|
4/5
|
File System
|
Modifies content of user files
|
Ransomware
|
|
-
Modifies the content of multiple user files. This is an indicator for an encryption attempt.
|
|
4/5
|
File System
|
Renames user files
|
Ransomware
|
|
-
Renames multiple user files. This is an indicator for an encryption attempt.
|
|
4/5
|
File System
|
Known malicious file
|
Trojan
|
|
-
File "C:\Users\CIiHmnxMn6Ps\Desktop\CURRENT_DIRnwovkcyl.exe" is a known malicious file.
|
|
3/5
|
Browser
|
Reads data related to browser cache
|
-
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\OfflineCache\index.sqlite".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000003".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000d".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000001".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000017".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000b".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000015".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000009".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000007".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000013".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001e".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000011".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000002".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001c".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000c".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000016".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000a".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000014".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001f".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000004".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000e".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000018".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000006".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000010".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001b".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000008".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000012".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001d".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000005".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\4c3d15a0a987ed15_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00000f".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\99f80f27ba259469_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001a".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\index-dir\the-real-index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\40bba07c05914591_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\fdf2cfeb8ad0eeac_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\e599dc5e24eb76d7_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\608d13fb70947f94_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\1e16adeb2b036d0a_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\e6fee29e34914471_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\d4a1768080ecf56d_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\fdf2cfeb8ad0eeac_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\e599dc5e24eb76d7_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\index-dir\the-real-index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\50da1ec5d44a313d_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\index".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\d2d7a4c029e7ff02_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\index-dir\#README_EMAN#.rtf".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\02556929CF2E7913AF6E896368676F9BEC324DF4".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\102E001FB34D784FBF727701C7932E3FC58AF45D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1722A63DF48E38B5DC308AE741FBFA24F762D8AC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\22777C6913A6B4768EE40D5F0103A93D8B477C3C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2530EF3224B6681D2B34ED5DB0B170C716EB1E39".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\28380882022BE365EDE32586CD158C635B9BE8D1".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2C40C733B84018F500F4F551FC53305A5971F05F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\346330431993BC995E9F9C114FE39FD5B54EB7DF".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\41367369B0154D1D2566CC216318C71115E089A2".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4453CB40F54977CDF96034A3A658080FDA7E43FA".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4A46AC76F0CCC4293CC380999116F3B7911F85BE".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\d2d7a4c029e7ff02_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4F0C54EEF677196E2899E5E79B4F3A906E46F926".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\00396519A728CAF55BA5985F2822E3CD29D0B17E".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\58c0fee6b0dfd5c3_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\52ECE00B624C0C246123D20C46C3EE4F390A42FE".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\04825B72BD3FF3B25000EE8B3660F3E1748CF56D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\index.txt".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\00230E843D3A08B230E933E226DB601D643BC852".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\04407A80544B9CDDB0BF74A9C5090D338DED55E6".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0A774848D5BE9E32A6789642784FD4DAFCD580F5".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\8c4d7305-348c-4e49-a93a-83143a3b9025\1dd0446e4b2b157b_0".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\fdf2cfeb8ad0eeac_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0EC55DA246CC743C7EEA604EB85A206384B78D8F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\8020f636edb35252_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5FC12D3D59A53A815787F247F7BC644A4F2DBC17".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\15E4224DA48B83948028AEBE08751418DBDE4688".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\16103553C2544720A8768AAA60212BE5916A4CE9".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\19B6A58F54F979D1CF008970B9B0D36B11B7944D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\062AD3657B516BAF21B6D366104D405078541BA6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2118755562A693569EE2423CB1A2136CB8F1D9CC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\66B64249060DCBD0E7A35E24F8305D7FC258E22F".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\1eb73b7c-1f7e-4d77-acd3-5605781472f5\608d13fb70947f94_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\24073350A672357B47B2D1A937642146E80AA938".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\54e8e10975acb34c_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6B59D88F10856ABB980993D7332F49AB71BD33B8".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\index-dir\the-real-index".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6F39E22506AE2A3DADD87EF5D9EF306B0235583A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1DCB6E830B5F6182674047BC07BE94E869A82DC1".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\291F29EF92755427DA03AB115BD92B68F34AB659".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\71AEDCA900A67FA2FAB608A99A2E36584BD343FB".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\10242BACB3A923DC9924A5B41FC879A31AF03963".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2FEB6245AA212EA51F79468084964097925BD6D6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321".
