Program did not start
General Info
- URL
-
http://kba2ya4maa2.01tuv90xcz45ss2.cf/jquery.min.php
- Verdict
- Malicious activity
- Analysis date
- 11/8/2019, 16:29:26
- OS:
- Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
- Indicators:
Software environment set and analysis options
Launch configuration
- Task duration
- 60 seconds
- Additional time used
- none
- Fakenet option
- off
- Heavy Evaision option
- off
- MITM proxy
- off
- Route via Tor
- off
- Network geolocation
- off
- Privacy
- Public submission
- Autoconfirmation of UAC
- on
Software preset
- Internet Explorer 8.0.7601.17514
- Adobe Acrobat Reader DC MUI (15.023.20070)
- Adobe Flash Player 26 ActiveX (26.0.0.131)
- Adobe Flash Player 26 NPAPI (26.0.0.131)
- Adobe Flash Player 26 PPAPI (26.0.0.131)
- Adobe Refresh Manager (1.8.0)
- CCleaner (5.35)
- FileZilla Client 3.36.0 (3.36.0)
- Google Chrome (75.0.3770.100)
- Google Update Helper (1.3.34.7)
- Java 8 Update 92 (8.0.920.14)
- Java Auto Updater (2.8.92.14)
- Microsoft .NET Framework 4.7.2 (4.7.03062)
- Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Access MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Groove MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office IME (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office IME (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Language Pack 2010 - French/Français (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - German/Deutsch (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Italian/Italiano (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Japanese/日本語 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Korean/한국어 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Russian/русский (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Spanish/Español (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Turkish/Türkçe (14.0.4763.1013)
- Microsoft Office O MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office OneNote MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Outlook MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office PowerPoint MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Professional 2010 (14.0.6029.1000)
- Microsoft Office Proof (Arabic) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Basque) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Catalan) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Dutch) 2010 (14.0.4763.1000)
- Microsoft Office Proof (English) 2010 (14.0.6029.1000)
- Microsoft Office Proof (French) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Galician) 2010 (14.0.4763.1000)
- Microsoft Office Proof (German) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Proof (Ukrainian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
- Microsoft Office Proofing (French) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (German) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Publisher MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office SharePoint Designer MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Shared MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Single Image 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office X MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
- Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.21.27702 (14.21.27702.2)
- Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702 (14.21.27702)
- Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702 (14.21.27702)
- Mozilla Firefox 68.0.1 (x86 en-US) (68.0.1)
- Notepad++ (32-bit x86) (7.5.1)
- Opera 12.15 (12.15.1748)
- Skype version 8.29 (8.29)
- Update for Microsoft .NET Framework 4.7.2 (KB4087364) (1)
- VLC media player (2.2.6)
- WinRAR 5.60 (32-bit) (5.60.0)
Hotfixes
- Client LanguagePack Package
- Client Refresh LanguagePack Package
- CodecPack Basic Package
- Foundation Package
- IE Troubleshooters Package
- InternetExplorer Optional Package
- KB2534111
- KB2999226
- KB4019990
- KB976902
- LocalPack AU Package
- LocalPack CA Package
- LocalPack GB Package
- LocalPack US Package
- LocalPack ZA Package
- ProfessionalEdition
- UltimateEdition
Behavior activities
| MALICIOUS | SUSPICIOUS | INFO |
|---|---|---|
|
No malicious indicators. |
Creates files in the program directory
|
Creates files in the user directory
|
Screenshots
Processes
Total processes
40
Monitored processes
6
Malicious processes
0
Suspicious processes
0
Behavior graph
–
+
Specs description
Integrity level
elevation
Task сontains an error
or was rebooted
Process has crashed
Task contains several
apps running
Executable file was
dropped
Debug information is
available
Process was injected
Network attacks were
detected
Application downloaded
the executable file
Actions similar to
stealing personal data
Behavior similar to
exploiting the vulnerability
Inspected object has
sucpicious PE structure
File is detected by
antivirus software
CPU overrun
RAM overrun
Process starts the
services
Process was added to
the startup
Behavior similar to
spam
Low-level access to
the HDD
Probably Tor was used
System was rebooted
Connects to the
network
Known threat
Process information
Click at the process to see the details.
