC9B3BDB77E965BDC5E87E6C

MD5 6d879d8e321126383e20e29d33c52009
SHA1 04d01a599b83e9483fcd1497be27771449165649
SHA256 a13c2cd7a71366b812ff11f97c425786e6d6c06fcd1f372cc38951fd45400351
SHA512 00dce49845ea537a7acdeac2498adf682d39b379568d8d06d29c226e591777e760c45f4ce9e6bf858047c6f73bd1355430ac34cf49f07197a90c9a3501aaed40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 143c5711c9b1490ebf8ab8bb651e7000
SHA1 3040d4cfb6a832906e6edf79424dc5edebac5548
SHA256 3fcb4e299d502f4e1233c4eb201508c4071b512ff6875f20c753a735eee2fda0
SHA512 a5a242dd0fe828f0f899334f038355fd49a29bf191be79c479fddfa94c945abd494474c774a36a62faac724b820bb223c3cb3d9b0ae2c98ce31df7ae84415478

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\21216

MD5 e522fbd13473f4f3da772220a6441aa0
SHA1 a98ace2dd9c9be2598b0f66db1e580b1310811f4
SHA256 10425df06bcbf248dca8ed66f92be4e08f816ffcab354be6ac6dfebdd028b150
SHA512 1a273bbfcb5e1c5c089b0213c4a960914d70c65471edce2fd68e5241bb71fe77078a7811f21c0f96f0baeab4516e3ed8ee4852c56f59f38ff0d2541fe44ac2e7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\A6C74BC2260EAFF823C7AED38BBA607C962CCB55

MD5 fe7da3e656781767e19ae36cb031ba27
SHA1 1d8d9e32331fd31ad8d59fb2bef7c7b8a4461ef5
SHA256 e095c78497c944c127372eb65cb7bf55e18e5952c63ce2bfa6b2deb35fd3ca12
SHA512 32d1608f41f69f52cf35f7c800e465b280669dcb8ab02b1244b75fd85732056bfdfb54ccd4fb49f3564c186737f78fddca11badc13104cec1f88e292c7557011

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\12127

MD5 f3d4062843a390ff85c00faf3a01d7af
SHA1 4ed1d79a2dd3c7cf5a77892f36b2f1470b552774
SHA256 3502e5f62295b39b9b75e93f35d9da4c032906cffe9bfa89064270c232ed5a0d
SHA512 5afb43d875b578a080aac8b7c2100528155d6b842f9df6ee6f1f529639bcd3188d7e115aecd962bd771bb1ce239ec9af6f1898b0d46e058134a22a3ebf83621f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b1ded28374adc62796d36c443a77fc87
SHA1 5212c417ac8729d6814473645591cdc20909e92e
SHA256 7cc3706fc0b9de0adbfca5d6646c47bb394c91d9ac920e973dc9a4248d55e320
SHA512 3cfdeced4f63bb760b04b5bc3cbc494436997f091905b188ca676b308b3c7edcdb6b4beed33e725e50338fd93cee652dcc7cda5877c74859a75f50ae0def8130

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 afc84badd9b09b46a84f6e2628cbc8b4
SHA1 8a22f3c16e95bd10cf692340e8408435bf19cb24
SHA256 7f0c59358b8bbd636310eb941e6439b2da461955c6c8655eb1e62d9e7c71e7b0
SHA512 37a236383f44264d57c177f88577345c75a748012da322eae0039f4ef90f6b3f6d889afd8b85d7ab4916a6ca17f4ae44a2c7b21a37e9a4bf78c44000775d0743

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\5F06DC3FBD2D7E40D137D8E6C0FEA28CFADD315E

MD5 9ce60bb8ca68b5964f4874849672bc54
SHA1 ff9377b60effb7b2aa15ac27787e5c3fbd01d3f7
SHA256 0578781ab995fd9dc78b7bfe3c9c2adb46cb6da328c0da95a5aec8030f0892e2
SHA512 0f8b27bfd802209b5e28d87acb0b49fc2427a126ca23b6caa8bb00a2fadf71a7e16b57feb8ecde946f70697988b4d2197f7b10e9915ff32859af6dec26998c20

