Malware Analysis Report

2025-06-15 20:56

Sample ID 240526-bvqcnshh4z
Target https://github.com/garrydevpro/versatools/releases/download/exe/Versatools.exe
Tags
discovery pyinstaller
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://github.com/garrydevpro/versatools/releases/download/exe/Versatools.exe was found to be: Likely malicious.

Malicious Activity Summary

discovery pyinstaller

Downloads MZ/PE file

Contacts a large (998) amount of remote hosts

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

Enumerates physical storage devices

Detects Pyinstaller

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

Modifies system certificate store

Enumerates system info in registry

GoLang User-Agent

Modifies data under HKEY_USERS

Opens file in notepad (likely ransom note)

Modifies registry class

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-26 01:28

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-26 01:28

Reported

2024-05-26 01:48

Platform

win10v2004-20240426-en

Max time kernel

1199s

Max time network

1200s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/garrydevpro/versatools/releases/download/exe/Versatools.exe

Signatures

Contacts a large (998) amount of remote hosts

discovery

Downloads MZ/PE file

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A
N/A N/A C:\Users\Admin\Downloads\Versatools.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Detects Pyinstaller

pyinstaller
Description Indicator Process Target
N/A N/A N/A N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

GoLang User-Agent

Description Indicator Process Target
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A
HTTP User-Agent header Go-http-client/1.1 N/A N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133611605107415131" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings C:\Users\Admin\Downloads\Versatools.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings C:\Users\Admin\Downloads\Versatools.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Users\Admin\Downloads\Versatools.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Users\Admin\Downloads\Versatools.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 C:\Users\Admin\Downloads\Versatools.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 0f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d57811286090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0620000000100000020000000d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef40b000000010000001c0000005300650063007400690067006f002000280041004100410029000000140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b41d00000001000000100000002e0d6875874a44c820912e85e964cfdb030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e349200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e C:\Users\Admin\Downloads\Versatools.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Users\Admin\Downloads\Versatools.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Versatools.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 752 wrote to memory of 4852 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 4852 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 1252 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 2540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 2540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 752 wrote to memory of 3064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/garrydevpro/versatools/releases/download/exe/Versatools.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbdc61ab58,0x7ffbdc61ab68,0x7ffbdc61ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1604 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2096 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2984 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2992 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4368 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4748 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5060 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5236 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4948 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4896 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5180 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4212 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1536 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:2

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\files\usernames.txt

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\files\proxies.txt

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\files\cookies.txt

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1456 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5244 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5316 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4840 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5332 --field-trial-handle=1904,i,10793746791427205741,12518806982862742092,131072 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\files\proxies.txt

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\files\cookies.txt

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Users\Admin\Downloads\Versatools.exe

"C:\Users\Admin\Downloads\Versatools.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

