Malware Analysis Report

2025-08-05 20:08

Sample ID 240302-3thd8aah92
Target The_Road_to_Tally_Hall_Demo.zip
SHA256 cfe6f9ecb62a3aedaa1aeb97b77fc9f634ab0c7ad905ab2f320543935a41485e
Tags
aspackv2
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

cfe6f9ecb62a3aedaa1aeb97b77fc9f634ab0c7ad905ab2f320543935a41485e

Threat Level: Shows suspicious behavior

The file The_Road_to_Tally_Hall_Demo.zip was found to be: Shows suspicious behavior.

Malicious Activity Summary

aspackv2

ASPack v2.12-2.42

Unsigned PE

Uses Task Scheduler COM API

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Checks processor information in registry

Modifies registry class

NTFS ADS

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: GetForegroundWindowSpam

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-02 23:48

Signatures

ASPack v2.12-2.42

aspackv2
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-02 23:48

Reported

2024-03-02 23:52

Platform

win10-20240221-en

Max time kernel

200s

Max time network

207s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\The_Road_to_Tally_Hall_Demo.zip

Signatures

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2772066395-907917261-1982757236-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\The_Road_to_Tally_Hall_Demo.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4860 wrote to memory of 8 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 8 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 5044 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4860 wrote to memory of 1464 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\The_Road_to_Tally_Hall_Demo.zip

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.0.221586881\825175419" -parentBuildID 20221007134813 -prefsHandle 1732 -prefMapHandle 1724 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c771df5f-7f7b-411c-8ace-dcbe869ba180} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 1812 19faf1f6e58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.1.1041307560\1007627274" -parentBuildID 20221007134813 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba8b2b1d-0b82-42fe-bcc0-435f260c90a7} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 2168 19f9cd72558 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.2.279894002\895304178" -childID 1 -isForBrowser -prefsHandle 3312 -prefMapHandle 2820 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {93784a4d-9291-4e6d-b946-55fea04c1412} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 3080 19fb33a9e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.3.842080054\2004431438" -childID 2 -isForBrowser -prefsHandle 3576 -prefMapHandle 3596 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {83e288f1-faba-483f-89e9-02270a4ecdc4} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 3052 19fb416ea58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.4.214971474\4611662" -childID 3 -isForBrowser -prefsHandle 3576 -prefMapHandle 4032 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8f6f9df-f23e-4ccf-82cc-f09b882b3ec8} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 4344 19fb52caf58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.5.1513450612\2108038412" -childID 4 -isForBrowser -prefsHandle 4772 -prefMapHandle 4768 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6144fea1-dbe0-440a-94ae-75b03aea38c6} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 4812 19fb5881858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.6.1364875869\91237575" -childID 5 -isForBrowser -prefsHandle 4948 -prefMapHandle 4952 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a37fe181-0b39-46a4-8ae8-00cb3642c3c5} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 4940 19fb5881b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.7.506551252\1718579009" -childID 6 -isForBrowser -prefsHandle 5148 -prefMapHandle 5152 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab7e3838-236c-48f3-8a47-d380f6c59beb} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 5140 19fb587f758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.8.1434564857\610797008" -childID 7 -isForBrowser -prefsHandle 5524 -prefMapHandle 5520 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b67e447-b3f0-4bc8-b4e7-ee3e6223f846} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 5532 19fb6820958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.9.1623075231\281716557" -parentBuildID 20221007134813 -prefsHandle 5688 -prefMapHandle 4380 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9e401099-4d8f-440e-8938-5c63716a461b} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 5760 19fb7244158 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.10.1560248690\629031113" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 3576 -prefMapHandle 4640 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c87b988c-ec85-4f21-8485-1d6aaf0111ac} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 4016 19fb7245c58 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.11.804837195\1117515142" -childID 8 -isForBrowser -prefsHandle 9648 -prefMapHandle 9652 -prefsLen 27402 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8891df8c-aec1-4b56-bb14-76aeedee2fd3} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 9636 19fb83cfb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.12.412144428\272006919" -childID 9 -isForBrowser -prefsHandle 9240 -prefMapHandle 9236 -prefsLen 27402 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2808d671-5e05-402f-8750-b802cd4cec72} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 9220 19fba159758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.13.608511092\715367606" -childID 10 -isForBrowser -prefsHandle 9504 -prefMapHandle 9512 -prefsLen 27402 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {12652808-b949-47af-b957-dd3fe6902074} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 9128 19fb9da0b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.14.212571324\1552650823" -childID 11 -isForBrowser -prefsHandle 8684 -prefMapHandle 8696 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fc991394-2f43-49e1-808d-8904792cbc12} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8676 19fbaad5058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.15.1111740423\597605839" -childID 12 -isForBrowser -prefsHandle 8456 -prefMapHandle 8520 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6ee0d084-fcd8-49ad-8c87-5509ab56b75e} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8452 19fba73b258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.16.1368953535\371187558" -childID 13 -isForBrowser -prefsHandle 8532 -prefMapHandle 8528 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {666fa6cb-ec12-492d-b9ec-4e8d97069df8} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8308 19fbb3d4858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.17.552789323\479956360" -childID 14 -isForBrowser -prefsHandle 8128 -prefMapHandle 8124 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6aa767f3-eb32-47a5-a38b-d1600970ed12} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8140 19fbb3d4b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.18.625376398\981602059" -childID 15 -isForBrowser -prefsHandle 2760 -prefMapHandle 1560 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6a2ac702-b997-4043-a839-aff4779563ea} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8436 19faf62ae58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.19.276617390\1161425918" -childID 16 -isForBrowser -prefsHandle 7904 -prefMapHandle 8096 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3b3d7ed-6d79-417f-9ec4-cfbfb14f2051} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8436 19fbba4ad58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.20.988312915\291495115" -childID 17 -isForBrowser -prefsHandle 7812 -prefMapHandle 8676 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {de3746e2-c7ac-4f23-8b88-d70757ae0cf3} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 7420 19fbbba5858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.21.1836165964\1563746458" -childID 18 -isForBrowser -prefsHandle 7388 -prefMapHandle 7392 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d7fa5c9f-247c-4285-98fb-88d8b19d7e42} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8596 19fbbf99f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.22.1589571215\143466549" -childID 19 -isForBrowser -prefsHandle 7188 -prefMapHandle 7184 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b4e0e598-9032-450a-b00a-40c18edcfe8b} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 7220 19fbbf97b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.23.570980531\1330182514" -childID 20 -isForBrowser -prefsHandle 7200 -prefMapHandle 7196 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0e0bb024-192b-49f1-a7f7-9712b0040673} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 7228 19fbbf98458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.24.1701990097\1502735943" -childID 21 -isForBrowser -prefsHandle 7140 -prefMapHandle 7132 -prefsLen 27442 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8d006515-80f1-4099-af10-cd59d76407f6} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 6824 19fbc6ae158 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe

"C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe"

C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe

"C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Game.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4860.25.1623985811\2071629041" -childID 22 -isForBrowser -prefsHandle 5608 -prefMapHandle 6484 -prefsLen 27451 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {08603111-85f8-46d7-8d46-9bd78fc219d7} 4860 "\\.\pipe\gecko-crash-server-pipe.4860" 8812 19fb678c858 tab

