\n\n\n\n \n \n \n\n\n\n \n \nstart \n \n\n\n\n \n \n \n\n\n\n \n \n \n\n\n\n \n \n \n\n\n\n \n \n \n\n\n\n \n\nfirefox.exe \nno specs \n \n\n\n\n\n \n\n\n\n \n\nfirefox.exe \n\n \n\n\n\n \n\nfirefox.exe \nno specs \n \n\n\n\n \n\nfirefox.exe \n\n \n\n\n\n \n\nfirefox.exe \n\n \n\n\n\n \n\nfirefox.exe \n\n \n\n\n","processesValues":[{"rowId":"9ce6b35a-35e8-4f8f-9a52-3f472efffae1","rowData":{"threatLevel":0,"values":[1608,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" \"http://www.selectaward.com/presentationtips\"","C:\\Program Files\\Mozilla Firefox\\firefox.exe",[],"explorer.exe"],"information":{"values":["admin","Mozilla Corporation","MEDIUM","Firefox","0","68.0.1"],"modules":[]}}},{"rowId":"c1575ce6-38cd-4922-b737-75d7b9b91336","rowData":{"threatLevel":0,"values":[2668,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" http://www.selectaward.com/presentationtips","C:\\Program Files\\Mozilla Firefox\\firefox.exe",["network"],"firefox.exe"],"information":{"values":["admin","Mozilla Corporation","MEDIUM","Firefox","","68.0.1"],"modules":[]}}},{"rowId":"98183e0c-bd15-4445-8160-6813136ecba5","rowData":{"threatLevel":0,"values":[912,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"2668.0.43858104\\646726711\" -parentBuildID 20190717172542 -greomni \"C:\\Program Files\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja\" -appdir \"C:\\Program Files\\Mozilla Firefox\\browser\" - 2668 \"\\\\.\\pipe\\gecko-crash-server-pipe.2668\" 1176 gpu","C:\\Program Files\\Mozilla Firefox\\firefox.exe",[],"firefox.exe"],"information":{"values":["admin","Mozilla Corporation","MEDIUM","Firefox","","68.0.1"],"modules":[]}}},{"rowId":"f1c5ec9e-b7aa-42ac-9046-85b8fe4840ce","rowData":{"threatLevel":0,"values":[4020,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"2668.3.1313555930\\489307633\" -childID 1 -isForBrowser -prefsHandle 1708 -prefMapHandle 1364 -prefsLen 1 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni \"C:\\Program Files\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja\" -appdir \"C:\\Program Files\\Mozilla Firefox\\browser\" - 2668 \"\\\\.\\pipe\\gecko-crash-server-pipe.2668\" 1668 tab","C:\\Program Files\\Mozilla Firefox\\firefox.exe",["network"],"firefox.exe"],"information":{"values":["admin","Mozilla Corporation","LOW","Firefox","","68.0.1"],"modules":[]}}},{"rowId":"1f4f8d4a-7222-443c-9853-a89e3b6da88f","rowData":{"threatLevel":0,"values":[2492,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"2668.13.1389795052\\815133544\" -childID 2 -isForBrowser -prefsHandle 2876 -prefMapHandle 2880 -prefsLen 5996 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni \"C:\\Program Files\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja\" -appdir \"C:\\Program Files\\Mozilla Firefox\\browser\" - 2668 \"\\\\.\\pipe\\gecko-crash-server-pipe.2668\" 2892 tab","C:\\Program Files\\Mozilla Firefox\\firefox.exe",["network"],"firefox.exe"],"information":{"values":["admin","Mozilla Corporation","LOW","Firefox","","68.0.1"],"modules":[]}}},{"rowId":"44545903-f6b5-4c33-9213-ac595a5c42bf","rowData":{"threatLevel":0,"values":[2408,"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"2668.20.960444354\\1372974361\" -childID 3 -isForBrowser -prefsHandle 3836 -prefMapHandle 3856 -prefsLen 7195 -prefMapSize 191824 -parentBuildID 20190717172542 -greomni \"C:\\Program Files\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja\" -appdir \"C:\\Program Files\\Mozilla Firefox\\browser\" - 2668 \"\\\\.\\pipe\\gecko-crash-server-pipe.2668\" 3868 tab","C:\\Program Files\\Mozilla Firefox\\firefox.exe",["network"],"firefox.exe"],"information":{"values":["admin","Mozilla Corporation","LOW","Firefox","","68.0.1"],"modules":[]}}}]},"registryActivity":{"stats":[{"name":"Total events","value":"587"},{"name":"Read events","value":"582"},{"name":"Write events","value":"0"},{"name":"Delete events","value":"0"}],"modificationEvents":[]},"filesActivity":{"stats":[{"name":"Executable files","value":"0"},{"name":"Suspicious files","value":"62"},{"name":"Text files","value":"49"},{"name":"Unknown types","value":"55"}],"droppedFiles":[{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache-current.bin","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cookies.sqlite-shm","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\prefs-1.js","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionCheckpoints.json.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\1657114595AmcateirvtiSty.sqlite-shm","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\search.json.mozlz4.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\3870112724rsegmnoittet-es.sqlite-shm","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionCheckpoints.json","md5":"C4AB2EE59CA41B6D6A6EA911F35BDC00","sha256":"00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache-child-current.bin","md5":"5027177F513CDAE07DB2330E1DED5934","sha256":"0C53F16051E738287A4612F68E296238087627E594CFD6DDFA1FECC2E998328B","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite-shm","md5":"B7C14EC6110FA820CA6B65F5AEC85911","sha256":"FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\1451318868ntouromlalnodry--epcr.sqlite-shm","md5":"B7C14EC6110FA820CA6B65F5AEC85911","sha256":"FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\urlCache-current.bin","md5":"DE9496ACA551ADE408EF6466A11833A1","sha256":"8F9C7FDB3E0BC01024E43A8E242468FC4DD4F74C725E32A883571635203DC10A","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\prefs.js","md5":"354459382F30B8994109C88659DFA1F3","sha256":"E3E8E2B7E7EECA231620D83C70FA5A926E8B9CE74C51F595F71191DC0B50527E","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\search.json.mozlz4","md5":"6D378E0D40B6EACA22C8BCE899A1C5C1","sha256":"ADA2467B2477ACEFF837AC7820C435AD1EBBE844B2DA31C7AB9AE8D010C7A639","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\3561288849sdhlie.sqlite-shm","md5":"B7C14EC6110FA820CA6B65F5AEC85911","sha256":"FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\allow-flashallow-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\allow-flashallow-digest256.sbstore","md5":"D886A47C89D9C49C795DA345BC236990","sha256":"A03C5E2656D2F292BF5794C8EEB8D223CD6BA4F4BFB2ED1F325460E879D0BCF7","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\base-track-digest256.sbstore","md5":"4A1220FC03E11726F09E9981834345DB","sha256":"6AE7FC0FDBE217104F4034BF6A580A461106B50309ABCCFF6E309124DCA5EF39","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\base-track-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-phish-proto.vlpset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\doomed\\29048","md5":"E2AD220E176539D8470F5661A7777CAA","sha256":"48F6F4550310D8A7A573960035008A92744FD448BE98FC836612C5E9C5E51938","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flash-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\block-flash-digest256.sbstore","md5":"0E8FE60CCD7E9B4C32589A5743A95302","sha256":"2B124D4026850A3CFFD28DBACB58AEC28F7DCD4D40BC14E52BBE96D60CE4E749","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\block-flash-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flash-digest256.sbstore","md5":"C921D8E98FA01B4F303481E112202E92","sha256":"4EF1038730EC8BC7206713C29A936768831B922C5E6C83355FD62D7401D8C1DC","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\block-flashsubdoc-digest256.sbstore","md5":"04824A1F92353F43EBB9E7F74B7476FD","sha256":"B48E58EBAB82E4C376F16150A3FFF850C1111FF1F5985D68819CFD6F0DB159D2","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flashallow-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flashallow-digest256.sbstore","md5":"6F85BC4B2ECB49E26B0BD83A821065D0","sha256":"C0B3BC9B3DC507AB654CAF72D13C3AEFA58C9B13B1E4D14DD8816712D80A7E54","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\block-flashsubdoc-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-malware-simple.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-malware-simple.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-phish-simple.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-phish-simple.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-track-simple.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-downloadwhite-proto.pset","md5":"7655FFFE7CFBE1EBF96AFEA5FE2E1376","sha256":"FF2F663C4E453706B7817109F6A43E8B3389E8CFB1B7D64AACE2BFBA45F3A359","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flashsubdoc-digest256.sbstore","md5":"BA0009932844173BC8F9AF264229DF24","sha256":"66D1C00C04D86E313E9A02775CDF906B1BE8D4CD6BEF423A1B9E21CC4E9F50C1","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-track-simple.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-trackwhite-simple.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-trackwhite-simple.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-unwanted-simple.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-unwanted-simple.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-malware-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-badbinurl-proto.metadata","md5":"B4D69F529BF6D261075D04C6A5C56158","sha256":"2794C0426AA721104DF6A8615D57A251AF30A79865CC69E369ED41CAE4EA4EE8","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-downloadwhite-proto.metadata","md5":"498DAE4E538658A57F464748F2DABFDA","sha256":"8778F52CD9CB4F4787BF7BA18006D212F8C3004652D163F7786556A8EEF3A067","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-badbinurl-proto.vlpset","md5":"93FDF288DA71B455CFCB53F9E78ADD2A","sha256":"017ED2622F8E5E1D72DF4BC872BCF81CCFEA9681AEDE1AFDC7F3DDAC800B0CF5","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\except-flashsubdoc-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-malware-proto.metadata","md5":"C0FF29E2429D6A67594D829B166B9D0B","sha256":"A8AB69AF442AE86AF43F2A3BF22B91341377BE23874762DE01E3E71EF08F0318","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-malware-proto.vlpset","md5":"8996548565A96F6BA34BC8317FB4F09E","sha256":"F760F51C58A91FCC264B8D27F610372AD510209EAE6D0911E0AC236E7405FDC8","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-phish-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-unwanted-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-harmful-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-track-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-trackwhite-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-block-simple-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-backup","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Temp\\mz_etilqs_RV1gfXRqVRdBsmm","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\mozplugin-block-digest256.sbstore","md5":"D6ACF2573E12AFDD7939568804D3FCC1","sha256":"5525CBF8F8DC41D19AC632ED324E55293A510AE0EEBA16D0E3F33C707AA58A0C","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-phish-proto.metadata","md5":"F57521D4D31B44FBBB74BA8F2441F52F","sha256":"FD6F2ADCF2BCE0AC48F15B6A67110E24EC8D24A566422512DF2269F2CFAC7A0D","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-unwanted-proto.metadata","md5":"6EE2FE4D5C3460929A4EEC3138D76E8E","sha256":"1BD0D3301B97FE608243E61C8FA114CC1AE9B69C0622A10CAFE5CC1814DF3B7A","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-block-simple.