Malware Analysis Report

2024-12-08 03:06

Sample ID 240224-t9ajwagg32
Target https://downloadtestfile.com/
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

Threat Level: No (potentially) malicious behavior was detected

The file https://downloadtestfile.com/ was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary


Checks processor information in registry

Modifies registry class

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-02-24 16:44

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-24 16:44

Reported

2024-02-24 16:47

Platform

win7-20240215-en

Max time kernel

144s

Max time network

145s

Command Line

"C:\Program Files\Internet Explorer\iexplore.exe" https://downloadtestfile.com/

Signatures

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DOMStorage\downloadtestfile.com C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\MINIE C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Cache = b104000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0FDBDF61-D334-11EE-8ECF-42D431E39B11} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DOMStorage C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DOMStorage\downloadtestfile.com\NumberOfSubdomains = "1" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90f6e1e54067da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c6000000000200000000001066000000010000200000001076873fc3e6edfecf8216b34c3c616d9a7486c5518cfecf6baf8ef9fb04c8e7000000000e80000000020000200000003b4ec639d0a5c4e2a259f7760a83c71fb6458778990e16e73ed007dd150f4f2c20000000cce67ecba8fc33d17262189017f78992a9b8e2ccdbdefd8769ed8367bc77d2d840000000da6e3e1e505a37746b0badc8b0f5bd3b91ace0ef1070ba93df79538c7494e739c44559dd767786f246520832ae234d9a44133785f91560090a69780b89f73722 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1664 wrote to memory of 2192 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1664 wrote to memory of 2192 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1664 wrote to memory of 2192 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1664 wrote to memory of 2192 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1052 wrote to memory of 3064 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 952 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 952 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 952 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 1944 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3064 wrote to memory of 2244 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" https://downloadtestfile.com/

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1664 CREDAT:275457 /prefetch:2

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.0.954282181\821568782" -parentBuildID 20221007134813 -prefsHandle 1220 -prefMapHandle 1212 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c676e701-e7fe-4226-9d51-ac2ee87ca0d4} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 1292 121d4e58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.1.1514408945\940601669" -parentBuildID 20221007134813 -prefsHandle 1476 -prefMapHandle 1472 -prefsLen 20830 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8f0273e0-8ae6-4178-b72a-14334d54d04d} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 1488 e6f858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.2.1505589690\2052968370" -childID 1 -isForBrowser -prefsHandle 2092 -prefMapHandle 1840 -prefsLen 20868 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8b88c9f2-bb04-491b-9e7a-22414185a111} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 2104 1a08ec58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.3.1844009357\779039444" -childID 2 -isForBrowser -prefsHandle 2396 -prefMapHandle 812 -prefsLen 26111 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98b8863b-6e20-44c4-aea9-6ce1dc68fbe9} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 2536 e67b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.4.593677145\1163471495" -childID 3 -isForBrowser -prefsHandle 2896 -prefMapHandle 2892 -prefsLen 26111 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a875c77-6203-40ab-b6c8-74a583e3d866} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 2908 1bf38b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.5.259553098\1906339663" -childID 4 -isForBrowser -prefsHandle 3640 -prefMapHandle 3684 -prefsLen 26170 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {583aa122-60b9-42a5-a065-0c4821b927d5} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 3700 1cbdc558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.7.703262766\1508128288" -childID 6 -isForBrowser -prefsHandle 3984 -prefMapHandle 3988 -prefsLen 26170 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f8a79392-4675-4fe8-847d-074246c30c3a} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 3972 1e61df58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.6.25330236\2131507368" -childID 5 -isForBrowser -prefsHandle 3808 -prefMapHandle 3812 -prefsLen 26170 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2557fa1d-7cfe-47b5-aa36-f4e9239d04eb} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 3796 1e61d358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.8.1273416137\723360428" -childID 7 -isForBrowser -prefsHandle 4420 -prefMapHandle 4412 -prefsLen 26251 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {84f0edc6-b42f-4d24-85f2-0784dad6079d} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 4432 1e539258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.9.1143560971\1056006608" -childID 8 -isForBrowser -prefsHandle 1912 -prefMapHandle 1976 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3c5d11a0-91e0-44fe-ac35-f9be245ff28b} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 3316 1bc48258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.10.1855946018\1300432003" -childID 9 -isForBrowser -prefsHandle 1904 -prefMapHandle 1888 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {60f816dc-1641-4863-a41c-0bd0a397513f} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 2436 22872e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.11.1601371623\397012288" -childID 10 -isForBrowser -prefsHandle 2080 -prefMapHandle 1976 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f9f4682e-283e-4e6b-9771-11b8ec6bf489} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 4724 22d2ce58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.12.1786183402\1438858464" -childID 11 -isForBrowser -prefsHandle 8416 -prefMapHandle 8412 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89996d4b-1e25-4ca8-8f36-54d864c4feda} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 8428 22d2d158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.13.415118213\1595941510" -childID 12 -isForBrowser -prefsHandle 8292 -prefMapHandle 8296 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2fc9cdd7-d8c8-446a-afd7-06274e03078c} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 8280 1bcb9858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.14.1305383097\589683383" -childID 13 -isForBrowser -prefsHandle 8264 -prefMapHandle 8136 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {302f3ce9-3d86-4e6f-89fd-72f0af304350} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 8280 1e511358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.15.1359076158\2094916605" -childID 14 -isForBrowser -prefsHandle 7984 -prefMapHandle 7980 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f53aa251-660e-4f8e-81e0-29feca10e8d6} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 7996 21e2fd58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.16.1197552852\92089453" -childID 15 -isForBrowser -prefsHandle 7812 -prefMapHandle 7808 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d7de3bdb-38d9-4e1b-a314-641f5fd26267} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 7824 21e2fa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.17.402393330\2111431425" -childID 16 -isForBrowser -prefsHandle 7960 -prefMapHandle 8180 -prefsLen 26426 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {37b5a779-1983-4051-a3d6-5c04153068c8} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 7948 21e67e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.18.828715623\981587820" -childID 17 -isForBrowser -prefsHandle 4272 -prefMapHandle 4256 -prefsLen 27382 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8cdf5e5b-7c55-4cd4-be78-a97894fdeecd} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 1604 2cb6ef58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.19.1469713199\1010561864" -parentBuildID 20221007134813 -prefsHandle 8728 -prefMapHandle 8716 -prefsLen 27382 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {288ad933-fd34-4fbc-9e92-2198fb4a295e} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 8732 1ef42458 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3064.20.1497326485\1836694667" -childID 18 -isForBrowser -prefsHandle 8584 -prefMapHandle 8460 -prefsLen 27382 -prefMapSize 233444 -jsInitHandle 892 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9485310e-b6a7-474e-8e06-b92235117e1c} 3064 "\\.\pipe\gecko-crash-server-pipe.3064" 8396 21fd9958 tab

