Program did not start
General Info
- URL
-
http://cxv456utysd.appspot.com
- Verdict
- Malicious activity
- Analysis date
- 12/2/2019, 21:24:03
- OS:
- Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
- Tags:
-
phishing
phish-microsoft
- Indicators:
Software environment set and analysis options
Launch configuration
- Task duration
- 60 seconds
- Additional time used
- none
- Fakenet option
- off
- Heavy Evaision option
- off
- MITM proxy
- off
- Route via Tor
- off
- Network geolocation
- off
- Privacy
- Public submission
- Autoconfirmation of UAC
- on
Software preset
- Internet Explorer 8.0.7601.17514
- Adobe Acrobat Reader DC MUI (15.023.20070)
- Adobe Flash Player 26 ActiveX (26.0.0.131)
- Adobe Flash Player 26 NPAPI (26.0.0.131)
- Adobe Flash Player 26 PPAPI (26.0.0.131)
- Adobe Refresh Manager (1.8.0)
- CCleaner (5.35)
- FileZilla Client 3.36.0 (3.36.0)
- Google Chrome (75.0.3770.100)
- Google Update Helper (1.3.34.7)
- Java 8 Update 92 (8.0.920.14)
- Java Auto Updater (2.8.92.14)
- Microsoft .NET Framework 4.7.2 (4.7.03062)
- Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Access MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Access MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Excel MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Excel MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Groove MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Groove MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office IME (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office IME (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office InfoPath MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Language Pack 2010 - French/Français (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - German/Deutsch (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Italian/Italiano (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Japanese/日本語 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Korean/한국어 (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Russian/русский (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Spanish/Español (14.0.4763.1000)
- Microsoft Office Language Pack 2010 - Turkish/Türkçe (14.0.4763.1013)
- Microsoft Office O MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office O MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office OneNote MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office OneNote MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Outlook MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Outlook MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office PowerPoint MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office PowerPoint MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Professional 2010 (14.0.6029.1000)
- Microsoft Office Proof (Arabic) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Basque) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Catalan) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Dutch) 2010 (14.0.4763.1000)
- Microsoft Office Proof (English) 2010 (14.0.6029.1000)
- Microsoft Office Proof (French) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Galician) 2010 (14.0.4763.1000)
- Microsoft Office Proof (German) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
- Microsoft Office Proof (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Proof (Ukrainian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
- Microsoft Office Proofing (French) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (German) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Proofing (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Publisher MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Publisher MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office SharePoint Designer MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office SharePoint Designer MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Shared MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Shared MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Single Image 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
- Microsoft Office Word MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office Word MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Office X MUI (French) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (German) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Italian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Japanese) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Korean) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Portuguese (Brazil)) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Russian) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Spanish) 2010 (14.0.4763.1000)
- Microsoft Office X MUI (Turkish) 2010 (14.0.4763.1013)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
- Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
- Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.21.27702 (14.21.27702.2)
- Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702 (14.21.27702)
- Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702 (14.21.27702)
- Mozilla Firefox 68.0.1 (x86 en-US) (68.0.1)
- Notepad++ (32-bit x86) (7.5.1)
- Opera 12.15 (12.15.1748)
- Skype version 8.29 (8.29)
- Update for Microsoft .NET Framework 4.7.2 (KB4087364) (1)
- VLC media player (2.2.6)
- WinRAR 5.60 (32-bit) (5.60.0)
Hotfixes
- Client LanguagePack Package
- Client Refresh LanguagePack Package
- CodecPack Basic Package
- Foundation Package
- IE Troubleshooters Package
- InternetExplorer Optional Package
- KB2534111
- KB2999226
- KB4019990
- KB976902
- LocalPack AU Package
- LocalPack CA Package
- LocalPack GB Package
- LocalPack US Package
- LocalPack ZA Package
- ProfessionalEdition
- UltimateEdition
Behavior activities
| MALICIOUS | SUSPICIOUS | INFO |
|---|---|---|
|
No malicious indicators. |
Creates files in the program directory
|
Application launched itself
|
Screenshots
Processes
Total processes
40
Monitored processes
6
Malicious processes
0
Suspicious processes
0
Behavior graph
–
+
Specs description
Integrity level
elevation
Task сontains an error
or was rebooted
Process has crashed
Task contains several
apps running
Executable file was
dropped
Debug information is
available
Process was injected
Network attacks were
detected
Application downloaded
the executable file
Actions similar to
stealing personal data
Behavior similar to
exploiting the vulnerability
Inspected object has
sucpicious PE structure
File is detected by
antivirus software
CPU overrun
RAM overrun
Process starts the
services
Process was added to
the startup
Behavior similar to
spam
Low-level access to
the HDD
Probably Tor was used
System was rebooted
Connects to the
network
Known threat
Process information
Click at the process to see the details.
- PID
- 2520
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" "http://cxv456utysd.appspot.com"
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- ––
- User
- admin
- Integrity Level
- MEDIUM
- Exit code
- 0