Network

Country Destination Domain Proto
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
BE 88.221.83.187:443 www.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
BE 88.221.83.187:443 www.bing.com tcp
US 8.8.8.8:53 187.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
N/A 127.0.0.1:61479 tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
N/A 127.0.0.1:61497 tcp
US 8.8.8.8:53 213.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 3.124.116.128.in-addr.arpa udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 friends.roblox.com udp
PL 128.116.124.3:443 friends.roblox.com tcp
N/A 127.0.0.1:63034 tcp
US 8.8.8.8:53 api.proxyscrape.com udp
US 8.8.8.8:53 www.proxy-list.download udp
US 8.8.8.8:53 www.proxyscan.io udp
US 8.8.8.8:53 spys.me udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 104.18.11.5:443 api.proxyscrape.com tcp
US 104.21.57.232:443 www.proxy-list.download tcp
US 8.8.8.8:53 api.openproxylist.xyz udp
US 104.21.34.38:80 spys.me tcp
US 54.157.24.8:443 www.proxyscan.io tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 172.67.150.208:443 api.openproxylist.xyz tcp
US 8.8.8.8:53 www.my-proxy.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 8.8.8.8:53 proxy50-50.blogspot.com udp
US 104.21.69.36:443 www.my-proxy.com tcp
GB 142.250.200.1:443 proxy50-50.blogspot.com tcp
US 8.8.8.8:53 alexa.lr2b.com udp
US 8.8.8.8:53 rootjazz.com udp
US 8.8.8.8:53 www.freeproxychecker.com udp
DE 49.13.141.130:80 alexa.lr2b.com tcp
US 23.254.165.218:80 rootjazz.com tcp
US 172.67.192.79:443 www.freeproxychecker.com tcp
US 8.8.8.8:53 5.11.18.104.in-addr.arpa udp
US 8.8.8.8:53 232.57.21.104.in-addr.arpa udp
US 8.8.8.8:53 38.34.21.104.in-addr.arpa udp
US 8.8.8.8:53 208.150.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.24.157.54.in-addr.arpa udp
US 8.8.8.8:53 36.69.21.104.in-addr.arpa udp
US 8.8.8.8:53 1.200.250.142.in-addr.arpa udp
US 104.21.69.36:443 www.my-proxy.com tcp
US 8.8.8.8:53 www.proxyserverlist24.top udp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
NL 185.107.56.192:80 www.proxyserverlist24.top tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 8.8.8.8:53 proxysearcher.sourceforge.net udp
US 104.18.12.149:80 proxysearcher.sourceforge.net tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 proxy-spider.com udp
US 104.21.1.13:443 proxy-spider.com tcp
US 8.8.8.8:53 multiproxy.org udp
US 23.254.165.218:80 rootjazz.com tcp
US 104.21.32.230:443 multiproxy.org tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 proxyspace.pro udp
US 8.8.8.8:53 k2ysarchive.xyz udp
US 8.8.8.8:53 130.141.13.49.in-addr.arpa udp
US 8.8.8.8:53 79.192.67.172.in-addr.arpa udp
US 8.8.8.8:53 218.165.254.23.in-addr.arpa udp
US 8.8.8.8:53 192.56.107.185.in-addr.arpa udp
US 8.8.8.8:53 149.12.18.104.in-addr.arpa udp
US 8.8.8.8:53 13.1.21.104.in-addr.arpa udp
US 8.8.8.8:53 230.32.21.104.in-addr.arpa udp
FR 149.202.52.226:443 proxyspace.pro tcp
FR 149.202.52.226:443 proxyspace.pro tcp
US 104.18.11.5:443 api.proxyscrape.com tcp
US 104.18.11.5:443 api.proxyscrape.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 104.21.57.232:443 www.proxy-list.download tcp
US 54.157.24.8:443 www.proxyscan.io tcp
US 172.67.150.208:443 api.openproxylist.xyz tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 104.18.12.149:80 proxysearcher.sourceforge.net tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 www.socks24.org udp
US 172.67.192.79:443 www.freeproxychecker.com tcp
US 8.8.8.8:53 worm.rip udp
GB 142.250.200.51:80 www.socks24.org tcp
US 172.67.192.79:443 www.freeproxychecker.com tcp
FR 54.38.180.231:80 worm.rip tcp
US 104.18.11.5:443 api.proxyscrape.com tcp
US 104.21.57.232:443 www.proxy-list.download tcp
US 54.157.24.8:443 www.proxyscan.io tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 104.21.69.36:443 www.my-proxy.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 172.67.150.208:443 api.openproxylist.xyz tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 226.52.202.149.in-addr.arpa udp
US 8.8.8.8:53 51.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 231.180.38.54.in-addr.arpa udp
US 104.18.11.5:443 api.proxyscrape.com tcp
GB 142.250.200.51:80 www.socks24.org tcp
US 172.67.192.79:443 www.freeproxychecker.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
FR 54.38.180.231:80 worm.rip tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 205.209.100.222:80 tcp
CN 219.143.207.140:3128 tcp
US 172.67.177.61:80 auth.roblox.com tcp
NI 190.181.140.90:5678 tcp
CN 36.6.145.1:8089 tcp
BR 170.247.43.142:32812 tcp
CO 181.129.74.58:30431 auth.roblox.com tcp
DE 141.101.121.40:80 auth.roblox.com tcp
KH 123.108.252.170:51403 tcp
IR 81.12.119.171:8080 tcp
CN 219.159.198.77:9999 tcp
BO 200.119.218.94:999 tcp
US 66.235.200.178:80 auth.roblox.com tcp
CN 120.42.35.91:35010 tcp
MY 118.100.180.50:8080 tcp
DE 91.205.174.26:80 tcp
CN 49.0.252.39:8024 auth.roblox.com tcp
CN 121.9.231.82:9999 tcp
US 148.72.23.56:64607 tcp
US 50.223.239.167:80 auth.roblox.com tcp
US 76.81.6.107:31008 tcp
KH 203.217.170.64:8080 tcp
FR 94.23.220.136:44525 tcp
IN 45.117.31.137:4145 tcp
VE 190.97.228.18:999 tcp
MM 103.85.106.110:4153 tcp
AL 79.106.224.231:58437 tcp
RU 188.168.27.71:38071 tcp
TR 176.236.163.36:59311 tcp
GB 109.169.65.145:1080 tcp
ID 103.169.255.171:8080 auth.roblox.com tcp
ZA 197.91.178.46:8080 tcp
ID 36.89.156.211:4145 tcp
LK 125.214.163.2:8080 tcp
VN 103.176.179.84:3128 tcp
CN 60.223.241.92:9999 tcp
DE 185.162.231.174:80 auth.roblox.com tcp
TR 94.231.192.38:8080 tcp
US 172.67.4.141:80 auth.roblox.com tcp
US 172.67.172.147:80 auth.roblox.com tcp
US 154.202.113.149:3128 tcp
ID 103.247.21.225:2024 tcp
US 172.67.177.11:80 auth.roblox.com tcp
EC 177.234.212.190:999 tcp
CN 111.225.152.111:8089 tcp
US 192.111.135.17:18302 auth.roblox.com tcp
HU 195.228.133.203:4153 tcp
CN 115.200.94.119:18186 tcp
RU 212.12.24.57:8090 tcp
SG 34.87.103.220:80 tcp
CN 121.199.11.126:3128 tcp
US 66.235.200.101:80 auth.roblox.com tcp
TH 182.52.30.158:4153 tcp
US 47.252.20.42:443 auth.roblox.com tcp
RU 194.186.127.60:80 tcp
LT 86.100.63.127:4145 tcp
CN 39.104.89.111:8081 tcp
CN 47.112.224.70:8060 tcp
SG 128.199.66.186:443 auth.roblox.com tcp
CN 42.62.41.228:3128 tcp
US 8.8.8.8:53 40.121.101.141.in-addr.arpa udp
US 8.8.8.8:53 61.177.67.172.in-addr.arpa udp
US 8.8.8.8:53 174.231.162.185.in-addr.arpa udp
US 8.8.8.8:53 141.4.67.172.in-addr.arpa udp
US 8.8.8.8:53 178.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 147.172.67.172.in-addr.arpa udp
US 8.8.8.8:53 167.239.223.50.in-addr.arpa udp
US 8.8.8.8:53 11.177.67.172.in-addr.arpa udp
US 8.8.8.8:53 39.252.0.49.in-addr.arpa udp
US 8.8.8.8:53 17.135.111.192.in-addr.arpa udp
US 8.8.8.8:53 101.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 42.20.252.47.in-addr.arpa udp
US 8.8.8.8:53 186.66.199.128.in-addr.arpa udp
IR 2.183.8.121:4153 tcp
AL 80.91.116.129:8081 tcp
IR 217.66.206.156:5678 tcp
US 8.8.8.8:53 171.255.169.103.in-addr.arpa udp
CN 116.226.49.175:8080 tcp
CO 186.190.225.57:999 tcp
US 8.8.8.8:53 58.74.129.181.in-addr.arpa udp
TH 183.88.240.53:4145 tcp
IN 150.129.170.13:44502 tcp
VN 27.72.139.107:5657 tcp
US 172.67.166.11:80 auth.roblox.com tcp
DE 141.101.123.224:80 auth.roblox.com tcp
MD 212.0.212.244:3128 tcp
PK 103.86.135.34:5678 tcp