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-block-simple.sbstore","md5":"E2CF527CA7550B7E7BDF7311E483A2C3","sha256":"F1E07B1D717433F47073DC54A7D98E3E87B3D0FA88E53466F93EA544AF885D11","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\mozstd-trackwhite-digest256.sbstore","md5":"2AD4445DA23A8E50D667C09150CF1876","sha256":"C1550F9DC8F675C7FF2C896EE91C839E4E2B243E759D71C128521C17F53E91B1","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-unwanted-proto.vlpset","md5":"D9E28D043D05A069AC7962F181A05337","sha256":"EFBB9ADA8E5F662779444E4DE88CE944036B7C73D61ACFB70239F809DD153AA1","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\mozplugin-block-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-harmful-simple.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\mozstd-trackwhite-digest256.pset","md5":"076933FF9904D1110D896E2C525E39E5","sha256":"4CBBD8CA5215B8D161AEC181A74B694F4E24B001D5B081DC0030ED797A8973E0","type":{"value":"cdxl","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\test-harmful-simple.sbstore","md5":"051FB32DECE757BA112AC36DC72E3A91","sha256":"0806D98FB3DE55F75D7C0B17E26146567E08C483031526659A4A35D09B97EF19","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\A5D93CC48B83C8124FEB6A2E9448677EACA5BA86","md5":"5F84DC4431B8F1BBB5B623C9DD78943B","sha256":"48696CA8793FAC95F140A0BDF96316C0BB9ECB52309BA2C2458D22A5D13D7946","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B7CA2A2F93E531BB710D6B71A50F307FE0C68C1D","md5":"4377ED020EE3804FDE6EF5565CB1B41E","sha256":"A9FBBEC2EC51615B53B1E218FBF01C9B5ECBBDF1B60988C5779B9D02A8AE818C","type":{"value":"der","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\BE0CCFDEED023C83BCD6BAB4E7FA39C986B3EA5A","md5":"824A529280D647547643017E735DA3DA","sha256":"90938FCE1A2442364CED5168181E436F7AB5462B92BC0CB1346A3E313D0925E9","type":{"value":"ini","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\doomed\\4630","md5":"A57EAC8C4E0D59D6D62C92B05E210C46","sha256":"BA0E89ECA0B891A962786DF3685C27588AD196A7C42C5218C3E2FA6873F31E89","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\6C2DD3A4BC3F211FD943713F165115C7CBEEFB95","md5":"EBC5D0C2C4B66C2905DFBA5CB52FC3C1","sha256":"BDDDF7A90281EA86FEFF97F992451CF225B097EF8C03BA4331ADEAB0C34F496B","type":{"value":"der","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\227FE98397462CE3F5FF9D2D8D3E225F4F9B7C90","md5":"933F77051DF009888EAA041D83F17642","sha256":"E59E6A0A5F9811631B7F223672A0B87B5408659581A6B6ED7F7CDACDAF3F4D24","type":{"value":"der","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\BAFB43B216B6A746600FA9F995615D463FDA24D6","md5":"1AC6F3A0FE182BD3B1C7108455BB7021","sha256":"5D569D9880902A222BE8DB62A23A69B2636D60438CF4318AC89C6E372384CE17","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B54DF4506D0E7C9EF5BCF923DDAAA00DD8B8F6E4","md5":"F93C41EE045EC571FC093FD49E5483D0","sha256":"A236482E0F947B79C80182C81AF52C4952D049DE8004D643FA90D74CE1AB5734","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\2A9891055DAB480C7578451E12C28484DF20BAA3","md5":"4FA92BF1EB1891E92F774B3D1FC67381","sha256":"5B2861D60EBEF0887590BBCB230E7ECF35130EC3E07943ED98A4C1F053C8A8DB","type":{"value":"htm","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\402C0CE4DF91187CB5A00B5B605444BC41F64477","md5":"AEDD111C5F2B5AACD10533E1FD413271","sha256":"D1DCA1A15E8709688EC538BB743DF9AA47567FECABADBE2148B2443EB8A9A178","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Temp\\mz_etilqs_XPttLc1U49xwZUn","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\addonStartup.json.lz4.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Temp\\mz_etilqs_DU51NNXvDhK56bg","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\EE197B20CAB0419D1C0BD23EE03034F880EDC296","md5":"6CF24E9F659E833AE24F1417D5157778","sha256":"3D55B78ACD1C895135695647DBD70E9421C4419C5073DFC763CCDAC9F7BE1B23","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\AB423DCD1B1F2AC64DFC45A9DF00554A51D532F5","md5":"8C6C771F30EE532833605A6CE463DB40","sha256":"49FD753C2E5599F00C9B932C8163ED9DB930B47284E8809562ACE0450C525829","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\9177A730A75A3AED965C9E07E7094239DD45F8CA","md5":"1A1C98A2DA803F3135CC7C2A3A5D58E4","sha256":"42D607CE13BCF2DBE2C071C1E8664A14D20D5F1128E5CCC9E7D5968654732C41","type":{"value":"cer","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\376767EF8F79280A703544B55C1FDBBA070C6C4A","md5":"5FE1B5FC7336594D5062609D612609C5","sha256":"4CEA2D899363D0CABA3B5C12FD5743DEB08714D6592A0F6645AD1E8FDD1017E5","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B7009CBDEBE6D3C0774EAFB6E1A0FE7E67A470B8","md5":"D48259F53F356B4E6483642ED7B6FF7A","sha256":"5D2C13F238487F2E9C7463DA59DCD9988F1AFE830BF1D330BF5D3ACEB0FCAA4B","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\88C36AFB7B51B51AB57B2D81684E55FB4C454906","md5":"B7DBBED701722A44A2535BCCD0A87C73","sha256":"3E2EA5FFC884AAF76CFF98861F1B09ADF84CB44897DEA6B978AD65015000D1D0","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\4E7F3A1ACE79A6C4019D03D175AA1D31F437FB52","md5":"9FEB8439E430214E984B76196C0C0D48","sha256":"F0061F8A57839A1E8C0794D09503AE0D7AF22BCA4F7E2C35AD2BA13B037ADC22","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\ED4CE6DCD5C1EA4EBEB3F5CE4968C13FBFBA7575","md5":"928DE9B7A0A46765D72F5AD3194D1684","sha256":"BA5D5DB5CCF0239BEB87FAF1A3AB6ADE71054A1CCD53D50447CAB418A7F6A35F","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B76AE19835CDEA86B521946719284134832ED132","md5":"F09DFF794643573A7FDC5B77A2CC70B5","sha256":"F2A29F1CDAD5A37A6127C8DC271C81790997B23CBA9FAC86CC2CA2381D0F2CDA","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\77510ACC4EAD31B7C77E7615D594627A3D055D75","md5":"B50F660245A3B4083A40F43C4E2B9A11","sha256":"4766401CE8CD147D222ACC01A4CFD734E210036F419BB90E1B342EF078DD1D95","