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\apphelp.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\windows\system32\sechost.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\version.dll |
| c:\windows\system32\msvcrt.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\windows\system32\usp10.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\windows\system32\dbghelp.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\msctf.dll |
- PID
- 1956
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" http://cxv456utysd.appspot.com
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\windows\system32\d3d11.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\shlwapi.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\user32.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\dxgi.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\windows\system32\kernel32.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\lpk.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\windows\system32\ws2_32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\nsi.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\advapi32.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\winmm.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\usp10.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\ole32.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\windows\system32\msctf.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\dwrite.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\dwmapi.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\windows\system32\imm32.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\cryptsp.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\rsaenh.dll |
| c:\windows\system32\kbdus.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\system32\psapi.dll |
| c:\windows\system32\winsta.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\wbemcomn.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\wbem\wbemprox.dll |
| c:\windows\system32\wpc.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\apphelp.dll |
| c:\windows\system32\wbem\fastprox.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\wbem\wbemsvc.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\d2d1.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\rpcrtremote.dll |
| c:\windows\system32\netutils.dll |
| c:\windows\system32\ntdsapi.dll |
| c:\windows\system32\wininet.dll |
| c:\windows\system32\rtutils.dll |
| c:\program files\mozilla firefox\freebl3.dll |
| c:\windows\system32\urlmon.dll |
| c:\windows\system32\rasman.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\rasapi32.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\windows\system32\msimg32.dll |
| c:\windows\system32\sensapi.dll |
| c:\windows\system32\iertutil.dll |
| c:\progra~1\mozill~1\nssckbi.dll |
| c:\windows\system32\rasadhlp.dll |
| c:\windows\system32\fwpuclnt.dll |
| c:\windows\system32\duser.dll |
| c:\windows\system32\explorerframe.dll |
| c:\windows\system32\dui70.dll |
| c:\program files\adobe\acrobat reader dc\reader\acrord32.exe |
| c:\windows\system32\actxprxy.dll |
| c:\windows\system32\ksuser.dll |
| c:\windows\system32\dxva2.dll |
| c:\windows\system32\evr.dll |
| c:\windows\system32\msmpeg2adec.dll |
| c:\program files\mozilla firefox\mozavutil.dll |
| c:\windows\system32\bcrypt.dll |
| c:\windows\system32\slc.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\msmpeg2vdec.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\powrprof.dll |
| c:\program files\mozilla firefox\mozavcodec.dll |
| c:\windows\system32\sqmapi.dll |
| c:\windows\system32\mf.dll |
- PID
- 2192
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.0.502793132\701979972" -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 1152 gpu
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- No indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- MEDIUM
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\windows\system32\kernel32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\windows\system32\crypt32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\windows\system32\ws2_32.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\windows\system32\imm32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\shlwapi.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\atl.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\usp10.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\advapi32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\windows\system32\ksuser.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\profapi.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\kernelbase.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\wldap32.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\dxgi.dll |
| c:\windows\system32\msasn1.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\windows\system32\setupapi.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\evr.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\sechost.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\mfplat.dll |
| c:\windows\system32\powrprof.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\windows\system32\nsi.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\mf.dll |
| c:\windows\system32\dxva2.dll |
- PID
- 4020
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.3.1054923503\1254435007" -childID 1 -isForBrowser -prefsHandle 804 -prefMapHandle 1440 -prefsLen 1 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 1712 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\windows\system32\msvcrt.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\windows\system32\sechost.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\windows\system32\ole32.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\wldap32.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\windows\system32\d3d11.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\dbghelp.dll |
| c:\windows\system32\imm32.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\windows\system32\dxgi.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\kernel32.dll |
| c:\windows\system32\winrnr.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\nsi.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\cryptbase.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\windows\system32\msctf.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\ws2_32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\system32\avrt.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dnsapi.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\uxtheme.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\ntmarta.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\version.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\dwrite.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\samcli.dll |
| c:\windows\system32\samlib.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\wevtapi.dll |
| c:\windows\system32\netutils.dll |
| c:\program files\mozilla firefox\softokn3.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\wpc.dll |
| c:\program files\mozilla firefox\freebl3.dll |
| c:\windows\system32\clbcatq.dll |
- PID
- 2484
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.13.586133139\1519966725" -childID 2 -isForBrowser -prefsHandle 2756 -prefMapHandle 2648 -prefsLen 5997 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 2908 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\winmm.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\windows\system32\ole32.dll |
| c:\windows\system32\dxgi.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\winnsi.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\windows\system32\msvcrt.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\windows\system32\kernelbase.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\kernel32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\windows\system32\imm32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\msctf.dll |
| c:\windows\system32\d3d11.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\windows\system32\nsi.dll |
| c:\windows\system32\dbghelp.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\advapi32.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\rpcrt4.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\windows\system32\dwmapi.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\windows\system32\lpk.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\devobj.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\ntmarta.dll |
| c:\program files\mozilla firefox\freebl3.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\dwrite.dll |
| c:\program files\mozilla firefox\softokn3.dll |
- PID
- 3820
- CMD
- "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1956.20.344882688\1025948625" -childID 3 -isForBrowser -prefsHandle 3764 -prefMapHandle 3768 -prefsLen 7130 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 1956 "\\.\pipe\gecko-crash-server-pipe.1956" 3780 tab
- Path
- C:\Program Files\Mozilla Firefox\firefox.exe
- Indicators
- Parent process
- firefox.exe
- User
- admin
- Integrity Level
- LOW
- Version:
- Company
- Mozilla Corporation
- Description
- Firefox
- Version
- 68.0.1
Modules
| Image |
|---|
| c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll |
| c:\windows\system32\dwmapi.dll |
| c:\windows\system32\userenv.dll |
| c:\windows\system32\profapi.dll |
| c:\windows\system32\dbghelp.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll |
| c:\windows\system32\lpk.dll |
| c:\program files\mozilla firefox\xul.dll |
| c:\program files\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll |
| c:\program files\mozilla firefox\nss3.dll |
| c:\windows\system32\nsi.dll |
| c:\windows\system32\d3d11.dll |
| c:\windows\system32\user32.dll |
| c:\windows\system32\usp10.dll |
| c:\windows\system32\kernelbase.dll |
| c:\windows\system32\advapi32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll |
| c:\windows\system32\winmm.dll |
| c:\windows\system32\ws2_32.dll |
| c:\windows\system32\shlwapi.dll |
| c:\program files\mozilla firefox\vcruntime140.dll |
| c:\windows\system32\ole32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll |
| c:\windows\system32\shell32.dll |
| c:\windows\system32\iphlpapi.dll |
| c:\windows\system32\uxtheme.dll |
| c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll |
| c:\program files\mozilla firefox\mozglue.dll |
| c:\program files\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll |
| c:\windows\system32\imm32.dll |
| c:\program files\mozilla firefox\api-ms-win-core-file-l2-1-0.dll |
| c:\windows\system32\gdi32.dll |
| c:\windows\system32\dxgi.dll |
| c:\systemroot\system32\ntdll.dll |
| c:\windows\system32\wtsapi32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll |
| c:\windows\system32\setupapi.dll |
| c:\windows\system32\oleaut32.dll |
| c:\windows\system32\msvcrt.dll |
| c:\program files\mozilla firefox\firefox.exe |
| c:\windows\system32\rpcrt4.dll |
| c:\program files\mozilla firefox\msvcp140.dll |
| c:\program files\mozilla firefox\lgpllibs.dll |
| c:\windows\system32\wsock32.dll |
| c:\windows\system32\credui.dll |
| c:\windows\system32\devobj.dll |
| c:\program files\mozilla firefox\ucrtbase.dll |
| c:\windows\system32\msctf.dll |
| c:\windows\system32\avrt.dll |
| c:\windows\system32\dhcpcsvc.dll |
| c:\windows\system32\kernel32.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll |
| c:\windows\system32\msasn1.dll |
| c:\windows\system32\cfgmgr32.dll |
| c:\windows\system32\wintrust.dll |
| c:\windows\system32\sechost.dll |
| c:\windows\system32\version.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll |
| c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll |
| c:\windows\system32\winnsi.dll |
| c:\windows\system32\crypt32.dll |
| c:\windows\system32\dnsapi.dll |
| c:\windows\system32\wshqos.dll |
| c:\windows\system32\audioses.dll |
| c:\windows\system32\mswsock.dll |
| c:\windows\system32\ntmarta.dll |
| c:\windows\system32\cryptbase.dll |
| c:\windows\system32\propsys.dll |
| c:\windows\system32\wship6.dll |
| c:\windows\system32\nlaapi.dll |
| c:\windows\system32\winrnr.dll |
| c:\windows\system32\pnrpnsp.dll |
| c:\windows\system32\wldap32.dll |
| c:\windows\system32\mscms.dll |
| c:\windows\system32\clbcatq.dll |
| c:\windows\system32\mmdevapi.dll |
| c:\windows\system32\wshtcpip.dll |
| c:\windows\system32\napinsp.dll |
| c:\windows\system32\sspicli.dll |
| c:\windows\system32\dwrite.dll |
Registry activity
Total events
311
Read events
306
Write events
5
Delete events
0
Modification events
PID
Process
Operation
Key
Name
Value
2520
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Launcher
6519201803000000
1956
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Browser
D996231803000000
1956
firefox.exe
write
HKEY_CURRENT_USER\Software\Mozilla\Firefox\Launcher
C:\Program Files\Mozilla Firefox\firefox.exe|Telemetry
1
1956
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
1956
firefox.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
4600000092000000010000000000000000000000000000000000000000000000C0E333BBEAB1D301000000000000000000000000020000001700000000000000FE800000000000007D6CB050D9C573F70B000000000000006D00330032005C004D00530049004D004700330032002E0064006C000100000004AA400014AA4000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000C0A8016400000000000000000000000000000000000000000800000000000000805D3F00983740000008000002000000000000600000002060040000B8A94000020000008802000060040000B8A9400004000000F8010000B284000088B64000B84B400043003A000000000000000000000000000000000000000000
Files activity
Executable files
0
Suspicious files
95
Text files
24
Unknown types
56
Dropped files
PID
Process
Filename
Type
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db-journal
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
binary
MD5:
7655fffe7cfbe1ebf96afea5fe2e1376
SHA256:
ff2f663c4e453706b7817109f6a43e8b3389e8cfb1b7d64aace2bfba45f3a359
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
f5be2746aa87f41da9a27a40ff81bef9