ID 36.89.183.253:56739 tcp
CN 221.172.136.107:9000 tcp
IN 103.212.92.253:41363 tcp
RU 217.25.221.60:4145 tcp
ID 118.97.32.220:3128 tcp
SG 128.199.221.91:2215 tcp
IN 14.139.214.210:3128 tcp
CA 23.227.38.114:80 auth.roblox.com tcp
SG 8.219.43.134:9091 auth.roblox.com tcp
CN 122.71.25.205:8080 tcp
BR 187.62.211.228:8080 tcp
ID 103.125.174.209:8080 tcp
TH 45.136.238.69:8080 tcp
CO 191.97.2.198:5678 tcp
DE 141.101.114.50:80 auth.roblox.com tcp
IN 103.69.20.38:4145 tcp
LT 85.206.167.133:32631 auth.roblox.com tcp
TH 202.29.214.83:3128 tcp
US 68.62.176.8:9090 tcp
US 71.201.65.181:57783 tcp
ID 180.241.113.26:3128 tcp
MO 202.175.83.61:1234 tcp
AR 190.2.114.132:4153 tcp
ZA 102.132.41.31:8080 tcp
PL 193.59.26.186:4153 tcp
VN 116.118.98.9:5678 tcp
ID 103.146.185.110:3127 tcp
PL 94.40.127.166:4145 tcp
CN 222.129.39.38:57114 tcp
RU 5.149.144.102:4550 tcp
CN 182.48.107.220:9000 tcp
US 8.8.8.8:53 11.166.67.172.in-addr.arpa udp
US 8.8.8.8:53 224.123.101.141.in-addr.arpa udp
US 8.8.8.8:53 114.38.227.23.in-addr.arpa udp
US 198.11.175.180:8082 auth.roblox.com tcp
US 8.8.8.8:53 50.114.101.141.in-addr.arpa udp
US 8.8.8.8:53 133.167.206.85.in-addr.arpa udp
TW 163.29.250.4:3128 tcp
VE 190.94.212.4:999 tcp
CN 218.81.0.91:4145 tcp
US 172.67.0.7:80 auth.roblox.com tcp
US 104.233.13.33:6028 auth.roblox.com tcp
ID 202.152.38.75:49420 tcp
MX 200.76.42.198:999 tcp
US 65.128.119.76:1080 tcp
UA 178.251.111.115:24572 tcp
US 50.232.104.86:80 auth.roblox.com tcp
VN 1.53.137.92:4145 tcp
BG 92.247.127.249:4153 tcp
CN 120.77.179.38:33080 tcp
CN 162.105.11.236:4011 tcp
GB 81.107.77.176:58055 tcp
US 8.8.8.8:53 134.43.219.8.in-addr.arpa udp
US 8.8.8.8:53 7.0.67.172.in-addr.arpa udp
US 8.8.8.8:53 180.175.11.198.in-addr.arpa udp
US 8.8.8.8:53 86.104.232.50.in-addr.arpa udp
TH 1.20.207.99:8080 tcp
AU 172.105.174.243:3128 tcp
RU 46.242.116.110:3128 tcp
SA 89.35.237.187:999 auth.roblox.com tcp
CO 181.48.70.30:4153 tcp
VN 171.238.157.36:19016 tcp
US 8.8.8.8:53 187.237.35.89.in-addr.arpa udp
BR 45.6.201.224:8080 tcp
ZA 105.214.82.133:5678 tcp
US 45.8.106.97:80 tcp
AU 103.225.228.21:31094 tcp
NL 51.145.176.250:8080 auth.roblox.com tcp
VE 186.24.34.179:3128 tcp
RU 185.128.106.102:4444 auth.roblox.com tcp
CN 122.192.66.120:8080 tcp
US 8.8.8.8:53 102.106.128.185.in-addr.arpa udp
US 8.8.8.8:53 250.176.145.51.in-addr.arpa udp
IQ 159.255.162.222:53281 tcp
EC 157.100.60.170:999 tcp
US 8.8.8.8:53 captchabusters.com udp
US 104.21.36.186:443 captchabusters.com tcp
US 104.21.36.186:443 captchabusters.com tcp
BR 200.252.201.144:80 tcp
CA 199.231.206.56:5678 tcp
US 8.8.8.8:53 186.36.21.104.in-addr.arpa udp
IN 122.169.242.249:8080 tcp
DE 199.212.90.147:80 auth.roblox.com tcp
BR 187.95.136.74:5678 tcp
HK 45.136.197.139:8080 tcp
IN 139.144.14.99:3128 tcp
US 156.239.52.69:3128 tcp
RO 81.12.157.98:5678 tcp
BZ 45.131.6.163:80 auth.roblox.com tcp
AR 170.150.154.98:5678 tcp
US 24.11.124.76:9090 tcp
US 172.67.184.13:80 auth.roblox.com tcp
US 172.67.161.245:80 auth.roblox.com tcp
ID 36.91.119.197:5678 tcp
CR 170.80.91.11:4145 tcp
US 154.202.114.64:3128 tcp
CN 123.172.188.82:18186 tcp
TR 213.14.148.113:1453 tcp
GB 138.68.155.22:11712 tcp
US 104.24.53.146:80 auth.roblox.com tcp
CA 51.79.87.144:18636 tcp
DE 143.42.194.37:3128 tcp
PY 45.235.123.26:999 tcp
ID 103.132.54.54:1080 tcp
ES 85.62.10.82:8080 tcp
US 154.202.125.92:3128 tcp
TR 149.50.234.242:8080 tcp
BZ 45.131.7.24:80 auth.roblox.com tcp
US 45.61.125.16:6027 auth.roblox.com tcp
BR 200.214.154.135:4145 tcp
IN 103.80.54.132:32650 tcp
CA 51.161.33.206:33670 tcp
GB 51.38.71.101:8080 tcp
BO 177.222.60.138:5678 auth.roblox.com tcp
GB 145.239.252.47:8543 tcp
BR 45.7.176.234:52246 tcp
TH 1.4.195.114:4145 tcp
HK 43.129.249.83:8888 tcp
US 70.166.167.55:57745 auth.roblox.com tcp
BR 200.218.242.117:4153 tcp
US 8.8.8.8:53 163.6.131.45.in-addr.arpa udp
US 8.8.8.8:53 147.90.212.199.in-addr.arpa udp
US 8.8.8.8:53 13.184.67.172.in-addr.arpa udp
US 8.8.8.8:53 245.161.67.172.in-addr.arpa udp
US 8.8.8.8:53 146.53.24.104.in-addr.arpa udp
US 8.8.8.8:53 24.7.131.45.in-addr.arpa udp
JP 140.227.204.70:3128 tcp
IN 206.189.130.107:8080 tcp
US 172.67.167.25:80 auth.roblox.com tcp
TH 1.179.151.226:8080 tcp
DO 38.52.221.172:999 tcp
IN 36.255.87.133:83 tcp
US 23.94.104.112:7808 tcp
IN 36.255.87.133:83 auth.roblox.com tcp
US 8.8.8.8:53 16.125.61.45.in-addr.arpa udp
US 8.8.8.8:53 55.167.166.70.in-addr.arpa udp
US 8.8.8.8:53 25.167.67.172.in-addr.arpa udp
BR 186.225.194.78:34110 tcp
US 8.8.8.8:53 138.60.222.177.in-addr.arpa udp
US 8.8.8.8:53 133.87.255.36.in-addr.arpa udp
IE 185.178.71.185:8080 tcp
DE 185.162.230.49:80 auth.roblox.com tcp
US 72.94.208.81:49707 tcp
ID 103.169.130.46:8080 tcp
PL 165.225.206.248:10007 auth.roblox.com tcp
US 154.202.113.207:3128 tcp
US 70.125.110.220:9090 tcp
US 75.181.46.254:9090 tcp
US 198.211.115.186:56365 tcp
US 8.8.8.8:53 248.206.225.165.in-addr.arpa udp
US 8.8.8.8:53 49.230.162.185.in-addr.arpa udp
US 172.67.171.218:80 auth.roblox.com tcp
ID 202.72.209.3:44550 tcp
BD 203.76.103.62:4145 tcp
IN 103.10.133.81:4153 tcp
TH 110.238.116.82:50001 auth.roblox.com tcp
US 188.114.99.233:80 auth.roblox.com tcp
CN 101.37.118.54:8888 tcp
US 70.177.47.119:9090 tcp
IT 151.22.181.210:8080 tcp
BD 103.120.146.32:5678 tcp
US 8.8.8.8:53 218.171.67.172.in-addr.arpa udp
US 8.8.8.8:53 233.99.114.188.in-addr.arpa udp
US 8.8.8.8:53 82.116.238.110.in-addr.arpa udp
KR 218.159.195.187:3128 tcp
BR 177.128.209.90:4673 tcp
KE 41.220.238.130:82 tcp
CN 183.234.85.26:9002 tcp
HK 61.238.104.200:808 tcp
SG 172.104.41.13:16379 auth.roblox.com tcp
RU 195.9.80.22:4145 tcp
US 154.202.113.207:3128 tcp
DE 185.162.231.153:80 auth.roblox.com tcp
CN 218.201.21.179:80 tcp
ID 103.113.3.146:4145 tcp
ID 203.84.141.246:4145 tcp
US 8.8.8.8:53 13.41.104.172.in-addr.arpa udp
US 8.8.8.8:53 153.231.162.185.in-addr.arpa udp
RU 89.208.30.16:7894 auth.roblox.com tcp
NG 41.73.253.234:4145 tcp
US 98.162.25.16:4145 auth.roblox.com tcp
CL 181.114.232.57:31337 tcp
US 23.105.129.122:10080 tcp
RS 93.87.75.118:47505 tcp
SG 8.219.167.110:5000 auth.roblox.com tcp
CN 202.96.159.221:1080 tcp
KR 164.52.42.2:4145 tcp
EC 177.234.196.21:999 tcp
CA 67.43.236.20:15209 auth.roblox.com tcp
HK 216.83.58.145:19001 tcp
ID 36.89.189.137:4653 tcp
US 50.174.7.155:80 auth.roblox.com tcp
CZ 212.20.73.70:62225 tcp
TG 80.248.77.125:8081 tcp
IN 103.152.40.216:32650 tcp
ID 103.160.205.254:8080 tcp
BR 177.124.60.91:3128 tcp
ID 103.156.248.27:8085 auth.roblox.com tcp
CN 220.161.243.23:33080 tcp
CN 47.92.155.21:8118 tcp
IN 49.50.69.240:48960 tcp
US 8.8.8.8:53 16.25.162.98.in-addr.arpa udp
US 8.8.8.8:53 20.236.43.67.in-addr.arpa udp
CN 117.14.60.66:18186 tcp
IN 103.15.83.74:30023 tcp
US 104.21.36.186:443 captchabusters.com tcp
CZ 213.250.198.66:4145 tcp
MX 187.188.17.134:4153 tcp
KE 41.60.232.61:5678 tcp
US 154.83.8.111:3128 tcp
ID 115.124.75.58:8080 tcp
US 8.8.8.8:53 155.7.174.50.in-addr.arpa udp
US 8.8.8.8:53 110.167.219.8.in-addr.arpa udp
US 8.8.8.8:53 16.30.208.89.in-addr.arpa udp
ID 103.215.16.38:8080 tcp
US 104.21.36.186:443 captchabusters.com tcp
CN 183.64.239.19:8060 tcp
US 172.67.182.53:80 auth.roblox.com tcp
CL 167.249.29.220:999 tcp
US 8.8.8.8:53 53.182.67.172.in-addr.arpa udp
ID 103.121.214.50:4145 auth.roblox.com tcp
CA 23.227.39.225:80 auth.roblox.com tcp