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\587EC1E447CCF71011A76CBC36316000A45C8BEA","md5":"F64BABAB90047A1AEBF07A8C2A21D807","sha256":"7C720274EDAC4995051F52F5383E2374BA2C6FE1917CE834CB4C695C40CC33BF","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\04D6E68AF96624593930D3F12A2D16E9873A3EC6","md5":"775627B35CB1F4A3B96F653CE4A5DB7E","sha256":"9BD9E4DE39A7A39E1D23C9C06FEF36763FA163F71F50ED874096A71A43CA20E5","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B06E1D29677C5C3714B3982BF0DADEE29A0C9B96","md5":"756E32E03BD453E2EBE6BC2824453F43","sha256":"DBF318FBDD9436C9404A37C0417DE6760275C97C329A83966FA65673009AF27D","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\0544D179E914DAACAF3EE7C7761C9C8FBAB5AF3D","md5":"3E54A5195031CA03B6DCD6BEE096C915","sha256":"3E1CC368497B0FE9A2ED93C53FA3571B30F93AC22C6FE35ECF02E7E6F6272813","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionstore-backups\\recovery.jsonlz4.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Temp\\mz_etilqs_VtKIaJgLu9QI5GP","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Temp\\mz_etilqs_UwVMBwKaSRoom7v","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\revocations-1.txt","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\20389B09730504F72FC74211F1E3B3EDD49F6C91","md5":"BB80D75C072DFD1930F5652A512650F4","sha256":"DDBA59C34052E1C7E5B507721F2FEB6CC9564C315AC0E12F40457C8B48A28FF9","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\addonStartup.json.lz4","md5":"65A8568F72FDF05A592210C52784C82A","sha256":"353279AEC0402D3777CD400ECFA22ECE3E3E882CB1E57056965DB44BD1306465","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\ABEAA48B501FBD6A530EC9F222A741DA79987BC8","md5":"3B07BB0D723E614082386CA2539F64DF","sha256":"94BD60865902A5030E0265B13AA55ED2DBB07CA730CD44F3DF3E41D4B4467673","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\F36BA6E65505B424864C5907B9DCD4FA685F2145","md5":"62D1B4A6D0F825127519AA60853FA87B","sha256":"11471FD6DB6C855215D072FE50AEAA6F9276DF933E2F3D4577762BF79DC4E81D","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\DBAADDBE936AB2F853A9CA618FF84448E7790B44","md5":"F26C7DDFC2FF72186C0D8FDE68476264","sha256":"C416F9C7F53C565816296B16C50BF7BBCE5AEBC57ACF65EAAB23B7AEE933CA73","type":{"value":"cer","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\1D934245BFF92F546D1D205CC7BEBD74CC72A72A","md5":"BD2A74C4461B4EF1F62614CE4C1AB035","sha256":"AE216F68F71A2D817EC19C33EDCFF38C5475C2080A2A642A51AC2120E81BC9FA","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\530D7C695D0CF20404B9E2774111E6E8DC295281","md5":"1A413FE64C42E764911CE485EAE5E0EB","sha256":"95FAC79E29C381EB7810CDDCED1AF003BE2EEAA389C52F8E8BF4BBA5A66201DD","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionstore-backups\\previous.jsonlz4","md5":"DA5A84A2615E68822FA04E81E66EA403","sha256":"1C43E3FBD8CF850C863BBA57A263DA38355B9021B4A9BCC9F1D59ECAF9841CE9","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionstore-backups\\recovery.jsonlz4","md5":"3312367DAB040975AE1E6258B83C3F8B","sha256":"60F828055A76CF07A504D0D4A853E1B8972C63188315EDDE04AE7BD8B4CEB5E5","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\revocations.txt","md5":"BEF8EC74021A23512D2724A28C7DFFA5","sha256":"F3F0FED4885BEF62A9E666DD47C41B76ADB1BD63A2AB14C30E524EB5D91046F6","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\A919BFDB437193C9CFE258DACE163E0997FA8E62","md5":"78903B1BEB1161882BD21132B02086D7","sha256":"C43866D8F7A5888D28568FBC34C01C5B615E179129436F4D5F2D68A5E2ADF949","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\broadcast-listeners.json.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-phish-proto-1.vlpset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-malware-proto-1.vlpset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-unwanted-proto-1.vlpset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\google4\\goog-badbinurl-proto-1.vlpset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\9A3EF8133F0FA6C3DE8D839A13E7E624CC01FBCC","md5":"B802D68FFE3D3AEBF1DDD223288CD510","sha256":"D3AD0A63754E5CB382415631444C9F5493F7B1050AF7BF4FE7268DE4DD872F5C","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\broadcast-listeners.json","md5":"11431640BDE861117BAF57975CFA9BB6","sha256":"8084A523AAAE2E9DACBB3D899869A27C8BD920B7C877FD010B43CFF81AF56886","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\3870112724rsegmnoittet-es.sqlite-wal","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\3870112724rsegmnoittet-es.sqlite","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\analytics-track-digest256.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\analytics-track-digest256.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\mozstd-trackwhite-digest256-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\social-track-digest256.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\social-track-digest256.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\base-track-digest256-1.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\content-track-digest256.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\content-track-digest256.