Program did not start
General Info
- URL
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fkasthurimachines.com%2fMicrosoft%2fOffice365%2flogin.php%3fl%3d_JeHFUq_VJOXK0QWHtoGYDw1774256418%26fid.13InboxLight.aspxn.1774256418%26fid.125289964252813InboxLight99642_Product-email%26email%3d&c=E,1,k-Ssfypb6_lS63gAjCd1F724taRIZOblHaEzwj9xUAhC_VWwE0JaHiohhDZlC_miHCMHztJlf9r2SMhWNYtKd-f01HCWwnkdc6Yz4XiAVs2FyF0DWv3cBXo,&typo=1
- Verdict
- Malicious activity
- Analysis date
- 12/2/2019, 22:39:33
- OS:
- Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
- Indicators:
Software environment set and analysis options
Launch configuration
- Task duration
- 60 seconds
- Additional time used
- none
- Fakenet option
- off
- Heavy Evaision option
- off
- MITM proxy
- off
- Route via Tor
- off
- Network geolocation
- off
- Privacy
- Public submission
- Autoconfirmation of UAC
- on
Software preset
- Internet Explorer 8.0.7601.17514
- Adobe Acrobat Reader DC MUI (15.023.20070)
- Adobe Flash Player 26 ActiveX (26.0.0.131)
- Adobe Flash Player 26 NPAPI (26.0.0.131)
- Adobe Flash Player 26 PPAPI (26.0.0.131)
- Adobe Refresh Manager (1.8.0)
- CCleaner (5.35)
- FileZilla Client 3.36.0 (3.36.0)
- Google Chrome (75.0.3770.100)
- Google Update Helper (1.3.34.7)
- Java 8 Update 92 (8.0.920.14)
- Java Auto Updater (2.8.92.14)
- Microsoft .NET Framework 4.7.2 (4.7.03062)
- Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Access MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Groove MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office IME (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office IME (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Language Pack 2010 - French/Français (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - German/Deutsch (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Italian/Italiano (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Japanese/日本語 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Korean/한국어 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Russian/русский (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Spanish/Español (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Turkish/Türkçe (14.0.4763.1013)
- Microsoft Office O MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office OneNote MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Outlook MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office PowerPoint MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Professional 2010 (14.0.6029.1000)
- Microsoft Office Proof (Arabic) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Basque) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Catalan) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Dutch) 2010 (14.0.4763.1000)
- Microsoft Office Proof (English) 2010 (14.0.6029.1000)
- Microsoft Office Proof (French) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Galician) 2010 (14.0.4763.1000)
- Microsoft Office Proof (German) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Proof (Ukrainian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
- Microsoft Office Proofing (French) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (German) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Publisher MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office SharePoint Designer MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Shared MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Single Image 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office X MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
- Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.21.27702 (14.21.27702.2)
- Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702 (14.21.27702)
- Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702 (14.21.27702)
- Mozilla Firefox 68.0.1 (x86 en-US) (68.0.1)
- Notepad++ (32-bit x86) (7.5.1)
- Opera 12.15 (12.15.1748)
- Skype version 8.29 (8.29)
- Update for Microsoft .NET Framework 4.7.2 (KB4087364) (1)
- VLC media player (2.2.6)
- WinRAR 5.60 (32-bit) (5.60.0)
Hotfixes
- Client LanguagePack Package
- Client Refresh LanguagePack Package
- CodecPack Basic Package
- Foundation Package
- IE Troubleshooters Package
- InternetExplorer Optional Package
- KB2534111
- KB2999226
- KB4019990
- KB976902
- LocalPack AU Package
- LocalPack CA Package
- LocalPack GB Package
- LocalPack US Package
- LocalPack ZA Package
- ProfessionalEdition
- UltimateEdition
Behavior activities
| MALICIOUS | SUSPICIOUS | INFO |
|---|---|---|
|
No malicious indicators. |
Creates files in the program directory
|
Reads CPU info
|
Screenshots
Processes
Total processes
41
Monitored processes
6
Malicious processes
0
Suspicious processes
0
Behavior graph
–
+
Specs description
Integrity level
elevation
Task сontains an error
or was rebooted
Process has crashed
Task contains several
apps running
Executable file was
dropped
Debug information is
available
Process was injected
Network attacks were
detected
Application downloaded
the executable file
Actions similar to
stealing personal data
Behavior similar to
exploiting the vulnerability
Inspected object has
sucpicious PE structure
File is detected by
antivirus software
CPU overrun
RAM overrun
Process starts the
services
Process was added to
the startup
Behavior similar to
spam
Low-level access to
the HDD
Probably Tor was used
System was rebooted
Connects to the
network
Known threat
Process information
Click at the process to see the details.