C:\Program Files\VideoLAN\VLC\vlc.exe

"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\The Road to Tally Hall Demo\Audio\ME\Fate of the Stars (Credits).mp3"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x388

Network

Country Destination Domain Proto
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.237.239:443 contile.services.mozilla.com tcp
N/A 127.0.0.1:49777 tcp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 54.218.225.239:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 239.225.218.54.in-addr.arpa udp
N/A 127.0.0.1:49784 tcp
US 8.8.8.8:53 gamejolt.com udp
US 104.18.5.160:80 gamejolt.com tcp
US 104.18.5.160:80 gamejolt.com tcp
US 8.8.8.8:53 gamejolt.com udp
US 8.8.8.8:53 gamejolt.com udp
US 104.18.5.160:443 gamejolt.com tcp
US 8.8.8.8:53 160.5.18.104.in-addr.arpa udp
US 104.18.5.160:443 gamejolt.com udp
US 8.8.8.8:53 s.gjcdn.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 104.18.24.184:443 s.gjcdn.net tcp
US 104.18.24.184:443 s.gjcdn.net tcp
US 8.8.8.8:53 s.gjcdn.net udp
US 8.8.8.8:53 s.gjcdn.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 104.18.24.184:443 s.gjcdn.net udp
US 104.18.24.184:443 s.gjcdn.net udp
US 8.8.8.8:53 firebase.googleapis.com udp
GB 216.58.204.74:443 firebase.googleapis.com tcp
GB 216.58.204.74:443 firebase.googleapis.com tcp
US 8.8.8.8:53 firebase.googleapis.com udp
US 8.8.8.8:53 184.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 firebase.googleapis.com udp
GB 216.58.204.74:443 firebase.googleapis.com udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
GB 142.250.179.234:443 firebaseremoteconfig.googleapis.com tcp
GB 142.250.179.234:443 firebaseremoteconfig.googleapis.com tcp
GB 142.250.179.234:443 firebaseremoteconfig.googleapis.com tcp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
GB 142.250.179.234:443 firebaseremoteconfig.googleapis.com tcp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
GB 142.250.179.234:443 firebaseremoteconfig.googleapis.com udp
US 8.8.8.8:53 232.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 firebaselogging-pa.googleapis.com udp
GB 142.250.178.10:443 firebaselogging-pa.googleapis.com tcp
US 8.8.8.8:53 firebaselogging-pa.googleapis.com udp
US 8.8.8.8:53 firebaselogging-pa.googleapis.com udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
GB 142.250.178.10:443 firebaselogging-pa.googleapis.com udp
GB 142.250.178.10:443 firebaselogging-pa.googleapis.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
GB 216.58.204.74:443 firebaselogging-pa.googleapis.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 secure.gravatar.com udp
US 8.8.8.8:53 m.gjcdn.net udp
US 192.0.73.2:443 secure.gravatar.com tcp
US 192.0.73.2:443 secure.gravatar.com tcp
US 8.8.8.8:53 secure.gravatar.com udp
US 192.0.73.2:443 secure.gravatar.com tcp
US 192.0.73.2:443 secure.gravatar.com tcp
US 104.18.24.184:443 m.gjcdn.net tcp
US 8.8.8.8:53 m.gjcdn.net udp
US 8.8.8.8:53 secure.gravatar.com udp
US 8.8.8.8:53 m.gjcdn.net udp
US 8.8.8.8:53 global.proper.io udp
US 8.8.8.8:53 api.enthusiastgaming.net udp
US 8.8.8.8:53 global.proper.io udp
US 8.8.8.8:53 global.proper.io udp
US 8.8.8.8:53 api.enthusiastgaming.net udp
US 8.8.8.8:53 api.enthusiastgaming.net udp
US 104.18.24.184:443 m.gjcdn.net udp
US 104.16.14.119:443 global.proper.io tcp
GB 18.244.179.31:443 api.enthusiastgaming.net tcp
US 192.0.73.2:443 secure.gravatar.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 vplayer.enthusiastgaming.com udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 d25rcu0ocutfu6.cloudfront.net udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 d25rcu0ocutfu6.cloudfront.net udp
GB 13.224.222.22:443 d25rcu0ocutfu6.cloudfront.net tcp
US 8.8.8.8:53 i2.wp.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 abcheck.proper.io udp
US 192.0.77.2:443 i2.wp.com tcp
US 8.8.8.8:53 i2.wp.com udp
US 8.8.8.8:53 securepubads46.g.doubleclick.net udp
US 104.16.15.119:443 abcheck.proper.io tcp
US 8.8.8.8:53 abcheck.proper.io udp
US 104.16.15.119:443 abcheck.proper.io tcp
US 8.8.8.8:53 i2.wp.com udp
US 8.8.8.8:53 securepubads46.g.doubleclick.net udp
US 8.8.8.8:53 abcheck.proper.io udp
GB 13.224.222.22:443 d25rcu0ocutfu6.cloudfront.net udp
US 192.0.77.2:443 i2.wp.com udp
US 8.8.8.8:53 31.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 22.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 2.77.0.192.in-addr.arpa udp
US 8.8.8.8:53 2.73.0.192.in-addr.arpa udp
US 8.8.8.8:53 119.15.16.104.in-addr.arpa udp
US 8.8.8.8:53 119.14.16.104.in-addr.arpa udp
US 8.8.8.8:53 bids.proper.io udp
US 8.8.8.8:53 ced.sascdn.com udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 tagan.adlightning.com udp
GB 216.137.44.76:443 tagan.adlightning.com tcp
US 52.26.167.200:443 bids.proper.io tcp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 bids-elb-195079410.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 a1184.b.akamai.net udp
US 8.8.8.8:53 pghub.io udp
US 8.8.8.8:53 a1184.b.akamai.net udp
US 35.241.45.217:443 pghub.io tcp
US 8.8.8.8:53 bids-elb-195079410.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 pghub.io udp
US 8.8.8.8:53 pghub.io udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 35.241.45.217:443 pghub.io udp
DE 91.228.74.251:443 global.px.quantserve.com tcp
GB 172.217.169.34:443 securepubads46.g.doubleclick.net tcp
DE 91.228.74.251:443 global.px.quantserve.com tcp
GB 104.77.160.213:443 a1184.b.akamai.net tcp
GB 18.244.114.102:443 d23sp3kzv1t6m5.cloudfront.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 172.217.169.34:443 securepubads46.g.doubleclick.net udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 76.44.137.216.in-addr.arpa udp
US 8.8.8.8:53 217.45.241.35.in-addr.arpa udp
US 8.8.8.8:53 200.167.26.52.in-addr.arpa udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 102.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 251.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 213.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
GB 142.250.180.10:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
GB 142.250.180.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 www3.l.google.com udp
GB 172.217.16.238:443 www3.l.google.com tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 172.67.23.234:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 172.67.23.234:443 id.hadron.ad.gt.cdn.cloudflare.net tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 aus5.mozilla.org udp
GB 172.217.16.238:443 www3.l.google.com udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
GB 52.84.90.126:443 config.aps.amazon-adsystem.com tcp
GB 18.245.187.41:443 d2fashanjl7d9f.cloudfront.net tcp
GB 18.245.187.41:443 d2fashanjl7d9f.cloudfront.net tcp
GB 2.19.152.155:443 e4536.g.akamaiedge.net tcp
GB 2.19.152.155:443 e4536.g.akamaiedge.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 104.22.4.69:443 a.ad.gt tcp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 88.221.134.155:80 a19.dscg10.akamai.net tcp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 126.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 41.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 155.152.19.2.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 155.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 35.156.224.54:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
NL 63.215.202.146:443 proc.ad.cpe.dotomi.com tcp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.212.238:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.212.238:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-4g5e6nzl.gvt1.com udp
DE 74.125.11.102:443 r1---sn-4g5e6nzl.gvt1.com tcp
US 8.8.8.8:53 r1.sn-4g5e6nzl.gvt1.com udp
US 8.8.8.8:53 r1.sn-4g5e6nzl.gvt1.com udp
DE 74.125.11.102:443 r1.sn-4g5e6nzl.gvt1.com udp
US 8.8.8.8:53 54.224.156.35.in-addr.arpa udp
US 8.8.8.8:53 146.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 102.11.125.74.in-addr.arpa udp
US 8.8.8.8:53 stats-dev.brid.tv udp
US 8.8.8.8:53 vcdn.enthusiastgaming.com udp
GB 13.224.245.123:443 stats-dev.brid.tv tcp
US 8.8.8.8:53 stats-dev.brid.tv udp
GB 18.165.227.18:443 vcdn.enthusiastgaming.com tcp
US 8.8.8.8:53 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 stats-dev.brid.tv udp
US 8.8.8.8:53 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 18.165.227.18:443 d23ty8mdmlmsvp.cloudfront.net tcp