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7d56602c3c7741aeee645f6ecdfa7ed0
SHA1 5aff095cf134d1524ebbefc94b39c6b4293e55df
SHA256 4d08a15840d449ac6453616247c2efad2a3ab1fa63a7bb7cb35f31201521e944
SHA512 7a30f10ff276ffe3c89bdd382567acd8be7a6997b9ea8b19af767eb0c7801be1bb04e5d6990b92f60fc69a56923733ec78335fbf864609cd5f1109272e57f270

C:\Users\Admin\Downloads\mFCOmQfr.zip.part

MD5 75a36eb2426e927dc34e16dc74654c94
SHA1 a2fbae9ef23ba8045617023e137831578bc0dec1
SHA256 840a4f08c3c8266017d84d53d0c749bb72d36942b16a1d314851d0804d7e3b46
SHA512 572cda1af7cad05027a3d01957b102645527598b322cd6d6554ec42ad1f6ea933365dd23fc41c25954bf0563804bf393681f483c90d98dfc0712bd87dbe8ff72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c9b0c7459d2d216a66e5a19688df6b18
SHA1 d14889203ef81d412c6d2671c20a024f6e99511a
SHA256 4a983874b386445a474c4b7f7c4e804d4180778a90311266607b0bc65f70060a
SHA512 495463ad55decb4fc9d41c08dfbb7681350d9ea866d0999b158a08011471237b0978f9a01135e25e3734535fc1bcdbd4a92cea0b505dea2e702a9372654032de

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 04d9b754753e810b07d684760ad0557b
SHA1 e2da9a4283b8ffb8c3979f647b2f631d9fc1da27
SHA256 d45b97843a863072e2a1af1bfb9dfc7f16d5e14d82aa812169b2ce327377a119
SHA512 f477f793cd853a32ab4f7fbe6494d7837225c05de43c3b2273773f3dbd5ee9cddf2677a477011dc9d6b1e1bb4ce7e7ae6299f68bd7800d03fc40eb9d3dd8a5e1

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 3caefc6772282bf59cdba14963485f53
SHA1 7fc376b1d6dbaf925814d12e8f921594f7804112
SHA256 f5b211f7c233b8fc1673d0ba312cde8537ce543b260ef93680500f3a8764eb81
SHA512 c595c0657efb691ea7176d88d9493e82ee711b69b791d1748fda7393e67903af99d9f3f9eb3e6b1881b76cd037cd554bfd4726191e3c746ad241e49214571e3d

C:\Users\Admin\AppData\Local\Temp\tmp46312.WMC\allservices.xml

MD5 df03e65b8e082f24dab09c57bc9c6241
SHA1 6b0dacbf38744c9a381830e6a5dc4c71bd7cedbf
SHA256 155b9c588061c71832af329fafa5678835d9153b8fbb7592195ae953d0c455ba
SHA512 ef1cc8d27fbc5da5daab854c933d3914b84ee539d4d2f0126dc1a04a830c5599e39a923c80257653638b1b99b0073a7174cc164be5887181730883c752ba2f99

C:\Users\Admin\AppData\Local\Temp\tmp47609.WMC\serviceinfo.xml

MD5 d58da90d6dc51f97cb84dfbffe2b2300
SHA1 5f86b06b992a3146cb698a99932ead57a5ec4666
SHA256 93acdb79543d9248ca3fca661f3ac287e6004e4b3dafd79d4c4070794ffbf2ad
SHA512 7f1e95e5aa4c8a0e4c967135c78f22f4505f2a48bbc619924d0096bf4a94d469389b9e8488c12edacfba819517b8376546687d1145660ad1f49d8c20a744e636