- PID
- 928
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" "https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fkasthurimachines.com%2fMicrosoft%2fOffice365%2flogin.php%3fl%3d_JeHFUq_VJOXK0QWHtoGYDw1774256418%26fid.13InboxLight.aspxn.1774256418%26fid.125289964252813InboxLight99642_Product-email%26email%3d&c=E,1,k-Ssfypb6_lS63gAjCd1F724taRIZOblHaEzwj9xUAhC_VWwE0JaHiohhDZlC_miHCMHztJlf9r2SMhWNYtKd-f01HCWwnkdc6Yz4XiAVs2FyF0DWv3cBXo,&typo=1"
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- ––
- User
- admin
- Integrity Level
- MEDIUM
- Exit code
- 0
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\apphelp.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
- PID
- 3092
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fkasthurimachines.com%2fMicrosoft%2fOffice365%2flogin.php%3fl%3d_JeHFUq_VJOXK0QWHtoGYDw1774256418%26fid.13InboxLight.aspxn.1774256418%26fid.125289964252813InboxLight99642_Product-email%26email%3d&c=E,1,k-Ssfypb6_lS63gAjCd1F724taRIZOblHaEzwj9xUAhC_VWwE0JaHiohhDZlC_miHCMHztJlf9r2SMhWNYtKd-f01HCWwnkdc6Yz4XiAVs2FyF0DWv3cBXo,&typo=1
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\kbdus.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\psapi.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\wbem\wbemprox.dll |
| c:\windows\system32\wbemcomn.dll |
| c:\windows\system32\cryptsp.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\winsta.dll |
| c:\windows\system32\rsaenh.dll |
| c:\windows\system32\rpcrtremote.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\wbem\wbemsvc.dll |
| c:\windows\system32\wbem\fastprox.dll |
| c:\windows\system32\ntdsapi.dll |
| c:\windows\system32\apphelp.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\wpc.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\netutils.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\d2d1.dll |
| c:\windows\system32\msimg32.dll |
| c:\windows\system32\wininet.dll |
| c:\windows\system32\urlmon.dll |
| c:\windows\system32\iertutil.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
| c:\windows\system32\sspicli.dll |
| c:\progra~1\mozill~1\nssckbi.dll |
| c:\windows\system32\rasapi32.dll |
| c:\windows\system32\rasman.dll |
| c:\windows\system32\rtutils.dll |
| c:\windows\system32\sensapi.dll |
| c:\windows\system32\rasadhlp.dll |
| c:\windows\system32\fwpuclnt.dll |
| c:\windows\system32\explorerframe.dll |
| c:\windows\system32\duser.dll |
| c:\windows\system32\dui70.dll |
| c:\windows\system32\actxprxy.dll |
| c:\program files\adobe\acrobat reader dc\reader\acrord32.exe |
| c:\program files\mozilla firefox\mozavutil.dll |
| c:\program files\mozilla firefox\mozavcodec.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\mf.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\ksuser.dll |
| c:\windows\system32\dxva2.dll |
| c:\windows\system32\evr.dll |
| c:\windows\system32\powrprof.dll |
| c:\windows\system32\msmpeg2adec.dll |
| c:\windows\system32\slc.dll |
| c:\windows\system32\msmpeg2vdec.dll |
| c:\windows\system32\sqmapi.dll |
| c:\windows\system32\bcrypt.dll |
- PID
- 1448
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3092.0.502793132\701979972" -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3092 "\\.\pipe\gecko-crash-server-pipe.3092" 1172 gpu
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\mf.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\ksuser.dll |
| c:\windows\system32\dxva2.dll |
| c:\windows\system32\evr.dll |
| c:\windows\system32\powrprof.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
- PID
- 4044
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3092.3.1054923503\1254435007" -childID 1 -isForBrowser -prefsHandle 1700 -prefMapHandle 1696 -prefsLen 1 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3092 "\\.\pipe\gecko-crash-server-pipe.3092" 1720 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\wpc.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\netutils.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
- PID
- 1820
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3092.13.586133139\1519966725" -childID 2 -isForBrowser -prefsHandle 2836 -prefMapHandle 2840 -prefsLen 5996 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3092 "\\.\pipe\gecko-crash-server-pipe.3092" 2852 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\program files\mozilla firefox\freebl3.dll |
- PID
- 2776