- PID
- 2504
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" "http://kba2ya4maa2.01tuv90xcz45ss2.cf/jquery.min.php"
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- ––
- User
- admin
- Integrity Level
- MEDIUM
- Exit code
- 0
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\apphelp.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
- PID
- 3900
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" http://kba2ya4maa2.01tuv90xcz45ss2.cf/jquery.min.php
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\kbdus.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\psapi.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\wbem\wbemprox.dll |
| c:\windows\system32\wbemcomn.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\cryptsp.dll |
| c:\windows\system32\winsta.dll |
| c:\windows\system32\rsaenh.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\rpcrtremote.dll |
| c:\windows\system32\wbem\wbemsvc.dll |
| c:\windows\system32\wbem\fastprox.dll |
| c:\windows\system32\ntdsapi.dll |
| c:\windows\system32\apphelp.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\wpc.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\netutils.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\d2d1.dll |
| c:\windows\system32\msimg32.dll |
| c:\windows\system32\wininet.dll |
| c:\windows\system32\urlmon.dll |
| c:\windows\system32\iertutil.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
| c:\windows\system32\sspicli.dll |
| c:\progra~1\mozill~1\nssckbi.dll |
| c:\windows\system32\rasapi32.dll |
| c:\windows\system32\rasman.dll |
| c:\windows\system32\rtutils.dll |
| c:\windows\system32\sensapi.dll |
| c:\windows\system32\rasadhlp.dll |
| c:\windows\system32\fwpuclnt.dll |
| c:\windows\system32\explorerframe.dll |
| c:\windows\system32\duser.dll |
| c:\windows\system32\dui70.dll |
| c:\windows\system32\actxprxy.dll |
| c:\program files\adobe\acrobat reader dc\reader\acrord32.exe |
| c:\program files\mozilla firefox\mozavutil.dll |
| c:\program files\mozilla firefox\mozavcodec.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\mf.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\ksuser.dll |
| c:\windows\system32\dxva2.dll |
| c:\windows\system32\evr.dll |
| c:\windows\system32\powrprof.dll |
| c:\windows\system32\msmpeg2adec.dll |
| c:\windows\system32\slc.dll |
| c:\windows\system32\msmpeg2vdec.dll |
| c:\windows\system32\sqmapi.dll |
| c:\windows\system32\bcrypt.dll |
- PID
- 3528
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3900.0.43858104\646726711" -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3900 "\\.\pipe\gecko-crash-server-pipe.3900" 1152 gpu
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\mf.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\ksuser.dll |
| c:\windows\system32\dxva2.dll |
| c:\windows\system32\evr.dll |
| c:\windows\system32\powrprof.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
- PID
- 1484
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3900.3.1313555930\489307633" -childID 1 -isForBrowser -prefsHandle 1584 -prefMapHandle 1716 -prefsLen 1 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3900 "\\.\pipe\gecko-crash-server-pipe.3900" 1732 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\wpc.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\netutils.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
- PID
- 3360
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3900.13.1389795052\815133544" -childID 2 -isForBrowser -prefsHandle 2884 -prefMapHandle 2888 -prefsLen 5997 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3900 "\\.\pipe\gecko-crash-server-pipe.3900" 2876 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
- PID
- 2132
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3900.20.430949620\757065946" -childID 3 -isForBrowser -prefsHandle 3740 -prefMapHandle 3744 -prefsLen 7196 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3900 "\\.\pipe\gecko-crash-server-pipe.3900" 3756 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
Registry activity
Total events
534
Read events
529
Write events
5
Delete events
0
Modification events
PID
Process
Operation
Key
Name
Value
3900
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Browser
4E540E1803000000
3900