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\ads-track-digest256.sbstore","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\safebrowsing-updating\\ads-track-digest256.pset","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\urlCache-new.bin","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache-new.bin","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache.bin","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache-child-new.bin","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\urlCache.bin","md5":"213837E5F880A8537CDB6D177432A7CD","sha256":"F9F0C7154705AF8552768EAC003C3E12548C41DA04B969F8371FEF61E8544177","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\scriptCache-child.bin","md5":"BD09AE31284F5F39C9A1BCC966EE4992","sha256":"5BFF27B82AED4DFEFA851620F78A7B6CE97825E32DDAA8E4F96B9BB950801760","type":{"value":"binary","type":1}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\A27E0F2D24A0D51F3D1A067AE00F7F689069807D","md5":"0B6CBCEFE8BB48528EF85468D0EA8609","sha256":"4D4C3410CB08378AB2F96F44D6E6E2452BA7D6C1606411C7926F39782E5819F8","type":{"value":"der","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite-wal","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\1657114595AmcateirvtiSty.sqlite-wal","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\storage\\permanent\\chrome\\idb\\1657114595AmcateirvtiSty.sqlite","md5":"4A647F51CFB5A75FD5343FBDD93570E7","sha256":"CF5E265E39B0CCFED898C91D64CBF4C7AB78BBD14A2D05A48AD9656F683E5840","type":{"value":"sqlite","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\permissions.sqlite-journal","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\7F7D9D52FC321F26906DA62EE714E412DE509318","md5":"103FE33D2D581AF71919B90647DB6834","sha256":"573B1E3F944A49AD878CC33A2229783188195E1C07A7181D2996AA1A73720C0C","type":{"value":"htm","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\53622A6D9BF6B900E9B914507F7331B5498CE31F","md5":"6F4A23F8394DBADB24712CB24BC384D5","sha256":"324F636DF204E0D6330DB67815F5D8409BB0411DEE652A65507D9D5161BEB2AB","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\A644302743DE1602C9FFC7FDCD8558A55B833483","md5":"917974A60568C857634D9D92042A7F15","sha256":"0B9FCD7082FFE64E920C88F70CD99F8D2EBC1E1D14A498F0225B78DD6C1C08A1","type":{"value":"htm","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\9421BE0AB012E918475BFA335D7C23756C81E9F2","md5":"D632A98E881A8EE8E65FA1D906C5098F","sha256":"1788B34E599FFCAD3F9D79EDB98B742F84A0D68C7E7FDED0EBDD7A607C77D6F7","type":{"value":"htm","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\5EC70513378967C17A9CB390EA4A098265989A14","md5":"2F5A84B6D879FFD9740812BB58814274","sha256":"588C903963FF1C2F69FFFE8C3F01BAE9FF4E0FD77C367E70F4AECB84CF6247C6","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\02A26BF7639A158D044C4ED5B579C46C8F832518","md5":"ECCF972DFBD3E63C0FA5CF9F3F8167CA","sha256":"CFE03439D056F89B562902667AFB69ADD077B3F81F6662DF4F424E3E738AEE15","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\6C0AE770DBD06AE1E9E71EB31D93D335D963BE29","md5":"448FF3FCCB51C463F8B452CCB3CC677D","sha256":"3D6FDCF6958E0C0E2EFAC506C60B41877AA1E81C8CBA274B1BDD31F68FB877EC","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\76C949DC4B6289A0B4F4ED898579B2D5C6242988","md5":"AA65E7DED5D975589336A8684F4D6602","sha256":"55C1D69CB934D47EFF34A81042BE29DBDE5EEBC7F468B8002ECFAE04B0380BD5","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\7FC4388BE3F6F5E6D227E1410F7D2C0C3D5A5213","md5":"AC3DD429C8DF0E6F7CF895F14583E78F","sha256":"DBFF42578E70CCEC96D74F61006F29FC54511E46D9352E7DB3F92EBB47344E64","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\1B0E68F37187123FFF4B01524068A8D9F838F8A1","md5":"EAB54FB839F5FEF5D561F594D5A90243","sha256":"2B940BECD5832DF9363FAF5566851AD271BF37EE4185D0C106D0B90B96300130","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\A6A06A911FDF0442DF16564B09EB8E97BBB9645D","md5":"9B52567C15D8E30DC535A059B809301F","sha256":"7C3F8D9C93C1FC5DC353BACA6647D0401C97CB212EBC0371A68EEAFC5A868614","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\8D489DD1ACFF703F1CA9D96B7276A6E9A5097742","md5":"1F68A37435BF4314BF027BB174C92377","sha256":"673FFF9D940B44A13BAF976DE216AA4F17F9ADD5D1E3AB5BEC535C8DC487E0A0","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\D76B00C9B64B3391E1272DE628B9110B748C90B2","md5":"56FC92838BC9DF8E362997210B6C95C2","sha256":"FE2B041A0E75F020D1FBAA6F2C5A4988E903462F7C32BA82AC2B42A20D21D704","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\10C0A7E5E54FAFFB74AC2A900BAA4049DAAE1F03","md5":"9AEE3CB4FEB319E3C4E4757CC6AA64FC","sha256":"6026A2B5C9EE64B98548992F3670427564B706DF4F72B89D9B1065B72C7E3D7B","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\FDAD1B89E596747CAED235BD515B1C90C704AFCC","md5":"9D0555E891211034F8A6AA0C837997D1","sha256":"17DD4EA6A51CAFE67D928B2992753319DE1F8158EF92FB883D9E306F13AB4940","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\0BBECF02E6000470EC46F4C6FD07BAE598C707F5","md5":"8DE5387B92B8886AA5EBF4CA40AFA919","sha256":"E2D709B0071E73024F887C5325A517C7A764BC704E5D9B78259A2C84A06D4E1D","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\0737BFDB7B1830A5C293A08D8C4A04C2FC0F6ED6","md5":"BAF4590200FACE7707F6A29CDE6C56CC","sha256":"864E79BCA84274E0E5ABC534971FE91EFD4949F35232EF14A8B445690B9625E2","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\6D9B36DBDCE157C12B2396AC35C6E8AAE184D2C8","md5":"81E26B162BC7B3BF5B98F4DCD65067F5","sha256":"067A0BC36CFF4569CED9FF164084C09E4C321317F7DED3F82D0B409E879405E8","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\B18997EA2C1B18B70EE4613BD3CFB29AEEAC5C54","md5":"72EA14B18B605CA8E7BCF70DCA3F104A","sha256":"A07173ADD23A2B9309303DE0D370029DF094F5093BB18C68C7BA644AAC6B9D0D","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\0C1CE139B09191E21F48364C90EBB9B56326AC9C","md5":"7B30DF6B823876AE5261CEF49CAA2D5C","sha256":"4AEF35D407746F2B2D5E543844210340354B84DB094C88DF7B11A0D6A7F1BBE3","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cache2\\entries\\2A6167DDEC15E5E075A97CAE923662B0F7C17073","md5":"6B45A10A8D1C8F237B59AFCEF4DB741B","sha256":"B35F9606E0D25881BD64EC46F276C24F511AC6A85B7F64203F4031F0FFE25C41","type":{"value":"image","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\extensions.json.