BR 177.131.29.210:4153 tcp
US 104.233.13.20:6015 auth.roblox.com tcp
AM 37.252.66.125:46324 tcp
RU 89.17.51.234:3629 tcp
BD 103.21.40.35:4145 tcp
BR 186.204.78.90:4153 tcp
KR 123.213.70.176:4145 tcp
MX 132.247.184.38:3128 tcp
HK 203.78.36.245:82 tcp
US 8.8.8.8:53 225.39.227.23.in-addr.arpa udp
US 8.8.8.8:53 20.13.233.104.in-addr.arpa udp
IQ 62.201.251.225:8183 tcp
US 208.53.196.161:9090 tcp
CO 181.129.1.230:999 tcp
US 172.67.180.14:80 auth.roblox.com tcp
ID 182.253.164.96:3127 tcp
NP 182.93.84.136:60312 tcp
BR 187.85.158.161:5678 tcp
BZ 45.131.5.46:80 auth.roblox.com tcp
IN 103.130.90.122:8080 auth.roblox.com tcp
US 8.8.8.8:53 14.180.67.172.in-addr.arpa udp
US 68.104.55.221:9090 tcp
US 34.125.176.48:50068 tcp
US 67.167.42.106:14691 tcp
DE 146.190.177.173:3128 tcp
ID 103.244.36.28:65205 tcp
US 8.8.8.8:53 46.5.131.45.in-addr.arpa udp
US 8.8.8.8:53 122.90.130.103.in-addr.arpa udp
ZA 105.214.73.19:5678 tcp
US 8.8.8.8:53 50.214.121.103.in-addr.arpa udp
IR 85.185.45.91:3128 tcp
VN 103.162.30.118:20000 tcp
CN 42.62.41.229:3128 tcp
PT 2.83.198.171:80 tcp
DE 185.110.190.167:9100 tcp
US 69.254.246.123:9090 tcp
RU 89.22.17.62:43110 tcp
ID 202.154.18.129:8080 tcp
ID 103.11.106.48:8080 tcp
IN 203.112.134.74:5678 auth.roblox.com tcp
CN 58.20.51.207:808 tcp
BZ 45.131.6.243:80 auth.roblox.com tcp
US 50.223.239.160:80 auth.roblox.com tcp
US 160.153.0.26:80 auth.roblox.com tcp
RU 5.17.89.13:4145 tcp
US 50.172.75.124:80 auth.roblox.com tcp
UA 93.95.185.161:3687 tcp
ID 119.110.75.52:8181 tcp
DE 194.163.159.94:35081 tcp
US 104.207.43.158:3128 auth.roblox.com tcp
RU 95.84.197.36:4153 tcp
US 172.64.155.36:80 auth.roblox.com tcp
ES 188.164.196.31:64988 auth.roblox.com tcp
SG 159.89.194.121:35122 tcp
ID 103.78.38.34:5430 tcp
HR 78.134.255.43:8080 tcp
JP 150.95.131.174:3128 tcp
US 8.8.8.8:53 243.6.131.45.in-addr.arpa udp
US 8.8.8.8:53 26.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 160.239.223.50.in-addr.arpa udp
US 8.8.8.8:53 74.134.112.203.in-addr.arpa udp
US 8.8.8.8:53 36.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 158.43.207.104.in-addr.arpa udp
CN 218.76.216.56:63000 tcp
TH 202.29.218.138:4153 tcp
TR 176.88.248.30:1453 tcp
ID 117.102.78.164:1080 tcp
US 198.11.175.180:8082 auth.roblox.com tcp
DE 141.101.121.214:80 auth.roblox.com tcp
PA 45.229.58.33:999 tcp
US 50.63.12.33:25492 tcp
GB 154.202.101.234:3128 tcp
CN 121.0.19.222:80 tcp
US 162.159.242.245:80 auth.roblox.com tcp
CO 190.60.39.226:999 tcp
US 8.8.8.8:53 214.121.101.141.in-addr.arpa udp
US 8.8.8.8:53 124.75.172.50.in-addr.arpa udp
US 8.8.8.8:53 245.242.159.162.in-addr.arpa udp
US 8.8.8.8:53 31.196.164.188.in-addr.arpa udp
US 184.178.172.14:4145 auth.roblox.com tcp
SG 128.199.191.123:443 tcp
ID 182.253.69.95:8080 tcp
US 172.67.167.95:80 auth.roblox.com tcp
AR 143.202.97.171:999 tcp
US 8.8.8.8:53 14.172.178.184.in-addr.arpa udp
IT 79.10.114.97:80 auth.roblox.com tcp
BG 77.76.151.72:5678 tcp
VN 14.161.24.81:2022 tcp
DE 47.91.65.23:3128 auth.roblox.com tcp
NG 41.73.243.148:8080 tcp
BO 190.104.20.82:8080 tcp
AU 139.99.148.90:3128 auth.roblox.com tcp
CN 221.130.23.6:80 tcp
CN 119.85.227.121:18186 tcp
TR 88.247.17.91:1453 tcp
US 38.130.38.36:1080 tcp
PH 112.199.65.186:3128 tcp
US 67.227.240.29:3128 auth.roblox.com tcp
US 8.8.8.8:53 95.167.67.172.in-addr.arpa udp
US 8.8.8.8:53 97.114.10.79.in-addr.arpa udp
US 8.8.8.8:53 90.148.99.139.in-addr.arpa udp
UA 178.151.134.232:5678 tcp
DE 51.89.21.99:22984 tcp
BD 202.144.201.197:43870 tcp
CL 190.196.66.74:33371 tcp
RU 212.46.230.102:6969 tcp
ID 103.155.197.117:7777 tcp
KH 103.216.49.57:8080 auth.roblox.com tcp
RS 79.101.45.94:54037 tcp
US 8.8.8.8:53 29.240.227.67.in-addr.arpa udp
RU 31.44.82.2:38080 tcp
CA 67.43.227.227:18363 auth.roblox.com tcp
GB 154.201.34.197:3128 tcp
CO 191.97.15.21:999 tcp
EC 177.234.192.44:32213 auth.roblox.com tcp
ES 185.66.57.134:42647 tcp
PH 58.69.117.212:8082 tcp
CN 115.61.104.53:18186 tcp
HK 20.187.77.5:80 tcp
US 8.8.8.8:53 57.49.216.103.in-addr.arpa udp
US 8.8.8.8:53 23.65.91.47.in-addr.arpa udp
US 8.8.8.8:53 227.227.43.67.in-addr.arpa udp
CO 8.242.179.184:999 tcp
CO 191.103.219.225:48612 auth.roblox.com tcp
US 66.187.205.130:80 tcp
RU 109.94.182.128:4145 tcp
ID 118.99.114.88:3128 tcp
BZ 45.131.5.95:80 auth.roblox.com tcp
CN 124.160.194.72:80 tcp
US 8.8.8.8:53 95.5.131.45.in-addr.arpa udp
CN 39.101.65.228:8080 tcp
CN 47.97.120.110:443 tcp
CA 104.239.33.187:6542 auth.roblox.com tcp
US 8.8.8.8:53 44.192.234.177.in-addr.arpa udp
CO 181.129.43.3:8080 tcp
CA 67.43.227.230:5463 tcp
US 104.21.36.186:443 captchabusters.com tcp
US 8.8.8.8:53 187.33.239.104.in-addr.arpa udp
US 8.8.8.8:53 225.219.103.191.in-addr.arpa udp
KR 146.56.178.93:1711 tcp
US 154.202.121.18:3128 tcp
SG 119.13.103.211:7657 auth.roblox.com tcp
CN 14.159.239.80:3128 tcp
US 172.64.164.38:80 auth.roblox.com tcp
BA 5.149.81.90:8080 tcp
BR 200.223.102.82:80 tcp
US 85.209.153.175:4444 auth.roblox.com tcp
DE 156.67.172.185:3128 tcp
VN 203.160.1.85:80 tcp
CN 121.199.15.10:3128 tcp
US 107.1.93.216:80 tcp
US 8.8.8.8:53 38.164.64.172.in-addr.arpa udp
US 8.8.8.8:53 211.103.13.119.in-addr.arpa udp
US 173.245.49.206:80 auth.roblox.com tcp
FR 176.31.182.123:59166 tcp
KE 41.207.116.217:3128 tcp
ID 103.144.18.94:8083 tcp
TH 183.89.139.38:4153 tcp
CA 72.141.35.81:9090 tcp
RW 197.157.143.50:8080 tcp
US 107.190.148.202:5085 tcp
US 8.8.8.8:53 175.153.209.85.in-addr.arpa udp
US 8.8.8.8:53 206.49.245.173.in-addr.arpa udp
CA 144.217.131.61:3148 tcp
BD 103.85.192.192:13626 tcp
ID 160.202.42.132:36917 tcp
RU 194.67.91.153:80 auth.roblox.com tcp
DE 173.249.33.122:48220 tcp
CN 113.236.211.175:18186 tcp
DE 37.120.222.132:3128 tcp
RU 185.17.132.158:4145 tcp
FR 91.121.84.92:80 tcp
TZ 41.93.71.21:80 tcp
SE 147.161.188.201:10801 auth.roblox.com tcp
UA 185.151.86.86:3699 tcp
CN 103.242.175.241:8899 tcp
MY 60.49.177.228:3128 tcp
US 8.8.8.8:53 201.188.161.147.in-addr.arpa udp
US 8.8.8.8:53 153.91.67.194.in-addr.arpa udp
DE 185.162.229.246:80 auth.roblox.com tcp
RU 185.128.106.102:4444 auth.roblox.com tcp
EC 181.196.181.146:4145 tcp
CN 218.203.214.106:80 tcp
HK 198.44.255.3:80 auth.roblox.com tcp
RU 178.236.223.250:8080 tcp
US 71.201.65.181:57783 tcp
US 173.201.2.45:80 tcp
IQ 65.20.171.253:8080 tcp
TW 163.18.60.139:1080 auth.roblox.com tcp
CN 47.100.91.57:8080 tcp
US 8.8.8.8:53 246.229.162.185.in-addr.arpa udp
US 8.8.8.8:53 3.255.44.198.in-addr.arpa udp
BR 186.215.87.194:6007 tcp
NG 105.235.193.46:5678 tcp
ZA 102.69.236.152:80 tcp
CO 190.184.144.86:8080 tcp
UA 178.251.111.20:8080 tcp
BR 201.93.159.234:4145 tcp
ID 103.133.27.143:8080 auth.roblox.com tcp
CA 99.233.94.169:9090 tcp
PE 190.108.83.250:999 tcp
TR 212.175.191.174:4153 tcp
IN 45.117.31.137:4145 tcp
US 50.172.39.98:80 auth.roblox.com tcp
US 8.8.8.8:53 139.60.18.163.in-addr.arpa udp
TR 78.186.99.208:10001 tcp
ID 103.232.20.166:3127 tcp
CL 200.29.8.18:5678 tcp
US 8.8.8.8:53 98.39.172.50.in-addr.arpa udp
CN 120.34.216.134:8089 tcp
BZ 45.131.4.46:80 auth.roblox.com tcp
CN 123.117.214.157:18186 tcp
CN 221.7.11.23:80 tcp
ID 124.158.154.18:3128 tcp
US 172.67.208.95:80 auth.roblox.com tcp
US 8.8.8.8:53 46.4.131.45.in-addr.arpa udp
IN 20.204.190.254:3129 auth.roblox.com tcp
US 50.174.7.158:80 auth.roblox.com tcp
MY 60.50.8.98:3128 tcp
CA 64.66.192.62:32080 tcp