|
|
-
Reads Chrome cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\79122AC35356132F14E7AA3248B675B5BA972274".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3313B622F3B9896C056CB0A1A534E4C91732E665".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\356FCE9F932692DC643481DBA1ABEA937B629F58".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2445FA966A09E6B22679F2707AA980BBEBBC3BA8".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\167109A0C523F60F2197836B0BCDA9B52A4D16AE".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1C7A6CE17940A6C75210FA60C52339417DEDEEFA".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\297135C089B3661F5AABB8E90985C6930164B685".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3FAECD8F44CECB41F5586C0DC333275FC173593A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1F03C5BEB6690C5E65013ADC12747A8FB0266E74".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\45C64E5C2E9809667C5FC9F06FC42641326DF768".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\35933C361338037A97583E92DA61C299851A9B4E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\39CC8AA9054EC6244CA281EEA4BD937517E2861D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1A7C641FFE043BB811768257AF97546A0C7F3B55".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\53E9CAA90A10C82CF9C2D5393B332D17B263105E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\025E6C3190211A09D15D92E5656FB71220B7737E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0E030AE41B2AB97664B455929A8A0721BA5D1F69".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\108573E2B07FF25FFCAFE37F58D375561A47424D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1531FBE50CE357526C558EE71AA60FC4D2E29E0C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0396D4FE028249B03B952ECAC5BDC2698D7AC41D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3FB6DE7747DC1B658385638D277CF2D620D232E4".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0A1144B8734850F5325AA6C259041EA8A201062C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\579EC9227C4A988DCC4894D82AA161957107515D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\9437DA7680859789102972ED376085A988B0DC1F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\979C819D6C7504D17BB5A3F483ADA0C1FF961E27".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\20343A86FB834223CC13D33560122837208F7563".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5A6EEC1674DA4669A4FF612E7924A91FBF501426".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\24C5A11C7C55D609ED86B6E31E2C94301D075CB3".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\270900E85767111BD4C54667E304A0B6656EA0A0".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6110E52DCC41B003F9ABB87AF539D456402B7F80".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\0E331C2EF53B5C952B79B038C00588087D45A128".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\431BDCA04B51BE586DFCF48431166463879B3DBF".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\22B072DE2E829A9BBDD29C6C1005CBE946651C89".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2B662789DFDD9C1308FF8ECD48E05F393053163C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\245CEDA973B44C04325E8F3063F7596F9C88F120".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\9DCA33818F5A4335C123C5512EDDB0D08852B5BC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4613B437E86D18E98F830433A5E6F7F9ABAF3693".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4C7EAEF07520B2C9900CFE06971368FF939AA197".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\15704E847DCFEC6E9A511A8897461209C820C052".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\A54B398703E64482D4C0347214229AB910E990DC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\A79A7F293C737F424E1646C7780C2D393FF20F80".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\28D18C8667B2E4C79E3CE2766CF075BBFA55C129".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3194BBD824DE5F4E0F44B99C71BB6C700199B487".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\AB3F4DFAC8E881949B1487B51777CD625E9D7C75".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2C5330B3725C70F20F4BC8A5385F696CC68B83C6".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\209D12DF1554481FBDC90931601991A892F798E7".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\AEB83A675769B7671CBB139390343154897F64CA".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6F8FB4D82C35910ECF7AB512D58576D942963BA4".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\32AFE38EED991EA004851E7C968397C7D9EA501C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2D693D07DD992FA2955C9EDE27FDA78487556E32".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\54BF6D9D46D035228AC887ABC41B451F2BA38C02".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\33E49DB212B852799023F439D16990005F93C4F7".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\B328AA3491454066984C57961AA69BEA1D2FDA76".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\7394B7FE1C950657969E92E15FDA4293AF92F94E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\31220725946AC054F523C4029C40CA22A7A42621".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\37BC32B4B7033C1AB388018EC734B639086C814E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\57E662573FD9E42D3972BE92D3DF0557C7B2E836".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\339A4E96E26DFFA4704F0AF081D2B85B12D03939".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\376ED25A1DE94F0D96E985E5D5CACFCFE3812131".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5AF1F43361120818C2E543605F5DF938574B1EDC".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3E42820479FADF666581B0704FA4AF901AE0E045".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\3B3EDC129FE6ED020C044AC637791DEC8B6B7603".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\B63CBF55658040EDBEDECC3844D1774F5E740A67".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\36A422C04312727A6116F45E357EDA80B3B4A6FD".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\4238786CB87B503754EE13346F30AE3FCE28174F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\79F42694978874799A67708237EECF993F994146".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\681E7166DB1F0B0A148FE6D0903D513EDE8F745D".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6ECDE68737A8AB107AD15BF26496698293735A7F".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\406839CA18775158E58D75B2837624917D7E685C".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\39D606C35C00ADA6E9320E1F6431E5A33EB42182".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\43A641B524487AFDAC7A8AF548EE196228BF6EAE".