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\sessionstore-backups\\recovery.baklz4","md5":"3312367DAB040975AE1E6258B83C3F8B","sha256":"60F828055A76CF07A504D0D4A853E1B8972C63188315EDDE04AE7BD8B4CEB5E5","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\extensions.json","md5":"9CF5E9E40B5F764838F42C8F2721957F","sha256":"AD9889206F043A9D31AF59D6DB2A74D9680930C009A560E8CD158BAFA271AF8F","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cert9.db-journal","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\crashes\\store.json.mozlz4.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\datareporting\\session-state.json.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\datareporting\\aborted-session-ping.tmp","md5":"—","sha256":"—","type":{}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\cert9.db","md5":"7FEBF7D22A6E362F04C04F5EADAF330F","sha256":"DC26AB279748F71D7A72C25A18098FA39A7F39AD820D319AFBA01E5814A0C8D2","type":{"value":"sqlite","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\datareporting\\session-state.json","md5":"AC415C039126BDE7C6C03168C7AA3160","sha256":"B01AE4F76703F2921D384C78239A252273E755C22F00D3D84B31390DA31CF988","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\crashes\\store.json.mozlz4","md5":"A6338865EB252D0EF8FCF11FA9AF3F0D","sha256":"078648C042B9B08483CE246B7F01371072541A2E90D1BEB0C8009A6118CBD965","type":{"value":"jsonlz4","type":4}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\datareporting\\aborted-session-ping","md5":"016C573CF4A442C694FBC19B594F4BC1","sha256":"935233B222CE63773D68AB5EA6D7ACB4DC9A2991F1C8ED0F64A4BF1249ECBF1A","type":{"value":"text","type":0}},{"pid":2668,"process":"firefox.exe","filename":"C:\\Users\\admin\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\qldyz51w.default\\startupCache\\startupCache.4.little","md5":"55B0096208A22D958AF0CABA35CEFA9F","sha256":"3906197C969402CE138B2966078A4E5F0654217D86574D27DB9E6B801CA2B79C","type":{"value":"compressed","type":1}}]},"synchronization":{"values":[]},"rpsRequests":{"values":[]},"networkActivity":{"stats":[{"name":"HTTP(S) requests","value":"37"},{"name":"TCP/UDP connections","value":"30"},{"name":"DNS requests","value":"71"},{"name":"Threats","value":"2"}],"requests":[[2668,"firefox.exe","GET",301,"204.57.96.138:80","http://www.selectaward.com/presentationtips","US",{"value":"html","type":0},"167 b",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"2.16.186.112:80","http://detectportal.firefox.com/success.txt","unknown",{"value":"text","type":0},"8 b",{"value":"whitelisted","type":3}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/","US",{"value":"html","type":0},"2.08 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","POST",200,"93.184.220.29:80","http://ocsp.digicert.com/","US",{"value":"der","type":4},"471 b",{"value":"shared","type":0}],[2668,"firefox.exe","POST",200,"93.184.220.29:80","http://ocsp.digicert.com/","US",{"value":"der","type":4},"471 b",{"value":"shared","type":0}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_01.jpg","US",{"value":"image","type":0},"6.64 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_03.jpg","US",{"value":"image","type":0},"7.32 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_02.jpg","US",{"value":"image","type":0},"7.40 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_04.jpg","US",{"value":"image","type":0},"7.10 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_06.gif","US",{"value":"image","type":0},"145 b",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_05.gif","US",{"value":"image","type":0},"100 b",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_07.gif","US",{"value":"image","type":0},"1.90 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","POST",200,"216.58.206.3:80","http://ocsp.pki.goog/gts1o1","US",{"value":"der","type":4},"472 b",{"value":"whitelisted","type":3}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/homeimages/Home_08.jpg","US",{"value":"image","type":0},"362 b",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/favicon.ico","US",{"value":"image","type":0},"1.37 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/Prestips3.html","US",{"value":"html","type":0},"511 b",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/Frame1.html","US",{"value":"html","type":0},"14.2 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/Frame3.html","US",{"value":"html","type":0},"3.93 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_01.gif","US",{"value":"image","type":0},"3.63 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_02.gif","US",{"value":"image","type":0},"2.45 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_04.gif","US",{"value":"image","type":0},"2.18 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_03.gif","US",{"value":"image","type":0},"2.34 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_07.gif","US",{"value":"image","type":0},"4.39 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_06.gif","US",{"value":"image","type":0},"2.50 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_05.gif","US",{"value":"image","type":0},"2.19 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/handshake.jpg","US",{"value":"image","type":0},"21.7 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/manshake.jpg","US",{"value":"image","type":0},"20.5 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_01over.gif","US",{"value":"image","type":0},"3.62 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_02over.gif","US",{"value":"image","type":0},"2.44 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/Present.jpg","US",{"value":"image","type":0},"17.7 