GB 13.224.245.123:443 stats-dev.brid.tv udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 18.165.227.18:443 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 142.250.179.230:443 s0.2mdn.net tcp
GB 142.250.179.230:443 s0.2mdn.net udp
US 8.8.8.8:53 123.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 18.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 230.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
DE 162.19.138.119:443 id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
IE 52.215.123.8:443 rtb.gumgum.com tcp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
DE 162.19.138.82:443 id5-sync.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pb-stats.brid.tv udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pb-stats.brid.tv udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pb-stats.brid.tv udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 8.123.215.52.in-addr.arpa udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 eb.proper.io udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 eb.proper.io udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 eb.proper.io udp
US 8.8.8.8:53 afe9188238f08b2a3529435df6c56d83.safeframe.googlesyndication.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 104.22.4.69:443 p.ad.gt.cdn.cloudflare.net tcp
US 104.22.4.69:443 p.ad.gt.cdn.cloudflare.net tcp
US 104.22.4.69:443 p.ad.gt.cdn.cloudflare.net tcp
US 104.22.5.69:443 p.ad.gt.cdn.cloudflare.net tcp
GB 18.154.77.98:443 d1jvc9b8z3vcjs.cloudfront.net tcp
GB 216.137.44.88:443 pb-stats.brid.tv tcp
DE 51.89.9.252:443 onetag-sys.com tcp
DE 18.198.243.18:443 tlx.3lift.com tcp
NL 213.19.162.71:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
IE 52.51.134.6:443 ap.lijit.com tcp
DE 18.195.66.88:443 btlr-eu-central-1.sharethrough.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
IE 52.51.134.6:443 ap.lijit.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
DE 18.198.243.18:443 tlx.3lift.com tcp
DE 37.252.171.85:443 ib.adnxs.com tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
IE 52.213.247.232:443 hb.yellowblue.io tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 104.16.15.119:443 eb.proper.io tcp
GB 216.58.204.65:443 pagead-googlehosted.l.google.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 pixels.ad.gt udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
GB 216.58.204.65:443 pagead-googlehosted.l.google.com udp
US 104.22.5.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.4.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.5.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.5.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 98.77.154.18.in-addr.arpa udp
US 8.8.8.8:53 88.44.137.216.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 76.20.149.34.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 71.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 6.134.51.52.in-addr.arpa udp
US 8.8.8.8:53 18.243.198.18.in-addr.arpa udp
US 8.8.8.8:53 43.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 88.66.195.18.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 85.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 232.247.213.52.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 www.googletagservices.com udp
US 34.120.63.153:443 prebid.media.net udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 34.149.20.76:443 ssc.33across.com udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 www.googletagservices.com udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
US 8.8.8.8:53 firewall-external-2134955858.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 firewall-external-2134955858.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.2:443 www.googletagservices.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
IE 34.246.23.11:443 fw.adsafeprotected.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
IE 34.246.23.11:443 fw.adsafeprotected.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 bids-elb-195079410.us-west-2.elb.amazonaws.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 download.gamejolt.net udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 193.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 11.23.246.34.in-addr.arpa udp
GB 142.250.200.34:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 pubads46.g.doubleclick.net udp
US 104.18.14.32:443 download.gamejolt.net tcp
US 8.8.8.8:53 download.gamejolt.net udp
US 8.8.8.8:53 download.gamejolt.net udp
US 8.8.8.8:53 pubads46.g.doubleclick.net udp
GB 142.250.200.34:443 pubads46.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
SG 74.125.130.120:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
BE 64.233.184.157:443 bid.g.doubleclick.net tcp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 104.18.14.32:443 download.gamejolt.net udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
SG 74.125.130.120:443 csi.gstatic.com tcp
BE 64.233.184.157:443 bid.g.doubleclick.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
GB 2.17.5.216:443 e8960.b.akamaiedge.net tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 32.14.18.104.in-addr.arpa udp
US 8.8.8.8:53 157.184.233.64.in-addr.arpa udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 unified.adsafeprotected.com udp
SG 74.125.130.120:443 csi.gstatic.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
IE 3.248.0.132:443 unified.adsafeprotected.com tcp
US 8.8.8.8:53 eks-2-unified-591377374.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 sync.mathtag.com udp
SG 74.125.130.120:443 csi.gstatic.com udp
US 8.8.8.8:53 eks-2-unified-591377374.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 120.130.125.74.in-addr.arpa udp
US 8.8.8.8:53 216.5.17.2.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 198.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 132.0.248.3.in-addr.arpa udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 propermedia-d.openx.net udp
GB 142.250.179.230:443 s0.2mdn.net udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
GB 2.17.5.216:443 e8960.b.akamaiedge.net tcp
GB 142.250.179.230:443 s0.2mdn.net tcp
US 8.8.8.8:53 de.tynt.com udp
US 34.98.64.218:443 propermedia-d.openx.net tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
GB 96.16.109.9:443 ads.pubmatic.com tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
GB 52.84.90.56:443 static.adsafeprotected.com tcp
GB 52.84.90.56:443 static.adsafeprotected.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
DE 3.69.82.17:443 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com tcp
US 74.121.140.211:443 pixel-origin.mathtag.com tcp
NL 213.19.162.90:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 154.57.158.26:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 213.19.162.80:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
FR 164.132.25.180:443 ssbsync-global.smartadserver.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
GB 142.250.178.2:443 cm.g.doubleclick.net tcp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
US 8.8.8.8:53 cs.admanmedia.com udp
GB 142.250.178.2:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 67.202.105.32:443 de.tynt.com tcp
US 67.202.105.32:443 de.tynt.com tcp
US 67.202.105.32:443 de.tynt.com tcp
US 67.202.105.32:443 de.tynt.com tcp
US 52.46.155.104:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 imgsync-amsfpairbc.pubmnet.com udp
US 8.8.8.8:53 propermedia-d.openx.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 imgsync-amsfpairbc.pubmnet.com udp
US 8.8.8.8:53 propermedia-d.openx.net udp
US 8.8.8.8:53 d162h6x3rxav67.cloudfront.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 d162h6x3rxav67.cloudfront.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 de.tynt.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 de.tynt.com udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 56.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 9.109.16.96.in-addr.arpa udp
US 8.8.8.8:53 26.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 90.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 80.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 17.82.69.3.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 180.25.132.164.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 32.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 104.155.46.52.in-addr.arpa udp