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Telemetry
1
3900
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3900
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
2504
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Launcher
447B041803000000
Files activity
Executable files
0
Suspicious files
69
Text files
21
Unknown types
45
Dropped files
PID
Process
Filename
Type
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\crashes\store.json.mozlz4.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
b3710c1d1ed1382186468fcfdc4363e3
SHA256:
c19d05d1ff8104f590e5bbb2bba3ef95b97ba2515105182e45d3d40bd024e8d5
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
fca3261b70232c734798c426788623c7
SHA256:
4a8bd6ec09e19ae60ae730e7568190d815f6751727b57687808f05afe9a0b13a
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db-journal
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
2380e499b0c2a9af6c903ba33e257789
SHA256:
5ca748dba4e62b4c073780e5f721f0444e0356ed4586c327aa74e5e49915f945
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
c0669eb835466b558586031051446f68
SHA256:
66590e5bf0fde3277febc3ced9f875ff49de75344126992d55d2cb690e103462
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs-1.js
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
891909a48e4525b163bef515f75c23b6
SHA256:
3da33435479f9a291166be11d18739980401055dc050e34a0e31e2752d1e8c60
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json
text
MD5:
9cf5e9e40b5f764838f42c8f2721957f
SHA256:
ad9889206f043a9d31af59d6db2a74d9680930c009a560e8cd158bafa271af8f
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
3ff853bf3e969b5ee65990fc2fad7d09
SHA256:
fefacb190baeb66cf70838c34499124780274779c84d313f4f24a029397c990b
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
ae43aca64df22b027a85842d7ba7e7d2
SHA256:
c426c3e2346b19379a284942d1bd12c60506953e15b78f195475e7036a25f541
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto-1.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-backup
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto-1.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto-1.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto-1.vlpset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
9582c7d247c75c190135b8f9770b90bd
SHA256:
9936c7df1950b74f63bb7da12e40d95b20e0b8f867737442ee508945aa741ebd
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
binary
MD5:
78dcec0cca3c5d108fda713905cb017d
SHA256:
c2bcbf8269fd25481a15d67d990137ccb72e4c9af75b0aeabc884218c1105f6e
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
fbc98f77ba888a8de59303e51388e6f8
SHA256:
d428b4bd785997c2489bf052cad6b711e01c04e1a6586e9e4d7f1f6786029cfa
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
0ef6aaf0bd7d6ed972393142d10bfa47
SHA256:
408fcb2fcd01350c2db95ec771d121fd851cdb800c9c2115273bbcc7b9c5f55d
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
cc1763156e987d7e4796ed8e1aaaeea7
SHA256:
825de7f95fad8f980efa5f5fc976d4b34e88ee3492e1587c95c1f9e75ebf3027
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
62aa044408bd8cd025211a67b04bc612
SHA256:
4b1a6d46c9985b4b5a48b0eef45d90bf4cc6b102d78fd896a4a22d0c00347bca
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
eea78ce9d16fcda60116a61ca6372e59
SHA256:
2dde244cedacad8cfd26f31d3af09a605d8da264398d1d3dcb9cfbff83731e0b
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
779f3362332965499ee8b1dfef8def79
SHA256:
b53c103faa1e0952fdef71a4bb5992e622a480121ae42e3f92a98f7596de5710
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
32f346eec1cd7ca15d240deb7e1b92fb
SHA256:
2a7cf3c186f4c2009575e9c0d37a2f87ccb6aa2c002a4830b97e83f9987bdb1b
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
binary
MD5:
9702c14e80e6dd390a450909a81d2c8f
SHA256:
92c485c737f5b403bcea9f344de23fd8a8f3ea3629b244f9499e8dad77f3d6d5
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
2615ed123b3eb63c61ef0455bb2b34e3
SHA256:
a7a21ff9e31b468739b472de3621d3f6d34493be2dc88885cbe526343be20783
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
binary
MD5:
6e2df5e8f8fb96e4fbb3af02337dcef6
SHA256:
afeae83272c9467d7407c516759977393a17d9a332a3c4786fdf6cbeb0888960
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
binary
MD5:
5da8f75ca7d284f87d29a9b3de7f3305
SHA256:
6f612171da4d86018ba74e660239493084b520d7f67227e9b800e6453ef8e3c5
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
sqlite
MD5:
0ae485955034f89c4da6e0e35feefdfc
SHA256:
378fcf83a9244fcb3d6f1af179cb05cc82d2ec9a1cf4d72b39f424c8eb985d03
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-wal
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-wal
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
436a00a5c220685f0ea0c4ad43cafd46
SHA256:
7e4f0bb9ba06ac553c942df09beea6f4654e8391ec0e21824f540879d3826e5d
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child.bin
binary
MD5:
bd09ae31284f5f39c9a1bcc966ee4992
SHA256:
5bff27b82aed4dfefa851620f78a7b6ce97825e32ddaa8e4f96b9bb950801760
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-new.bin
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache.bin
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-new.bin
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache.bin
binary
MD5:
edaef7452164cffdbfa72c48321d5f51
SHA256:
94b0cbfe373cad093ea520e64e1f5fe9cd1e1be825b2ecc7d54656f6686a9f16
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-new.bin
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
d56fbeea7a45448f8348e2c4c4231e96
SHA256:
b399a8f1d61b948cb5a8cdc7545e15623de828890ea5e31d9090eb2865f90724
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\FC9A6D7F61408B0CBDFE6FCF3955F0B7D612B11A
der
MD5:
e5d7099271085325cb6857d63498bf4b
SHA256:
5ebe53b4e866d2a46c26bef3d2b1833aea38640b7c8b6aafc20fd5e599f5976f
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json
text
MD5:
11431640bde861117baf57975cfa9bb6
SHA256:
8084a523aaae2e9dacbb3d899869a27c8bd920b7c877fd010b43cff81af56886
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\crashes\store.json.mozlz4
jsonlz4
MD5:
a6338865eb252d0ef8fcf11fa9af3f0d
SHA256:
078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations.txt
text
MD5:
bef8ec74021a23512d2724a28c7dffa5
SHA256:
f3f0fed4885bef62a9e666dd47c41b76adb1bd63a2ab14c30e524eb5d91046f6
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations-1.txt
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_qNRIN7a8bM7eoSU
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DBAADDBE936AB2F853A9CA618FF84448E7790B44
cer
MD5:
c23207d59a57b72813b24dee95d05131
SHA256:
9821872702649ba6276a3d85c8e109d2e0ba3abd18ddd86b150db32bcc4d784b
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1D934245BFF92F546D1D205CC7BEBD74CC72A72A
binary
MD5:
8aed0ff39b7ce95f39c87fb36cf882c6
SHA256:
2f2a470b057574ec2124a2a5437446b0e93eef4f210082b8bb4eb54dc205a01c
3900
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_rYx8vgZKddHznEf
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
68947831eee500237a2d5b01c6d6c3ae
SHA256:
923c823a76aa744be6d1d02c680f5eb8e83de98d0823b65b3430fd9b8b3e0897
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
7d9c5b50e7d5ff561c3db8167a714bc2
SHA256:
05f6f8b88ecad956f39b61d05a76b05157d2c58ebe48a97925c068da2f1ebfdb
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ABEAA48B501FBD6A530EC9F222A741DA79987BC8
binary
MD5:
2bb4fd6c5d4084c80f2fe848557d1202
SHA256:
4c63762f7dd8e1b3c32d529a09e02d974936f7b1782fac1dee68705dc3bbe61a
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F36BA6E65505B424864C5907B9DCD4FA685F2145
binary
MD5:
c1d64ef2ef36fef8352db0d35161a218
SHA256:
0ea3c3f66519b87e2a553efe75287c9a8fd1aaf354e57d2175fec4d01e59c97b
3900
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_a1y0uoGn3tzIM3Y
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
35eb832761740121f56835e476d59345
SHA256:
8f51f91496ff7dc596fa5d205e96f2aff8db2c0ad40fbe65e98759961c90a61a
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
11ed94cb65d57d43cd3f8e600d634152
SHA256:
f7dcd154ba0e7f1d91f3f14eb926066cc6c79c29fdc8a35f1cb97786b3523508
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\20389B09730504F72FC74211F1E3B3EDD49F6C91
binary
MD5:
6f26c6a3898e34651063d9b5808447e9
SHA256:
f8092a239959f6ce88a463395277b86ca31f77df6d4ee50dcc110b52caff4455
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
317f31c5658047b798829361f5bd623c
SHA256:
fdd051e8d770aeb2bf28fa6f4b4fb9cdacd5fb6e6f09af8b613ca4275cc609a1
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ED4CE6DCD5C1EA4EBEB3F5CE4968C13FBFBA7575
binary
MD5:
6b0690c4570a179af27ffccf72b1adc0
SHA256:
c68906b540d1e1091409fce850b1845e999986090a3f195b6ba508dfbfebc052
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
10a460c0443701713076f09a1a86ae3b
SHA256:
5c08a77ac6e2bbb72352340c65d5e9061c9ae39fcb4dae389aae998c7f3c1176
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
f86d5975a7938b520774f84074b6fa56
SHA256:
ea2dc2c150dae78cbbc174ea59d4250aaa93d7a186f85586aad7b0e82f739615
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\AB423DCD1B1F2AC64DFC45A9DF00554A51D532F5
binary
MD5:
f0ffa8c645ff61362487aee650249717
SHA256:
f67535145a4b465adb8fd0209f16f017df4491e0f587804bb85ac644009ca5b4
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9A3EF8133F0FA6C3DE8D839A13E7E624CC01FBCC
binary
MD5:
00e48dd3d7b177d93e93a9c22259a366
SHA256:
ac300a180c172c815a4ebf50dfc10ef4eb473800291101fb251b28a2b2ca8cb3
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\849B5C71045EF2F278F1731CE6CE456601AA9E9C
binary
MD5:
6c7088905487dffa3db80303f3a245ab
SHA256:
a46415483b4998e7428e9f07706cf968dc5c7fb336cf7d8f9c6a2c87913a782b
3900
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_dYatEm3dIlwZ051
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\B06E1D29677C5C3714B3982BF0DADEE29A0C9B96
binary
MD5:
c76141643e9b75558ec46e4369f653f2
SHA256:
adab867d23c8de101a227af540fecfe495ae2cf3f245b0b940808760128aef28
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\61DDF24FDA7BD77387073AA138A9970293CE7BCE
compressed
MD5:
84ed8da344f30e86da325a8f9775b5fb
SHA256:
d49cd234d5b7c5a5e024de272e1c247de15d46696117ea62dade7600bca7d0df
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\B76AE19835CDEA86B521946719284134832ED132
binary
MD5:
218b8a2fdbad9f4337f0b7889e748683
SHA256:
6439d0a962920399d4d2b098320cbb1bb5e023398f2a2e96be113c0f74a7a45d
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\5EFE57A21A3A13D7E2E805E5C7A8CB47C72D0ECE
der
MD5:
dcd4a030975fae11630beb2961ecb3ca
SHA256:
85f469c074631c6fc5caf5b0e1d62d1090cfa4bac4d7f866c8f3d22990c95c70
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4
jsonlz4
MD5:
9f092552016f0a9a4336b5b2948042b0
SHA256:
857cfd9465ca0c25cd3e7b046169742b953d1124f2f463ecb1e54df6863c2076
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\previous.jsonlz4
jsonlz4
MD5:
da5a84a2615e68822fa04e81e66ea403
SHA256:
1c43e3fbd8cf850c863bba57a263da38355b9021b4a9bcc9f1d59ecaf9841ce9
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4
jsonlz4
MD5:
65a8568f72fdf05a592210c52784c82a
SHA256:
353279aec0402d3777cd400ecfa22ece3e3e882cb1e57056965db44bd1306465
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\FC206FC467E87A77E0FFDEEE3C9FE25DF9B566DC
der
MD5:
a8731b9236d36e78520812cf10b30f05
SHA256:
d645035d3dbe11b3c11a9ba1678695464b1736bc3e18e0f408af0be667727794
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\89FDCDE0B48DEBE118FA57D68BD3A65A0A0876DB
compressed
MD5:
22d2fe311a0874a512baeca146cc83f8
SHA256:
2f9c712cde19666ca0f3660890dc783cc5aea15e1873db2e42883cf32b2c533a
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
dde0d9df8f6a77620eb4bfa83d639d18
SHA256:
5ff694fb3da39a37bdb08911bc204e4522b0ec0e8fd8461e4e715feb051fc0f2
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\EE197B20CAB0419D1C0BD23EE03034F880EDC296
image
MD5:
2d42ad17c44fe7c318dabb20cf24dc99
SHA256:
87b50c1b3694c4be1ef87b79cfd562816bc0d48c425b338246570ea8b6b2aacb
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\402C0CE4DF91187CB5A00B5B605444BC41F64477
image
MD5:
e7d9597ecca364250242310fb6e7aeb0
SHA256:
ae85658be0ee154d78abfe3dde1aff4272ef170be689e1c4a8e8f321065ab435
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\07B8FFFE9C67B66E7CA22C2691CB4EF2FD359E99
binary
MD5:
a46bc7bf9bc2308e8b8fa5b36eb97a74
SHA256:
3f27f21edef8b1d805eea4459d498a28983f05a21e5eb60faa76df051c45a538
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\E619C5A30D38B18344C85E9B4B866720885B8DAA
der
MD5:
719a1ea51c72e6347a63e6b756b9703b
SHA256:
960f77b34c64da5858162ffb3fdee12e11621076ce26c8f1f659c01acb273a38
3900
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_eLzbKQTcRyhA2Hn
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\BE0CCFDEED023C83BCD6BAB4E7FA39C986B3EA5A
ini
MD5:
ded9a0fe5e7b626389476d9d43e2aed2
SHA256:
114384acaa072b2730efe0a90081c44a97aa073e71b44b57bbaea0756bdf630f
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\2475