|
|
-
Reads Firefox cache file "C:\Users\CIiHmnxMn6Ps\AppData\Local\Mozilla\Firefox\Profiles\8i341t8m.default\cache2\entries\400E86363026A9AC2DCD2221C145C6370E3E8EDA".
|
|
3/5
|
Browser
|
Reads data related to browser cookies
|
-
|
|
-
Reads Cookies for "Mozilla Firefox".
|
|
-
Reads Cookies for "Google Chrome".
|
|
-
Accesses Cookies for "Mozilla Firefox".
|
|
-
Accesses Cookies for "Google Chrome".
|
|
3/5
|
Browser
|
Reads data related to saved browser credentials
|
-
|
|
-
Reads saved credentials for "Mozilla Firefox".
|
|
-
Reads the master key for "Mozilla Firefox".
|
|
3/5
|
Process
|
Creates an unusally large number of processes
|
-
|
|
-
Above average number of processes were monitored.
|
|
3/5
|
Kernel
|
Executes code with kernel privileges
|
-
|
|
-
Executes code with kernel privileges to perform system level actions. This can sometimes be used to perform malicious actions and to avoid detection.
|
|
3/5
|
YARA
|
YARA match
|
-
|
|
-
Rule "VBA_Execution_Commands" from ruleset "Generic" has matched for "C:\Users\CIiHmnxMn6Ps\AppData\Roaming\MuA3C6WI.vbs"
|
|
-
Rule "VBA_Execution_Commands" from ruleset "Generic" has matched for "\Users\CIiHmnxMn6Ps\AppData\Roaming\MuA3C6WI.vbs"
|
|
2/5
|
Anti Analysis
|
Resolves APIs dynamically to possibly evade static detection
|
-
|
|
-
Resolves an unusually high number of APIs.
|
|
2/5
|
Browser
|
Reads data related to browsing history
|
-
|
|
-
Reads browsing history and related data, such as bookmarks, for "Mozilla Firefox".
|
|
-
Reads the browsing history for "Google Chrome".
|
|
2/5
|
Device
|
Sends control codes to connected devices
|
-
|
|
-
Controls device "\\.\PROCEXP152" through API DeviceIOControl.
|
|
1/5
|
Process
|
Creates system object
|
-
|
|
-
Creates mutex with name "MutexEMAN".
|
|
-
Creates mutex with name "MutexEMANDONW".
|
|
|
|
1/5
|
Process
|
Creates process with hidden window
|
-
|
|
-
The process ""C:\Windows\system32\cmd.exe" /C copy /V /Y "C:\Users\CIiHmnxMn6Ps\Desktop\CURRENT_DIRnwovkcyl.exe" "C:\Users\CIiHmnxMn6Ps\Desktop\NWYpDmnO.exe"" starts with hidden window.
|
|
-
The process ""C:\Windows\system32\cmd.exe" /C reg add "HKCU\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "C:\Users\CIiHmnxMn6Ps\AppData\Roaming\F7t5Hk0D.bmp" /f & reg add "HKCU\Control Panel\Desktop" /v WallpaperStyle /t REG_SZ /d "0" /f & reg add "HKCU\Control Panel\Desktop" /v TileWallpaper /t REG_SZ /d "0" /f" starts with hidden window.
|
|
-
The process ""C:\Windows\system32\cmd.exe" /C wscript //B //Nologo "C:\Users\CIiHmnxMn6Ps\AppData\Roaming\MuA3C6WI.vbs"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Microsoft Office 15\alfred.exe"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\en-US\jnwdui.dll.mui"" starts with hidden window.
|
|
-
The process "C:\Users\CIIHMN~1\AppData\Local\Temp\vIDhS3md64.exe" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\Templates\Genko_1.jtp"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\Journal.exe"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\Templates\Seyes.jtp"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Mail\en-US\WinMail.exe.mui"" starts with hidden window.