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3092.20.49713112\1521119" -childID 3 -isForBrowser -prefsHandle 3736 -prefMapHandle 3740 -prefsLen 7195 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3092 "\\.\pipe\gecko-crash-server-pipe.3092" 3752 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\firefox.exe |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
Registry activity
Total events
369
Read events
364
Write events
5
Delete events
0
Modification events
PID
Process
Operation
Key
Name
Value
928
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Launcher
6D88F71703000000
3092
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Browser
10B0FA1703000000
3092
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Telemetry
1
3092
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3092
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
Files activity
Executable files
0
Suspicious files
66
Text files
22
Unknown types
45
Dropped files
PID
Process
Filename
Type
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\crashes\store.json.mozlz4.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
42caad0d01715badd82502b3be9d4fbf
SHA256:
ed1cb4fae5ed74899be5a1ca40132bc90bc90a83e8fdb00557b8ce61cee8575c
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db-journal
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
aa4307a241a0dbae27d13a79bf14c14f
SHA256:
92f49d48fca619f7d67b8abc4c541e451408b2398af4bc1ae9b1f8a525bfbe0a
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs-1.js
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
24f7dcd7920b8ceec08a7d156733daa3
SHA256:
48b9283d6c2ebd3ee36de817a0f8736a364abed2a2ef6dc6a73656f7399a8ad9
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
b6323ec16b043a7c6059962b3c0ec980
SHA256:
e7afc030df5464df95dab58fba3c984d30f5dfe0a8d4f9abec82992fc3211b27
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json
text
MD5:
9cf5e9e40b5f764838f42c8f2721957f
SHA256:
ad9889206f043a9d31af59d6db2a74d9680930c009a560e8cd158bafa271af8f
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.baklz4
jsonlz4
MD5:
da7a780cd46eb1c9b5f7709a38047bc1
SHA256:
7f6593170a08b70c48905d0dc69d76a570b4e920c082815b0f9d072d8efb8994
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4
jsonlz4
MD5:
356a6665965f5db3dcb1244f108cbbf6
SHA256:
b33d9f58c55d204b186ba275ff91457e4dc567c98c703eac4f5ff169f5019d16
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
sqlite
MD5:
e95d227ebe16fbc8f6b9b8753f29a43e
SHA256:
0d176cf4400eeb4afedf63d9986a6206b39707d9b3de4bcd9d77ba5e0e8123d4
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-wal
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
9276a8616b4f5edaabc3b94e109a63c8
SHA256:
b6bf3662905e9516be66154edb4b215d540e90bd63e191a9fd2f74b67d9e4b4e
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-backup
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto-1.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto-1.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto-1.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto-1.vlpset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-wal
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
binary
MD5:
473a35c3e90fb22fbdf7d61bf22c5452
SHA256:
071da003327b241e6049ae7ed68d9b8bf19af959c6c05fd57244200e7e5d31fa
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
9582c7d247c75c190135b8f9770b90bd
SHA256:
9936c7df1950b74f63bb7da12e40d95b20e0b8f867737442ee508945aa741ebd
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
d412d0088b451d149e297935be149bd0
SHA256:
0c5cbe0f0126a3ba45fb2f88dfd83cad9915f8ead537b2f17e0ae196523e55df
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
743c739fcebfa0691096ce5c5b78da88
SHA256:
6132d207f8748ca00c607b879a972c2298a2258c1aaa367cb023aef12a5137da
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
40fc2216d649a986efbcefd71773dad1
SHA256:
6421490e4d02677e2b186f6dd14903025b3e4f47d7d52d5bad2d31b80763b07f
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
92f54edcfaa009ef67aa7ce9be0228e2
SHA256:
4b51618dc5882d43b1f4988dc963855491fb94fe5b555fbae5ce3f8b0504037d
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
bed1a64b4ac7aed471b7d3bc5b5386f4
SHA256:
5797253c7a559d88e02c732b7f27a276c40918b217603d9f1b200b7ae5c339ff
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
8f0e5b500afb5787317f59abd5c09634
SHA256:
a49413e75ccae4fefc7c86a6b9dc39df8feebc3b1f9392b3365b5aa4b3c0f7f8
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
7300b8d390d565ea978520064ae331e9
SHA256:
8e6f458c1533456f314af517651beab3a5c3644b61ae1aac2a468632596bfa22
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
binary
MD5:
ef4d72277f21c3a42a11194258a6cf7c
SHA256:
264cc8402979ae471fa552ac03dc8d1b2c5e5254230d255a6090b9b7be4b3b18
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
f66b2e01d01ebc85c17331956d62088f
SHA256:
1ce0688aaf3c606633d24cf777edc89dcc35f7c8720fae87ffb5453693ab0d88
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
binary
MD5:
463ca0d823c5609f9ed1c8caae5db19b
SHA256:
b567828310817a3225b8a26bea97ddc0f4ecc85088a8866a5f19cd2fef57054d
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
binary
MD5:
19fae276b1e794a9d32f8058de9b5d3a
SHA256:
817783dca327796b9a338f26de2b3d2356c81c5f2b35a331a8aaa31a91a13eec
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\94EAC4811960BA81CAF5BD5574F63E130431702E
image
MD5:
4dd481935dd619e6fb41b5342317c13f
SHA256:
ab0f6c6a12d4090ee8f3e1a4ca294b5d67c14bce26f83bef93e58d8eaccdfb3e
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child.bin
binary
MD5:
bd09ae31284f5f39c9a1bcc966ee4992
SHA256:
5bff27b82aed4dfefa851620f78a7b6ce97825e32ddaa8e4f96b9bb950801760
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache.bin
binary
MD5:
6d3a30186afa525c63148ef7c4777bc9
SHA256:
9c2bf38ebc679bc3a81b4d94727945eb7752b61b70e1dcbb390a008959379afa
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-new.bin
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache.bin
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-new.bin
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-new.bin
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\4CBC89DDC26F54A5B4E36C7AA502BD3D54AE6343
image
MD5:
3ed030357b87059b71b70e1032bce617
SHA256:
0a1fe277ebd90f0caaf69c0cd9fe70648b787d394990e450969643630cb1651c
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\11638
compressed
MD5:
510501d8fb58427e422b41e5e55f1667
SHA256:
5e4a1819054fd480ef3a1456fa67002bb7487ece6a6725fac44db817db22d363
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\127076290D50876257E2BDD58522C67611242BA8
compressed
MD5:
312f9435c73cb2a51246ef6f31a343c8
SHA256:
b8792bc4ffe9ccf650d023e0fc3c43671143cb62d6a37c58672168e17c75dbd1
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F602338C24288C2C0F011D3D00588AC9D2D920D5
compressed
MD5:
236722a5e192f9c1dcecf72141e80759
SHA256:
4ccce3fb6659d4ad112cf23f1867d4808ee6fb6cbbd09e1746f2793d38c2511e
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
a0822e2077dcfee69a4dc05072fa6e97
SHA256:
ad1f3a43ff9c3e6b4ba96b9dce965cc7b2fe8d69eeb5eda763fb0a975723b9ff
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1A1630A76F1DDDA64FE71DAF63E41FCFABE78B3A
compressed
MD5:
0db4e9d619f398e38870e8e1d7f33eaa
SHA256:
53848291724aa3d959af0bbf0abc4c67ddedd0f3c9a9b52c52ac22d40690bfb8
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7678BB89CF13FE9E27AB4C1030B8A6D58B596A34
compressed
MD5:
510501d8fb58427e422b41e5e55f1667
SHA256:
5e4a1819054fd480ef3a1456fa67002bb7487ece6a6725fac44db817db22d363
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\crashes\store.json.mozlz4
jsonlz4
MD5:
a6338865eb252d0ef8fcf11fa9af3f0d
SHA256:
078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\8438
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1C75FC029BDC0F3CE31959874CE5E908B22F1954
der
MD5:
aada80c89fee4589563b5c6f297da6e7
SHA256:
56f72304cc450e4c07b69743b5649a1a4efa29dcc9f81ae7a0a4c56cb5f83973
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\4BFB38F3A7A7566F067A426C1834E7B26E15EE2F
der
MD5:
99cfe1cc712b5fa1f059ec0eb0d51d5f
SHA256:
ed747a3d1cf3451daff4d93321cd2210d53b93de946e68107cf4622b6faef005
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DD38D0C45A9276B27A98042B09A74D1A343DC39D
der
MD5:
85462bcbf991298859c8203cad3d99f5
SHA256:
164a3fffa9e275c30e97a4131cd1350ca04733f56478e6a6a1d0c9448ef07e09
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
a610691671d1b8ad675ab22a10410f75
SHA256:
a21ee0b771449ea1776e7f65c9d4e6deffbab982ae9c75da4c2fec50dab0eec7
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json
text
MD5:
28dd31daca2663d86c8ca3841c185232
SHA256:
abf74f92434952c5227f22a9baa60b58ca9faf8c74f5e81a87487e3edaafa84f
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
binary
MD5:
3d1ce5e50208f0cb3b979186043a548f
SHA256:
1e13d05d482c3d533dc6035af2b2d6e84749412a5748d1435b70cec8b312340b
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
binary
MD5:
95f28ede25c301301f25fbbd9a3c56ec
SHA256:
87763df78772f7d750b0fa5a31eec23e931fd3bd1cbb33beddfc61889da36478
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
binary
MD5:
65e942614eee70680464ac4be75019fc
SHA256:
34395085da32c8b4efe9959e3b0d756b43ffed17694d66f39b966cd331bd9a94
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
binary
MD5:
a5695cc64d77967232b0c1344c6e72b3
SHA256:
042a22b8681d754671d2018ba109b31a53ee3728d48c6379043f8e3394e7fbad
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
binary
MD5:
051fb32dece757ba112ac36dc72e3a91
SHA256:
0806d98fb3de55f75d7c0b17e26146567e08c483031526659a4a35d09b97ef19
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
binary
MD5:
e2cf527ca7550b7e7bdf7311e483a2c3
SHA256:
f1e07b1d717433f47073dc54a7d98e3e87b3d0fa88e53466f93ea544af885d11
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
2ad4445da23a8e50d667c09150cf1876
SHA256:
c1550f9dc8f675c7ff2c896ee91c839e4e2b243e759d71c128521c17f53e91b1
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
binary
MD5:
3675254e341df799d4307c1f59109185
SHA256:
23d108134bed6099793f7dd6b8b6e62081ec3b945efdbc7c5e0e779fd9b82f98
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
d9e28d043d05a069ac7962f181a05337
SHA256:
efbb9ada8e5f662779444e4de88ce944036b7c73d61acfb70239f809dd153aa1
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
6ee2fe4d5c3460929a4eec3138d76e8e
SHA256:
1bd0d3301b97fe608243e61c8fa114cc1ae9b69c0622a10cafe5cc1814df3b7a
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
binary
MD5:
d6acf2573e12afdd7939568804d3fcc1
SHA256:
5525cbf8f8dc41d19ac632ed324e55293a510ae0eeba16d0e3f33c707aa58a0c
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
f57521d4d31b44fbbb74ba8f2441f52f
SHA256:
fd6f2adcf2bce0ac48f15b6a67110e24ec8d24a566422512df2269f2cfac7a0d
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
binary
MD5:
7655fffe7cfbe1ebf96afea5fe2e1376
SHA256:
ff2f663c4e453706b7817109f6a43e8b3389e8cfb1b7d64aace2bfba45f3a359
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
8996548565a96f6ba34bc8317fb4f09e
SHA256:
f760f51c58a91fcc264b8d27f610372ad510209eae6d0911e0ac236e7405fdc8
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
93fdf288da71b455cfcb53f9e78add2a
SHA256:
017ed2622f8e5e1d72df4bc872bcf81ccfea9681aede1afdc7f3ddac800b0cf5
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
b4d69f529bf6d261075d04c6a5c56158
SHA256:
2794c0426aa721104df6a8615d57a251af30a79865cc69e369ed41cae4ea4ee8
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
c0ff29e2429d6a67594d829b166b9d0b
SHA256:
a8ab69af442ae86af43f2a3bf22b91341377be23874762de01e3e71ef08f0318
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
binary
MD5:
498dae4e538658a57f464748f2dabfda
SHA256:
8778f52cd9cb4f4787bf7ba18006d212f8c3004652d163f7786556a8eef3a067
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\4BFB38F3A7A7566F067A426C1834E7B26E15EE2F
binary
MD5:
24e59bb132760cb063bc02a8795491ac
SHA256:
17cde4375d0989e106fa08044524b0cdfaabd57fa66f7b717d08c0767c9870ce
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9A3EF8133F0FA6C3DE8D839A13E7E624CC01FBCC
binary
MD5:
19c4cdcbb869f7408f8a433b33490d62
SHA256:
aef03a587c6afee5b0ca4e693fb267e0182d1e7d797d6814fe366467315182ee
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\464DF385F9A3032B25008B7C70A41717BAA84883
binary
MD5:
526fb2b7c44f278879b89408738e9479
SHA256:
a8d41e4f439b7424fca6e8a760361f7cebd125faae3cd027a9bb70c5af3094dd
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\EEF0BBD50D887BB484C9B1744463DB9B6C605964
binary
MD5:
be3cac6441338e764c866724f55bf51e
SHA256:
53b8f9a98538ab50999754b20e84d8c171a2e3bf02e5f017639d30522a748c9c
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1C75FC029BDC0F3CE31959874CE5E908B22F1954
binary
MD5:
bba379c9702fa2d5dc8da1290c5bc7d7
SHA256:
658583cf5d4b297fd41f88070104c53cae488afa913ed70ed91746e1ef60028c
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
edad8cb36f629e847c15d33910ef44a2
SHA256:
9a10e6ae1451fc443d0f3935a183ea6398b0fe9491cc747b4c959b13d1f54193
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
652678d828f412fcc8d83dea5ff46518
SHA256:
ed85fadbc437ad093589b356cbb3c3f27c6535df3179911ec573b3010b591334
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ABEAA48B501FBD6A530EC9F222A741DA79987BC8
binary
MD5:
aa22859f33566c818d20ba22d8e335fb
SHA256:
0721eb84a13bef830b734e5b06b6bb03aa9a4000bf31a34e444dc659e939c82c
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
9e583eda8d4e49b85ae4f9bafc65fcc0
SHA256:
cd4a42b61ff3c02bbd30642af451f2bbe319149af6c4ff2967f6f93ddd5feb31
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\0943B6983F492B224AABA257D7FBD304C2F16C52
image
MD5:
df3f483ff8d5d143d9b3e265f77d9447
SHA256:
9c8f56604727dff467d9ef08d5ef0a58c9b34009099079bd34ba9c173f5f422e
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
869a15ed4c384d6a4d9a1565b23aa14e
SHA256:
6cf1abebbfbb0e4e33006f4532ae4258361034dcf786d48d91def9e5c30a53a8