binary
MD5:
e2ad220e176539d8470f5661a7777caa
SHA256:
48f6f4550310d8a7a573960035008a92744fd448be98fc836612c5e9c5e51938
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
binary
MD5:
e2cf527ca7550b7e7bdf7311e483a2c3
SHA256:
f1e07b1d717433f47073dc54a7d98e3e87b3d0fa88e53466f93ea544af885d11
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
82cdbc2edd5fa7d0f132b64c4ab4747b
SHA256:
4dfc4e07d018597cfa23cc6c658b722214304325919b96c13df8a615eab66e09
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
binary
MD5:
65e942614eee70680464ac4be75019fc
SHA256:
34395085da32c8b4efe9959e3b0d756b43ffed17694d66f39b966cd331bd9a94
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\A5D93CC48B83C8124FEB6A2E9448677EACA5BA86
binary
MD5:
449e64d4025d2658d11d3b68370e72ad
SHA256:
d7f0ff0d75af611f4a1389107de3b2756c285e360e17a841a587417a6e405a26
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\3373
binary
MD5:
a57eac8c4e0d59d6d62c92b05e210c46
SHA256:
ba0e89eca0b891a962786df3685c27588ad196a7c42c5218c3e2fa6873f31e89
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
binary
MD5:
95f28ede25c301301f25fbbd9a3c56ec
SHA256:
87763df78772f7d750b0fa5a31eec23e931fd3bd1cbb33beddfc61889da36478
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
binary
MD5:
a5695cc64d77967232b0c1344c6e72b3
SHA256:
042a22b8681d754671d2018ba109b31a53ee3728d48c6379043f8e3394e7fbad
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
binary
MD5:
051fb32dece757ba112ac36dc72e3a91
SHA256:
0806d98fb3de55f75d7c0b17e26146567e08c483031526659a4a35d09b97ef19
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
binary
MD5:
3d1ce5e50208f0cb3b979186043a548f
SHA256:
1e13d05d482c3d533dc6035af2b2d6e84749412a5748d1435b70cec8b312340b
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
binary
MD5:
3675254e341df799d4307c1f59109185
SHA256:
23d108134bed6099793f7dd6b8b6e62081ec3b945efdbc7c5e0e779fd9b82f98
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple-1.sbstore
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
2ad4445da23a8e50d667c09150cf1876
SHA256:
c1550f9dc8f675c7ff2c896ee91c839e4e2b243e759d71c128521c17f53e91b1
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
binary
MD5:
d6acf2573e12afdd7939568804d3fcc1
SHA256:
5525cbf8f8dc41d19ac632ed324e55293a510ae0eeba16d0e3f33c707aa58a0c
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
d9e28d043d05a069ac7962f181a05337
SHA256:
efbb9ada8e5f662779444e4de88ce944036b7c73d61acfb70239f809dd153aa1
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
6ee2fe4d5c3460929a4eec3138d76e8e
SHA256:
1bd0d3301b97fe608243e61c8fa114cc1ae9b69c0622a10cafe5cc1814df3b7a
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
f57521d4d31b44fbbb74ba8f2441f52f
SHA256:
fd6f2adcf2bce0ac48f15b6a67110e24ec8d24a566422512df2269f2cfac7a0d
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
93fdf288da71b455cfcb53f9e78add2a
SHA256:
017ed2622f8e5e1d72df4bc872bcf81ccfea9681aede1afdc7f3ddac800b0cf5
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
c0ff29e2429d6a67594d829b166b9d0b
SHA256:
a8ab69af442ae86af43f2a3bf22b91341377be23874762de01e3e71ef08f0318
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
8996548565a96f6ba34bc8317fb4f09e
SHA256:
f760f51c58a91fcc264b8d27f610372ad510209eae6d0911e0ac236e7405fdc8
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
binary
MD5:
7655fffe7cfbe1ebf96afea5fe2e1376
SHA256:
ff2f663c4e453706b7817109f6a43e8b3389e8cfb1b7d64aace2bfba45f3a359
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
binary
MD5:
498dae4e538658a57f464748f2dabfda
SHA256:
8778f52cd9cb4f4787bf7ba18006d212f8c3004652d163f7786556a8eef3a067
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
b4d69f529bf6d261075d04c6a5c56158
SHA256:
2794c0426aa721104df6a8615d57a251af30a79865cc69e369ed41cae4ea4ee8
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\B197DFE0CD5C6931442C3D87BE01A2F3BAE00F21
der
MD5:
9412f68eea31620e8982e9961cf2523b
SHA256:
bc424217e9220be6c4ae8f77b6a2ab13342f6a96590f27bbeaf93e55a1f4ede1
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
binary
MD5:
ba0009932844173bc8f9af264229df24
SHA256:
66d1c00c04d86e313e9a02775cdf906b1be8d4cd6bef423a1b9e21cc4e9f50c1
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
binary
MD5:
6f85bc4b2ecb49e26b0bd83a821065d0
SHA256:
c0b3bc9b3dc507ab654caf72d13c3aefa58c9b13b1e4d14dd8816712d80a7e54