|
|
-
The process "cmd.exe" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Portable Devices\restaurant.exe"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\MSBuild\expenditurevincenttablet.exe"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\en-US\MSPVWCTL.DLL.mui"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\Templates\Memo.jtp"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Mail\wabmig.exe"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Photo Viewer\en-US\ImagingDevices.exe.mui"" starts with hidden window.
|
|
-
The process ""C:\Users\CIiHmnxMn6Ps\Desktop\vRnqNMBW.bat" "C:\Program Files\Windows Journal\en-US\NBMapTIP.dll.mui"" starts with hidden window.
|
|
1/5
|
Network
|
Performs DNS request
|
-
|
|
-
Resolves host name "eman.mygoodsday.org".
|
|
-
Resolves host name "LHnIwsj".
|
|
1/5
|
Masquerade
|
Changes folder appearance
|
Riskware
|
|
-
Folder "c:\program files" has a changed appearance.
|
|
-
Folder "c:\program files (x86)" has a changed appearance.
|
|
1/5
|
File System
|
Modifies application directory
|
-
|
|
-
Modifies "c:\program files\desktop.ini".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\jabswitch.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\java.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\kinit.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\javaw.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\server\xusage.txt".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\java-rmi.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\javacpl.cpl".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\javaws.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\ktab.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\policytool.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\accessibility.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\servertool.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\rmid.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\orbd.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\linear_rgb.pf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_ja.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\amd64\jvm.cfg".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\content-types.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\splash_11@2x-lic.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\ciexyz.pf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\unpack200.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\pycc.pf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\sunec.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_sv.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_fr.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\splash@2x.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\ffjcext.zip".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\classlist".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\jjs.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidabrightitalic.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_es.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\ssvagent.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\currency.data".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\splash.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\cldrdata.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\gray.pf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_copynodrop32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\meta-index".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\rmiregistry.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_zh_cn.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\localedata.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_it.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\sunpkcs11.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\splash_11-lic.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_zh_hk.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\jaccess.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\flavormap.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidatypewriterregular.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\dnsns.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\javafx.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fontconfig.properties.src".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidabrightdemibold.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\invalid32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\zipfs.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\nashorn.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidatypewriterbold.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\sunjce_provider.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\cursors.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_movenodrop32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jce.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidabrightdemiitalic.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jfr.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\server\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\meta-index".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\psfontj2d.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\amd64\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\us_export_policy.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_copydrop32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidabrightregular.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidasansregular.ttf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_movedrop32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jfr\default.jfc".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\java.policy".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_linkdrop32x32.gif".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\release".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management\snmp.acl.template".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management\jmxremote.access".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jfxswt.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management\management.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\blacklisted.certs".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\license".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\blacklist".
|
|
-
Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_200_percent.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\psfont.properties.ja".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\local_policy.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\javacpl.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome.dll.sig".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\extensions\external_extensions.json".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\welcome.html".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\external_extensions.json".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome.exe.sig".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\resources.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\pack200.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management-agent.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\net.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\java.security".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\copyright".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\cacerts".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\readme.txt".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\da.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\cmm\srgb.pf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\thirdpartylicensereadme-javafx.txt".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_pt_br.properties".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\sound.properties".
|
|
-
Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\access-bridge-64.jar".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\bn.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_100_percent.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fil.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\chrmstp.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\sunmscapi.jar".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\extensions\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\setup.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\drive.crx".
|
|
-
Modifies "c:\program files\microsoft office 15\clientx64\integratedoffice.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jfr\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\am.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\et.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\kn.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\en-gb.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fonts\lucidasansdemibold.ttf".
|
|
-
Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\desktop.ini".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\bg.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\id.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\icudtl.dat".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\chrome.7z".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\images\cursors\win32_linknodrop32x32.gif".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\en-us.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pt-br.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\he.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\el.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\nb.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hi.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\gmail.crx".
|
|
-
Modifies "c:\program files\microsoft office 15\clientx64\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\jsse.jar".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\lv.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\de.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\bin\jp2launcher.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\te.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ca.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fr.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\gu.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ru.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ml.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ko.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hu.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\plugin.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\charsets.jar".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sv.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\lt.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\snapshot_blob.bin".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\security\javaws.policy".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\setupmetrics\20170524140843.pma".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fa.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pt-pt.pak".