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\A5D93CC48B83C8124FEB6A2E9448677EACA5BA86
binary
MD5:
f662431a266231b4229d2f73099d283a
SHA256:
a922e21e0616f16da695f491dba8058457b59290b507e15d1df8a4899e32f1c0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\19172
binary
MD5:
a57eac8c4e0d59d6d62c92b05e210c46
SHA256:
ba0e89eca0b891a962786df3685c27588ad196a7c42c5218c3e2fa6873f31e89
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F36BA6E65505B424864C5907B9DCD4FA685F2145
binary
MD5:
9f4863cdfad9d2f93f90934fadf54f59
SHA256:
36ffea0f14321a0731a1e12369f35edc6cc89713cd03eba35ed279f02126d448
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
c72063d8724e065dd5c32f93a777132b
SHA256:
1f5627da550f2a32a7d0cf6b3c0fe9241415f4578e7ee49e0604faa81de0de00
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\BE0CCFDEED023C83BCD6BAB4E7FA39C986B3EA5A
ini
MD5:
072e6abf1a893d18bf77536de2aa7e5b
SHA256:
8c85aac0b1472167da5489e02f99929e30f900fe4261f51fd02b58343de1a83c
3092
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_IY7iY8JdkyZo7km
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\24906
binary
MD5:
e2ad220e176539d8470f5661a7777caa
SHA256:
48f6f4550310d8a7a573960035008a92744fd448be98fc836612c5e9c5e51938
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ED4CE6DCD5C1EA4EBEB3F5CE4968C13FBFBA7575
binary
MD5:
4e26789fed9e2bc09cbeeed97fc47077
SHA256:
58be75ecc3a2c38d2ce7ddb8486b03dc477d47c7c3d48444e6daff9318d8b34c
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\AB423DCD1B1F2AC64DFC45A9DF00554A51D532F5
binary
MD5:
8ede02ab67ed9151b8c3545f6fa4ff81
SHA256:
a7e4c69e389df59bfb3ebd0d947ec53129849f39a8e22e11231ee54b9c901ef2
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4
jsonlz4
MD5:
da7a780cd46eb1c9b5f7709a38047bc1
SHA256:
7f6593170a08b70c48905d0dc69d76a570b4e920c082815b0f9d072d8efb8994
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\previous.jsonlz4
jsonlz4
MD5:
da5a84a2615e68822fa04e81e66ea403
SHA256:
1c43e3fbd8cf850c863bba57a263da38355b9021b4a9bcc9f1d59ecaf9841ce9
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations.txt
text
MD5:
b37801656a16f18b1c067fb7826b2737
SHA256:
dd9ea1387fced5a4c5c833a5880e76f21dbacded51b84646e06cec778894532f
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations-1.txt
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_Lv5fOTdSw2LnmUY
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DBAADDBE936AB2F853A9CA618FF84448E7790B44
cer
MD5:
939462f9235af1cf2a8e03b2f94644e9
SHA256:
2cb4e387663a72e4f24f780124f746ea7326735743a8fe084f2dbcae8afa7619
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DC1BED99931D95F1B579835FC9F56E6BE518772E
binary
MD5:
bea9bc9e183851914c93a5b9cf3f26c8
SHA256:
3d451c00e830417393a6e8053c21edff5ca55c7ff10e67736c838aafd465b9de
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
c1973c927c6fb5e7e3494b1e14a16258
SHA256:
6ec82fbf8dc54d088ff3a8d5a9c2b3e8859bd1a595fceb2e3626a5075dfebeb4
3092
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_pXreBfF3a8racFa
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_hyoSlwIVS0ecMYH
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
d4a77988959c3632dd1d557352613181
SHA256:
c72a03254b473c88c3d3d32303c64f2943df8554b04100c27f873d2ae23cf78b
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4
jsonlz4
MD5:
65a8568f72fdf05a592210c52784c82a
SHA256:
353279aec0402d3777cd400ecfa22ece3e3e882cb1e57056965db44bd1306465
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
1e1b686a07951d543af65fb2b2ee64ea
SHA256:
525338517378e90b25f3843a38527b30843a9d364710784bcf733f563700ab8c
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\AC30F8475DC59E5FA34E816A79BF3670D5E429AA
binary
MD5:
4f4c4023a755d3fe27f4de3c3cbc8284
SHA256:
a97b5559c549cef2632e58c270a729a245e2e5db91e58b6d35d98535b8dc2922
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
3de6565ddcdb5cc9c9bfcdc5cbc9d787
SHA256:
9e85f33f807f72c1fc28a6cf90b67b0a79bebfd8170457c00bc4bfffc5e7492f
3092
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_VLOUQ4pd2RuNN59
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\6ECA0FEA78766CD8D68B17D920A922EA2331E265
binary
MD5:
61d8c8793d2145662c0c23e02a436e55
SHA256:
4bb766c750335588d404babb7a5fc00b3a3720620aab5875e6056dbe33308abf
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\418399ECA6425FA0ED295003A7D6E0116D82DCFA
binary
MD5:
1914f6264e701489c492e20ee4854cc6
SHA256:
942d01652759cbe7815c13cfe64bc09c3d768fb779300aaff6b43989947d555a
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DFD0198BC255467BA068302D4C215D51BF8F82EC
binary