Network

Country Destination Domain Proto
US 8.8.8.8:53 downloadtestfile.com udp
US 162.159.137.54:443 downloadtestfile.com tcp
US 162.159.137.54:443 downloadtestfile.com tcp
US 162.159.137.54:443 downloadtestfile.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
US 162.159.137.54:443 downloadtestfile.com tcp
US 162.159.137.54:443 downloadtestfile.com tcp
US 162.159.137.54:443 downloadtestfile.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 44.239.242.57:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
N/A 127.0.0.1:49422 tcp
N/A 127.0.0.1:49429 tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 speedtest.net udp
US 151.101.130.219:80 speedtest.net tcp
US 8.8.8.8:53 speedtest.net udp
US 151.101.130.219:80 speedtest.net tcp
US 8.8.8.8:53 speedtest.net udp
US 8.8.8.8:53 www.speedtest.net udp
US 104.18.203.232:443 www.speedtest.net tcp
US 8.8.8.8:53 www.speedtest.net.cdn.cloudflare.net udp
US 8.8.8.8:53 www.speedtest.net.cdn.cloudflare.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 cdn.ziffstatic.com udp
US 8.8.8.8:53 b.cdnst.net udp
US 151.101.2.219:443 b.cdnst.net tcp
US 151.101.2.219:443 b.cdnst.net tcp
US 8.8.8.8:53 dualstack.zd.map.fastly.net udp
US 151.101.2.219:443 dualstack.zd.map.fastly.net tcp
US 151.101.2.219:443 dualstack.zd.map.fastly.net tcp
US 151.101.2.219:443 dualstack.zd.map.fastly.net tcp
GB 2.16.153.162:443 cdn.ziffstatic.com tcp
US 8.8.8.8:53 e96286.dsci.akamaiedge.net udp
US 8.8.8.8:53 dualstack.zd.map.fastly.net udp
US 8.8.8.8:53 e96286.dsci.akamaiedge.net udp
GB 2.16.153.162:443 e96286.dsci.akamaiedge.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
GB 2.16.153.162:443 e96286.dsci.akamaiedge.net udp
US 3.162.142.187:443 d1ykf07e75w7ss.cloudfront.net tcp
US 8.8.8.8:53 cdn.static.zdbb.net udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 e96286.g.akamaiedge.net udp
GB 92.123.26.32:443 e96286.g.akamaiedge.net tcp
US 104.18.130.236:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 e96286.g.akamaiedge.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 securepubads46.g.doubleclick.net udp
US 8.8.8.8:53 securepubads46.g.doubleclick.net udp
US 3.162.142.187:443 d1ykf07e75w7ss.cloudfront.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 zdbb.net udp
US 8.8.8.8:53 gurgle.speedtest.net udp
US 18.215.19.117:443 gurgle.speedtest.net tcp
US 8.8.8.8:53 gurgle.zdbb.net udp
IE 52.209.62.127:443 zdbb.net tcp
US 8.8.8.8:53 zdbb.net udp
US 8.8.8.8:53 gurgle.zdbb.net udp
US 8.8.8.8:53 rp.liadm.com udp
US 8.8.8.8:53 zdbb.net udp
US 8.8.8.8:53 livepixel-production.bln.liveintent.com udp
US 8.8.8.8:53 livepixel-production.bln.liveintent.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
US 8.8.8.8:53 speedtest.upp.com.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest-1.london.network.youfibre.com.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest.swishfibre.com.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest02a.web.zen.net.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 lon.host.speedtest.net.prod.hosts.ooklaserver.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
US 8.8.8.8:53 speedtest.noone.co.uk.prod.hosts.ooklaserver.net udp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
GB 193.3.26.19:8080 speedtest.upp.com.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.92.46.45:8080 speedtest-1.london.network.youfibre.com.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
US 8.8.8.8:53 speedtest.upp.com udp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
GB 51.148.82.21:8080 speedtest02a.web.zen.net.uk.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com.prod.hosts.ooklaserver.net tcp
GB 188.94.45.252:8080 speedtest.noone.co.uk.prod.hosts.ooklaserver.net tcp
GB 95.87.111.214:8080 lon.host.speedtest.net.prod.hosts.ooklaserver.net tcp
GB 50.7.152.4:8080 lg-lon.fdcservers.net tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk udp
US 8.8.8.8:53 gurgle.zdbb.net udp
US 8.8.8.8:53 speedtest-1.london.network.youfibre.com udp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk udp
US 8.8.8.8:53 speedtest.upp.com udp
US 8.8.8.8:53 speedtest-1.london.network.youfibre.com udp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
US 8.8.8.8:53 speedtest-1.london.network.youfibre.com udp
US 18.215.19.117:443 gurgle.zdbb.net tcp
GB 172.217.169.66:443 securepubads46.g.doubleclick.net tcp
US 44.198.227.54:443 rp.liadm.com tcp
US 8.8.8.8:53 speedtest.thn.lon.network.as201838.net udp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
US 8.8.8.8:53 speedtest02a.web.zen.net.uk udp
US 8.8.8.8:53 speedtest.thn.lon.network.as201838.net udp
US 8.8.8.8:53 speedtest.noone.co.uk udp
US 8.8.8.8:53 speedtest02a.web.zen.net.uk udp
US 8.8.8.8:53 speedtest.swishfibre.com udp
US 8.8.8.8:53 speedtest.noone.co.uk udp
US 8.8.8.8:53 lon.host.speedtest.net udp
US 8.8.8.8:53 speedtest.swishfibre.com udp
US 8.8.8.8:53 lon.host.speedtest.net udp
US 8.8.8.8:53 speedtest.swishfibre.com udp
US 8.8.8.8:53 lon.host.speedtest.net udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
GB 172.217.169.66:443 securepubads46.g.doubleclick.net udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
US 8.8.8.8:53 jogger.zdbb.net udp
US 8.8.8.8:53 tags.bkrtx.com udp
US 8.8.8.8:53 jogger.zdbb.net udp
US 52.2.106.153:443 jogger.zdbb.net tcp
US 8.8.8.8:53 e5529.g.akamaiedge.net udp
US 8.8.8.8:53 jogger.zdbb.net udp
US 8.8.8.8:53 e5529.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.krxd.net udp
US 8.8.8.8:53 d.sni.global.fastly.net udp
US 8.8.8.8:53 d.sni.global.fastly.net udp
GB 23.207.215.130:443 e5529.g.akamaiedge.net tcp
US 151.101.2.133:443 d.sni.global.fastly.net tcp
US 8.8.8.8:53 stags.bluekai.com udp
US 8.8.8.8:53 e9126.x.akamaiedge.net udp
GB 2.19.169.14:443 e9126.x.akamaiedge.net tcp
US 8.8.8.8:53 e9126.x.akamaiedge.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 ib.adnxs-simple.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 c2shb.pubgw.yahoo.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 172.64.151.101:443 htlb.casalemedia.com tcp
NL 185.89.210.122:443 ib.adnxs-simple.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
DE 54.93.147.185:443 btlr-eu-central-1.sharethrough.com tcp
DE 18.156.195.47:443 c2shb.pubgw.yahoo.com tcp
DE 18.156.195.47:443 c2shb.pubgw.yahoo.com tcp
DE 18.156.195.47:443 c2shb.pubgw.yahoo.com tcp
DE 18.156.195.47:443 c2shb.pubgw.yahoo.com tcp