|
|
-
Modifies "c:\program files (x86)\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\setupmetrics\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sk.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ro.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\it.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ms.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\uk.pak".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\thirdpartylicensereadme.txt".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\th.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sr.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\features\webcompat@mozilla.org.xpi".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\tr.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\nl.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\logo.png".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_de.properties".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\smalllogocanary.png".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\smalllogo.png".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\freebl3.chk".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\docs.crx".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\application.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\crashreporter.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\precomplete".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\deploy\messages_zh_tw.properties".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\logocanary.png".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\visualelements\visualelements_70.png".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\zh-tw.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\visualelements\visualelements_150.png".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\minidump-analyzer.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\features\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\nacl_irt_x86_64.nexe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdmadapter.dll.sig".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdm.dll.sig".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\defaults\pref\channel-prefs.js".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\features\aushelper@mozilla.org.xpi".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\dependentlibs.list".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\maintenanceservice.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\platform.ini".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\es-419.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\chrome.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hr.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\updater.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\uninstall\shortcuts_log.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\maintenanceservice_installer.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\features\e10srollout@mozilla.org.xpi".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\softokn3.chk".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\firefox.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\mr.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\uninstall\helper.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\ext\jfxrt.jar".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sl.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\plugin-container.exe".
|
|
-
Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\voucher.bin".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\zh-cn.pak".
|
|
-
Modifies "c:\program files (x86)\mozilla maintenance service\updater.ini".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\manifest.json".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\crashreporter-override.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\crashreporter.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\omni.ja".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\nssdbm3.chk".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\omni.ja".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\gmp-clearkey\0.1\manifest.json".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\update-settings.ini".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\removed-files".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\fontconfig.bfc".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\visualelements\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\defaults\pref\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\uninstall\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla maintenance service\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\updater.exe".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\hijrah-config-umalqura.properties".
|
|
-
Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\javaws.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\management\jmxremote.password.template".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\gmp-clearkey\0.1\#readme_eman#.rtf".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\rt.jar".
|
|
-
Modifies "c:\program files\java\jre1.8.0_131\lib\tzdb.dat".
|
|
-
Modifies "c:\program files\microsoft office 15\clientx64\officeclicktorun.exe".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\58.0.3029.110.manifest".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\youtube.crx".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\cs.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fi.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ja.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pl.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ta.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\resources.pak".
|
|
-
Modifies "c:\program files (x86)\google\chrome\application\master_preferences".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\browser\features\firefox@getpocket.com.xpi".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\fonts\emojionemozilla.ttf".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\plugin-hang-ui.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\wow_helper.exe".
|
|
-
Modifies "c:\program files (x86)\mozilla firefox\fonts\#readme_eman#.rtf".
|
|
1/5
|
File System
|
Modifies operating system directory
|
-
|
|
-
Creates file "C:\Windows\system32\Drivers\PROCEXP152.SYS" in the OS directory.
|
|
1/5
|
Persistence
|
Installs system service
|
-
|
|
-
Installs service "PROCEXP152" by registry.
|
|
1/5
|
File System
|
Creates an unusually large number of files
|
-
|
|
-
Creates an unusually large number of files.
|
|
1/5
|
Network
|
Connects to remote host
|
-
|
|
-
Outgoing TCP connection to host "104.218.120.192:80".
|
|
1/5
|
Network
|
Downloads data
|
Downloader
|
|
-
URL "http://eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=START".
|
|
-
URL "http://eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=[ALL]460F9943EA70F103".
|
|
-
URL "http://eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=460F9943EA70F103|2891|1GB".
|
|
1/5
|
Network
|
Connects to HTTP server
|
-
|
|
-
URL "eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=START".
|
|
-
URL "eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=[ALL]460F9943EA70F103".
|
|
-
URL "eman.mygoodsday.org/addrecord.php?apikey=eman_api_key&compuser=LHNIWSJ|CIiHmnxMn6Ps&sid=19kSvLoQsaClDN7y&phase=460F9943EA70F103|2891|1GB".
|
|
1/5
|
PE
|
Drops PE file
|
Dropper
|
|
-
Drops file "C:\Users\CIiHmnxMn6Ps\Desktop\vIDhS3md.exe".
|
|
1/5
|
PE
|
Executes dropped PE file
|
-
|
|
-
Executes dropped file "C:\Users\CIiHmnxMn6Ps\Desktop\vIDhS3md.exe".
|