SHA256:
17d5d8f4d49c0d6df07ce2524c3ef12495bd223ae30850f9a63eb5e7a610c62b
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
402cf895ea67f5bc697ff8e49761dbc1
SHA256:
528f0523f90268d74d4d7f7ff12bbc43e2da59e076cbf84461439f893e2fdf88
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs-1.js
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
8b6ab7298038b512987621c897dc5557
SHA256:
f03420b47cbf7528db2faa072eec69363aff0a454c8338c668e870d114fb6e93
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
c313ddc93dbe2fb5a9038adb94a449b9
SHA256:
6203b8c775552edc9e846eb9a606e2604a09d25fc7b662890d27e9169ae81ed6
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
f9911c599494bc7a233b49da3e1e7b6d
SHA256:
b8a50d2353eb697a9623464084abb61bdd3f8d60dc045b9cd7f99b40fd1af530
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json
text
MD5:
9cf5e9e40b5f764838f42c8f2721957f
SHA256:
ad9889206f043a9d31af59d6db2a74d9680930c009a560e8cd158bafa271af8f
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\extensions.json.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
b61a73dbdf70f909241db91064017f36
SHA256:
1f328a777b62e3debda5baf2813bbeacb5bbe8a9131e8f2d27c5c4f294245168
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-backup
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto-1.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto-1.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto-1.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto-1.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4
jsonlz4
MD5:
5d3c438d7395ffa2bea1fc93e35fd4c3
SHA256:
5d2c68621967ceec1899b904ed57f3540c842cc32c4432bd1318f83241ff081d
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.baklz4
jsonlz4
MD5:
e628b1d1d9763ef9bc260456426e1c5d
SHA256:
f9854d0f4a633b2a9ded2f2e90f63a5eccda2dc2380cc6df571569b24af6191e
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-wal
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
6232ea8a6e744562d1c06175f4898153
SHA256:
1549d9072b6a3942d3c82fd9f928989f93c0ffc8557322101e260f6351113b82
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
9582c7d247c75c190135b8f9770b90bd
SHA256:
9936c7df1950b74f63bb7da12e40d95b20e0b8f867737442ee508945aa741ebd
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
binary
MD5:
473a35c3e90fb22fbdf7d61bf22c5452
SHA256:
071da003327b241e6049ae7ed68d9b8bf19af959c6c05fd57244200e7e5d31fa
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
862325492899928748b2c89871351c6e
SHA256:
55cb61819786bb42f359c1602e4e2e564da301e1b132a9789e9ffd1ec66c94c0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
92b5791e884053c5b2f3326e7b806e5f
SHA256:
372143e26b85c0108be27d8d6dd738290e7faed0b25d3602d43d593ac89d7d22
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
4a2ec765790c0245a63c87b70ef928b0
SHA256:
41c0ac5d5ca5c6b593d23f1c647e10da5c2e49821179c934a06093383dc7981b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
d17ca6982018aa1f6b60180341c58693
SHA256:
118a647e72146c5ece9d3fba8c094de15b95b76273ec10d98f8719425b68b22b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
2d59c2a4bd306951961f7d144e2457da
SHA256:
20e2b5e1f21dc839af2de94c415f44552a00cebd812cd84a32e2c37c8bb42720
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
ead2bda91196746f315bf62df37ec143
SHA256:
bc2975cb594dab7532783ceae66ab429995161ef75c0a0897306ca769a1f8f70
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
a32a50022a913b0d3ad505fee262cde9
SHA256:
5a873b78690c82d01c86e3aae4ee6280b9c23495c73c4f3c2f14d3f1d2c52dfd
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
binary
MD5:
ef4d72277f21c3a42a11194258a6cf7c
SHA256:
264cc8402979ae471fa552ac03dc8d1b2c5e5254230d255a6090b9b7be4b3b18
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
f66b2e01d01ebc85c17331956d62088f
SHA256:
1ce0688aaf3c606633d24cf777edc89dcc35f7c8720fae87ffb5453693ab0d88
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
binary
MD5:
463ca0d823c5609f9ed1c8caae5db19b
SHA256:
b567828310817a3225b8a26bea97ddc0f4ecc85088a8866a5f19cd2fef57054d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
binary
MD5:
19fae276b1e794a9d32f8058de9b5d3a
SHA256:
817783dca327796b9a338f26de2b3d2356c81c5f2b35a331a8aaa31a91a13eec
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
sqlite
MD5:
869cb76308128ca4ea40db1072b7ba4d
SHA256:
d4b84e300f482856b36168c6ca0e6bebf30afc6529d16b2c5d5b432c022afc6f
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-wal
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\ads-track-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\content-track-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\social-track-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\analytics-track-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3561288849sdhlie.sqlite-shm
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
91a0e462dfbbe503ec4658970218c42c
SHA256:
c47c8fbee59fe99dfd04e618a6f7753b7d44424f41dc0a30eb4bd1ae454d6d6e
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F4485F9D756378123CD6574B8636FB2AA04F0E09
der
MD5:
ff77fb0a94885f47c9e9779d5d0e9dd8
SHA256:
5e4c8ff8a8f15ea02aee332c51cc2f4d75c0a995a2600091e10e60c7bec20133
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\A05F8871F71E171BAEC9535266A07069F3D35E7D
image
MD5:
e594c1877688dacef335413a6251af78
SHA256:
3565e00da65b61a87d0773f720b62ef4c18ae1a1cc26081055ad11fdbad8ab30
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F72013CBC5A4EF84AB539873039A1D88E2D54277
compressed
MD5:
e73d96898053aa611cca5adf076b67a3
SHA256:
f3cad583b39978b8ab61570e27b0d0934fa81ba00e8eace8195f1ad32767ea6d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1A9BFBFFB36FDAA238226F61780C7D86694B7E9B
compressed
MD5:
f596505c12cdc57a7cc24dffefbe8094
SHA256:
6a5f729c5d4c90dcb02ca84279f0522416ec189c5230532fa442a04c4dc09110
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DE3B3D27E728B474B13F24FD5F270A25964B5BEA
compressed
MD5:
87d68fef2ccc7006ac865a45b610d248
SHA256:
0a9b068c07b14a3fac7f9abefc3928ee7c8509e9953e735c6a8f44a088c1cd4a
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child.bin
binary
MD5:
bd09ae31284f5f39c9a1bcc966ee4992
SHA256:
5bff27b82aed4dfefa851620f78a7b6ce97825e32ddaa8e4f96b9bb950801760
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-new.bin
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache.bin
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-new.bin
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache.bin
binary
MD5:
a9fb30d6af509da48ce0df13738b96e2
SHA256:
5f8f812b2bef3ffd1834fc3ff346073ae398d1610422237ba6cda66e5e9c4978
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-new.bin
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\A05F8871F71E171BAEC9535266A07069F3D35E7D
binary
MD5:
ebaa3f06d26b18d5617e4f53e9fb6b0d
SHA256:
7aaa8701229baef128d2d713d484af16625a8c16730c866420a05b4668284e6e
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F72013CBC5A4EF84AB539873039A1D88E2D54277
binary
MD5:
20ce830f0e450a77d87656062fe9ce19
SHA256:
757bc203b6bc550fd20d5988c22948e7a43106bb1032ee55114b846e76ab9eb1