DE 18.156.195.47:443 c2shb.pubgw.yahoo.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 secure-us.imrworldwide.com udp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 8.8.8.8:53 census.eu-west-1.nielsencollections.com udp
GB 216.58.204.67:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 ccf7e61ffe32f57d53bec0df40bb230c.safeframe.googlesyndication.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 census.eu-west-1.nielsencollections.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 216.58.204.65:443 ccf7e61ffe32f57d53bec0df40bb230c.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
BE 142.251.173.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
GB 216.58.204.65:443 pagead-googlehosted.l.google.com udp
BE 142.251.173.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.228:443 www.google.com udp
IE 52.50.206.133:443 secure-us.imrworldwide.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cdn-gl.imrworldwide.com udp
IE 18.66.171.50:443 cdn-gl.imrworldwide.com tcp
US 8.8.8.8:53 d2926jmvsihu4k.cloudfront.net udp
US 8.8.8.8:53 d2926jmvsihu4k.cloudfront.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 142.250.180.1:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 static.criteo.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 bee.imrworldwide.com udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 3.162.140.78:443 bee.imrworldwide.com tcp
US 8.8.8.8:53 d289cm8jitwx96.cloudfront.net udp
US 8.8.8.8:53 d289cm8jitwx96.cloudfront.net udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 gum.fr3.vip.prod.criteo.com udp
FR 178.250.7.13:443 gum.fr3.vip.prod.criteo.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 gum.fr3.vip.prod.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
FR 178.250.7.13:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gbc1.nl3.eu.criteo.com udp
US 8.8.8.8:53 gbc4.nl3.eu.criteo.com udp
US 8.8.8.8:53 gbc1.nl3.eu.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
NL 185.235.87.34:443 gbc1.nl3.eu.criteo.com tcp
NL 185.235.87.132:443 gbc4.nl3.eu.criteo.com tcp
US 8.8.8.8:53 jwjlfqp12bt0usuxgdovfzlbqy4na1708793128.nuid.imrworldwide.com udp
US 8.8.8.8:53 d29sshy11yr8a1.cloudfront.net udp
IE 13.224.68.69:443 d29sshy11yr8a1.cloudfront.net tcp
US 8.8.8.8:53 d29sshy11yr8a1.cloudfront.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 ookla-d.openx.net udp
US 8.8.8.8:53 idx.liadm.com udp
US 8.8.8.8:53 id5-sync.com udp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 3.222.21.132:443 idx.liadm.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 idx.cph.liveintent.com udp
US 34.98.64.218:443 ookla-d.openx.net tcp
US 8.8.8.8:53 ookla-d.openx.net udp
GB 96.16.109.9:443 ads.pubmatic.com tcp
DE 162.19.138.82:443 id5-sync.com tcp
GB 2.17.5.216:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 idx.cph.liveintent.com udp
US 8.8.8.8:53 ookla-d.openx.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 34.98.64.218:443 ookla-d.openx.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
NL 213.19.162.80:443 token.rubiconproject.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com tcp
GB 50.7.152.4:8080 lg-lon.fdcservers.net tcp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
US 8.8.8.8:53 speedlon.hyperoptic.com udp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com tcp
GB 50.7.152.4:8080 lg-lon.fdcservers.net tcp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
GB 88.221.134.155:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.212.238:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.212.238:443 redirector.gvt1.com udp
US 8.8.8.8:53 r4---sn-1gi7znek.gvt1.com udp
CH 74.125.108.201:443 r4---sn-1gi7znek.gvt1.com tcp
US 8.8.8.8:53 r4.sn-1gi7znek.gvt1.com udp
US 8.8.8.8:53 r4.sn-1gi7znek.gvt1.com udp
CH 74.125.108.201:443 r4.sn-1gi7znek.gvt1.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 b.cdnst.net udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 dualstack.zd.map.fastly.net udp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 dualstack.zd.map.fastly.net udp
US 8.8.8.8:53 ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud udp
NL 185.89.210.122:443 ib.adnxs.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 ssp-sync.criteo.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
GB 172.217.169.66:443 securepubads46.g.doubleclick.net udp
GB 142.250.180.1:443 cdn-content.ampproject.org udp
GB 216.58.204.65:443 pagead-googlehosted.l.google.com udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com tcp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.187.206:443 encrypted-tbn2.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
GB 142.250.200.46:443 encrypted-tbn3.gstatic.com udp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com udp
GB 142.250.187.206:443 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 e6115.g.akamaiedge.net udp
GB 96.16.108.246:443 e6115.g.akamaiedge.net tcp
US 8.8.8.8:53 e6115.g.akamaiedge.net udp
US 8.8.8.8:53 secure-us.imrworldwide.com udp
US 8.8.8.8:53 census.eu-west-1.nielsencollections.com udp
US 8.8.8.8:53 csm.fr3.eu.criteo.net udp
FR 178.250.7.17:443 csm.fr3.eu.criteo.net tcp
US 8.8.8.8:53 csm.fr3.vip.prod.criteo.net udp
US 8.8.8.8:53 csm.fr3.vip.prod.criteo.net udp
US 8.8.8.8:53 tlauncher.org udp
US 104.20.64.88:80 tlauncher.org tcp
US 104.20.64.88:80 tlauncher.org tcp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 104.20.64.88:443 tlauncher.org tcp
US 104.20.64.88:443 tlauncher.org tcp
US 104.20.64.88:443 tlauncher.org udp
US 8.8.8.8:53 hcaptcha.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 hcaptcha.com udp
US 104.19.219.90:443 hcaptcha.com tcp
US 104.16.56.101:443 static.cloudflareinsights.com tcp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 hcaptcha.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 www.google.com udp
US 104.19.219.90:443 hcaptcha.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
GB 172.217.16.228:443 www.google.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 104.19.218.90:443 newassets.hcaptcha.com tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 104.19.218.90:443 newassets.hcaptcha.com udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
RU 77.88.21.119:443 mc.yandex.ru tcp
RU 77.88.21.119:443 mc.yandex.ru tcp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 tlauncher.org udp
US 104.19.218.90:443 newassets.hcaptcha.com udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 tlauncher.org udp
US 8.8.8.8:53 tlauncher.org udp