NL 206.189.12.206:80 auth.roblox.com tcp
BZ 45.131.4.55:80 auth.roblox.com tcp
BR 191.7.208.34:8080 tcp
US 8.8.8.8:53 254.190.204.20.in-addr.arpa udp
US 8.8.8.8:53 95.208.67.172.in-addr.arpa udp
US 43.153.29.34:443 auth.roblox.com tcp
US 8.8.8.8:53 158.7.174.50.in-addr.arpa udp
US 8.8.8.8:53 143.27.133.103.in-addr.arpa udp
US 8.8.8.8:53 206.12.189.206.in-addr.arpa udp
US 8.8.8.8:53 55.4.131.45.in-addr.arpa udp
US 8.8.8.8:53 34.29.153.43.in-addr.arpa udp
PE 190.8.142.84:999 tcp
RU 195.211.30.115:60507 tcp
PE 204.199.174.14:999 tcp
US 104.21.36.186:443 captchabusters.com tcp
CN 219.234.82.54:7153 tcp
DE 167.172.109.12:46249 tcp
MX 187.250.215.99:8080 tcp
US 172.67.70.184:80 auth.roblox.com tcp
BR 45.227.195.121:8082 tcp
BR 190.109.74.1:33633 tcp
VE 190.216.249.4:80 tcp
CN 112.232.198.97:18186 tcp
US 8.8.8.8:53 184.70.67.172.in-addr.arpa udp
US 5.78.103.224:8080 tcp
DE 5.61.41.220:1080 tcp
BR 177.93.72.130:4153 tcp
FR 51.210.4.123:55774 tcp
AR 138.36.150.13:1080 auth.roblox.com tcp
GB 145.239.252.47:11135 tcp
US 8.8.8.8:53 13.150.36.138.in-addr.arpa udp
BR 170.83.242.248:999 tcp
PL 77.65.50.118:34159 auth.roblox.com tcp
CA 51.222.231.166:9090 tcp
VE 190.97.228.18:999 tcp
RU 46.8.247.3:38279 tcp
BD 103.234.27.154:1080 tcp
GB 45.85.118.175:80 auth.roblox.com tcp
DO 181.232.190.35:999 tcp
DE 141.101.121.200:80 auth.roblox.com tcp
TH 1.10.187.149:4497 tcp
TR 185.169.181.15:4145 tcp
CN 1.196.159.155:18186 tcp
US 50.207.199.85:80 auth.roblox.com tcp
US 8.8.8.8:53 175.118.85.45.in-addr.arpa udp
US 8.8.8.8:53 200.121.101.141.in-addr.arpa udp
TR 88.255.217.114:1080 tcp
IN 103.78.201.242:3128 tcp
TR 149.50.238.45:8080 tcp
CA 104.239.38.44:6577 auth.roblox.com tcp
ID 139.228.91.66:8080 tcp
GB 45.39.72.60:3128 tcp
US 67.84.148.144:9090 tcp
EC 45.4.202.126:999 tcp
DE 141.101.123.117:80 auth.roblox.com tcp
US 190.93.245.126:80 auth.roblox.com tcp
VE 45.230.169.10:999 tcp
RS 188.255.208.246:1080 tcp
JP 153.122.86.46:80 tcp
US 8.8.8.8:53 85.199.207.50.in-addr.arpa udp
US 8.8.8.8:53 44.38.239.104.in-addr.arpa udp
US 8.8.8.8:53 117.123.101.141.in-addr.arpa udp
US 8.8.8.8:53 118.50.65.77.in-addr.arpa udp
US 8.8.8.8:53 126.245.93.190.in-addr.arpa udp
US 108.170.12.10:80 tcp
US 154.16.146.48:80 auth.roblox.com tcp
TH 180.183.149.204:8080 tcp
IN 122.15.131.65:5787 tcp
BR 179.43.8.16:8088 tcp
TH 202.129.52.173:4153 tcp
CN 114.233.70.213:9000 tcp
VE 190.94.213.1:999 tcp
CN 117.10.97.210:18186 tcp
US 8.8.8.8:53 48.146.16.154.in-addr.arpa udp
ID 202.158.47.24:4145 tcp
US 67.205.177.122:64613 tcp
MX 94.74.68.72:4153 tcp
US 76.171.146.35:23949 tcp
FR 162.19.7.57:46606 tcp
BD 103.106.32.105:31110 tcp
US 167.71.190.131:59166 tcp
US 64.225.4.63:9993 tcp
ES 150.214.140.124:8080 tcp
CO 181.174.228.35:999 tcp
ID 103.156.248.102:8080 tcp
TH 182.53.250.86:8080 tcp
CN 61.51.18.104:5394 tcp
CO 181.78.12.227:999 tcp
GB 164.38.155.50:80 auth.roblox.com tcp
CN 111.196.66.2:808 tcp
US 24.214.140.113:6293 tcp
AR 179.60.235.248:8097 tcp
DE 185.162.230.61:80 auth.roblox.com tcp
IR 46.100.74.74:4153 tcp
ID 103.124.139.177:4145 tcp
CA 192.99.169.19:8452 auth.roblox.com tcp
LV 91.188.39.232:8888 tcp
US 8.8.8.8:53 50.155.38.164.in-addr.arpa udp
US 75.119.201.156:15745 tcp
KH 175.100.103.132:1081 tcp
BR 200.223.19.101:3128 tcp
US 166.0.235.148:49063 tcp
US 8.8.8.8:53 19.169.99.192.in-addr.arpa udp
US 8.8.8.8:53 61.230.162.185.in-addr.arpa udp
US 156.239.55.30:3128 tcp
US 50.172.75.122:80 auth.roblox.com tcp
UA 194.177.0.74:53281 tcp
RS 46.99.252.42:10805 tcp
US 50.228.141.103:80 tcp
US 8.8.8.8:53 122.75.172.50.in-addr.arpa udp
NG 154.113.161.145:5678 tcp
CA 184.95.235.194:1080 tcp
FR 109.238.11.197:41162 tcp
CN 222.74.220.228:80 tcp
PE 181.176.221.151:9812 tcp
ID 43.248.25.6:4145 tcp
KE 102.0.2.104:8080 tcp
ES 185.74.192.176:53281 tcp
CL 8.242.205.41:9991 tcp
CN 125.36.166.78:808 tcp
US 184.105.182.254:3128 tcp
TH 115.31.138.55:8080 tcp
ID 101.255.66.10:9876 tcp
MX 45.189.236.6:999 tcp
TR 185.169.181.28:4145 tcp
US 5.78.88.216:8080 tcp
ID 125.162.243.245:8080 tcp
KR 8.213.137.155:8090 auth.roblox.com tcp
PH 180.191.16.247:8081 tcp
ID 103.167.171.55:1111 tcp
US 107.1.93.210:80 tcp
CN 118.122.90.101:80 tcp
US 215.175.204.233:6310 tcp
RU 84.204.40.155:8080 tcp
CN 36.134.91.82:8888 tcp
US 8.8.8.8:53 155.137.213.8.in-addr.arpa udp
US 172.67.153.183:80 auth.roblox.com tcp
PL 46.227.37.185:1088 tcp
US 162.144.35.38:8885 tcp
US 69.180.245.32:9090 tcp
US 31.43.179.242:80 auth.roblox.com tcp
TH 101.51.141.81:4153 tcp
IN 103.103.143.63:5678 tcp
US 8.8.8.8:53 242.179.43.31.in-addr.arpa udp
CN 114.80.136.222:7780 tcp
KH 110.235.249.152:25566 tcp
BG 85.196.179.34:8080 tcp
CZ 109.72.14.122:4153 tcp
EC 186.46.153.174:62225 tcp
VE 186.94.109.29:8080 tcp
KR 124.5.246.105:53002 tcp
ID 116.254.115.130:8080 tcp
GB 154.201.34.112:3128 tcp
CA 104.233.20.97:6113 auth.roblox.com tcp
US 8.8.8.8:53 97.20.233.104.in-addr.arpa udp
US 141.193.213.119:80 auth.roblox.com tcp
US 76.102.189.58:9090 tcp
US 108.9.46.58:53135 tcp
CO 190.26.27.133:999 tcp
US 8.8.8.8:53 119.213.193.141.in-addr.arpa udp
IN 103.5.18.86:83 tcp
ID 36.89.229.97:59707 tcp
PK 119.159.224.89:8080 tcp
TH 124.122.114.191:8080 tcp
US 198.61.220.50:5555 tcp
PL 91.233.250.106:4145 tcp
US 198.20.245.16:45442 tcp
CA 104.239.38.44:6577 auth.roblox.com tcp
BR 187.0.222.167:3128 tcp
US 104.207.62.141:3128 auth.roblox.com tcp
UA 37.57.50.130:4145 tcp
US 8.8.8.8:53 141.62.207.104.in-addr.arpa udp
US 154.83.10.173:3128 tcp
ID 103.176.96.214:8082 tcp
PE 179.43.98.46:8080 auth.roblox.com tcp
FR 51.38.63.124:10983 auth.roblox.com tcp
TR 38.156.73.50:8080 auth.roblox.com tcp
DE 45.14.174.33:80 auth.roblox.com tcp
IN 103.162.196.122:5678 tcp
CG 41.75.68.29:62225 tcp
SG 8.219.167.110:20000 auth.roblox.com tcp
ID 202.180.20.11:55443 tcp
ID 103.154.137.30:32650 tcp
DO 190.110.34.158:999 tcp
SE 172.64.18.218:80 auth.roblox.com tcp
SG 101.47.4.29:6066 auth.roblox.com tcp
CN 223.151.55.58:8009 tcp
CN 115.29.242.125:3128 tcp
MK 79.125.162.222:4145 tcp
DE 45.14.174.65:80 auth.roblox.com tcp
TR 38.41.53.149:9090 auth.roblox.com tcp
US 8.8.8.8:53 33.174.14.45.in-addr.arpa udp
US 8.8.8.8:53 218.18.64.172.in-addr.arpa udp
US 8.8.8.8:53 124.63.38.51.in-addr.arpa udp
US 64.247.11.135:3307 tcp
US 104.18.1.173:80 auth.roblox.com tcp
EC 45.4.202.73:999 tcp
US 159.112.235.193:80 auth.roblox.com tcp
US 172.67.168.132:80 auth.roblox.com tcp
US 76.26.114.253:39593 auth.roblox.com tcp
CA 72.10.164.178:19777 auth.roblox.com tcp
CG 41.75.68.159:65205 tcp
CN 112.14.47.6:52024 tcp
US 34.125.176.48:50068 tcp
US 8.8.8.8:53 65.174.14.45.in-addr.arpa udp
US 8.8.8.8:53 46.98.43.179.in-addr.arpa udp
US 8.8.8.8:53 173.1.18.104.in-addr.arpa udp
US 8.8.8.8:53 178.164.10.72.in-addr.arpa udp
US 8.8.8.8:53 132.168.67.172.in-addr.arpa udp
US 8.8.8.8:53 193.235.112.159.in-addr.arpa udp
AT 213.143.113.82:80 auth.roblox.com tcp
UA 94.244.28.246:31280 tcp
DE 37.120.222.132:3128 tcp
TW 211.21.48.185:38081 tcp
DO 38.156.233.74:999 tcp
IN 103.62.237.102:8080 tcp
US 8.8.8.8:53 29.4.47.101.in-addr.arpa udp
US 8.8.8.8:53 149.53.41.38.in-addr.arpa udp
US 8.8.8.8:53 82.113.143.213.in-addr.arpa udp
PY 181.78.95.48:999 tcp
VE 38.41.27.150:11201 tcp
US 104.21.36.186:443 captchabusters.com tcp
SK 217.12.51.38:8080 tcp
US 65.48.113.25:9999 tcp