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DE3B3D27E728B474B13F24FD5F270A25964B5BEA
binary
MD5:
4d332a034146edcc98245149cb3a1bd9
SHA256:
e1abdc2ce487f773d8c0c1cb67048137c5d8c81f0b8778cf50a84d76bfcbb91c
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\18BB9B9766E0996E3AEFA80979C2259AE87E49BF
binary
MD5:
6e095025302edbfcbd51328c89ba63b5
SHA256:
1c55ee2d9ec3766016848ee528672417e2a3e178befe6fd02e17da036ca39de5
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1A9BFBFFB36FDAA238226F61780C7D86694B7E9B
binary
MD5:
8e46c14e0fb1d9170fbda6bc0fe1c931
SHA256:
713b9a4f2c567a675fce573cb779d8aa2195503d269eaeb53187dea781cea303
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\FAB9F23CCD5A13948FEFB45BA3C6545BA4458716
compressed
MD5:
b1497998ba105ccfa87a0dd798726ec4
SHA256:
9cc3efcaa5e4d3f837d469217009913bfe9c69d5d53edb6642611243181d9245
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\broadcast-listeners.json
text
MD5:
28dd31daca2663d86c8ca3841c185232
SHA256:
abf74f92434952c5227f22a9baa60b58ca9faf8c74f5e81a87487e3edaafa84f
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-phish-proto.metadata
binary
MD5:
f57521d4d31b44fbbb74ba8f2441f52f
SHA256:
fd6f2adcf2bce0ac48f15b6a67110e24ec8d24a566422512df2269f2cfac7a0d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.vlpset
binary
MD5:
8996548565a96f6ba34bc8317fb4f09e
SHA256:
f760f51c58a91fcc264b8d27f610372ad510209eae6d0911e0ac236e7405fdc8
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-malware-proto.metadata
binary
MD5:
c0ff29e2429d6a67594d829b166b9d0b
SHA256:
a8ab69af442ae86af43f2a3bf22b91341377be23874762de01e3e71ef08f0318
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
d8bb64891b776154ce6a84f730639c41
SHA256:
58642abf52f8b5f5d23a2ca1eae87b1218eee2b0e2b6e26b7a63e8b0236c7beb
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.vlpset
binary
MD5:
93fdf288da71b455cfcb53f9e78add2a
SHA256:
017ed2622f8e5e1d72df4bc872bcf81ccfea9681aede1afdc7f3ddac800b0cf5
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\846A116453B557670207541F4DAC7AA2D1057D35
image
MD5:
9563674c6ddbffa6d0fd28ebad408e4c
SHA256:
38a0496a163a79d6302de8fb05237c7cf12e5011554d5f4ca749557c7bc2a94e
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-downloadwhite-proto.metadata
binary
MD5:
498dae4e538658a57f464748f2dabfda
SHA256:
8778f52cd9cb4f4787bf7ba18006d212f8c3004652d163f7786556a8eef3a067
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.sbstore
binary
MD5:
ba0009932844173bc8f9af264229df24
SHA256:
66d1c00c04d86e313e9a02775cdf906b1be8d4cd6bef423a1b9e21cc4e9f50c1
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\4CAC58BABC6531CD30C5FBD266E2E31C9A001B8C
image
MD5:
e6daa51098f5aaae6ee4d49e866e3da4
SHA256:
7a44bd609437f3bd3b622d853790536695b657ab2f0e93d92defd7610309cda8
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-badbinurl-proto.metadata
binary
MD5:
b4d69f529bf6d261075d04c6a5c56158
SHA256:
2794c0426aa721104df6a8615d57a251af30a79865cc69e369ed41cae4ea4ee8
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.sbstore
binary
MD5:
6f85bc4b2ecb49e26b0bd83a821065d0
SHA256:
c0b3bc9b3dc507ab654caf72d13c3aefa58c9b13b1e4d14dd8816712d80a7e54
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\6D83D15259A25387D4E236C61D5DFE45328F0A2B
image
MD5:
0b4763ee79055f43b4407f6879d1ffc7
SHA256:
17b3a5a8d8c4de6c93838eab2635ad6558b4df374aff79b1ffa8cc9160e58a7d
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
4fe3da6e9d0756adfb174191a1ff73cc
SHA256:
11203628abe5792e27d7dc632f8a0f42ae9a53b3183f8eed187c402539d496a7
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
8c17d7cb4573f1c55eeab94f5a6de2b9
SHA256:
0577b0ef9898ecf1ece24b5dad3419bee32010ab8c943972fac0ddbeb57f1e1b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ABEAA48B501FBD6A530EC9F222A741DA79987BC8
binary
MD5:
2ff98e0f1e974008a8f22939707ae99a
SHA256:
ac1c87d145b06b017d88dbfb5bedb036b3e04b238cd9525983da08307ab6f1e9
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
c802387de4dbefc974fa8620c7f2cb04
SHA256:
b91883e94f356bacfcef867b790bed028ddc4bac849da8a68c06c3c7751e3d6d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\F36BA6E65505B424864C5907B9DCD4FA685F2145
binary
MD5:
82891f8bc9a0771d9534720c6551d305
SHA256:
4d7e96357fbf422bb7a070ba8e3e9bd8c3bc1bfd008f7a70b3ee68f6cdd9ec2d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\ED4CE6DCD5C1EA4EBEB3F5CE4968C13FBFBA7575
binary
MD5:
be0173d0b55b2af292177ac3426de2e9
SHA256:
20694bbf59dbe462b63c356d954c5ccc110509dcfc79e200f556081eed717fe4
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
bf21b14231ae36a2bc2f004c07774d68
SHA256:
3a0bcdee8c0a09de404813611e4003410a10204e62bf3c5ba8e8ee4cb9ab3ecc
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\AB423DCD1B1F2AC64DFC45A9DF00554A51D532F5
binary
MD5:
e59844624d5a48cf8c678430b64cb7f1
SHA256:
85664f2c81caadf443422f33e5df5d62e05fecb813ef44e40c8ba5cbae1c00cd
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations.txt
text
MD5:
b37801656a16f18b1c067fb7826b2737
SHA256:
dd9ea1387fced5a4c5c833a5880e76f21dbacded51b84646e06cec778894532f
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\revocations-1.txt
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_ry0MqWm0xr7d16N
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DBAADDBE936AB2F853A9CA618FF84448E7790B44
cer
MD5:
b3bb5d5744b51e18f79fb0766382265f
SHA256:
a63e25a346c156d5d26813460aeab301c02cff94523419a5b4b67f8f92a1a342
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\DC1BED99931D95F1B579835FC9F56E6BE518772E
binary
MD5:
51e24745fe3dd05f4fc377d6f0a72569
SHA256:
630ee35d33cb836f9313da81060d95c7694a7e6360573c457a7729fb9303648f
1956
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_mvUBHjrQj7Yx7VO
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
db8fb33dfb755c3d325d6e281809f4a9
SHA256:
3bd505ebad3b1bc7d3966048924985c673bf550ffb65322f950ad0e51bc38c2b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7C7CD9DB01D52FA020ED4214178554AE55DEB724
compressed
MD5:
a1ac3f90564c7b8cd7b55306eed8f629
SHA256:
618218cca85384d80d6c9f33dfd8e50bb05771be89bcd20c2f9ae6adc6033e11
1956
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_gtBpD6ib4l9eyYI
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
7a953f0ea399666f9d189ff13176b152
SHA256:
d1c66d913d30ede1516470966c010fde2fdc4eab7371d39a5f82c0f0232a8c41
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1B23E3B4AE29E0E11A6B5CF729A106A56B60D5EE
der
MD5:
d79ca471f0bc6fc13a59be2a912121d1
SHA256:
96a39b2c59f870de69149038c4e80a580ac19b1df2d7b98cbdff914f76c7b96d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9177A730A75A3AED965C9E07E7094239DD45F8CA
cer
MD5:
4f827e67b2f3cbce29d02152cff2f65d
SHA256:
98d20e57302fd835a7231cb895b04526e959779a3cf90dc957ce7bbc3cd05885
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\AC30F8475DC59E5FA34E816A79BF3670D5E429AA
binary
MD5:
393e865b0ebf8ca08bfb65464a4edd75
SHA256:
a58526dcbbedeff19a95fc3adc5a3348f4885d02f141bf0d34d390725d4cff6d
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7C7CD9DB01D52FA020ED4214178554AE55DEB724
binary
MD5:
675553c17d29194e215cd4d15676bb34
SHA256:
4d8c4236b496cb477e9a1f51624efde684fdc08bfa24465f1291158d4e7dd828
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\9A3EF8133F0FA6C3DE8D839A13E7E624CC01FBCC
binary
MD5:
d2bd59f7347cc7978aa4f3b018e70cbe
SHA256:
81e002437ca62380cd66b7658b2a253b733ef9fc2b6c27261e608d4b990bc40c
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7A6C67A13F8B440B5F6CDA04903D4D7D590BB885
binary
MD5:
0139a21e0e6ec712730bbf3ecfaad8d1
SHA256:
376188bf822f64309b84892634a21e546d24d68d2ad2adcd04a6d7fa88696d05
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\18BB9B9766E0996E3AEFA80979C2259AE87E49BF
binary
MD5:
2c0ee1b9cbea1d04707960292c402770
SHA256:
6f834d9ef275d6b50d5ca2ab8b3517eedea32df73310315081d4587b12400a3b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\FAB9F23CCD5A13948FEFB45BA3C6545BA4458716
compressed
MD5:
ca2dd7fe62e928090c22ca93402ec5a9
SHA256:
4d909c93f21970db437fbbdfa800aae9638c415b04823dbadb7d9bf95691538c
1956
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_CnOFBMZQQhp4isD
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\EA5CD5092202AA20FAF24A9C1F15FA2BAB502448
compressed
MD5:
4f396b3f8689d4bf4c269e6d490429e4
SHA256:
3aef2958f1fd1c86490856bd385be476e39a1c61aacb909f0cb011e2192b3200
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\25A9C61F64DF5DFB855A8DD135BF602F28B8D0D5
compressed
MD5:
983de45d77c78858e0991a10b778dbb1
SHA256:
6bbaca1ba5c8b48d97fbcde41c53d77e35d6f29881fdea0ca98e03786b0694a5
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\E0E20373B1D83926FD5E7DFF4163E529C6A687A8
compressed
MD5:
33e9c12aee2b6651ab5ad46d3bb27388
SHA256:
d10ce7eca3f45b2123d9a6b25200a3b778c53e04843c164354f46c83ae4c6853
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
db8b0305cbd53f2818d132a18b87776f
SHA256:
5beb2851f33bb84800283666281849c5e54882f84d057ff81c0f49a7a7af1a55
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1E05B5BC20140E5ECEEB9FD0379EEFB43C369D12
compressed
MD5:
48d7204d3cb7675aa97a16e5d0f3f65d
SHA256:
d01daa969a61d9bc2cae82c408b2fd94469ea9637ee57d463c47f025c5cacd77
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\6ECA0FEA78766CD8D68B17D920A922EA2331E265
binary
MD5:
583c9827ff59b99caeb03e8597019cb1
SHA256:
ea2ca147dab4f60a2b5088b64693604e7804b33c5a464ca619cbd580234866c8
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\418399ECA6425FA0ED295003A7D6E0116D82DCFA
binary
MD5:
8ca75429613b9682c731359e1165e3c7
SHA256:
9339fe3bcf4995b892c3d3f2a2a2c03e8319ef7fcfe20d7f3ae02ec9d1fa86d3
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7DD72E960B142C0BF2342792346F2AACB0CAE065
der
MD5:
1dfabcc7caa670d89d29ea61658af614
SHA256:
cdadb60ed8a5b7ccc9b435d2b8e40577d68b39252a5dc9a0018d26694e2542e1
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cert9.db
sqlite
MD5:
3610e99585898e143a50385007c1057e
SHA256:
3ece7fe1398fc5a1754741ce42571d04b192e2d12a3f4c60461b0137f353459c
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\recovery.jsonlz4
jsonlz4
MD5:
e628b1d1d9763ef9bc260456426e1c5d
SHA256:
f9854d0f4a633b2a9ded2f2e90f63a5eccda2dc2380cc6df571569b24af6191e
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionstore-backups\previous.jsonlz4
jsonlz4
MD5:
da5a84a2615e68822fa04e81e66ea403
SHA256:
1c43e3fbd8cf850c863bba57a263da38355b9021b4a9bcc9f1d59ecaf9841ce9
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\7E2C703DFAF5011CD125447AE2228F9F277EC946
compressed
MD5:
3075d5b6eefce824f7377afd1a8b96c7
SHA256:
578f7cbe5fbd5d4701945baf4fb5c3f8792d74652eb1bdbe8b91a338c6ac8267
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\BC7481D4AB2BA5486418E71FBCE6047319C8484D
der
MD5:
da5794f358987e926f6c9bdeb1ffdc30
SHA256:
588f5026149ae2a5a6d52421df59781b5bf0d523124834fee70d971a73c259f7
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\27B863C4407358EFA568F0472838CE153C76289B
binary
MD5:
5a62caef8a10bc9116c74106237c8730
SHA256:
d30856bd7fc9f97ca51b6fbb43b798fd49a963f026ef4194500ba2d64eb99708
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\93655620968B40DB87DBE8CA0E51AC348D1E16BC
binary
MD5:
f4fcc97ec54be8a0af76da1aea4f3915
SHA256:
f7caabffb69596177eab81c77c3fd0fe06be214ea6b6ba88206587233b828ce0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\BA879334683CA698ECB0E0CE816B947406566559
binary
MD5:
8b890918915dbe22b5fac5a8efced722
SHA256:
5b22a537a74ab2277d7d25533eb936cf5ac1fc076bdc7b820843d34e0ff92b6b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\1C00E9EB937A477483A8D8FD13483594641E2F11
binary
MD5:
9577e935f3a3a5cb80677abee600cc16
SHA256:
bbb8baa568f56f808f8512769b24fb5ce5812799d9e985aa4882179ae2ed2dce
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\5B99DED405F166A3B5894267B775B1D34A290B4D
binary
MD5:
31713eab3a3b492b8b6decb0a02290eb
SHA256:
6318c34a8714e624a61f142f486d1623b2da658768d94ad6630af9271fbc1e52
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\659822F8D0870840A598667BE936E0C41EE54933
binary
MD5:
01b1604ad58711f2d0057469c03b3275
SHA256:
ddaf05965fe76a464f8ab110abc125c92240c8a67985c9e9252ba9dd260527f6
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\28C9ABF3DA509BDA153E31B23DB7627516BED98B
binary
MD5:
d8ef441f347c3702d4320f786f37e472
SHA256:
ecb82b0cbc782de8e2724ff90cf2a79d88b6a0512d05a35a13ffefe3650115cd
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\CB005C9761C5140638F5B0756D0A223407E6BD0D
binary
MD5:
5d452d48631237e588bc2e7af95c53cf
SHA256:
ed36f0d365ce98b7030d0816efe4203fd2a49eea036a90aedbf7af409e1556a2
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\914C1EFD584084DF42212CEB1C30DAEAAD15A1F2
der
MD5:
fb1ba46acd2d70f0cd6b6380b43cda68
SHA256:
9f59a6be1b85d0d2f768b876f2d7b089cf18cb610ef9099e927f39424f717a86
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4
jsonlz4
MD5:
65a8568f72fdf05a592210c52784c82a
SHA256:
353279aec0402d3777cd400ecfa22ece3e3e882cb1e57056965db44bd1306465
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\addonStartup.json.lz4.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\FAB9F23CCD5A13948FEFB45BA3C6545BA4458716
compressed
MD5:
9c826fec3660f2442bf80306a076907a
SHA256:
8092ca059b4102e74982021ede43d0d1013ba21c564e0659f050ea1cd7651491
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\0943B6983F492B224AABA257D7FBD304C2F16C52
image
MD5:
f3356265c0dfc4bfea7252678b0f1966
SHA256:
4f26fd12d4d2c05fb979a03802ead5f220d39448b346c8f472171c9061be1f68
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.sbstore
binary
MD5:
e2cf527ca7550b7e7bdf7311e483a2c3
SHA256:
f1e07b1d717433f47073dc54a7d98e3e87b3d0fa88e53466f93ea544af885d11
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-block-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple.sbstore
binary
MD5:
65e942614eee70680464ac4be75019fc
SHA256:
34395085da32c8b4efe9959e3b0d756b43ffed17694d66f39b966cd331bd9a94
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-trackwhite-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\3DF9AA054394313F7F9F9B941D0DE7C23E669D32
binary
MD5:
193af765faa8a2b012cf7e5937b8ae55
SHA256:
ee1104f0e12ec4221d8353a4c93eacc0a632a22f8e4503885755d772216e0d4c
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple.sbstore
binary
MD5:
95f28ede25c301301f25fbbd9a3c56ec