Files

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

MD5 520ffb412284f462146f58dfb4c2bd1a
SHA1 7706137e79b5f16b5359a99d0ea3abda4e9e03b5
SHA256 922f6db880eb3f22366c69053f23a72f24eb5500c823b39f8f4da6b13006ce96
SHA512 7c1b69ff8582f15c5d47059a47b483578f105f2b93456035b5e59c7e8a62ac554b020f9bf19a90f9b3a74b5a636b1de64e42217654006365c71b9e45067a745d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

MD5 ac89a852c2aaa3d389b2d2dd312ad367
SHA1 8f421dd6493c61dbda6b839e2debb7b50a20c930
SHA256 0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512 c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\flUhRq6tzZclQEJ-Vdg-IuiaDsNa[1].woff

MD5 3e1afe59fa075c9e04c436606b77f640
SHA1 e4bb7c1e40d3febee58df963db276b2bf68c117b
SHA256 fd84f88b497040d4f7d5e8c9f8635aef8d3e706c0fa52e2b6facf14eee87e522
SHA512 d60da32bdc3542b7c6fcf766659d982fd66816705d6f8fa11785410e507dcaef6b319b19e58528a967a4b705058d9c9b1c5f8f41cf33da6f7957b8c6604cffac

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\902LKC6A\Download-Test-File-Logo-150x150[1].png

MD5 398332a1ec651ad1fc603071b1736f1b
SHA1 c67173d86ddf4e25ebd1840b23a395db25439680
SHA256 39e6714c2c86c27c9047be16328a4f3499fef870f5f881a4b99d7607ad3f4b55
SHA512 0df779d753a8230e3474527d218a17348154cde0d083a300aa770f939546eb2b94eca6cc70934261aad2f57361ff4c68d017837505aa8afb35dce19a8129e1ca

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\92bocja\imagestore.dat

MD5 444c68ae5e41ba11423e294177466023
SHA1 ed2d5982cb1d5fea167785f0b4ee028d46cc8c43
SHA256 cc3b5b3d0103cfb6c8b0479dde090d65994ac1086b873b96e966b6828e7803c7
SHA512 0d85b314d38ff905f9c301d05e0f85e937d4337d61b4dfeb0b80b4dde10985abe2a559011a2dff9693a5c41bc3f816b247a44d989ce243e3eb53a253ea8e617c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\datareporting\glean\db\data.safe.bin