CN 117.160.250.130:8899 tcp
GE 31.146.161.194:5678 tcp
NL 185.135.157.89:8080 tcp
IN 45.112.3.149:4145 tcp
US 50.204.219.226:80 tcp
ID 103.36.11.161:3125 tcp
RU 188.134.1.49:3629 tcp
NI 200.85.169.221:1080 auth.roblox.com tcp
CN 58.56.87.2:1080 tcp
CN 183.165.246.108:8089 tcp
US 50.168.210.226:80 auth.roblox.com tcp
RU 194.67.91.153:80 auth.roblox.com tcp
GB 80.192.65.203:9090 tcp
US 8.8.8.8:53 226.210.168.50.in-addr.arpa udp
RU 46.29.78.20:3128 tcp
GB 161.35.39.82:3128 tcp
CN 124.116.26.182:8087 tcp
CN 114.223.9.67:8118 tcp
US 8.8.8.8:53 221.169.85.200.in-addr.arpa udp
DE 88.99.10.252:1080 tcp
JP 13.230.168.82:3128 tcp
CN 119.97.146.152:80 tcp
IN 103.47.93.213:1080 tcp
ID 103.229.185.154:8080 tcp
ES 77.225.177.14:10801 tcp
VE 45.181.226.152:999 tcp
AU 47.74.71.208:8081 auth.roblox.com tcp
US 8.8.8.8:53 50.73.156.38.in-addr.arpa udp
IN 115.248.36.156:8080 tcp
US 159.65.244.233:80 auth.roblox.com tcp
EG 41.65.236.58:1981 auth.roblox.com tcp
IR 45.144.127.18:8080 tcp
US 5.78.95.164:8080 tcp
TR 95.0.206.210:1080 tcp
US 8.8.8.8:53 208.71.74.47.in-addr.arpa udp
US 8.8.8.8:53 58.236.65.41.in-addr.arpa udp
US 8.8.8.8:53 253.114.26.76.in-addr.arpa udp
RU 178.35.233.235:443 tcp
US 66.29.129.53:29773 tcp
CN 171.8.68.117:8080 tcp
CN 121.199.15.160:3128 tcp
US 172.67.70.131:80 auth.roblox.com tcp
ID 103.8.194.2:53281 tcp
ID 36.67.248.129:8080 tcp
US 72.195.114.169:4145 auth.roblox.com tcp
TR 91.93.42.118:10001 tcp
CN 115.197.204.23:18186 tcp
FR 51.15.133.214:16379 tcp
IR 46.209.211.66:8080 tcp
CG 102.141.30.2:33333 tcp
US 8.8.8.8:53 131.70.67.172.in-addr.arpa udp
US 8.8.8.8:53 169.114.195.72.in-addr.arpa udp
ID 114.141.52.158:80 tcp
US 50.170.90.34:80 tcp
CA 23.227.38.60:80 auth.roblox.com tcp
VN 116.96.16.56:1080 tcp
VN 118.69.233.165:8080 auth.roblox.com tcp
US 8.8.8.8:53 233.244.65.159.in-addr.arpa udp
US 8.8.8.8:53 60.38.227.23.in-addr.arpa udp
VN 203.205.29.108:5678 tcp
MW 41.75.113.217:1080 tcp
TR 78.163.152.22:8080 tcp
AR 181.209.107.138:4153 tcp
US 50.171.32.227:80 tcp
TH 165.154.232.175:14051 tcp
ID 103.156.141.154:1080 tcp
BZ 45.131.208.57:80 auth.roblox.com tcp
FR 81.250.223.126:80 tcp
US 24.59.34.24:9090 tcp
CN 218.83.248.32:8088 tcp
US 8.8.8.8:53 57.208.131.45.in-addr.arpa udp
GE 178.134.153.205:14888 tcp
CL 200.39.139.65:999 tcp
US 138.197.102.119:80 tcp
ID 101.255.150.50:8080 tcp
ID 103.162.16.240:5678 tcp
NL 85.114.120.176:9999 tcp
US 172.64.163.235:80 auth.roblox.com tcp
DE 136.243.19.90:3128 tcp
CO 181.48.190.162:8080 tcp
ID 101.255.54.188:1081 tcp
US 8.8.8.8:53 235.163.64.172.in-addr.arpa udp
US 8.8.8.8:53 165.233.69.118.in-addr.arpa udp
VE 201.210.25.227:3128 tcp
UA 91.200.163.190:8088 tcp
BR 170.83.242.251:999 tcp
GB 145.239.252.47:63818 tcp
IR 185.26.32.93:5678 tcp
CO 168.227.106.100:48609 tcp
IN 123.255.250.5:3128 tcp
US 107.1.93.212:80 tcp
CO 190.14.224.244:3629 auth.roblox.com tcp
DE 173.212.202.65:80 tcp
CA 67.43.227.230:23685 tcp
KZ 89.218.101.34:9090 tcp
US 162.223.94.166:8020 tcp
TH 110.77.196.137:3128 tcp
US 87.250.37.182:80 tcp
US 8.8.8.8:53 244.224.14.190.in-addr.arpa udp
ID 103.51.205.42:8181 tcp
US 104.207.34.13:3128 auth.roblox.com tcp
TH 110.77.233.179:8080 tcp
US 8.8.8.8:53 13.34.207.104.in-addr.arpa udp
AM 130.193.123.34:5678 tcp
DE 45.14.174.22:80 auth.roblox.com tcp
DE 185.162.231.188:80 auth.roblox.com tcp
UA 78.26.207.173:53281 tcp
PY 200.3.252.170:3128 tcp
US 47.88.29.108:9999 auth.roblox.com tcp
BZ 45.131.5.92:80 auth.roblox.com tcp
AR 200.106.184.13:999 tcp
BD 103.161.68.12:1080 tcp
CN 114.220.6.236:1998 tcp
CN 119.133.142.250:18186 tcp
CN 114.231.14.173:18186 tcp
ZA 196.212.252.194:8080 tcp
PY 181.78.94.170:999 tcp
US 8.8.8.8:53 188.231.162.185.in-addr.arpa udp
US 8.8.8.8:53 22.174.14.45.in-addr.arpa udp
US 8.8.8.8:53 92.5.131.45.in-addr.arpa udp
US 8.8.8.8:53 108.29.88.47.in-addr.arpa udp
CN 202.104.154.118:8118 tcp
EC 190.57.131.158:1080 tcp
SG 110.238.111.229:6789 auth.roblox.com tcp
IN 103.208.200.222:41151 tcp
ES 185.74.192.175:53281 tcp
BD 220.247.162.70:8080 tcp
TH 27.130.126.171:8080 tcp
BG 213.16.56.132:4153 tcp
QA 37.210.43.20:8080 tcp
UA 37.57.40.167:4145 tcp
IR 80.210.56.169:4153 tcp
US 8.8.8.8:53 229.111.238.110.in-addr.arpa udp
PS 45.130.99.42:8080 tcp
US 188.114.96.154:80 auth.roblox.com tcp
US 68.198.72.147:9090 tcp
ID 103.79.96.193:4153 tcp
CN 58.20.51.207:808 tcp
TR 31.145.111.25:53281 tcp
GE 5.178.217.227:31019 tcp
US 8.8.8.8:53 154.96.114.188.in-addr.arpa udp
DE 141.105.164.176:8080 tcp
IN 103.52.37.1:4145 tcp
US 50.174.7.162:80 auth.roblox.com tcp
ID 101.255.150.50:8080 tcp
US 142.93.196.242:3128 auth.roblox.com tcp
US 8.8.8.8:53 162.7.174.50.in-addr.arpa udp
US 50.174.7.157:8050 tcp
US 157.245.6.140:39314 tcp
RU 46.254.240.106:43310 tcp
CA 209.97.203.60:3128 tcp
IR 85.185.158.78:8080 tcp
HK 183.91.33.41:90 tcp
MD 195.22.253.238:4145 tcp
RU 94.181.33.149:40840 auth.roblox.com tcp
ID 103.171.183.201:8181 tcp
FR 51.254.78.223:80 auth.roblox.com tcp
RU 31.172.133.253:4153 tcp
US 8.8.8.8:53 223.78.254.51.in-addr.arpa udp
CN 8.137.34.229:80 tcp
SG 119.13.103.211:500 auth.roblox.com tcp
US 46.21.153.16:3128 tcp
ID 118.99.90.24:3128 tcp
US 64.225.8.203:10002 tcp
BR 177.23.150.76:8888 tcp
BD 114.130.152.134:8080 tcp
RU 193.138.178.6:8282 auth.roblox.com tcp
SG 8.219.167.110:3128 auth.roblox.com tcp
FR 5.135.1.146:15951 tcp
CN 123.184.6.251:8088 tcp
CN 120.42.106.195:18186 tcp
FR 51.178.141.208:42554 tcp
CN 112.87.140.163:9480 tcp
TH 119.46.2.242:4145 tcp
CA 192.99.169.19:8452 auth.roblox.com tcp
US 8.8.8.8:53 149.33.181.94.in-addr.arpa udp
ID 147.139.213.199:8080 tcp
US 108.9.46.58:53135 tcp
DE 141.101.121.209:80 auth.roblox.com tcp
CN 114.225.104.199:8080 tcp
TH 113.53.91.10:5678 tcp
ID 61.247.7.8:3128 tcp
CN 117.158.146.215:9091 tcp
BR 177.93.72.38:4153 tcp
SG 43.134.167.51:443 auth.roblox.com tcp
ID 49.156.23.158:8181 tcp
US 8.8.8.8:53 209.121.101.141.in-addr.arpa udp
CN 119.176.89.177:18186 tcp
CA 67.43.228.253:28133 auth.roblox.com tcp
CN 111.225.153.11:8089 tcp
RU 213.178.39.170:8080 tcp
PL 83.238.80.11:8081 tcp
ID 202.123.224.130:3128 tcp
EG 41.33.3.35:1981 tcp
US 8.8.8.8:53 51.167.134.43.in-addr.arpa udp
US 8.8.8.8:53 253.228.43.67.in-addr.arpa udp
CN 111.1.36.133:80 tcp
PY 201.217.48.205:80 tcp
TH 101.109.176.88:8080 tcp
IN 103.139.242.181:84 tcp
FR 212.83.137.150:34669 tcp
CN 39.170.85.129:7302 tcp
CN 119.176.89.177:18186 tcp
AM 195.250.92.58:8080 tcp
ID 103.168.44.114:8080 tcp
BG 84.238.250.37:10801 tcp
BD 115.127.23.165:35294 tcp
US 68.118.147.60:9090 tcp
US 104.21.36.186:443 captchabusters.com tcp
CN 210.51.12.44:8080 tcp
KR 59.26.254.243:8197 tcp
FR 212.83.137.150:34669 tcp
BD 49.0.32.177:10801 tcp
IN 59.153.121.162:1080 tcp
CN 111.225.153.251:8089 tcp
KZ 176.119.227.65:5678 tcp
BD 103.123.170.191:8291 tcp
US 8.8.8.8:53 6.178.138.193.in-addr.arpa udp
US 150.136.120.240:3128 tcp
IN 221.134.152.75:7302 tcp
CN 103.213.97.74:80 tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
UA 77.121.5.131:1080 tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
PE 190.233.207.239:8080 tcp
UZ 185.74.6.248:8080 tcp
MD 86.105.57.12:4153 tcp
US 172.64.35.17:80 auth.roblox.com tcp
CN 115.227.234.145:18186 tcp
TR 195.175.22.194:5678 auth.roblox.com tcp
US 8.8.8.8:53 17.35.64.172.in-addr.arpa udp
ID 118.99.111.209:3127 tcp