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
binary
MD5:
04824a1f92353f43ebb9e7f74b7476fd
SHA256:
b48e58ebab82e4c376f16150a3fff850c1111ff1f5985d68819cfd6f0db159d2
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
binary
MD5:
c921d8e98fa01b4f303481e112202e92
SHA256:
4ef1038730ec8bc7206713c29a936768831b922c5e6c83355fd62d7401d8c1dc
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
binary
MD5:
0e8fe60ccd7e9b4c32589a5743a95302
SHA256:
2b124d4026850a3cffd28dbacb58aec28f7dcd4d40bc14e52bbe96d60ce4e749
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
4a1220fc03e11726f09e9981834345db
SHA256:
6ae7fc0fdbe217104f4034bf6a580a461106b50309abccff6e309124dca5ef39
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
binary
MD5:
d886a47c89d9c49c795da345bc236990
SHA256:
a03c5e2656d2f292bf5794c8eeb8d223cd6ba4f4bfb2ed1f325460e879d0bcf7
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
c03e7a6fce3e18d90b2f233b1327c0a5
SHA256:
2385ad1a7c108225f62d9bfd564a4142ee15daee062e2a70518d557f2940d81d
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
6d378e0d40b6eaca22c8bce899a1c5c1
SHA256:
ada2467b2477aceff837ac7820c435ad1ebbe844b2da31c7ab9ae8d010c7a639
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json.tmp
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json
text
MD5:
c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA256:
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
354459382f30b8994109c88659dfa1f3
SHA256:
e3e8e2b7e7eeca231620d83c70fa5a926e8b9ce74c51f595f71191dc0b50527e
3900
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cookies.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-current.bin
––
MD5:
––
SHA256:
––
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-current.bin
binary
MD5:
de9496aca551ade408ef6466a11833a1
SHA256:
8f9c7fdb3e0bc01024e43a8e242468fc4dd4f74c725e32a883571635203dc10a
3900
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-current.bin
binary
MD5:
5027177f513cdae07db2330e1ded5934
SHA256:
0c53f16051e738287a4612f68e296238087627e594cfd6ddfa1fecc2e998328b
Network activity
HTTP(S) requests
7
TCP/UDP connections
26
DNS requests
72
Threats
4
HTTP requests
| PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
| 3900 | firefox.exe | GET | 200 | 2.16.186.50:80 | http://detectportal.firefox.com/success.txt | unknown |
text
|
|
whitelisted |
| 3900 | firefox.exe | GET | 200 | 104.18.55.69:80 | http://kba2ya4maa2.01tuv90xcz45ss2.cf/jquery.min.php | US |
text
|
|
suspicious |
| 3900 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 3900 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 3900 | firefox.exe | GET | 404 | 104.18.55.69:80 | http://kba2ya4maa2.01tuv90xcz45ss2.cf/favicon.ico | US |
html
|
|
suspicious |
| 3900 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 3900 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
Connections
| PID | Process | IP | ASN | CN | Reputation |
|---|---|---|---|---|---|
| 3900 | firefox.exe | 104.18.55.69:80 | Cloudflare Inc | US | suspicious |
| 3900 | firefox.exe | 2.16.186.50:80 | Akamai International B.V. | –– | whitelisted |
| 3900 | firefox.exe | 52.89.218.39:443 | Amazon.com, Inc. | US | unknown |
| 3900 | firefox.exe | 35.160.158.154:443 | Amazon.com, Inc. | US | malicious |
| 3900 | firefox.exe | 54.69.207.70:443 | Amazon.com, Inc. | US | unknown |
| 3900 | firefox.exe | 52.222.157.235:443 | Amazon.com, Inc. | US | unknown |
| 3900 | firefox.exe | 93.184.220.29:80 | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
| 3900 | firefox.exe | 172.217.18.10:443 | Google Inc. | US | whitelisted |
| 3900 | firefox.exe | 216.58.206.3:80 | Google Inc. | US | whitelisted |
| 3900 | firefox.exe | 52.222.157.226:443 | Amazon.com, Inc. | US | unknown |
| 3900 | firefox.exe | 104.18.54.69:80 | Cloudflare Inc | US | shared |
| 3900 | firefox.exe | 104.18.55.69:443 | Cloudflare Inc | US | suspicious |
| 3900 | firefox.exe | 104.18.54.69:443 | Cloudflare Inc | US | shared |
| 3900 | firefox.exe | 143.204.214.46:443 | US | suspicious | |
| 3900 | firefox.exe | 52.89.48.8:443 | Amazon.com, Inc. | US | unknown |
| 3900 | firefox.exe | 13.35.253.94:443 | US | suspicious | |
| 3900 | firefox.exe | 143.204.214.67:443 | US | unknown | |