MD5 9f1b007e4bda5ebe1f74e57d28c92389
SHA1 7bbc0dcef8267ca7d02dfd9db0632a877a3ecc64
SHA256 3f3b5739fdd753ce402409a64df7907664f440f38aedaf20d2c3098f080aad7f
SHA512 635b72bc899fdf0ed4cde9d824dd61cec716b1b08195c0219794d8eda7a20126926b0f048d0475b4282507e4fc4dedc09a4efe1c1bb4643fe9ba916d033f8553

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\datareporting\glean\pending_pings\8c7fe324-c3cd-45c4-9682-505257e8845c

MD5 7b076a4806700d2ccf6e4b4d5c0c54d2
SHA1 cedd36897f94f8ef60747ee2d685edf46aa504e0
SHA256 acfa4e933314283c30122cfe24106b29239813e6fe50f221981c9132620948c1
SHA512 3000216e31282b9617378b34fbc69eb7f143a0674020b79ef5426f885b21f89ee8f8cd81c491780b833c25e1fc3e730f0ea703eb5d7778e11663afd16795a41f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\datareporting\glean\pending_pings\09a1c863-27e9-443f-9f7c-2d5481118755

MD5 1b7b21d8d8f80933104d648b1d5c66ba
SHA1 12ccda7bf57e93252465062b59ff9013c77ba03c
SHA256 02e5030de7a4b000739dcdd9b15cd9352deed43732a50b3a6024cc0b1e5b8163
SHA512 1058c9014ad9d92a3dbe675f2bd4ee811078f5cec9cdc1d95a29a7f18c246d566628c7cb807dba3b2bab9519009b40e53dd64ed9295028263633f6e98f5a069f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a237d18035d51f1c7fe22cbc44dfc4cb
SHA1 126fa6350ff6599c1f71ddcbee28aaff2c547030
SHA256 99dc82422d969770ea7118c951ced10b43f40ba61387e63b661139b858d295f0
SHA512 922e4cba623ad7fd6adfe1113c43c3c9c7461753f2e3527411d60cdf19d18e7a3a9403d1de1ec3fd2695a936c5f18893180b0e5f10a65325905a1ab9ba4f7584

C:\Users\Admin\AppData\Local\Temp\Tar2CA0.tmp

MD5 9c0c641c06238516f27941aa1166d427
SHA1 64cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512 936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

C:\Users\Admin\AppData\Local\Temp\Cab2C9F.tmp

MD5 ac05d27423a85adc1622c714f2cb6184
SHA1 b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA512 6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 4544872bd79d9de4dafb94c36ffbc0b7
SHA1 ee18b5feebc5d3119827abf862c676f45bd43d8f
SHA256 71736059dcbd9f9e4bf8734b66a95bf9ae23cadfc18effb30f99b8f9e4bb776a
SHA512 14a3196aa69d5053291154c6716dd2bdc07e6243b2bb97c640fcec211a386ae2d5a99ca6f3be1810b96d8e12a5e0c5f424230eeac9ec84139ca5a516a41baed0

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 30104337feb05ffa56965ee1ce4c0951
SHA1 2115555cf90b6f63624fadb5f66edca6b8387e74
SHA256 79bf73a11d29f387464b3f162019cd52ba27e4d781e05c93273531a90af74ecf
SHA512 59b630f391a6238fe0a1a5f7280719eba415ec14f7ae90d4f66b8dd48d41169f36b3346784031b2fcccf2bafa95cae068d2e9d8a7e608d6e3a016e32526dbcae

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 28250fd2443fb0438cd563480197aa07
SHA1 49448d223a17d13b70fa772bf039908af76d5af7
SHA256 c7532dcfe81943dd241a58ff125e0bb0789994f371716555eedc4460b1cbb23e
SHA512 8da04ab5939ecd60fb65ed93afe4252c1d9d6569faf2a2b68517c1f855251bf3f436aef8a07c397369c261672c43ef330d8503104b37a5f114e3936f047796a1

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 03e9bba90f26808e0cd9c32787e778e5
SHA1 25f6f2e2ef1aa33d6db55e58782fa8ceca9ab297
SHA256 1cbd96dce13a19c6922620958f085378edfce491ce8a43d4c26297ecb9eb69d2
SHA512 21b2b9cff2e645beae406046d4e3285c27ca5e28fef3420e7b89977ab5875cb9e6d9935d64064088118471b5a43f273ed54faa3588dbdcf20b40f90b4c8ba7ed

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8c854642f028127952b053196cb1cc92
SHA1 1e45191163e8ce12803fe436d05fced87e902c37
SHA256 0e3303b040e5fe44880b972d42c6120a20ffca12e7fe9247359a2ee00fff139e
SHA512 27806a85dad5c57b8ccdbd13a1acb4049aae826ea568b998d2603cefb803ea1494923a1e69831e983e3562901de82a2bd88ddaa23eabebd0c83f45a121918ac7

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 6e8bf6a6b68b56657fb866499098a74d
SHA1 3e57f73647062eef6613f58cca16c213bc0803b0
SHA256 385dbcd8050febcd0222c178a25629f533360a7964f92f13acc66c31bb4c7db1
SHA512 363545dfd8ea5b81ce5960c96be77b5ddbb94399fd1fa7288861bfb85e784f68c0f0274e5d200e6581ab641796601031ba48491baf13416c8d754fec28d0b39f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c1e0970d0f8561898328a5368e8aa065
SHA1 126cf70d950da208a035d93de018386521d223aa
SHA256 43593ecc3618abe05a5b5ca6cf4a363638b6a101a36d78aedee768d0f9aaef03
SHA512 a8e7a729561c4e8c4888f2cb87ec830513d1177c1556a5beaef3d837d9e6f637a433edf29d7553e831c813ade202bab2c4277f9e7927c8e439d8ebabf035c8ca