SHA256:
87763df78772f7d750b0fa5a31eec23e931fd3bd1cbb33beddfc61889da36478
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-track-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple.sbstore
binary
MD5:
051fb32dece757ba112ac36dc72e3a91
SHA256:
0806d98fb3de55f75d7c0b17e26146567e08c483031526659a4a35d09b97ef19
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-harmful-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.sbstore
binary
MD5:
a5695cc64d77967232b0c1344c6e72b3
SHA256:
042a22b8681d754671d2018ba109b31a53ee3728d48c6379043f8e3394e7fbad
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-unwanted-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple.sbstore
binary
MD5:
3d1ce5e50208f0cb3b979186043a548f
SHA256:
1e13d05d482c3d533dc6035af2b2d6e84749412a5748d1435b70cec8b312340b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-phish-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.sbstore
binary
MD5:
3675254e341df799d4307c1f59109185
SHA256:
23d108134bed6099793f7dd6b8b6e62081ec3b945efdbc7c5e0e779fd9b82f98
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
a018631c10df9e4f3fb80b75b230c2ee
SHA256:
a57b439cfcff9d00b45fa0aa284542ff4788836780ec6a1b6fb4b9a53c957b8e
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\test-malware-simple-1.sbstore
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\17593
binary
MD5:
a57eac8c4e0d59d6d62c92b05e210c46
SHA256:
ba0e89eca0b891a962786df3685c27588ad196a7c42c5218c3e2fa6873f31e89
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\A5D93CC48B83C8124FEB6A2E9448677EACA5BA86
binary
MD5:
c9bca98339f942bf386783c86b679d5e
SHA256:
1b1be54abe75c9fe9089eb76511a8e3de3df212e4787296b615a4cff5dcfe4dc
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozstd-trackwhite-digest256.sbstore
binary
MD5:
2ad4445da23a8e50d667c09150cf1876
SHA256:
c1550f9dc8f675c7ff2c896ee91c839e4e2b243e759d71c128521c17f53e91b1
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.sbstore
binary
MD5:
d6acf2573e12afdd7939568804d3fcc1
SHA256:
5525cbf8f8dc41d19ac632ed324e55293a510ae0eeba16d0e3f33c707aa58a0c
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.vlpset
binary
MD5:
d9e28d043d05a069ac7962f181a05337
SHA256:
efbb9ada8e5f662779444e4de88ce944036b7c73d61acfb70239f809dd153aa1
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\google4\goog-unwanted-proto.metadata
binary
MD5:
6ee2fe4d5c3460929a4eec3138d76e8e
SHA256:
1bd0d3301b97fe608243e61c8fa114cc1ae9b69c0622a10cafe5cc1814df3b7a
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\mozplugin-block-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\3CF29C77A14B50756471F0E28FF04BA0FA4357F5
der
MD5:
63a1787818fda9189d02745d359dcf90
SHA256:
e78cd261f0f8834223a6f3ed05aa017b84baedbe5446fb44ea5a4c8155406c8e
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Temp\mz_etilqs_IdBctqbQyLgKBsC
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.sbstore
binary
MD5:
c921d8e98fa01b4f303481e112202e92
SHA256:
4ef1038730ec8bc7206713c29a936768831b922c5e6c83355fd62d7401d8c1dc
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\BE0CCFDEED023C83BCD6BAB4E7FA39C986B3EA5A
ini
MD5:
598814b32b4ce1ac60cfb0766d0571a9
SHA256:
8ba4bfe6d64b87cadac59606cc6da0ba3d26b0101455c4ef828fe3f1055a84e4
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\except-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.sbstore
binary
MD5:
04824a1f92353f43ebb9e7f74b7476fd
SHA256:
b48e58ebab82e4c376f16150a3fff850c1111ff1f5985d68819cfd6f0db159d2
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flashsubdoc-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\doomed\15438
binary
MD5:
e2ad220e176539d8470f5661a7777caa
SHA256:
48f6f4550310d8a7a573960035008a92744fd448be98fc836612c5e9c5e51938
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.sbstore
binary
MD5:
0e8fe60ccd7e9b4c32589a5743a95302
SHA256:
2b124d4026850a3cffd28dbacb58aec28f7dcd4d40bc14e52bbe96d60ce4e749
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\block-flash-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore
binary
MD5:
4a1220fc03e11726f09e9981834345db
SHA256:
6ae7fc0fdbe217104f4034bf6a580a461106b50309abccff6e309124dca5ef39
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.sbstore
binary
MD5:
d886a47c89d9c49c795da345bc236990
SHA256:
a03c5e2656d2f292bf5794c8eeb8d223cd6ba4f4bfb2ed1f325460e879d0bcf7
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\allow-flashallow-digest256.pset
cdxl
MD5:
076933ff9904d1110d896e2c525e39e5
SHA256:
4cbbd8ca5215b8d161aec181a74b694f4e24b001d5b081dc0030ed797a8973e0
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\search.json.mozlz4
jsonlz4
MD5:
6d378e0d40b6eaca22c8bce899a1c5c1
SHA256:
ada2467b2477aceff837ac7820c435ad1ebbe844b2da31c7ab9ae8d010c7a639
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
3704f770e16542bf02570aec923b2671
SHA256:
074d3e0b7499dfdceecaaa33ecff93114c45524857bfbdc5eea49d47cb5c0be5
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json
text
MD5:
c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA256:
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json.tmp
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\2918063365piupsah.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json
text
MD5:
ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA256:
792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js
text
MD5:
354459382f30b8994109c88659dfa1f3
SHA256:
e3e8e2b7e7eeca231620d83c70fa5a926e8b9ce74c51f595f71191dc0b50527e
1956
firefox.exe
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\cookies.sqlite-shm
binary
MD5:
b7c14ec6110fa820ca6b65f5aec85911
SHA256:
fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-current.bin
––
MD5:
––
SHA256:
––
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-current.bin
binary
MD5:
5027177f513cdae07db2330e1ded5934
SHA256:
0c53f16051e738287a4612f68e296238087627e594cfd6ddfa1fecc2e998328b
1956
firefox.exe
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-current.bin
binary
MD5:
de9496aca551ade408ef6466a11833a1
SHA256:
8f9c7fdb3e0bc01024e43a8e242468fc4dd4f74c725e32a883571635203dc10a
Network activity
HTTP(S) requests
17
TCP/UDP connections
47
DNS requests
91
Threats
0
HTTP requests
| PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
| 1956 | firefox.exe | GET | 200 | 2.16.186.112:80 | http://detectportal.firefox.com/success.txt | unknown |
text
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com/ | US |
html
|
|
whitelisted |
| 1956 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/css/9b63bbf49b2374da6bf93f0173e880ecnbr1573400906.css | US |
text
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/css/88192549b7cd75ed59070805c5e79a6dnbr1573400906.css | US |
text
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/700a98c815a6dd3ca33db58b59ce7537.js | US |
text
|
|
whitelisted |
| 1956 | firefox.exe | POST | 200 | 151.139.128.14:80 | http://ocsp.comodoca4.com/ | US |
binary
der
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/9b63bbf49b2374da6bf93f0173e880ecnbr1573400906.js | US |
text
|
|
whitelisted |
| 1956 | firefox.exe | POST | 200 | 172.217.22.99:80 | http://ocsp.pki.goog/gts1o1 | US |