US 34.98.64.218:443 propermedia-d.openx.net udp
NL 213.19.162.90:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 213.19.162.90:443 pixel-eu.rubiconproject.net.akadns.net tcp
US 23.21.191.166:443 dt-external-217593033.us-east-1.elb.amazonaws.com tcp
US 23.21.191.166:443 dt-external-217593033.us-east-1.elb.amazonaws.com tcp
GB 142.250.178.2:443 cm.g.doubleclick.net udp
US 23.21.191.166:443 dt-external-217593033.us-east-1.elb.amazonaws.com tcp
US 23.21.191.166:443 dt-external-217593033.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 ads.everesttech.net udp
US 52.20.178.60:443 ads.everesttech.net tcp
US 8.8.8.8:53 dco-jads-233868690.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 dco-jads-233868690.us-east-1.elb.amazonaws.com udp
GB 142.250.187.194:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 52.20.178.60:443 dco-jads-233868690.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 166.191.21.23.in-addr.arpa udp
US 8.8.8.8:53 dnacdn.net udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.187.194:443 googleads4.g.doubleclick.net udp
NL 185.235.87.203:443 ag.gbc.criteo.com tcp
US 8.8.8.8:53 gbc7.nl3.eu.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 gbc7.nl3.eu.criteo.com udp
FR 185.235.86.88:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 gbc3.fr3.eu.criteo.com udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 60.178.20.52.in-addr.arpa udp
US 8.8.8.8:53 203.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 gbc3.fr3.eu.criteo.com udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 dmp.brand-display.com udp
US 8.8.8.8:53 pixel.mathtag.com udp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 gcdn.2mdn.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 88.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 firewall-external-2134955858.eu-west-1.elb.amazonaws.com udp
IE 54.76.57.1:443 pixel.adsafeprotected.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
GB 216.58.212.206:443 gcdn.2mdn.net tcp
GB 142.250.180.2:443 ade.googlesyndication.com tcp
US 34.160.19.107:443 dmp.brand-display.com tcp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 gcdn.2mdn.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 151.101.1.91:443 pixel.mathtag.com tcp
DE 91.228.74.244:443 cms.quantserve.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
US 8.8.8.8:53 gcdn.2mdn.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 8.8.8.8:53 ums.acuityplatform.com udp
GB 216.58.212.206:443 gcdn.2mdn.net udp
GB 142.250.180.2:443 ade.googlesyndication.com udp
US 8.8.8.8:53 dmp.brand-display.com udp
US 34.160.19.107:443 dmp.brand-display.com udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 1.57.76.54.in-addr.arpa udp
US 8.8.8.8:53 79.122.59.154.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 107.19.160.34.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 244.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 dmp.brand-display.com udp
US 8.8.8.8:53 dco-assets.everestads.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 e5799.g.akamaiedge.net udp
GB 23.207.213.233:443 e5799.g.akamaiedge.net tcp
US 8.8.8.8:53 e5799.g.akamaiedge.net udp
US 8.8.8.8:53 r4---sn-4g5e6nsz.c.2mdn.net udp
NL 213.19.162.80:443 pixel-eu.rubiconproject.net.akadns.net tcp
GB 23.207.213.233:443 e5799.g.akamaiedge.net tcp
US 8.8.8.8:53 c.bannerflow.net udp
GB 23.207.213.233:443 e5799.g.akamaiedge.net tcp
US 8.8.8.8:53 r4.sn-4g5e6nsz.c.2mdn.net udp
DE 173.194.182.233:443 r4.sn-4g5e6nsz.c.2mdn.net tcp
US 104.17.202.110:443 c.bannerflow.net tcp
US 8.8.8.8:53 c.bannerflow.net udp
GB 23.207.213.233:443 e5799.g.akamaiedge.net tcp
US 8.8.8.8:53 r4.sn-4g5e6nsz.c.2mdn.net udp
US 8.8.8.8:53 c.bannerflow.net udp
DE 173.194.182.233:443 r4.sn-4g5e6nsz.c.2mdn.net udp
US 8.8.8.8:53 233.213.207.23.in-addr.arpa udp
US 8.8.8.8:53 233.182.194.173.in-addr.arpa udp
US 8.8.8.8:53 110.202.17.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
GB 23.207.213.233:443 e5799.g.akamaiedge.net tcp
US 8.8.8.8:53 analyticspixel.microsoft.com udp
US 204.79.197.204:443 analyticspixel.microsoft.com tcp
US 8.8.8.8:53 a-0005.a-msedge.net udp
US 204.79.197.204:443 a-0005.a-msedge.net tcp
US 8.8.8.8:53 a-0005.a-msedge.net udp
US 8.8.8.8:53 204.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 11.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ap.lijit.com udp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
DE 37.252.171.21:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
IE 99.80.194.75:443 ap.lijit.com tcp
DE 3.127.71.35:443 tlx.3lift.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
IE 34.246.128.154:443 ce.lijit.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 75.194.80.99.in-addr.arpa udp
US 8.8.8.8:53 35.71.127.3.in-addr.arpa udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 154.128.246.34.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 142.250.180.1:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 bids.proper.io udp
US 52.26.167.200:443 bids.proper.io tcp
US 8.8.8.8:53 bids-elb-195079410.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 228.16.217.172.in-addr.arpa udp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
DE 37.252.171.21:443 ib.anycast.adnxs.com tcp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 stats-dev.brid.tv udp
US 8.8.8.8:53 pb-stats.brid.tv udp
US 8.8.8.8:53 stats-dev.brid.tv udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 stats-dev.brid.tv udp
US 8.8.8.8:53 pb-stats.brid.tv udp
DE 51.89.9.252:443 onetag-sys.com tcp
NL 213.19.162.71:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
DE 54.93.147.185:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 vcdn.enthusiastgaming.com udp
US 8.8.8.8:53 pb-stats.brid.tv udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.94.223.37:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 185.147.93.54.in-addr.arpa udp
US 8.8.8.8:53 37.223.94.52.in-addr.arpa udp
SG 74.125.130.120:443 csi.gstatic.com udp
BE 64.233.184.157:443 bid.g.doubleclick.net udp
SG 74.125.130.120:443 csi.gstatic.com tcp
US 8.8.8.8:53 unified.adsafeprotected.com udp
US 8.8.8.8:53 eks-2-unified-591377374.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 eks-2-unified-591377374.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 8.8.8.8:53 dt-external-521234871.us-west-2.elb.amazonaws.com udp
GB 142.250.200.2:443 www.googletagservices.com udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
SG 74.125.130.120:443 csi.gstatic.com tcp
IE 54.76.57.1:443 fw.adsafeprotected.com tcp
IE 54.170.110.25:443 fw.adsafeprotected.com tcp
US 8.8.8.8:53 firewall-external-2134955858.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 dt-external-521234871.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
GB 216.58.212.206:443 gcdn.2mdn.net udp
US 8.8.8.8:53 firewall-external-2134955858.eu-west-1.elb.amazonaws.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 25.110.170.54.in-addr.arpa udp
US 8.8.8.8:53 r1---sn-4g5e6nz7.c.2mdn.net udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 23.21.191.166:443 dt-external-217593033.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 r1.sn-4g5e6nz7.c.2mdn.net udp
DE 173.194.187.166:443 r1.sn-4g5e6nz7.c.2mdn.net tcp
US 8.8.8.8:53 r1.sn-4g5e6nz7.c.2mdn.net udp
DE 173.194.187.166:443 r1.sn-4g5e6nz7.c.2mdn.net udp
US 8.8.8.8:53 tagan.adlightning.com udp
GB 142.250.180.1:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 tagan.adlightning.com udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 166.187.194.173.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 bids-elb-195079410.us-west-2.elb.amazonaws.com udp
GB 142.250.180.2:443 ade.googlesyndication.com udp
GB 142.250.187.194:443 googleads4.g.doubleclick.net udp
IE 34.247.146.1:443 eks-2-unified-591377374.eu-west-1.elb.amazonaws.com tcp
US 8.8.8.8:53 1.146.247.34.in-addr.arpa udp
GB 18.165.227.18:443 d23ty8mdmlmsvp.cloudfront.net udp
US 8.8.8.8:53 0.204.248.87.in-addr.arpa udp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 ap.lijit.com udp
NL 213.19.162.43:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
DE 37.252.171.21:443 ib.anycast.adnxs.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\db\data.safe.bin