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 5783595e0e727bf2f6dd25f90bfb87fd
SHA1 5c2f1fad6c59e0bd4c975c23f7abbbe3a95c6f5b
SHA256 5b4d7cf74b3d229d4c4f8a355e365c56215e67c51c43aef717fbd4af7b304a42
SHA512 8b7e54191e2c84003bbe9d826d72ce7584ec24a84f53ba0d2ec318d993bc1b07f2573ea7c215e023df326cedd30f74abdfe682516ca2bd3c64a453971b1ee449

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2f64b0bc3f69c4c0b1c61e30c922d9ad
SHA1 3f49ad3dbece6d832e5f69f5ac8b706d7c64c205
SHA256 af9c756fab92b9b78d4b8afd5a5e1884251468cc723458c99050ba613c02bf4b
SHA512 376f5b507646a8f56d4182980bcb8fbfb250d8b73942eb5393ea3a20aab2a18056f500287b5b40da5b9e0be06dac0cd40aa419c5ea8d9333bc13dfd4bfccf870

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6b6bbb6b406f840bc138b9c81c92c419
SHA1 fede9f556a14e2a2d9deb8908a118b676a8040b7
SHA256 e8af8b29dc977e8fad2c55d069d47b82225ff92aaa2bfe8c902d18789b881b3c
SHA512 96245f2ae59f465192cdb14879010d7e27d1011c6bfb86df6582439811049b846adc5b3f5223c4b046304bbd9897e208b4184f38b55480607e1bbc044747b248

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\prefs-1.js

MD5 9b0beba4f6d1178941fbe74b510efa9a
SHA1 674f9ff128aafcd2e0c9699ece6f6caee1450771
SHA256 d8a954d09d38a2787c3f0c2413c4367591a2d2d4ea663a2f29607ac087f12565
SHA512 baf9f78a3fa20a748dc5e6b0f4b9816946f30ecc1d3e4fc8892f87431d28341e83b3a9ef336bb4964ffa5d05ac98754c692991400957e2c1acce5e1220159c7b

\??\PIPE\samr

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\doomed\27493

MD5 ea70858419a1672dfc328507d202048c
SHA1 3a1314b4169431971c7f6e69ef708a420a71e075
SHA256 be622e0fb237380884e363792933b7a283c2059afae858dd2aba8dca08c74412
SHA512 3f1aa30644b85c6fadc9f5b6115b1c6f3f4a2551243cf045784760c87ff2a82ee0d91311d7dbb9f312a4ea0b62fd51263c6954049c5c7ee4468df63abaaadeb6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\5A75BF153F1322245403FAA96C1A4976B2AA48AD

MD5 9443647642bb5ec9512eca5b25c42ddb
SHA1 8c3f84096d881ecb6a5bf2228d78a9e63c406a93
SHA256 d2d8d450965bb0ab7499b98b552f7b235b92c788066a8f446fe48b9062656e12
SHA512 89779ab8740fe7ffcd12c53da429cd089858cf0aa663d0995f1c0444978a4c118dccfabdf4fb3848fb1c9336cc4f9e7be613004150ebbd8a80e7a2c90ff76991

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\44CF84CB74066B2B9B811EDF78FC33280D12F524

MD5 1aeca22848e550e03921ac4b81e62252
SHA1 0252da40257c564f85dac47aaef6d4b3b7e8b483
SHA256 9e6e88a7841980d5ee388c753e40d38a98189538e369e20965298ef2eaada9e5
SHA512 265a129832e3d4f83a382c616ba1fe37f3969d8e5977adc23910a60a50493ccd09647f32a2baf9e88b2ccb0d57745346226fae0e1c86e7852662e3b0802116f5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 89d4dedb73183965dbaab99a67a56771
SHA1 7edbab4d8bfe464e35876094eeb841dda16f9ede
SHA256 22b0b487990d10c36ca62572c8cbd3b0c3dfb5bcc4697c13b92f882418d444a2
SHA512 bcd08bd465228d103b785744104b5fe211f36cfdbc362e9a9c6c91551c69e34a884df9c18c10b2e90bdc6d7ed896ed5d6e7a2e22a722ab64b1bdce41b8846363

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\prefs-1.js

MD5 d6c56a9c631505eb3f884cad2e160e08
SHA1 dda19b86f6aa96ad8b5d4cb346f82a7d44c49ebb
SHA256 09351fb84ddd9dafb30aa93f65906c61cd506155f3fe295098a4ba6e3b5cba08
SHA512 ce1550c85dec455011b26a138140f794b71dd864e8e502c06be6738360552773c63619ee64229767d20dab019bb253c94660799860dbd03eeac80db9388ff2a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\7AF0E1BA7AA71E1596CDC1F4E476C761067D6FD5

MD5 304cf8b858376d103284674cbbcaf15b
SHA1 22906b330c4fdc4746f9b1c619c2810cb76c496d
SHA256 3dd1978087e7caa191ed71afeaa411ed3dbd888adeaebab3cfb75875fe2987f4
SHA512 c38d2dda0b1ce92155ddf0b99d5a14102a8ef3e486fb92eea498cdac02bfc5a2018bac41ad045459d279bfacfa4949632292024e98166cae42f2e452c37b20f3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\6EEB43AFAC9C20B32767436E6972E3F9355CD209