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\15149

MD5 44ebf51aa465534fcad3fd393d027836
SHA1 3e97200a8da850022afafa0578453d96bed2a59e
SHA256 2d63020744f0495e6021848e59aff1b71198ee87941c3a449417ae38402c5c4c
SHA512 e074186dad3bebe3472094007477dbdbf21734a9bae6326ea008badcf55b28c959d90ca9bb8ab0cea92875df17788613f17049b197c64f74bbb0350a04b0641d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\59E775949006F35F294214D82A34914D2424484A

MD5 03c68ba08f352ba43afb822452665f8f
SHA1 b25ba54daa8f6c91bc6758a22d93784803702c44
SHA256 7db052557eb8468c3cf910e12f633937726d96876bda6fb2fa01b6b9a92ce5c9
SHA512 a129d03ac8bf51e1bd53705684baa964dd893d387a8094be57b77ba628a06469fe5faaee0a744b005e293a7bc67cf6295e13e4c0ec5d88160cd4c4b10f7a041d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\BE91A47AE98719A666A0AE5DBC6C5CAFCB6513CF

MD5 3b65a5218546009459db2d3567501959
SHA1 af934ab586294cb62ce8e0be5ca916c215a84201
SHA256 0a584e720b3c063157c6ddfc1d2072a9045f94ed0a99826d1bd02f57650fcbd8
SHA512 631fb1e3ab40bbeccb6799da94bfe16d74b7a9ec62b73a75cab5196af6dcc009ce7fca945b7e77d133c3f9dd25bd8bbcd2bb8a270ee39c516fbeb040552f7f07

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\6586F7B38489859730F9ADC10B28BFE43E7639AA

MD5 f285f5fdaf231b445f26f5046509c258
SHA1 5e3215ec48c209edebf25f276f8cf1137db7c13b
SHA256 dcceec60a528e230c043bfd401a0a2de63654021d32361038f1438e8c9260d51
SHA512 ec37c6b84df3509866dba90493290762f8b3b24199021ea3928a722846ab808ed173a83e4f9d6df00d1936075c207226bf08273d953a27c5e7022a9cb3ca7584

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\5F4909CBE225CE96A9AB3579AE72E6ADA89428D9

MD5 a329b66c454156a2ea42fde17e4c3335
SHA1 cc93947f7bdc45a124b812e9232ec373f238eeb3
SHA256 e3c90cf3861008d33fe459f77b992f39278a113fefdbd5430713bad626d62a20
SHA512 01fc7092c75752c36573463cfdd53aaadf88e7acf6a44a3fe97c121477f50a96b578b34314705b7917d3d6c1403e2bb91978e302fa3966996b3fd13867b83837

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\D7EB97B69BE4CE4C6BB9083B4E08A4B504BFC2E3

MD5 ed43826e94b3a24425c6cfa7099351f7
SHA1 fd764a422f3734440d7e22e496dc4c45f4308149
SHA256 5ff3f63deb5e6e6062ddbc7779609a365f8e6b98319b0a22342b69fffacb9651
SHA512 e5eab5322ac24ea968e87022f334b70314d4f716d1f7923e2e18db5477b3e6e95bac15c0d5909115014ba207b9ed73fbb316ac5ef9d819dd2b98760aaeca0e5a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\71BF779DFBCE1307F42244F92E6190F178BC7120

MD5 0beab177f49b4af7fffccb230019f3c0
SHA1 afa22d04a2ceb099d811dc0af85a67b6010b2134
SHA256 688834c348b440d7795464050ef3b1d32363da2551cfa11cfe46d05d4ba3858e
SHA512 542d37b978dc5bff6d14d1ff84974e5cac3c35969c44e9da18a7d3d0a2a7ca0dd5a828239435a4f5d824d38e2d613061173f7d17ef1285bc1a5af038e8ba698a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\66326386D490F24D207F147E3E9BB57526D504C1