UA 178.216.2.229:1488 tcp
PL 80.54.62.254:5678 tcp
CN 182.121.17.88:8088 tcp
CN 60.190.195.146:10800 tcp
US 8.8.8.8:53 194.22.175.195.in-addr.arpa udp
US 50.235.240.86:80 tcp
US 45.8.106.181:80 tcp
NL 185.170.166.24:80 auth.roblox.com tcp
BR 186.250.29.225:8080 tcp
US 50.174.7.157:8050 tcp
IN 117.239.228.10:3128 tcp
RU 95.154.104.147:31387 tcp
DE 45.14.174.101:80 auth.roblox.com tcp
DE 185.162.231.167:80 auth.roblox.com tcp
DE 141.101.122.151:80 auth.roblox.com tcp
US 104.21.223.181:80 auth.roblox.com tcp
CN 222.129.34.122:57114 tcp
VE 201.211.237.199:8080 tcp
ID 36.66.170.25:4153 tcp
BD 114.134.90.43:5678 tcp
DE 185.162.231.34:80 auth.roblox.com tcp
CA 72.10.160.90:30893 tcp
US 157.182.52.224:9090 tcp
US 8.8.8.8:53 24.166.170.185.in-addr.arpa udp
US 8.8.8.8:53 101.174.14.45.in-addr.arpa udp
US 8.8.8.8:53 167.231.162.185.in-addr.arpa udp
US 8.8.8.8:53 151.122.101.141.in-addr.arpa udp
US 8.8.8.8:53 181.223.21.104.in-addr.arpa udp
US 8.8.8.8:53 34.231.162.185.in-addr.arpa udp
CN 123.182.58.29:8089 tcp
VN 222.252.23.5:8080 tcp
BR 200.192.215.138:8080 tcp
CN 123.170.106.79:18186 tcp
CA 104.239.35.22:5704 auth.roblox.com tcp
AU 63.141.128.5:80 auth.roblox.com tcp
PH 152.32.68.171:65535 auth.roblox.com tcp
US 199.48.166.27:3128 tcp
DE 185.162.230.125:80 auth.roblox.com tcp
IN 103.79.165.164:57775 tcp
ID 103.232.64.226:4145 tcp
CN 104.207.41.6:3128 auth.roblox.com tcp
US 8.8.8.8:53 22.35.239.104.in-addr.arpa udp
US 8.8.8.8:53 5.128.141.63.in-addr.arpa udp
US 8.8.8.8:53 125.230.162.185.in-addr.arpa udp
US 8.8.8.8:53 171.68.32.152.in-addr.arpa udp
GB 92.9.76.236:9090 tcp
IN 45.116.3.249:4145 tcp
US 66.235.200.122:80 auth.roblox.com tcp
CN 223.100.148.134:7302 tcp
NL 45.128.135.249:1080 tcp
ID 114.5.196.209:1081 tcp
US 160.153.0.8:80 auth.roblox.com tcp
ID 27.123.1.33:4153 tcp
IN 20.219.176.57:3129 auth.roblox.com tcp
ID 103.165.126.65:8080 tcp
US 64.225.8.203:10007 tcp
US 8.8.8.8:53 122.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 6.41.207.104.in-addr.arpa udp
US 8.8.8.8:53 8.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 57.176.219.20.in-addr.arpa udp
RU 185.105.89.148:4444 auth.roblox.com tcp
ID 222.124.17.230:8080 tcp
PE 161.132.194.90:8080 tcp
US 8.8.8.8:53 148.89.105.185.in-addr.arpa udp
US 216.56.58.2:3128 tcp
CN 27.184.136.182:21212 tcp
US 69.242.176.42:9090 tcp
CN 116.10.143.18:3128 tcp
IN 20.219.176.57:3129 auth.roblox.com tcp
CD 41.194.63.228:8080 tcp
US 199.200.120.114:8089 tcp
JP 63.250.52.82:8118 auth.roblox.com tcp
TW 60.249.176.80:3128 tcp
VN 171.244.140.160:41951 tcp
CO 201.221.134.74:5678 tcp
CN 101.228.77.198:4145 tcp
US 8.8.8.8:53 82.52.250.63.in-addr.arpa udp
FR 51.68.39.222:29302 tcp
CN 106.12.114.122:59166 tcp
US 98.162.25.16:4145 auth.roblox.com tcp
US 159.112.235.165:80 auth.roblox.com tcp
RU 89.222.132.31:3629 tcp
ZA 105.19.63.217:9812 tcp
HK 218.252.238.240:80 auth.roblox.com tcp
ME 188.255.237.254:6666 tcp
US 8.8.8.8:53 165.235.112.159.in-addr.arpa udp
US 108.9.46.58:53135 tcp
US 104.21.36.186:443 captchabusters.com tcp
NL 141.0.175.141:443 tcp
AM 185.215.53.129:3629 tcp
GE 31.146.60.54:8080 tcp
AR 45.160.78.37:999 tcp
UA 185.43.249.148:39316 tcp
CN 118.72.187.24:18186 tcp
KZ 89.218.5.109:50733 tcp
US 8.8.8.8:53 240.238.252.218.in-addr.arpa udp
FR 109.190.52.86:3128 tcp
IN 119.235.54.138:5678 tcp
DE 141.101.120.235:80 auth.roblox.com tcp
SE 147.161.188.199:10801 auth.roblox.com tcp
US 52.191.208.232:80 tcp
IT 92.245.170.248:8080 tcp
TH 180.183.14.118:8080 tcp
US 8.8.8.8:53 235.120.101.141.in-addr.arpa udp
US 8.8.8.8:53 199.188.161.147.in-addr.arpa udp
IL 80.179.140.189:80 auth.roblox.com tcp
US 66.235.200.251:80 auth.roblox.com tcp
DE 167.172.109.12:46249 tcp
US 66.235.200.66:80 auth.roblox.com tcp
US 162.0.220.215:24352 tcp
SG 206.189.150.230:3128 tcp
CA 51.161.33.206:16078 auth.roblox.com tcp
PH 202.57.33.134:4145 tcp
IR 109.238.188.22:1080 tcp
ID 110.138.119.118:80 tcp
US 172.67.171.206:80 auth.roblox.com tcp
CN 111.124.102.104:18186 tcp
ID 101.255.158.42:8080 tcp
US 8.8.8.8:53 189.140.179.80.in-addr.arpa udp
US 8.8.8.8:53 251.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 66.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 206.171.67.172.in-addr.arpa udp
CN 117.160.250.138:80 tcp
FR 213.56.166.35:1080 tcp
US 134.195.101.34:8080 tcp
US 5.78.79.86:8080 tcp
CO 191.97.15.22:999 tcp
BG 85.196.136.21:4153 tcp
AR 181.191.223.58:999 tcp
TR 194.31.64.155:10351 tcp
US 104.21.36.186:443 captchabusters.com tcp
BZ 45.131.4.11:80 auth.roblox.com tcp
US 45.43.167.114:6296 auth.roblox.com tcp
CA 67.43.236.20:15623 tcp
BR 187.86.253.195:80 tcp
IR 46.249.122.1:8080 tcp
US 8.8.8.8:53 11.4.131.45.in-addr.arpa udp
BR 186.232.160.246:8080 tcp
DE 195.201.173.249:48935 tcp
US 45.8.107.251:80 tcp
CO 181.78.85.39:999 tcp
US 99.56.147.242:53096 auth.roblox.com tcp
ID 103.78.38.34:5430 tcp
CN 117.95.193.61:18186 tcp
IR 78.110.120.190:3128 tcp
HR 82.132.19.108:4153 tcp
US 8.8.8.8:53 114.167.43.45.in-addr.arpa udp
US 8.8.8.8:53 206.33.161.51.in-addr.arpa udp
US 8.8.8.8:53 242.147.56.99.in-addr.arpa udp
IN 20.204.190.254:3129 auth.roblox.com tcp
IR 46.100.74.74:4153 tcp
BR 45.232.226.137:52104 tcp
AR 200.61.21.74:8080 tcp
LY 165.16.27.36:1976 tcp
BR 177.87.168.97:53281 tcp
ID 117.102.163.227:3128 tcp
DE 173.212.237.43:18084 tcp
DE 62.171.165.74:8975 tcp
DE 167.172.109.12:39452 tcp
CA 67.43.227.230:23685 tcp
CN 117.71.216.65:1998 tcp
US 172.67.192.9:80 auth.roblox.com tcp
KH 103.118.47.74:4145 tcp
HK 47.243.50.83:20002 auth.roblox.com tcp
US 8.8.8.8:53 9.192.67.172.in-addr.arpa udp
TH 110.78.151.60:8080 tcp
CO 190.0.242.217:51327 tcp
NL 51.158.169.52:29976 tcp
ID 210.57.211.9:8080 tcp
DE 116.202.103.223:12565 tcp
US 47.253.214.60:500 auth.roblox.com tcp
US 47.254.90.125:8008 tcp
US 8.8.8.8:53 83.50.243.47.in-addr.arpa udp
US 8.8.8.8:53 60.214.253.47.in-addr.arpa udp
BG 87.247.251.240:3128 tcp
US 172.67.222.166:80 auth.roblox.com tcp
BR 200.225.140.130:36564 tcp
CN 111.225.153.117:8089 tcp
TR 78.186.99.208:10001 tcp
CN 117.71.216.65:1998 tcp
PL 176.106.34.47:8080 tcp
CM 41.244.100.108:3128 tcp
CN 117.25.129.238:8888 tcp
AR 164.163.42.27:10000 tcp
US 8.8.8.8:53 166.222.67.172.in-addr.arpa udp
HK 123.202.159.108:80 tcp
RU 78.36.202.149:3128 tcp
BR 186.211.177.161:8082 tcp
CN 60.190.231.110:808 tcp
BR 45.228.147.239:5678 tcp
UA 193.19.255.21:8080 tcp
US 172.67.161.225:80 auth.roblox.com tcp
ID 103.156.249.40:8080 tcp
VE 201.71.2.149:999 tcp
IR 185.118.155.202:8080 tcp
US 8.8.8.8:53 225.161.67.172.in-addr.arpa udp
IN 103.88.239.118:84 tcp
US 104.23.141.196:80 auth.roblox.com tcp
SG 194.233.91.84:8816 tcp
CA 72.10.164.178:5977 auth.roblox.com tcp
CO 190.60.37.43:999 tcp
KR 112.214.167.194:53002 tcp
BD 220.247.163.185:9990 tcp
CL 201.220.112.98:999 tcp
US 8.8.8.8:53 196.141.23.104.in-addr.arpa udp
RU 80.79.66.82:3629 tcp
CN 222.184.254.170:40044 tcp
IQ 109.205.114.11:80 tcp
ID 103.155.197.49:8080 tcp
AM 185.215.53.193:3629 tcp
US 50.222.245.45:80 auth.roblox.com tcp
CN 14.156.122.86:1080 tcp
AR 200.49.141.56:8080 tcp
SE 165.225.192.19:10801 auth.roblox.com tcp
EC 45.70.203.107:999 tcp
US 8.8.8.8:53 19.192.225.165.in-addr.arpa udp
US 8.8.8.8:53 45.245.222.50.in-addr.arpa udp
US 104.21.36.186:443 captchabusters.com tcp
N/A 127.0.0.1:64470 tcp