binary
der
|
|
shared |
| 1956 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/js/a3107e4d4ae0ea783cd1177c52f1e6301573400904.js | US |
text
|
|
whitelisted |
| 1956 | firefox.exe | GET | –– | 172.217.23.148:80 | http://cxv456utysd.appspot.com/favicon.ico | US |
––
|
––
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/imgs/37_533e293f0c8947ada653b47c00e394e2.png | US |
image
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/imgs/microsoft_logo.svg | US |
image
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/imgs/ellipsis_white.svg | US |
image
|
|
whitelisted |
| 1956 | firefox.exe | GET | 200 | 172.217.23.148:80 | http://cxv456utysd.appspot.com//themes/imgs/ellipsis_grey.svg | US |
image
|
|
whitelisted |
| 1956 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US |
binary
der
|
|
whitelisted |
Connections
| PID | Process | IP | ASN | CN | Reputation |
|---|---|---|---|---|---|
| 1956 | firefox.exe | 172.217.23.148:80 | Google Inc. | US | whitelisted |
| 1956 | firefox.exe | 2.16.186.112:80 | Akamai International B.V. | –– | whitelisted |
| 1956 | firefox.exe | 52.35.182.58:443 | Amazon.com, Inc. | US | unknown |
| 1956 | firefox.exe | 52.41.185.87:443 | Amazon.com, Inc. | US | malicious |
| 1956 | firefox.exe | 13.35.253.28:443 | US | malicious | |
| 1956 | firefox.exe | 54.149.128.76:443 | Amazon.com, Inc. | US | unknown |
| 1956 | firefox.exe | 93.184.220.29:80 | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
| 1956 | firefox.exe | 172.217.16.202:443 | Google Inc. | US | whitelisted |
| 1956 | firefox.exe | 172.217.22.99:80 | Google Inc. | US | whitelisted |
| 1956 | firefox.exe | 104.16.122.175:443 | Cloudflare Inc | US | shared |
| 1956 | firefox.exe | 104.17.65.4:443 | Cloudflare Inc | US | suspicious |
| 1956 | firefox.exe | 216.58.207.42:443 | Google Inc. | US | whitelisted |
| 1956 | firefox.exe | 151.139.128.14:80 | Highwinds Network Group, Inc. | US | suspicious |
| 1956 | firefox.exe | 13.35.253.117:443 | US | suspicious | |
| 1956 | firefox.exe | 13.35.253.70:443 | US | suspicious | |
| 1956 | firefox.exe | 95.100.79.183:443 | Akamai Technologies, Inc. | –– | whitelisted |
| 1956 | firefox.exe | 152.199.23.37:443 | MCI Communications Services, Inc. d/b/a Verizon Business | US | unknown |
| 1956 | firefox.exe | 35.165.44.141:443 | Amazon.com, Inc. | US | unknown |
| 1956 | firefox.exe | 13.35.253.81:443 | US | unknown | |
| 1956 | firefox.exe | 52.222.158.88:443 | Amazon.com, Inc. | US | unknown |
DNS requests
| Domain | IP | Reputation |
|---|---|---|
| cxv456utysd.appspot.com | 172.217.23.148
|
unknown |
| detectportal.firefox.com | 2.16.186.112
2.16.186.50 |
whitelisted |
| a1089.dscd.akamai.net | 2.16.186.50
2.16.186.112 |
whitelisted |
| search.services.mozilla.com | 52.35.182.58
35.164.109.147 52.89.218.39 |
whitelisted |
| search.r53-2.services.mozilla.com | 52.89.218.39
35.164.109.147 52.35.182.58 |
whitelisted |
| push.services.mozilla.com | 52.41.185.87
|
whitelisted |
| autopush.prod.mozaws.net | 52.41.185.87
|
whitelisted |
| d228z91au11ukj.cloudfront.net | 13.35.253.14
13.35.253.31 13.35.253.53 13.35.253.28 |
whitelisted |
| snippets.cdn.mozilla.net | 13.35.253.28
13.35.253.53 13.35.253.31 13.35.253.14 |
whitelisted |
| tiles.services.mozilla.com | 54.149.128.76
54.69.207.70 52.39.224.180 54.186.225.209 52.33.184.165 52.89.51.22 54.68.132.173 52.39.125.254 |
whitelisted |
| tiles.r53-2.services.mozilla.com | 52.39.125.254
54.68.132.173 52.89.51.22 52.33.184.165 54.186.225.209 52.39.224.180 54.69.207.70 54.149.128.76 |
whitelisted |
| ocsp.digicert.com | 93.184.220.29
|
whitelisted |
| cs9.wac.phicdn.net | 93.184.220.29
|
whitelisted |
| safebrowsing.googleapis.com | 172.217.16.202
|
whitelisted |
| ocsp.pki.goog | 172.217.22.99
|
shared |
| pki-goog.l.google.com | 172.217.22.99
|
whitelisted |
| ajax.googleapis.com | 216.58.207.42
|
whitelisted |
| cdnjs.cloudflare.com | 104.17.65.4
104.17.64.4 |
whitelisted |
| unpkg.com | 104.16.122.175
104.16.123.175 104.16.126.175 104.16.125.175 104.16.124.175 |
whitelisted |
| ocsp.comodoca4.com | 151.139.128.14
|
whitelisted |
| firefox.settings.services.mozilla.com | 13.35.253.117
13.35.253.45 13.35.253.99 13.35.253.101 |
whitelisted |
| d2k03kvdk5cku0.cloudfront.net | 13.35.253.101
13.35.253.99 13.35.253.45 13.35.253.117 |
whitelisted |
| content-signature-2.cdn.mozilla.net | 13.35.253.70
13.35.253.75 13.35.253.78 13.35.253.55 |
whitelisted |
| d2nxq2uap88usk.cloudfront.net | 13.35.253.55
13.35.253.78 13.35.253.75 13.35.253.70 |
whitelisted |
| aadcdn.msftauth.net | 152.199.23.37
|
whitelisted |
| secure.aadcdn.microsoftonline-p.com | 95.100.79.183
|
whitelisted |
| e13761.dscg.akamaiedge.net | 95.100.79.183
|
whitelisted |
| cs1100.wpc.omegacdn.net | 152.199.23.37
|
unknown |
| shavar.services.mozilla.com | 35.165.44.141
52.33.139.34 52.33.61.229 52.27.36.44 52.10.223.26 52.33.55.70 35.155.241.126 52.88.59.72 |
whitelisted |
| shavar.prod.mozaws.net | 52.88.59.72
35.155.241.126 52.33.55.70 52.10.223.26 52.27.36.44 52.33.61.229 52.33.139.34 35.165.44.141 |
whitelisted |
| www.youtube.com | 216.58.207.46
216.58.207.78 172.217.23.110 172.217.16.142 216.58.208.46 172.217.16.174 172.217.22.46 172.217.22.110 172.217.21.206 172.217.21.238 216.58.205.238 172.217.23.142 172.217.18.14 172.217.18.174 216.58.206.14 |
whitelisted |
| www.mozilla.org | 104.16.143.228
104.16.142.228 |
whitelisted |
| youtube-ui.l.google.com | 216.58.206.14
172.217.18.174 172.217.18.14 172.217.23.142 216.58.205.238 172.217.21.238 172.217.21.206 172.217.22.110 172.217.22.46 172.217.16.174 216.58.208.46 172.217.16.142 172.217.23.110 216.58.207.78 216.58.207.46 |
whitelisted |
| www.facebook.com | 185.60.216.35
|
whitelisted |
| e11847.g.akamaiedge.net | 72.247.226.12
|
whitelisted |
| star-mini.c10r.facebook.com | 185.60.216.35
|
whitelisted |
| www.mozilla.org.cdn.cloudflare.net | No response | whitelisted |
| www.ebay.de | 72.247.226.12
|
whitelisted |
| www.wikipedia.org | 91.198.174.192
|
whitelisted |
| outdatedbrowser.com | 104.27.186.182
104.27.187.182 |
suspicious |
| dyna.wikimedia.org | No response | whitelisted |
| reddit.map.fastly.net | 151.101.193.140
151.101.129.140 151.101.65.140 151.101.1.140 |
whitelisted |
| signup.live.com | 13.107.6.190
|
whitelisted |
| www.reddit.com | 151.101.1.140
151.101.65.140 151.101.129.140 151.101.193.140 |
whitelisted |
| login.live.com | 40.90.22.188
40.90.22.191 40.90.22.183 |
whitelisted |
| account-msa-afd.trafficmanager.net | 13.107.6.190
|
unknown |
| lgin.msa.trafficmanager.net | No response | unknown |
| tracking-protection.cdn.mozilla.net | 13.35.253.81
13.35.253.114 13.35.253.94 13.35.253.79 |
whitelisted |
| d1zkz3k4cclnv6.cloudfront.net | 13.35.253.79
13.35.253.94 13.35.253.114 13.35.253.81 |
whitelisted |
| aus5.mozilla.org | 52.222.158.88
52.222.158.141 52.222.158.182 52.222.158.35 |
whitelisted |
| balrog-cloudfront.prod.mozaws.net | 52.222.158.35
52.222.158.182 52.222.158.141 52.222.158.88 |
whitelisted |
Debug output strings
No debug info.