MD5 caf639eb11a8ce8d7ce94cf6e6e8c535
SHA1 70b3cbd2e2a0e58dba08f3f408c542340d131d0a
SHA256 4ad7808076fccc6cecba0cda85ff49a845771c73d871ed2808b403ab9f6c87bd
SHA512 c8da0dcf950090f5e064ce027c1e64e02646fad385870f5d548459b7c8e210026a3cd5e6fbb0214b10eb3bbd1589cbb1f52d8672ad754a691ffc4b1cd90ce89b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\pending_pings\6103a511-c72a-4c45-81e0-08f06bc33fdc

MD5 4ccba4b7f5fe8ceaac2078a56b3e8e55
SHA1 e6bc255ce78e536f5e6e6746b4b586aaecb2b0b2
SHA256 5bb69ec0f2f94273a16247931f43915300a94aea825cdc1b52bf7268be8f059b
SHA512 19e79dac807f21cd3ffb176ebc78b3faade6aaf6543104c8e791f59baa7f3d208261a83c529bf3dbb8b95a949d1455c9b090a50ba0049cd8127444178ae1fe46

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\datareporting\glean\pending_pings\dea67f19-6c94-4893-ade2-ff725d4eaae7

MD5 2b5fca25e35349b9cc2db42e0051a8ba
SHA1 c1a8276c0db5f65282952d30d7bcbba898c4792d
SHA256 28bb225312f2a3923868c5733289b5a9ed249a786e2c664484336cf813f20410
SHA512 0c330419784f3a5271a9206d0b677e52b285e1384d76e25c0de4df2f60494eb38973552776135d12db0002a913a41d97f1ddcae723cfd9e421ee64bebfd40f97

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fc8714a247d74ad79784feecca555592
SHA1 3cfe7dee4136384f9ed31fc0e58b3cb3e32e56cb
SHA256 1c2861851a0a6411f719a94a2a3fdbe54506d9f50513db04d1dad38539adac3d
SHA512 357966865de50f38a01558cd4688c98ec8e7a1300280600f07a6ca2f142f590ffd0df662d2fc81f6699a8d0fd18fcdc88e9ba5a8ac4f22cde940fc7bcf967f99

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js

MD5 42568d18056cb7433cce52d975cd18ef
SHA1 1c2988c0177bc0048a472dc64b741d3d549828e4
SHA256 b6b19388b6861beef3296a62b47a3b07b367aadeb7d23cd215c5fa3a3cbfeed8
SHA512 1bbc9fd51b77c087110b493af66ce8a04e5665d92cb0da9e028c38e5c12a6edbb3491dd8291c0a9f289308b953e5a1ef5f7b750283d8dc4296a1d192d793adc9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\prefs-1.js

MD5 273bade02c66f961a4430f65d6deba4b
SHA1 ece1df36b5dd36040f196e3c3b534c710f6c27b6
SHA256 88604cee48321f3b606d403f752dfdbb446151d3187e351f021cffbc0e850fef
SHA512 772b156d069b07fb4eee6ac926a9fdf6baac2908d703b6150f893b28b499fcba8a454121843a14d88a53d283d1fefb0245d0681f605fc3a716d1e493e018aedf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\storage\default\https+++gamejolt.com\idb\2926346687feisraebbaatsaed--hte.sqlite

MD5 d8c4dfcf521a9230f9102411331d0422
SHA1 953c99be25143b738912f4ab4bd7323c27baa214
SHA256 412654d2cfcd327bc7f32e883bad0b6be67ba0dbe162481369d0d80b00a048da
SHA512 33337d8080fbd1940db0f56d7402df7edd35f347ca9c5f8f56e9fea700f60e1d65012be2f1d994a6d533db1ec0cd2a13b6aad00ed604ba9d92121aa40beee2ad

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 155c8902c08c1be789c44c14e206739c
SHA1 503b14d7f28120bedd655c6fecfbb6000682dacb
SHA256 a9c897c592f5f101f31133fa799daef50da4fd77563e770c8cbcaf287de6026c
SHA512 9a851cbbf88deaa17555a180c35958f487defa096684f7897cb9fb6351f97bed6a77cf83404f894254d1c2b2493ba46c41cc65d2dd887d394bfe5f5d4b277795

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\3982

MD5 4148ab4176110270c7beecebb37389e6
SHA1 8b30d292de337f40c3f975914d407f8d0e63f415
SHA256 2d9af19f891af899323c1bbd806dfe2ecfc1c327488be01c13357adb1d03d87b
SHA512 99c72168b0ededc68df24b9c0ac4c290496ce8477e40bca4958147c20db90fcce5c8e3fd953aa1a06304627d77d2c5d3ba2977c58eae6e5dfbf7277779bbfe3a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 70eb100af6abe94473a004eb58b7e86a
SHA1 13b282ae6a9d57fcf7f81331a9f29bd8440e7d33
SHA256 8194d133cb3b6eb04aab0b4d05b21826ee4bb577f13d841f8b55ef4c95fd582c
SHA512 5d5cb75f4e2683dcbacda8366b301f6803bca0b83b59146d7a6b27541c1789a12cc9a5684ac24c63ef51656ad29bff67452fae4418c5a225db4dc44b751fe729