| 3900 | firefox.exe | 52.222.157.193:443 | Amazon.com, Inc. | US | unknown |
DNS requests
| Domain | IP | Reputation |
|---|---|---|
| detectportal.firefox.com | 2.16.186.50
2.16.186.112 |
whitelisted |
| kba2ya4maa2.01tuv90xcz45ss2.cf | 104.18.55.69
104.18.54.69 |
suspicious |
| a1089.dscd.akamai.net | 2.16.186.112
2.16.186.50 |
whitelisted |
| search.services.mozilla.com | 52.89.218.39
52.35.182.58 35.164.109.147 |
whitelisted |
| search.r53-2.services.mozilla.com | 35.164.109.147
52.35.182.58 52.89.218.39 |
whitelisted |
| push.services.mozilla.com | 35.160.158.154
|
whitelisted |
| autopush.prod.mozaws.net | 35.160.158.154
|
whitelisted |
| snippets.cdn.mozilla.net | 52.222.157.235
52.222.157.128 52.222.157.203 52.222.157.144 |
whitelisted |
| tiles.services.mozilla.com | 54.69.207.70
52.39.125.254 54.68.132.173 52.40.98.65 52.89.51.22 54.186.225.209 52.39.224.180 34.223.160.244 |
whitelisted |
| tiles.r53-2.services.mozilla.com | 34.223.160.244
52.39.224.180 54.186.225.209 52.89.51.22 52.40.98.65 54.68.132.173 52.39.125.254 54.69.207.70 |
whitelisted |
| d228z91au11ukj.cloudfront.net | No response | malicious |
| ocsp.digicert.com | 93.184.220.29
|
whitelisted |
| cs9.wac.phicdn.net | 93.184.220.29
|
whitelisted |
| safebrowsing.googleapis.com | 172.217.18.10
|
whitelisted |
| ocsp.pki.goog | 216.58.206.3
|
whitelisted |
| pki-goog.l.google.com | 216.58.206.3
|
whitelisted |
| firefox.settings.services.mozilla.com | 52.222.157.226
52.222.157.182 52.222.157.193 52.222.157.113 |
whitelisted |
| d2k03kvdk5cku0.cloudfront.net | 52.222.157.113
52.222.157.193 52.222.157.182 52.222.157.226 |
whitelisted |
| support.mozilla.org | 34.213.134.214
34.209.95.119 |
whitelisted |
| www.mozilla.org | 104.16.143.228
104.16.142.228 |
whitelisted |
| blog.mozilla.org | 35.197.18.156
|
whitelisted |
| www.mozilla.org.cdn.cloudflare.net | 104.16.142.228
104.16.143.228 |
whitelisted |
| prod-tp.sumo.mozit.cloud | 34.209.95.119
34.213.134.214 |
whitelisted |
| mozilla.wpengine.com | 35.197.18.156
|
whitelisted |
| www.youtube.com | 216.58.206.14
172.217.21.238 172.217.23.174 172.217.16.206 216.58.210.14 172.217.22.110 172.217.22.78 172.217.16.142 172.217.16.174 172.217.23.110 216.58.207.78 216.58.207.46 172.217.18.110 |
whitelisted |
| www.facebook.com | 31.13.92.36
|
whitelisted |
| youtube-ui.l.google.com | 172.217.18.110
216.58.206.14 172.217.21.238 172.217.23.174 172.217.16.206 216.58.210.14 172.217.22.110 172.217.22.78 172.217.16.142 172.217.16.174 172.217.23.110 216.58.207.78 216.58.207.46 |
whitelisted |
| www.ebay.de | 72.247.226.12
|
whitelisted |
| dyna.wikimedia.org | No response | whitelisted |
| www.wikipedia.org | 91.198.174.192
|
whitelisted |
| www.reddit.com | 151.101.1.140
151.101.65.140 151.101.129.140 151.101.193.140 |
whitelisted |
| star-mini.c10r.facebook.com | 31.13.92.36
|
whitelisted |
| e11847.g.akamaiedge.net | 72.247.226.12
|
whitelisted |
| reddit.map.fastly.net | No response | whitelisted |
| content-signature-2.cdn.mozilla.net | 143.204.214.46
143.204.214.76 143.204.214.32 143.204.214.10 |
whitelisted |
| d2nxq2uap88usk.cloudfront.net | 143.204.214.10
143.204.214.32 143.204.214.76 143.204.214.46 |
whitelisted |
| shavar.services.mozilla.com | 52.89.48.8
52.10.223.26 52.33.139.34 35.165.44.141 35.155.241.126 52.33.61.229 52.88.59.72 52.33.55.70 |
whitelisted |
| shavar.prod.mozaws.net | 52.33.55.70
52.88.59.72 52.33.61.229 35.155.241.126 35.165.44.141 52.33.139.34 52.10.223.26 52.89.48.8 |
whitelisted |
| tracking-protection.cdn.mozilla.net | 13.35.253.94
13.35.253.114 13.35.253.79 13.35.253.81 |
whitelisted |
| d1zkz3k4cclnv6.cloudfront.net | 13.35.253.81
13.35.253.79 13.35.253.114 13.35.253.94 |
whitelisted |
| aus5.mozilla.org | 143.204.214.67
143.204.214.113 143.204.214.93 143.204.214.128 |
whitelisted |
| balrog-cloudfront.prod.mozaws.net | No response | whitelisted |
Threats
| PID | Process | Class | Message |
|---|---|---|---|
| –– | –– | Potentially Bad Traffic | ET INFO DNS Query for Suspicious .cf Domain |
| –– | –– | Potentially Bad Traffic | ET INFO Observed DNS Query to .cloud TLD |
| –– | –– | Potentially Bad Traffic | ET INFO Observed DNS Query to .cloud TLD |
| 3900 | firefox.exe | Potentially Bad Traffic | ET INFO Suspicious Domain (*.cf) in TLS SNI |
Debug output strings
No debug info.