MD5 92e1c160ab2b0449a9b4f44d0733c689
SHA1 a2a300251f30fbeafd7acd93abb9d48760a1e8ee
SHA256 a7967cbb3a011856d36783f5d2d9133aa63591c859663837200bf026299c0f42
SHA512 e37fc4c5bd60f32f88e7551ea881bbebe63e914e5d20592568c4dd0bdb2f7a6bb47cc47e533553eb632903c1c74bd4f75d1aa45a2aeccf979818aa06c3a09e36

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 696f0a76a38df1121bebbbf8efe21572
SHA1 c94f21303ff37ebd86f7749a01d63a74d510c735
SHA256 a09f79fa73e05200ebd473985b856f45b14893bdc2e31c42131531a366c9f8b3
SHA512 2162f458fa81e91504d0b656aeeb8856546d468a6bca832cdd710c04a2f713429f543b4adfa07b34d9416af1f10273d78fe20404c841dc3565567918f92aae5b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\prefs-1.js

MD5 905ca01daf9ff07b272d7cfb842af8aa
SHA1 2c4b6a3f85bfd02ab09dd60759fa465d7645dff1
SHA256 be9be10c59c23d210b7e69ca7452ac82e9d7c7845cbfa748fc1e3f368b4c0e37
SHA512 f434dd61db75a6ecc785553523f1caa08d79b34a44a307d1a5946a55f134d518c69dd9606414837d3acc6b26ceae2e289552d328dfdb679d0f6313e7506bc2b1

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\2643386A89FF6A599424DE0D40ECC6BD0C58BD2F

MD5 8c2c4224162f1b4535926caa9b8901e5
SHA1 71aa68fb2146720cbc5786f4aeedb5ead30dd8fa
SHA256 debd38b5bc516e7d2815457d800a6c5f32e161652506fbeea7dac24fcdd1b340
SHA512 506f4d70e4e0c7fa507d7243a832914e41504b6203d499f120963b7061a06effa83cb8cf2070dbaa23e0816bf00f16d1a90df599b0e8adf892e94d44a6055698

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\doomed\28093

MD5 43222864b5767e99df27005bad52f8a4
SHA1 a27a60c635e27a9adcc7efff8af52cbcd2bdee39
SHA256 0a58148fde9101bcd87c95ca62f71d89de6ef0b16748515e2fce9f381a816f4c
SHA512 40bdf18aece65bf5a1a43faa225fc52f25da7aed59d6db6c1584c587ea4cee18312467800207bce492afd2f5bc11bc56dff9b6a44eb7f94056114857defd81db

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\doomed\12438

MD5 d2e428275566493c032421be2d3168b3
SHA1 f8889df35d0515af7ae756b0679f32566f06ca87
SHA256 1bb071893a3f7de9e045e4b10337dd9166a0f1ffef79fe37a77c74e0eaf0b673
SHA512 553669ee96416f9326556a04e721350fec681a0017ce55752d7d70eb354300ada3ad4caad323fc511502a24782e3f3b3e7b74cbbc3a800cf022ef3531f90ee22

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1652b4598dcedde44393405ec3894488
SHA1 98456d75a62fd8a6f5ea9d40617aed292876ae64
SHA256 4a2b12dd052b9c1ae0af0c7f31b181cf37e825bbd765553205a02d52052fb26a
SHA512 c29c46816e51b1e81818a7492d64b9b8bd1a1d685f0a2c6596e8733df127c8a2788b62629b4d82257b0b3739d86bc39200085f1f307f5dc40376ab9911f7d5eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 abad733964a704c7409ee842903660f1
SHA1 8ad6b5407a19fbba632cfee09af1658da0e00bab
SHA256 d17bdcf167e49c14fb0f172b60bb03664ce4f9468b212d48048db7ad31b436dc
SHA512 3231eed174fb4702a9bbe0f707667c2d3aae5e26cc66143ed3c630899f61ee10b13d2dfa5c1daec20f7b9fbda7537dd4b5f15d89fab4fc21793f925a602d6d35

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c410594e0f728caaa07b65de03456997
SHA1 c04b317e27937e4b19e4cbc03a97d14e6c9ffe2f
SHA256 62f5bc3023af20b7ba0e6e21d26aa2ff6d325fa907b50f1bbe043d55e8d7d539
SHA512 33360c8de41edf755f5d31e41d2e1d0ef56bcd438db2b72048a01395902a37d270b50f119e1ee64fd79fc55900bb772e1cc89a9dcd3383beaedc0d98ffc9bc1c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 ea9fd42da789c85f103bbb1af4fdaf8c
SHA1 3ac3068037b1f66f7d339445b326f2de7862733e
SHA256 f90bad06e280213439c2cc98bdc69862f60d7b41192c418bec51bb3b3da6c5c0
SHA512 bfc8934d5f98731a9157d31f508611be41f1054ecad126249172a01b394501bbea25da47314ebde862497bb821a770d680ec0978944a1bc5ac0390a255474b7e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ee9259bf6a533e7bf1cd924c51fafa23
SHA1 3bd62d61801cd5210f77c43e0a33614fd73c2867
SHA256 b2a66e9b361b7df2420ae3c5c4908b7f9433455ea5225d326219c27838490ada
SHA512 85fa27989496d1353965e5da5c2dac426a26566b9ea0f9cc402d7da59f7cbdc08887b861f67d904682a49170ad6b64e4528da282444650c1b472e5e449af044f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\0023CCD27A4401E92F32259AA01669BD277B955F

MD5 9eb6e5d0770865e2ef967d5e29fdd5f3
SHA1 744f059055fd6404018a065281d6b6eabdfb1c3e
SHA256 abe331c31a78eb19da7cc74d574e35efe733ebb54314c4e894860a3771b9b7fd
SHA512 576e32ad1e80e80f603c452beb04bfd0a5495377c35d6530c3efc175c67819d4a6be43d53a5a86b704583818b40023cfe73fac9e91c9ef9145050cb1d158ade0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\DD91F5C51DC8743666B995BB4C8835F15C86D1C3