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\5177

MD5 df006f8552288ab8dd271a86518ee1fd
SHA1 9e92e215d56684fb3332c3d3adb9ef79261d8e16
SHA256 102cdbf1651abdfcd18b052219475eba53ffcbcaf8663000e735c6b4fa871631
SHA512 0855a9e86d07a50b31965a3e8d3888d7463ab578e8e497d53f9f1fc71320edd73f6a301acf99d592505cae865d202e996e915ba453f684c3c30e173693fdde50

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 e0d9592d202e6ee7e2a115b6a1729bf7
SHA1 88c39d8069c2ff30b1393985ac167d6d455d818f
SHA256 ba9af6da7f07e14aa514e5039a0b39f441555a46712867d6a9ed055af633546f
SHA512 1936116718ce64677e199ba873c6e3c787d810aa8d12a5faca3ddde45804e88ce5443b7061f299f68a12200e44a30d0edf68e1eda64d02bf5ea50ebc9111cb79

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 eae98a8588adb21dcc59ee2a6602bc73
SHA1 9f6e0ff4e1f982d5782be012b2b2cc49b4a60573
SHA256 e9168641f7b619f96f802b19720abea2a12f164fcd0a5e620a8640d0a724c5df
SHA512 41ce6fb8ce38fd4edd54e84f5f2bc200b03447640854db34cd9d27cf01a18aff823398846d3da824972f1dbce4b11449ce8045e8b48d778631c05458369ac158

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 f75a0fe9a23f8e6a8d64ab9f951df9f4
SHA1 cf8ea7f7339aeb9b4cbea3fbee22c4e41d9f0592
SHA256 8fe1f5c31cfac3d7b520c7628bedba10034f3ac44a3a69c0ac20385b7128fcb6
SHA512 441a4167effc981a8c928e689b4819fd8bcc0a5535c374416d623a005e077ef5498efac7dd4182f228830faf613bc0a45d99d9b48ce3e65c1a0c04d5190362a0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\entries\29C4203FDFB35E44F336F381161FC75BC781F8E3

MD5 183b85eee1dbeb7f398e4f1c4b8aed1b
SHA1 0419a93349a4218150edb0d0fb3dbf53457ee17b
SHA256 2fe6bc0a5333f212b7750795897673a1d33e8a3bc303724ec80f73f7ae1b1a7b
SHA512 36f51a17b6de7aeb5526ae19ac4f01540557c46e7e1cd5579a428bb1970966efd3145b6fe114e70c09e5c8ba95e2a9a2fb5c3935fe012aa729595e9124a4a398

C:\Users\Admin\Downloads\The_Road_to_Tally_Hall_Demo.hmrDKfoP.zip.part

MD5 860a28287d08b62020bce744b354fdaa
SHA1 328db841804c84d31db3e3abd4c859bf92141f45
SHA256 1a938c0c304afca8821d6b0b16de3496bab29248a0cbb4c74e9ded5ce31e2e09
SHA512 6aaa912802e834d5d6ef45cd1194911968debd931192555dbdd690992bfcf63ac010fca09d81d25236a5dcb4116a723660b1db13e44a7987932e567f9b9ff8a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 801a7f5a07e007959ee2d786ce6c3219
SHA1 2d27f1acec908c1bb35cf8c013b9fe49621eaccc
SHA256 0d6a2b1d1311164e9cab1f2cc75c4a6f2d59b27b633d2da9d5d664aae2016a8a
SHA512 ad7892af14e3493e2a408fc59ab9aef00168727a94cde9c4c551a90130031037bb1ff87314de348e59f8c454c6315ae16a3e70b54644a94b58635ed7210ede84

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\entries\94998847A92A9F838DC313AC0E131747BFDC8109

MD5 984e69ba92f8a18a73310f07966be0ca
SHA1 9192a0a1c9412e0c2d850db6dd2edc8da9463cb4
SHA256 35fdf993b99372af70536ef8e39db320c6dc539b666ec36a013f78283407eb37
SHA512 16ec7f1250d88b789a5e3c29ee7e72cf7e360d1dc80f8a42407f0a8e275b58020e3ed3b03bb0a34c6135bf7646ea59c4e60594cc4d9c01a229ff8ed9c94dbcad

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\entries\EEFBCA90D103B8DB2166B1760FA68839B4E9CB6E

MD5 62c5e6ed27808d349617f57af6f74315
SHA1 157ac278bf898db1f8dac0f29a7849989d68fbcf
SHA256 ddec58d678ab3b512f27d4bb26c307266b223a85957f29e3df23a1c296179bdd
SHA512 fbc4bee600edae2a124b386ec82fa91ff87e006ff13e1c4fbd4938406c592ac18d98e9f1813788e5209d8329283e6480e56d89e01d822d2e9bb64a8ad1cdde1a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 674534ca751f78d5bb042b385aec8ea8
SHA1 12eef29d56dce6f42cad3b617cbac9af07c4fa49
SHA256 e00bc9a124fbdf01601ac38f233782836ae69967c96bbd0303515922eded5eca
SHA512 1257ca4b8feb0471a2342572af83a622d60a0482dea7e0b6b22a1e80fe90d1c0bc499c0a5434c93a6f57e593e7bc3740fc7e8d24cbc58b4805f551cf5fc5babc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\entries\8B2DC449978DD4C8F7EBD6AB64F6A3CE83DF9F5D

MD5 c3ed83ecea5068dc4d3504be59eb4c93
SHA1 9685ceb3abe8b255fe4f07c3e588aaebfd2ad8c9
SHA256 2b28402b6c815fc608607589bb7b6585e6880b9e4590473edeeff507313f772b
SHA512 8ecdf94bbf11b0f4761dd5996cf60df20a1a3102ca6e8e7757d96ca5fd1210b80ee61c8e856ddce99699e44d01f3067860140fd66b287ea2e426b9bac9f74fcc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\entries\D3B313F35358DA3BB7407ED66CEBAB7C2051EAF1