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/checklist.jpg","US",{"value":"image","type":0},"19.2 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_03over.gif","US",{"value":"image","type":0},"2.33 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_04over.gif","US",{"value":"image","type":0},"2.17 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_07over.gif","US",{"value":"image","type":0},"4.39 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_06over.gif","US",{"value":"image","type":0},"2.49 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"204.57.96.138:80","http://www.selectaward.com/presentationtips/pres2004images/images/navbar/NavBar_05over.gif","US",{"value":"image","type":0},"2.18 Kb",{"value":"unknown","type":4}],[2668,"firefox.exe","GET",200,"2.16.186.112:80","http://detectportal.firefox.com/success.txt","unknown",{"value":"text","type":0},"8 b",{"value":"whitelisted","type":3}]],"connections":[[2668,"firefox.exe","2.16.186.112:80","detectportal.firefox.com","Akamai International B.V.","—",{"value":"whitelisted","type":3}],[2668,"firefox.exe","204.57.96.138:80","www.selectaward.com","Level 3 Communications, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","35.164.109.147:443","search.services.mozilla.com","Amazon.com, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","13.32.158.24:443","snippets.cdn.mozilla.net","Amazon.com, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","52.40.98.65:443","tiles.services.mozilla.com","Amazon.com, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","35.161.207.109:443","push.services.mozilla.com","Amazon.com, Inc.","US",{"value":"malicious","type":2}],[2668,"firefox.exe","93.184.220.29:80","ocsp.digicert.com","MCI Communications Services, Inc. d/b/a Verizon Business","US",{"value":"whitelisted","type":3}],[2668,"firefox.exe","172.217.18.10:443","safebrowsing.googleapis.com","Google Inc.","US",{"value":"whitelisted","type":3}],[2668,"firefox.exe","216.58.206.3:80","ocsp.pki.goog","Google Inc.","US",{"value":"whitelisted","type":3}],[2668,"firefox.exe","13.35.253.101:443","firefox.settings.services.mozilla.com","—","US",{"value":"suspicious","type":1}],[2668,"firefox.exe","99.86.243.30:443","content-signature-2.cdn.mozilla.net","AT&T Services, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","13.35.253.79:443","tracking-protection.cdn.mozilla.net","—","US",{"value":"suspicious","type":1}],[2668,"firefox.exe","104.17.116.180:80","www.inspirus.com","Cloudflare Inc","US",{"value":"shared","type":0}],[2668,"firefox.exe","35.167.176.126:443","shavar.services.mozilla.com","Amazon.com, Inc.","US",{"value":"unknown","type":4}],[2668,"firefox.exe","2.16.186.50:80","detectportal.firefox.com","Akamai International B.V.","—",{"value":"whitelisted","type":3}],[2668,"firefox.exe","52.39.125.254:443","tiles.services.mozilla.com","Amazon.com, Inc.","US",{"value":"unknown","type":4}]],"dns":[["www.selectaward.com",["204.57.96.138"],{"value":"unknown","type":4}],["detectportal.firefox.com",["2.16.186.112","2.16.186.50"],{"value":"whitelisted","type":3}],["a1089.dscd.akamai.net",["2.16.186.50","2.16.186.112"],{"value":"whitelisted","type":3}],["search.services.mozilla.com",["35.164.109.147","52.35.182.58","52.89.218.39"],{"value":"whitelisted","type":3}],["search.r53-2.services.mozilla.com",["52.89.218.39","52.35.182.58","35.164.109.147"],{"value":"whitelisted","type":3}],["push.services.mozilla.com",["35.161.207.109"],{"value":"shared","type":0}],["autopush.prod.mozaws.net",["35.161.207.109"],{"value":"whitelisted","type":3}],["tiles.services.mozilla.com",["52.40.98.65","52.35.188.24","52.39.125.254","52.39.224.180","52.89.51.22","52.33.184.165","54.186.225.209","54.68.132.173"],{"value":"whitelisted","type":3}],["snippets.cdn.mozilla.net",["13.32.158.24","13.32.158.69","13.32.158.121","13.32.158.60"],{"value":"whitelisted","type":3}],["tiles.r53-2.services.mozilla.com",["54.68.132.173","54.186.225.209","52.33.184.165","52.89.51.22","52.39.224.180","52.39.125.254","52.35.188.24","52.40.98.65"],{"value":"whitelisted","type":3}],["d228z91au11ukj.cloudfront.net",["13.32.158.60","13.32.158.121","13.32.158.69","13.32.158.24"],{"value":"whitelisted","type":3}],["ocsp.digicert.com",["93.184.220.29"],{"value":"shared","type":0}],["cs9.wac.phicdn.net",["93.184.220.29"],{"value":"whitelisted","type":3}],["safebrowsing.googleapis.com",["172.217.18.10"],{"value":"whitelisted","type":3}],["ocsp.pki.goog",["216.58.206.3"],{"value":"whitelisted","type":3}],["pki-goog.l.google.com",["216.58.206.3"],{"value":"whitelisted","type":3}],["firefox.settings.services.mozilla.com",["13.35.253.101","13.35.253.99","13.35.253.117","13.35.253.45"],{"value":"whitelisted","type":3}],["d2k03kvdk5cku0.cloudfront.net",["13.35.253.45","13.35.253.117","13.35.253.99","13.35.253.101"],{"value":"whitelisted","type":3}],["content-signature-2.cdn.mozilla.net",["99.86.243.30","99.86.243.90","99.86.243.85","99.86.243.68"],{"value":"whitelisted","type":3}],["d2nxq2uap88usk.cloudfront.net",["99.86.243.68","99.86.243.85","99.86.243.90","99.86.243.30"],{"value":"shared","type":0}],["www.youtube.com",["216.58.207.46","216.58.207.78","172.217.23.110","172.217.16.174","172.217.16.142","172.217.22.46","172.217.22.78","172.217.22.110","172.217.16.206","172.217.21.206","172.217.23.174","172.217.21.238","172.217.23.142","172.217.18.174","216.58.206.14","172.217.18.110"],{"value":"shared","type":0}],["www.facebook.com",["31.13.92.36"],{"value":"whitelisted","type":3}],["www.inspirus.com",["104.17.116.180","104.17.114.180","104.17.112.180","104.17.113.180","104.17.115.180"],{"value":"suspicious","type":1}],["star-mini.c10r.facebook.com",["31.13.92.36"],{