MD5 e0ca9c0e1c6c77d4c3eb834bd819d0a8
SHA1 50a736a5986b978e77b3e417db364bdd893bd33b
SHA256 825c3775001184c67395a346cb113979e2918495869fd9570bb63f04b51f3ca5
SHA512 9108a0691a4a180bac739f454e777449aee598afa453c2f076232488279e39ad590d5519e97ca9d0a3e6cfb6fa6840077c5f6015b4c25d4d0f28a4e3a321c5d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\C81DDBFCC00DD73C2638811E1AF17016922748E2

MD5 3e8ca57a22ea7033de143f6ce1cb20e5
SHA1 34bc38a391fa73ba9506ad30762689964f05eaa6
SHA256 0c3b9eec47ca003babbe00e3d903beb8639db851260f294c0308b64a1154a826
SHA512 fef65231f85c09ace01bc22e2eaa48220a821576f2006a4aa2edc8d2f6dbb09783ac41c7eadbfbbe72b8d027cc6eba1b969a86ac6454cc44021eb9917f5884b9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\9E1E2E3181273ABEA209767EE46BC8DCEF0DBF86

MD5 827bd7515c5db7afcc6064a0aebc0084
SHA1 fc5b67e22d88fb3b70bd7a87b3503ab7d8062b2a
SHA256 fb3c58939dd9e383e50023661b4e2351e27c851552177cdf7044ca097ad7fc67
SHA512 f4312f07f1c913de1c2f8987599e79ff2902270d04e64cae6bbaa6fde1244023c03eace13913bfb5b83ad8a6b18cc2b6d45f864e23c4ca10b58cccbc936c8e9d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\40BBD2730A7C52AD6B64ABB8E38927B48B2BC4E4

MD5 344a4f234f06628429e1e5273c186ade
SHA1 9e176fd7d2f0e48d36d41bf9a483baf03839cc63
SHA256 4ce355b9d5ecf287fa31470be418d00da143bc9bbf34e82f63d8fcd165b41195
SHA512 5e4e2e348bba20ade53ccd09656293e41722be9993e1787206d3b815052f7a8ca754e7317c8d32ea450bd27053c8976721c2266120176882ee987471e37868f5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\689A54C433D668CF1C908E0E85AB6CD088E81D9F

MD5 6d1edba7d83968aa5be1f9f0c05e4b1d
SHA1 1a00a663c093116ac95c838ca1929eacf7d265cb
SHA256 52fd5b84c8d6d14867e5a21b40f8a2501aa165bec898e74874a460b7f220ccea
SHA512 c15d76e2067d672aa341a3907db6f1bba8b168ff0b015a3175d6436eb41babd99c8c6d52fc89722ca5c30e8f662ecc3cb371d70e078a6f65f5b0608d8a321973

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\1E2837FDB4C2FC65E6EAB5051F758940F72C710B

MD5 b8fa9ea51123352da2588d4589ef9a3f
SHA1 bc22ac880919b8e76b2c5e318bff58abfcf13602
SHA256 262df75eb3837cde0a6131d31589c7081abbb1c31fe54fc755388347941ffe81
SHA512 e6ed04391ad6076e619b1e4519508081d74e558325f26efdc55be30c563f72a22221c8d00a772f6bb258a45b0783e579734a67aec8549f4f7ea70e28b0fa0abf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\AD1A4AC0772EC1966FA8EFE307D9A62162CD2AEC

MD5 65043f16e3b7a1f21e16a7a1eca70466
SHA1 561afe85c97cff222d3ac30cc2c2c7622dcb344e
SHA256 e20683eef3d29a0f2afb9564f95f1f9b9f872af3c4bafdedf287b3e45212171f
SHA512 5a99513f9b015f3add415799d1bd3878d62d52d1d6357a3038567ca5445e158c9643fd5626d7f7ad11f234896480bc2b56324f2ffe51ea7f2ca4c917faabd4f3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\A6B899A083E3028F76EC91C412E6C3342FAAF1B3

MD5 9404e3c122e5a9a9fe20d4d04d82e370
SHA1 cce8c86ad20980778009a20becd0464d78a83304
SHA256 9b5efbac8c2b5f66b5ca6c68773635ec8a9af571b06bacf8e6a59ca256bd79ef
SHA512 4e13eb73df1128a6e67f14d88c038dfc14c7af12872591401901bbf1e6ad3058b28cceeb1286b6f7d18bed0cf324b27c4fb9faa5a288f61cf05dae049d74858e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\cache2\entries\D8A1166054278E4716F7F054D903F5458D6B224B

MD5 56db3df804327ef097ef748d0c538153
SHA1 b000e7d5d9bac4fbd29740479a15983c5c976512
SHA256 dd9d4a32ae1b7d83f954e49344b49aa6539358b225c83f73a4b8a54693f515a0
SHA512 20e85aed3983db1e314b899ba7bf74a4870be334cd9bf8f626d6d659b03dc971ba1d01a2810114bc0ec9578e60f1b4a43f805cbee30a5c7dd3655497fff5d5f3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u7g6zvo6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a06570290c68bff2c3880768fe0f422f
SHA1 437ed59c8639a461c3294fb04db48fe4fed38b10
SHA256 79a2e2a06a889cd0aba94ffd34f9abb108edfa038ae3a996900c832f5a0ae351
SHA512 b98054c92cfbc8fa7614ae8846dc966ac619ee10752f82e965555e42fd6ac3a86e75236aa3c91e402e99afdb4928fff0a8d3ebe651c56c4fcdb20c685c9fafbe