MD5:
4a8d1faa9710fb347531017e00a18abd
SHA256:
38fb1537b91908891dd91b9ab65080d58e90afd682235212f8444a1ea70824e2
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7A67DF677E203D1E65BDEEF9ABF7003C86A14475
der
MD5:
9ebac04d6d669a9a6c5984cd0235447e
SHA256:
7f2f616dd46aa1a5c7ffb95eabf8d41225f1fee178d4227c7fe1bc9c19d0295f
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\CD8F9D5FCE14854913EDC9FA7FFB9D2DCD35C43A
der
MD5:
2a677598be09f705faf6d2186fa27575
SHA256:
2f8a0cd4e453cd1417936adbced5775a44813506ed89d83613b7584194cbbeb8
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\02A2957878DB6ACD0F86220D21D671690730CD6C
der
MD5:
048e4723ed66ae0d30e7ccab07b69763
SHA256:
2380cd79c7cb3e72fdee8dfd05ddde3c36e2d5d3cb0eadba47e4bc5131af3b77
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple-1.sbstore
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
binary
MD5:
ba0009932844173bc8f9af264229df24
SHA256:
66d1c00c04d86e313e9a02775cdf906b1be8d4cd6bef423a1b9e21cc4e9f50c1
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
binary
MD5:
6f85bc4b2ecb49e26b0bd83a821065d0
SHA256:
c0b3bc9b3dc507ab654caf72d13c3aefa58c9b13b1e4d14dd8816712d80a7e54
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
binary
MD5:
c921d8e98fa01b4f303481e112202e92
SHA256:
4ef1038730ec8bc7206713c29a936768831b922c5e6c83355fd62d7401d8c1dc
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
binary
MD5:
04824a1f92353f43ebb9e7f74b7476fd
SHA256:
b48e58ebab82e4c376f16150a3fff850c1111ff1f5985d68819cfd6f0db159d2
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
binary
MD5:
0e8fe60ccd7e9b4c32589a5743a95302
SHA256:
2b124d4026850a3cffd28dbacb58aec28f7dcd4d40bc14e52bbe96d60ce4e749
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
4a1220fc03e11726f09e9981834345db
SHA256:
6ae7fc0fdbe217104f4034bf6a580a461106b50309abccff6e309124dca5ef39
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
binary
MD5:
d886a47c89d9c49c795da345bc236990
SHA256:
a03c5e2656d2f292bf5794c8eeb8d223cd6ba4f4bfb2ed1f325460e879d0bcf7
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
b9d96611a331bc2a3b5ae57ca97e7352
SHA256:
1ee1c8820dde2a1c99dc17ffcf6971d05b61dad465495cf97e492101fc189e11
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
6d378e0d40b6eaca22c8bce899a1c5c1
SHA256:
ada2467b2477aceff837ac7820c435ad1ebbe844b2da31c7ab9ae8d010c7a639
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json.tmp
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json
text
MD5:
c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA256:
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json
text
MD5:
ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA256:
792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
354459382f30b8994109c88659dfa1f3
SHA256:
e3e8e2b7e7eeca231620d83c70fa5a926e8b9ce74c51f595f71191dc0b50527e
3092
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cookies.sqlite-shm
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-current.bin
––
MD5:
––
SHA256:
––
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-current.bin
binary
MD5:
5027177f513cdae07db2330e1ded5934
SHA256:
0c53f16051e738287a4612f68e296238087627e594cfd6ddfa1fecc2e998328b
3092
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-current.bin
binary
MD5:
de9496aca551ade408ef6466a11833a1
SHA256:
8f9c7fdb3e0bc01024e43a8e242468fc4dd4f74c725e32a883571635203dc10a
Network activity
HTTP(S) requests
5
TCP/UDP connections
33
DNS requests
68
Threats
0
HTTP requests
| PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
| 3092 | firefox.exe | GET | 200 | 2.16.186.50:80 | http://detectportal.firefox.com/success.txt | unknown |
text
|
|
whitelisted |
| 3092 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 3092 | firefox.exe | POST | 200 | 216.58.206.3:80 | http://ocsp.pki.goog/gts1o1 | US |
binary
der
|
|
whitelisted |
| 3092 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 3092 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
Connections
| PID | Process | IP | ASN | CN | Reputation |
|---|---|---|---|---|---|
| 3092 | firefox.exe | 2.16.186.50:80 | Akamai International B.V. | –– | whitelisted |
| 3092 | firefox.exe | 35.164.109.147:443 | Amazon.com, Inc. | US | unknown |
| 3092 | firefox.exe | 34.214.202.211:443 | Amazon.com, Inc. | US | malicious |
| 3092 | firefox.exe | 13.35.253.31:443 | US | unknown | |
| 3092 | firefox.exe | 34.223.160.244:443 | Amazon.com, Inc. | US | unknown |
| 3092 | firefox.exe | 18.195.160.68:443 | Amazon.com, Inc. | DE | unknown |
| 3092 | firefox.exe | 93.184.220.29:80 | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