"value":"whitelisted","type":3}],["youtube-ui.l.google.com",["172.217.18.110","216.58.206.14","172.217.18.174","172.217.23.142","172.217.21.238","172.217.23.174","172.217.21.206","172.217.16.206","172.217.22.110","172.217.22.78","172.217.22.46","172.217.16.142","172.217.16.174","172.217.23.110","216.58.207.78","216.58.207.46"],{"value":"whitelisted","type":3}],["www.ebay.de",["72.247.226.12"],{"value":"whitelisted","type":3}],["group41.sites.hscoscdn40.net",["104.17.115.180","104.17.113.180","104.17.112.180","104.17.114.180","104.17.116.180"],{"value":"suspicious","type":1}],["e11847.g.akamaiedge.net",["72.247.226.12"],{"value":"whitelisted","type":3}],["www.wikipedia.org",["91.198.174.192"],{"value":"shared","type":0}],["www.mozilla.org",["104.16.142.228","104.16.143.228"],{"value":"whitelisted","type":3}],["www.reddit.com",["151.101.1.140","151.101.65.140","151.101.129.140","151.101.193.140"],{"value":"whitelisted","type":3}],["www.mozilla.org.cdn.cloudflare.net",["104.16.143.228","104.16.142.228"],{"value":"whitelisted","type":3}],["reddit.map.fastly.net",["151.101.193.140","151.101.129.140","151.101.65.140","151.101.1.140"],{"value":"whitelisted","type":3}],["dyna.wikimedia.org",["91.198.174.192"],{"value":"whitelisted","type":3}],["support.mozilla.org",["34.209.95.119","34.213.134.214"],{"value":"whitelisted","type":3}],["blog.mozilla.org",["35.197.18.156"],{"value":"whitelisted","type":3}],["prod-tp.sumo.mozit.cloud",["34.213.134.214","34.209.95.119"],{"value":"whitelisted","type":3}],["mozilla.wpengine.com",["35.197.18.156"],{"value":"whitelisted","type":3}],["shavar.services.mozilla.com",["35.167.176.126","52.25.50.137","34.209.199.162","35.164.178.120","18.236.49.179","52.32.91.14","52.39.168.38","34.213.241.62"],{"value":"whitelisted","type":3}],["shavar.prod.mozaws.net",["34.213.241.62","52.39.168.38","52.32.91.14","18.236.49.179","35.164.178.120","34.209.199.162","52.25.50.137","35.167.176.126"],{"value":"whitelisted","type":3}],["tracking-protection.cdn.mozilla.net",["13.35.253.79","13.35.253.81","13.35.253.94","13.35.253.114"],{"value":"whitelisted","type":3}],["d1zkz3k4cclnv6.cloudfront.net",["13.35.253.114","13.35.253.94","13.35.253.81","13.35.253.79"],{"value":"shared","type":0}]],"threatsProCount":0,"threats":[[1080,"svchost.exe",{"value":"Potentially Bad Traffic","type":1},"ET INFO Observed DNS Query to .cloud TLD"],[1080,"svchost.exe",{"value":"Potentially Bad Traffic","type":1},"ET INFO Observed DNS Query to .cloud TLD"]]},"debugOutputStrings":{"values":[]},"meta":{"sha256":"d153e928ff572630ddb598195454c7cf03991a73519c83aada5bc571558ed20a","uuid":"27756d42-b1cf-4df1-82f2-788a8e1a78fc","isUrlType":true,"taskName":"http://www.selectaward.com/presentationtips","title":"Free Malware Sandbox Online","isPrivate":false,"tags":[],"copyrightYear":2022},"vue_isInlineMode":false,"vue_publicPath":"/report/"}
We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
General Info Add for printing
URL: http://www.selectaward.com/presentationtips Full analysis: https://app.any.run/tasks/27756d42-b1cf-4df1-82f2-788a8e1a78fc Verdict: Malicious activity Analysis date: November 08, 2019, 12:18:05 OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) Indicators: MD5: FEB2C56C8EBB5B414C372E0617BDCB5E SHA1: 817058C6D915F531EE7BEBB91EFBE8DF94D54590 SHA256: D153E928FF572630DDB598195454C7CF03991A73519C83AADA5BC571558ED20A SSDEEP: 3:N1KJS4K9GKNseRBn:Cc4KDaez
ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is.
ANY.RUN does not guarantee maliciousness or safety of the content.
Software environment set and analysis options Launch configuration Task duration: 120 seconds Heavy Evasion option: off Network geolocation: off Additional time used: 60 seconds MITM proxy: off Privacy: Public submission Fakenet option: off Route via Tor: off Autoconfirmation of UAC: on Network: on Hotfixes Client LanguagePack Package Client Refresh LanguagePack Package CodecPack Basic Package Foundation Package IE Troubleshooters Package InternetExplorer Optional Package KB2534111 KB2999226 KB4019990 KB976902 LocalPack AU Package LocalPack CA Package LocalPack GB Package LocalPack US Package LocalPack ZA Package ProfessionalEdition UltimateEdition Behavior activities Add for printing
MALICIOUS No malicious indicators.
SUSPICIOUS Creates files in the program directory INFO Reads CPU info Application launched itself firefox.exe (PID: 1608) firefox.exe (PID: 2668) Reads Internet Cache Settings Creates files in the user directory Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the
full report Processes Add for printing
Behavior graph Click at the process to see the details
start
firefox.exe
no specs
firefox.exe
firefox.exe
no specs
firefox.exe
firefox.exe
firefox.exe
- +
Specs description Program did not start Low-level access to the HDD Process was added to the startup Debug information is available Probably Tor was used Behavior similar to spam Task has injected processes Executable file was dropped Known threat RAM overrun Network attacks were detected Integrity level elevation Connects to the network CPU overrun Process starts the services System was rebooted Task contains several apps running Application downloaded the executable file Actions similar to stealing personal data Task has apps ended with an error File is detected by antivirus software Inspected object has suspicious PE structure Behavior similar to exploiting the vulnerability Task contains an error or was rebooted The process has the malware config Process information
Network activity Add for printing
HTTP requests Download PCAP, analyze network streams, HTTP content and a lot more at the
full report Connections
DNS requests
Threats