MD5 84927071d931b608ed011cb0a14d333c
SHA1 fe04379ee1b57f1f8a2e3a14eb413e055222f33f
SHA256 a7ce2b9536b307ac8f82eb2b755b64a7332730d6f33f7e384cf8e44b4f0947b1
SHA512 a1b54ccc25589d81aeb7631cc7229dfd3e442c2504eb503ff4b97959d1e69902fb8180d1750902c76161068fae58539e25132c725912416ac38f790fbdbb2b7c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 560b5634540a274d5409663f1709016b
SHA1 51c8f8c6cfa69da32827ccea2fc12b6945bea651
SHA256 d7b0db389a3f337d6a3d3748c37e47d17d7f20083898da4251e062cf076d415a
SHA512 254f3f9cd1f07c57df0d466ec651627fa7cabf6d22f4257f28691fa4cf57f88364ab5f7a9c485ad3fab33d383e75e986848cbb18e8338c895c4ce8aae0ab70bc

memory/6928-1131-0x0000000010000000-0x0000000010324000-memory.dmp

memory/6928-1132-0x0000000002D10000-0x0000000002D11000-memory.dmp

memory/6928-1133-0x0000000002D20000-0x0000000002D21000-memory.dmp

memory/6928-1134-0x0000000002D10000-0x0000000002D11000-memory.dmp

memory/6928-1135-0x0000000002D10000-0x0000000002D11000-memory.dmp

memory/6928-1136-0x0000000002D10000-0x0000000002D11000-memory.dmp

memory/6928-1138-0x0000000002D20000-0x0000000002D21000-memory.dmp

memory/6928-1139-0x0000000002D10000-0x0000000002D14000-memory.dmp

memory/6928-1137-0x0000000002D10000-0x0000000002D11000-memory.dmp

memory/6928-1140-0x0000000002D60000-0x0000000002D61000-memory.dmp

memory/6928-1142-0x0000000002BC0000-0x0000000002BC1000-memory.dmp

memory/6928-1141-0x0000000002D70000-0x0000000002D71000-memory.dmp

memory/6928-1143-0x0000000002D00000-0x0000000002D01000-memory.dmp

memory/6928-1150-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

memory/6928-1149-0x0000000002BE0000-0x0000000002BE1000-memory.dmp

memory/6928-1151-0x0000000002C90000-0x0000000002C91000-memory.dmp

memory/6928-1148-0x0000000002BF0000-0x0000000002BF1000-memory.dmp

memory/6928-1153-0x0000000003ED0000-0x0000000003ED1000-memory.dmp

memory/6928-1154-0x0000000003EF0000-0x0000000003EF1000-memory.dmp

memory/6928-1157-0x0000000003F00000-0x0000000003F01000-memory.dmp

memory/6928-1158-0x0000000003F30000-0x0000000003F31000-memory.dmp

memory/6928-1159-0x0000000003F20000-0x0000000003F21000-memory.dmp

memory/6928-1156-0x0000000003F10000-0x0000000003F11000-memory.dmp

memory/6928-1162-0x0000000003F70000-0x0000000003F71000-memory.dmp

memory/6928-1166-0x0000000003FC0000-0x0000000003FC1000-memory.dmp

memory/6928-1167-0x0000000003FB0000-0x0000000003FB1000-memory.dmp

memory/6928-1165-0x0000000003F80000-0x0000000003F81000-memory.dmp

memory/6928-1168-0x0000000003FE0000-0x0000000003FE1000-memory.dmp

memory/6928-1169-0x0000000003FD0000-0x0000000003FD1000-memory.dmp

memory/6928-1171-0x0000000003FF0000-0x0000000003FF1000-memory.dmp

memory/6928-1170-0x0000000004000000-0x0000000004001000-memory.dmp

memory/6928-1172-0x0000000004020000-0x0000000004021000-memory.dmp

memory/6928-1173-0x0000000004010000-0x0000000004011000-memory.dmp

memory/6928-1174-0x0000000004040000-0x0000000004041000-memory.dmp

memory/6928-1176-0x0000000004060000-0x0000000004061000-memory.dmp

memory/6928-1175-0x0000000004030000-0x0000000004031000-memory.dmp

memory/6928-1177-0x0000000004050000-0x0000000004051000-memory.dmp

memory/6928-1164-0x0000000003F90000-0x0000000003F91000-memory.dmp

memory/6928-1163-0x0000000003F60000-0x0000000003F61000-memory.dmp

memory/6928-1161-0x0000000003F40000-0x0000000003F41000-memory.dmp

memory/6928-1160-0x0000000003F50000-0x0000000003F51000-memory.dmp

memory/6928-1155-0x0000000003EE0000-0x0000000003EE1000-memory.dmp

memory/6928-1152-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

memory/6928-1147-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

memory/6928-1146-0x0000000002D30000-0x0000000002D31000-memory.dmp

memory/6928-1145-0x0000000002BB0000-0x0000000002BB1000-memory.dmp

memory/6928-1144-0x0000000000B90000-0x0000000000B91000-memory.dmp

memory/6928-1182-0x0000000010000000-0x0000000010324000-memory.dmp

memory/936-1184-0x0000000010000000-0x0000000010324000-memory.dmp

memory/936-1185-0x0000000003A20000-0x0000000003A21000-memory.dmp

memory/936-1186-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1187-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1188-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1190-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1191-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1192-0x0000000003A70000-0x0000000003A71000-memory.dmp

memory/936-1189-0x0000000003A30000-0x0000000003A31000-memory.dmp

memory/936-1193-0x0000000003A40000-0x0000000003A41000-memory.dmp

memory/936-1195-0x0000000002C40000-0x0000000002C41000-memory.dmp

memory/936-1196-0x0000000002C60000-0x0000000002C61000-memory.dmp

memory/936-1197-0x0000000003A90000-0x0000000003A91000-memory.dmp

memory/936-1198-0x0000000003AB0000-0x0000000003AB1000-memory.dmp

memory/936-1199-0x0000000003AD0000-0x0000000003AD1000-memory.dmp

memory/936-1194-0x0000000002C20000-0x0000000002C21000-memory.dmp

memory/936-1200-0x0000000003AF0000-0x0000000003AF1000-memory.dmp

memory/936-1210-0x0000000010000000-0x0000000010324000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\22834

MD5 a1c73835f9fd955804df6cec85e500fa
SHA1 b4e1589f02fcebb53483bcf782fd3190af891d42
SHA256 c32831b9cd74f3b75eac16e43aa765e310c91379a75c6d90a26c29441333f5fc
SHA512 6787d03a0ec7dbc76f6da1a1d777c28f6e8b9d7ac8225fcf693b1b3bddce1663b7e6d840e1c843d413fbd9fd037e8a0f208a7c0b206b7974eb601ad7b89e61c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\19401

MD5 e48a5d63126695a44788b5f24a1884b8
SHA1 904a3b0359d2f9d424bc859891b04bfb4d938b6f
SHA256 e8b999130b57aff1c3e5c60edf6dadf413390c10e6aa9543ace2fca4eaf7b447
SHA512 bbdda08aba571bbe2d2da1ed94d9dbc76eb5a557ee8816c0cc616e68c8f9b8f6e43c8c137bf7c3f301a41adf21640201e400d87e7ab7892ef06f801e1de543b4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\9156

MD5 aa53669e824347813e6a68a6737d8925
SHA1 2da0421a5426e300653dc3e363dec0f5177c0ee6
SHA256 97a9ee1e18e4c078e569469db0e70fc933675f2338775e426132b1d29a80ca32
SHA512 83a976e458cec1d7f1817cef17fa12764a9f5e8b83f9a13a6bf6b573433c29873ef41db14d1746b9cf49ede52abd098d86470d860e3238ca56ec7df47db7ee94

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eqnlllhg.default-release\cache2\doomed\4768