MD5 d0cb76c3dcf4565e442b738b42ae967f
SHA1 2d54e349e96f90d489d87673d989701ebb42c05c
SHA256 254ca8d9b9060d3e2efab7348cafda6a6148d72528e06ea062dc420167b9f55d
SHA512 97b9527ac808a2be154feb2ce29b752a42c2a5a286d222ab4f057322b0b6bee88efbbdd07dddd5f672b5c312316d7e1b80505feae87ea9cea5bcc659b0185d09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\3355

MD5 039ba9bc3be0df9c8f11c0c4776e7747
SHA1 e43af34f30e77a48b45b2c887f6919e348c6e168
SHA256 34018299d57185c1b60b689c4b46ede268c6076d42e77c3bb3535a2cca5d3aa5
SHA512 2e0cf15bc70d88891ffb12005f426df6763519ed96c0caccc25ba21546809600c1941e5ed75a55a58832e1a01c1c5aa9cb465ecdbc83ab80abe10e66d5af9d3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\9774

MD5 780965e23897723028261ab7cef1848b
SHA1 ac3ea2eb4227d9f08db5f11f2488e656b4dd72fa
SHA256 8bc700774f8eeabc39ef8f3329556fda2f419bade1987c4cf22ad9154ff95f12
SHA512 2cc6f1db3ecbcb3db2b5ee2944f1676e90457bc6f2667f3bf06d5003151cc833de7dac6ea08381ec5fa237cb88ddb7491812a4327be10f8318f3b74243fd3b53

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\3131

MD5 11a87d3844dff977e1144bd2ea85e9b3
SHA1 ef555e568d69320e9b29f9422964d038b9bd9e5b
SHA256 b7437c431c259477e0735ca46995c67a42130d84c4040ea609ad0ea3a5dc4126
SHA512 d09b93247a7dd24295382af622a5b17dbae2a9a713810b5c984e30cac714d9758db845cdd6ceab3ea3659e805a1f993bc05d8c5c9399f8d7c9d454af1d006689

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\32521

MD5 6cf11089dbbd34b55cfbba3b6ce5ca2d
SHA1 c37581e02a3fb7f2b95469c808745752e91e1da4
SHA256 fac5076925287543651c3261f08e13a077e9aba77da34cd431c1007a2dc3bde0
SHA512 2ae49b7bb7c68112e62998c0ffb36d572fc312d282c1d34f1d6136fdda92307bfef270a78b2247d268ded31f455c1e6812b808e13b0a243387d6275a4a0952c9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\C912FA58332DEB17DB4DB46836949DA477E0F765

MD5 bc2ee3a45b215f7dafa4f4b10b2d2e11
SHA1 38422ac31d5a22d2a7f6c02e9f585339eb4c26f2
SHA256 b886bd65fef94f582880cf3a55648b6bc74273bf342094330baa20a4ba1ccfe1
SHA512 6a65053c666a2a9f1231dff5b4a1dfb6ba2967898881376acd50ec810c4f4fddfa239d76aa39e69b10036c960d2ff117dff607bf3765a70b3ee3d0c568060644

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\15408

MD5 2ee7f5a950ba9c2ac6b1147e76e6525d
SHA1 81e3efab0a0da55ddfccca4107a3506645b6bb4c
SHA256 52165afe50056fbfeb56150cdfbc393e8c0075a6dec628c1f67fbb920f219848
SHA512 5c12169eabd30d16d73744b7d9540f2b9bc3ed9ebc5411ff5575cddf86b5254d4270f2c5afcea02df7c3a7ef8abbcea2bee5eeb612e33ade89740cc0279c8a99

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\C0D676B6AAB33D39ECD86188326C7453A9C721F1

MD5 683239bc39efe9f500994d7635cf27f5
SHA1 43587d1d2d0af12d175ff4cfe1304fc9126b95da
SHA256 651d2d254611ce18aa5d7c296d65a218ad325ef74a31299754f325330cccdffa
SHA512 2e521a45f52f8ffce3cf061f03b1dbfc314179a69bc0030e5ecddd5f51ef4bb834a035c2e665b602ea2d797441a3de8d07d5ff2d5fb4def190cd140b4bb6296d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\10416