| 3092 | firefox.exe | 172.217.18.170:443 | Google Inc. | US | whitelisted |
| 3092 | firefox.exe | 216.58.206.3:80 | Google Inc. | US | whitelisted |
| 3092 | firefox.exe | 13.35.253.117:443 | US | unknown | |
| 3092 | firefox.exe | 13.35.253.78:443 | US | unknown | |
| 3092 | firefox.exe | 13.35.254.89:80 | US | whitelisted | |
| 3092 | firefox.exe | 34.213.241.62:443 | Amazon.com, Inc. | US | unknown |
| 3092 | firefox.exe | 143.204.214.50:443 | US | unknown | |
| 3092 | firefox.exe | 173.230.248.44:443 | ACENET, INC. | US | suspicious |
| 3092 | firefox.exe | 52.222.158.88:443 | Amazon.com, Inc. | US | unknown |
DNS requests
| Domain | IP | Reputation |
|---|---|---|
| detectportal.firefox.com | 2.16.186.50
2.16.186.112 |
whitelisted |
| a1089.dscd.akamai.net | No response | whitelisted |
| search.services.mozilla.com | 35.164.109.147
52.35.182.58 52.89.218.39 |
whitelisted |
| search.r53-2.services.mozilla.com | 52.89.218.39
52.35.182.58 35.164.109.147 |
whitelisted |
| push.services.mozilla.com | 34.214.202.211
|
whitelisted |
| autopush.prod.mozaws.net | 34.214.202.211
|
whitelisted |
| snippets.cdn.mozilla.net | 13.35.253.31
13.35.253.14 13.35.253.28 13.35.253.53 |
whitelisted |
| d228z91au11ukj.cloudfront.net | 13.35.253.53
13.35.253.28 13.35.253.14 13.35.253.31 |
malicious |
| tiles.services.mozilla.com | 34.223.160.244
35.166.89.106 35.162.117.80 35.162.60.32 52.24.113.72 34.212.11.156 52.33.13.207 52.33.184.165 |
whitelisted |
| tiles.r53-2.services.mozilla.com | 52.33.184.165
52.33.13.207 34.212.11.156 52.24.113.72 35.162.60.32 35.162.117.80 35.166.89.106 34.223.160.244 |
whitelisted |
| linkprotect.cudasvc.com | 18.195.160.68
18.194.14.44 |
unknown |
| ocsp.digicert.com | 93.184.220.29
|
whitelisted |
| cs9.wac.phicdn.net | 93.184.220.29
|
whitelisted |
| safebrowsing.googleapis.com | 172.217.18.170
|
whitelisted |
| ocsp.pki.goog | 216.58.206.3
|
whitelisted |
| pki-goog.l.google.com | 216.58.206.3
|
whitelisted |
| firefox.settings.services.mozilla.com | 13.35.253.117
13.35.253.99 13.35.253.45 13.35.253.101 |
whitelisted |
| d2k03kvdk5cku0.cloudfront.net | 13.35.253.101
13.35.253.45 13.35.253.99 13.35.253.117 |
whitelisted |
| content-signature-2.cdn.mozilla.net | 13.35.253.78
13.35.253.75 13.35.253.70 13.35.253.55 |
whitelisted |
| d2nxq2uap88usk.cloudfront.net | 13.35.253.55
13.35.253.70 13.35.253.75 13.35.253.78 |
whitelisted |
| ocsp.sca1b.amazontrust.com | 13.35.254.89
13.35.254.29 13.35.254.90 13.35.254.113 |
whitelisted |
| shavar.services.mozilla.com | 34.213.241.62
35.164.178.120 52.25.50.137 34.213.214.155 35.167.176.126 34.209.199.162 52.32.91.14 52.39.168.38 |
whitelisted |
| shavar.prod.mozaws.net | 52.39.168.38
52.32.91.14 34.209.199.162 35.167.176.126 34.213.214.155 52.25.50.137 35.164.178.120 34.213.241.62 |
whitelisted |
| tracking-protection.cdn.mozilla.net | 143.204.214.50
143.204.214.80 143.204.214.105 143.204.214.56 |
whitelisted |
| d1zkz3k4cclnv6.cloudfront.net | No response | whitelisted |
| kasthurimachines.com | 173.230.248.44
|
suspicious |
| www.facebook.com | 157.240.20.35
|
whitelisted |
| www.youtube.com | 172.217.22.78
172.217.22.110 216.58.210.14 172.217.16.206 172.217.21.206 172.217.21.238 172.217.22.14 172.217.23.142 172.217.18.14 172.217.18.174 216.58.206.14 172.217.18.110 216.58.207.46 172.217.23.110 172.217.16.142 172.217.16.174 |
whitelisted |
| www.ebay.de | 2.18.234.244
|
whitelisted |
| star-mini.c10r.facebook.com | 157.240.20.35
|
whitelisted |
| e11847.g.akamaiedge.net | 2.18.234.244
|
whitelisted |
| youtube-ui.l.google.com | 172.217.16.174
172.217.16.142 172.217.23.110 216.58.207.46 172.217.18.110 216.58.206.14 172.217.18.174 172.217.18.14 172.217.23.142 172.217.22.14 172.217.21.238 172.217.21.206 172.217.16.206 216.58.210.14 172.217.22.110 172.217.22.78 |
whitelisted |
| www.wikipedia.org | 91.198.174.192
|
whitelisted |
| www.reddit.com | 151.101.1.140
151.101.65.140 151.101.129.140 151.101.193.140 |
whitelisted |
| dyna.wikimedia.org | 91.198.174.192
|
whitelisted |
| www.mozilla.org | 104.16.142.228
104.16.143.228 |
whitelisted |
| reddit.map.fastly.net | 151.101.193.140
151.101.129.140 151.101.65.140 151.101.1.140 |
whitelisted |
| www.mozilla.org.cdn.cloudflare.net | 104.16.143.228
104.16.142.228 |
whitelisted |
| aus5.mozilla.org | 52.222.158.88
52.222.158.35 52.222.158.141 52.222.158.182 |
whitelisted |
| balrog-cloudfront.prod.mozaws.net | 52.222.158.182
52.222.158.141 52.222.158.35 52.222.158.88 |
whitelisted |
Debug output strings
No debug info.