MD5 97002ce4113c0295d888053cb4437ae2
SHA1 cbbb87445652d84965e648e9db2cbd4615e7af1e
SHA256 e8a822bf6b1c7e317a9dbf3c7d320188527067e1804bd119eb0893ef71cdef7d
SHA512 15db23511cbd5e3fd635b543a4ca34d3d9e2b3432306b30fd07aad73308a3e5bf88ea44a96031b495614813c1b3044e518a8a42f31e59526407bb205b1f926a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eqnlllhg.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ab047cfb69dacaa163003c96224cbbd8
SHA1 6b7546cf0f938128fde327e5ed5014f96e1f9ba0
SHA256 52320f4aeeb76b21ef4e137fe7ecf60bc68ba7124c9f2012cf1a45cb0e7300e8
SHA512 3d5555386fa312c395ac438a0ccb325a4ebeae3775f4f7940dfb4ab7e40ee6f56f29d87aa4743581eca7a0ba92ba1f145605c07f1ed84a7ccccd98f97b84fe80

memory/5680-1377-0x00007FF7619A0000-0x00007FF761A98000-memory.dmp

memory/5680-1378-0x00007FFEA27C0000-0x00007FFEA27F4000-memory.dmp

memory/5680-1379-0x00007FFE8B450000-0x00007FFE8B704000-memory.dmp

memory/5680-1381-0x00007FFE9B520000-0x00007FFE9B537000-memory.dmp

memory/5680-1382-0x00007FFE9B420000-0x00007FFE9B431000-memory.dmp

memory/5680-1387-0x00007FFE8D070000-0x00007FFE8D270000-memory.dmp

memory/5680-1386-0x00007FFE9B3A0000-0x00007FFE9B3B1000-memory.dmp

memory/5680-1388-0x00007FFE9A650000-0x00007FFE9A68F000-memory.dmp

memory/5680-1385-0x00007FFE9B3C0000-0x00007FFE9B3DD000-memory.dmp

memory/5680-1384-0x00007FFE9B3E0000-0x00007FFE9B3F1000-memory.dmp

memory/5680-1383-0x00007FFE9B400000-0x00007FFE9B417000-memory.dmp

memory/5680-1380-0x00007FFEA27A0000-0x00007FFEA27B8000-memory.dmp

memory/5680-1389-0x00007FFE89C80000-0x00007FFE8AD2B000-memory.dmp

memory/5680-1395-0x00007FFE9B380000-0x00007FFE9B398000-memory.dmp

memory/5680-1396-0x00007FFE9A600000-0x00007FFE9A611000-memory.dmp

memory/5680-1397-0x00007FFE97D80000-0x00007FFE97D91000-memory.dmp

memory/5680-1399-0x00007FFE8B400000-0x00007FFE8B41B000-memory.dmp

memory/5680-1400-0x00007FFE8B3E0000-0x00007FFE8B3F1000-memory.dmp

memory/5680-1401-0x00007FFE8B3C0000-0x00007FFE8B3D8000-memory.dmp

memory/5680-1402-0x00007FFE8B390000-0x00007FFE8B3C0000-memory.dmp

memory/5680-1403-0x00007FFE8B320000-0x00007FFE8B387000-memory.dmp

memory/5680-1404-0x00007FFE8B2B0000-0x00007FFE8B31F000-memory.dmp

memory/5680-1405-0x00007FFE8B290000-0x00007FFE8B2A1000-memory.dmp

memory/5680-1409-0x00007FFE8B1C0000-0x00007FFE8B1EF000-memory.dmp

memory/5680-1408-0x00007FFE8B1F0000-0x00007FFE8B247000-memory.dmp

memory/5680-1411-0x00007FFE8B180000-0x00007FFE8B191000-memory.dmp

memory/5680-1412-0x00007FFE8B0B0000-0x00007FFE8B175000-memory.dmp

memory/5680-1413-0x00007FFE8B090000-0x00007FFE8B0A2000-memory.dmp

memory/5680-1414-0x00007FFE8B070000-0x00007FFE8B081000-memory.dmp

memory/5680-1417-0x00007FFE8B010000-0x00007FFE8B024000-memory.dmp

memory/5680-1418-0x00007FFE8AFF0000-0x00007FFE8B00E000-memory.dmp

memory/5680-1423-0x00007FFE89C30000-0x00007FFE89C42000-memory.dmp

memory/5680-1421-0x00007FFE8AF90000-0x00007FFE8AFA4000-memory.dmp

memory/5680-1425-0x00007FFE89BE0000-0x00007FFE89BF7000-memory.dmp

memory/5680-1420-0x00007FFE8AFB0000-0x00007FFE8AFC5000-memory.dmp

memory/5680-1419-0x00007FFE8AFD0000-0x00007FFE8AFE6000-memory.dmp

memory/5680-1424-0x00007FFE89C00000-0x00007FFE89C30000-memory.dmp

memory/5680-1422-0x00007FFE89C50000-0x00007FFE89C7C000-memory.dmp

memory/5680-1416-0x00007FFE8B030000-0x00007FFE8B042000-memory.dmp

memory/5680-1415-0x00007FFE8B050000-0x00007FFE8B064000-memory.dmp

memory/5680-1410-0x00007FFE8B1A0000-0x00007FFE8B1B3000-memory.dmp

memory/5680-1407-0x00007FFE8B250000-0x00007FFE8B261000-memory.dmp

memory/5680-1406-0x00007FFE8B270000-0x00007FFE8B287000-memory.dmp

memory/5680-1398-0x00007FFE8D050000-0x00007FFE8D061000-memory.dmp

memory/5680-1394-0x00007FFE8B420000-0x00007FFE8B441000-memory.dmp

memory/5680-1426-0x00007FFE88430000-0x00007FFE89BE0000-memory.dmp

memory/5680-1429-0x00007FFE88270000-0x00007FFE883E8000-memory.dmp

memory/5680-1430-0x00007FFE88210000-0x00007FFE88266000-memory.dmp

memory/5680-1431-0x00007FFE881E0000-0x00007FFE88208000-memory.dmp

memory/5680-1432-0x00007FFE881B0000-0x00007FFE881D4000-memory.dmp

memory/5680-1433-0x00007FFEA2790000-0x00007FFEA27A0000-memory.dmp

memory/5680-1435-0x00007FFE88110000-0x00007FFE88185000-memory.dmp

memory/5680-1437-0x00007FFE88030000-0x00007FFE8809D000-memory.dmp

memory/5680-1438-0x00007FFE88010000-0x00007FFE88025000-memory.dmp

memory/5680-1440-0x00007FFE87BB0000-0x00007FFE87BC2000-memory.dmp

memory/5680-1441-0x00007FFE87A30000-0x00007FFE87BAA000-memory.dmp

memory/5680-1439-0x00007FFE87BD0000-0x00007FFE87BE1000-memory.dmp

memory/5680-1436-0x00007FFE880A0000-0x00007FFE88102000-memory.dmp

memory/5680-1434-0x00007FFE88190000-0x00007FFE881A6000-memory.dmp

memory/5680-1428-0x00007FFE883F0000-0x00007FFE88402000-memory.dmp

memory/5680-1427-0x00007FFE88410000-0x00007FFE88421000-memory.dmp