MD5 3c025274a1635287049a28264c0033e9
SHA1 14d1fb5d586c5eb6118bd638ca0f89127b8ff202
SHA256 b40c2a229ca69d8d53d3a1f0f25af8e0accb7c1473f5e032ed8868a06295dc35
SHA512 c6ae16123eacdea3238ddaaabc1c88dded54b244a5077a6f9e532979da390c668c60fae8dca0045a356bcf97292d19cc75c67fff5c27c031a599edd3fdd5069f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\7151

MD5 3b7eedfafaaab641f4a6802c4a72b7c4
SHA1 7ffb9fdab1a1aa98de487f155fbf8c241a321183
SHA256 7fdaacbba97e8dfdd6d92117d042222a7d4b6829b528fdc2cc19fb943fd0a018
SHA512 b57e518a63878d070499a6e47308eff2851b37a21d5c1774ba19e871dfb642d3175fae1350013b7657cc5ecca7e6c8f2276c9e6e5240b9efb2cc98cf49bccb9f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\32312

MD5 d3342f788a745ba70b59d2ecebfadde7
SHA1 25c3d513e6fb7860dfe3737de4b389aaad139816
SHA256 9d9ca3d020722f6138fb94d8ef731d12b1217111cc5530fc6fe85857298d3e58
SHA512 8ffb792d014041418ce3bc75e5510ca9b90eb084643fc0099f1d435eeebfdea2ac0ed8ea1be46a7adff084c0e79ab63f021d6d7e9ca09415f647d781cc235f5c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 4e7059b3d97510242ca53049dec646f5
SHA1 d8e9843fe67a78baff096c0566024f949f35e38e
SHA256 e0b9361ff019a2abc6d209bc291ac098e4739e82551010eb6a773c36ab7f96e6
SHA512 4f2689be5d949394649292146e556f60a7fd922dd73a94fa7c7d9297267f6f954d3679252697e5bad47e2ff22146a12df11ec55f6ad568baf93201a315ae31ae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6e13dbf0bd8d756b3934c416e22b66be
SHA1 67f87cb94848f6782269485264318850f6a4f6ea
SHA256 ec57b09b19bd117e8383293803a29c59aa82085aa6c29ce84de24b7e2fb1f795
SHA512 e89b86c7ee0db71bc788bb9e5f149ffa0491648a753e5b3fab0bbfe1d247c3c653337de26dfbea2226f2dd747a783da10abb0faa10f33e98d0a350921fb10c36

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 da69686cfc6fada9620bbae0d8056ece
SHA1 d6e98086754b473c7549d30d647fe172d19aaa2f
SHA256 ac09cd4c80eb8aae823a56ace69025bbc0bd967df002fa6162f15b8d592dceec
SHA512 f6b07b0b1626b78dacd718b94c19b15d284367da0ce6a1fe935b0aca69f011a9e7586f034dab36c46a6c4b8daca1a270842a9823121bbdbae54cf9460293158b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs.js

MD5 c584795a3e7744a06a127188a4566ac8
SHA1 ac012be752739216f78bf4362f16e4072b1bae79
SHA256 49a0c3584d59b447d86126ae7491763ee256b4acb4b5c553faa9d01cf09e32a6
SHA512 107b6d9946e5eb6b09921b1d52ca05735b617d7f0bdbd32d67fdfe3fc59aebfc62d38f40c6c28ed2ecaa2ac6adace229299e0380afc9545e885a09a201e6b7ea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 59893c1cca6b094dbe0c2585c1e6ab16
SHA1 d6ea19e7d4bd02698dd181703ba79cd4769d17c1
SHA256 cc3f9470eb35e9a0e2852c13a226b17762b5c77f196bec1645502eaa20a86c0c
SHA512 c7dfe5008c6b677dfffb3873e4196d5b7d8b458022952bbfca723ded68755c68c09a3b70fdb39f99afbd61e5ad287358074f2b78c2e2d09c628a06d158081b3d