Files

\??\pipe\crashpad_752_NTPPXKBHSJKBPDHQ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 390fd599cd609f6e616e7afd8cae1f5d
SHA1 78ab122357fc6dec36167ea87058bd928a3358cc
SHA256 23f285b10f3398bcef113bae96df8497e2405005337bd67eb14a12217ec611d2
SHA512 22320dbfa0222d72bc63ce7c6cd3bd6d83c0cd56a6747664d3c6cef6d8fbab75fb80116985f6d4d1da77f091dd103039152a28f86e31460e80f255f804acb504

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a06bf7a973eb06840a8537926f9b00b5
SHA1 f21dbb74e562a8b0b8c65e206724a690df10f7c3
SHA256 3dfc72c3fdb6547ce63a91565860b105f041e894a802249747a18cc06117e9f3
SHA512 6a7f9306c1c1da561ab389b845e4ce7d8b8abba4bd906127405d3a9c16575f4ff535dc858be2e7367e464319186dc43ca8c30d26c53f02fb01319f1e8087bcb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 58a9ba1f46c28dcab872d46966ed38a8
SHA1 e9bb925f2c767272ac2c341109bd9d84adba69a7
SHA256 4cfb1137c6a5185a3cf8f8450728ab8570c27a3b5ac5b50313b0c30f5b9940fb
SHA512 efb208a02c7ee0bfe80d7ffccc70b093603783d29769906d523b81acd5dbd17b51a1e31ef6c8055958f161d51212c3f1a87c8493c4e315bab95be8d6a28f5926

C:\Users\Admin\Downloads\Versatools.exe

MD5 3266fa2e2db0f6d3328ae32de4a64c0c
SHA1 8cfe11a04008c3c8ffbaae5283e5577e52c88120
SHA256 f23fd2d73cb23edfadd7c92456767d8b9310e063d6e2410b40946be4fbe58eb3
SHA512 965fe6ebcc5e5b5cb758dc1ca80faeda48e68acaf5d525c9c5722376626897687d5bf1dc671b96bb42745fe520a91240755c8dd83872ba06ff543add8b242d0a

C:\Users\Admin\AppData\Local\Temp\_MEI43562\ucrtbase.dll

MD5 d40325e6c994228a3403f8ba8f24601f
SHA1 6266b5dc2001ffd75da3588dd7c43027a706589d
SHA256 a2ab58e44828009f6dafe54dd5ed57edfa6b09641e3c8eaa473b37e5b0e2b862
SHA512 59e712713d6492fa1b002da34bc9db82a85e19d13b694b77b57db1030681432c41705d56e9f75031ed9522d43a344d1475c745af7c8c92f70f7fc78e8b8895f9

C:\Users\Admin\AppData\Local\Temp\_MEI43562\python311.dll

MD5 5a5dd7cad8028097842b0afef45bfbcf
SHA1 e247a2e460687c607253949c52ae2801ff35dc4a
SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
SHA512 e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

C:\Users\Admin\AppData\Local\Temp\_MEI43562\VCRUNTIME140.dll

MD5 4585a96cc4eef6aafd5e27ea09147dc6
SHA1 489cfff1b19abbec98fda26ac8958005e88dd0cb
SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
SHA512 d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

C:\Users\Admin\AppData\Local\Temp\_MEI43562\base_library.zip

MD5 e17ce7183e682de459eec1a5ac9cbbff
SHA1 722968ca6eb123730ebc30ff2d498f9a5dad4cc1
SHA256 ff6a37c49ee4bb07a763866d4163126165038296c1fb7b730928297c25cfbe6d
SHA512 fab76b59dcd3570695fa260f56e277f8d714048f3d89f6e9f69ea700fca7c097d0db5f5294beab4e6409570408f1d680e8220851fededb981acb129a415358d1

C:\Users\Admin\AppData\Local\Temp\_MEI43562\python3.DLL

MD5 b711598fc3ed0fe4cf2c7f3e0877979e
SHA1 299c799e5d697834aa2447d8a313588ab5c5e433
SHA256 520169aa6cf49d7ee724d1178de1be0e809e4bdcf671e06f3d422a0dd5fd294a
SHA512 b3d59eff5e38cef651c9603971bde77be7231ea8b7bdb444259390a8a9e452e107a0b6cb9cc93e37fd3b40afb2ba9e67217d648bfca52f7cdc4b60c7493b6b84

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_ctypes.pyd

MD5 bd36f7d64660d120c6fb98c8f536d369
SHA1 6829c9ce6091cb2b085eb3d5469337ac4782f927
SHA256 ee543453ac1a2b9b52e80dc66207d3767012ca24ce2b44206804767f37443902
SHA512 bd15f6d4492ddbc89fcbadba07fc10aa6698b13030dd301340b5f1b02b74191faf9b3dcf66b72ecf96084656084b531034ea5cadc1dd333ef64afb69a1d1fd56

C:\Users\Admin\AppData\Local\Temp\_MEI43562\libffi-8.dll

MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_bz2.pyd

MD5 3859239ced9a45399b967ebce5a6ba23
SHA1 6f8ff3df90ac833c1eb69208db462cda8ca3f8d6
SHA256 a4dd883257a7ace84f96bcc6cd59e22d843d0db080606defae32923fc712c75a
SHA512 030e5ce81e36bd55f69d55cbb8385820eb7c1f95342c1a32058f49abeabb485b1c4a30877c07a56c9d909228e45a4196872e14ded4f87adaa8b6ad97463e5c69

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_lzma.pyd

MD5 e5abc3a72996f8fde0bcf709e6577d9d
SHA1 15770bdcd06e171f0b868c803b8cf33a8581edd3
SHA256 1796038480754a680f33a4e37c8b5673cc86c49281a287dc0c5cae984d0cb4bb
SHA512 b347474dc071f2857e1e16965b43db6518e35915b8168bdeff1ead4dff710a1cc9f04ca0ced23a6de40d717eea375eedb0bf3714daf35de6a77f071db33dfae6

C:\Users\Admin\AppData\Local\Temp\_MEI43562\pyexpat.pyd

MD5 9c21a5540fc572f75901820cf97245ec
SHA1 09296f032a50de7b398018f28ee8086da915aebd
SHA256 2ff8cd82e7cc255e219e7734498d2dea0c65a5ab29dc8581240d40eb81246045
SHA512 4217268db87eec2f0a14b5881edb3fdb8efe7ea27d6dcbee7602ca4997416c1130420f11167dac7e781553f3611409fa37650b7c2b2d09f19dc190b17b410ba5

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_socket.pyd

MD5 1eea9568d6fdef29b9963783827f5867
SHA1 a17760365094966220661ad87e57efe09cd85b84
SHA256 74181072392a3727049ea3681fe9e59516373809ced53e08f6da7c496b76e117
SHA512 d9443b70fcdc4d0ea1cb93a88325012d3f99db88c36393a7ded6d04f590e582f7f1640d8b153fe3c5342fa93802a8374f03f6cd37dd40cdbb5ade2e07fad1e09

C:\Users\Admin\AppData\Local\Temp\_MEI43562\select.pyd

MD5 c97a587e19227d03a85e90a04d7937f6
SHA1 463703cf1cac4e2297b442654fc6169b70cfb9bf
SHA256 c4aa9a106381835cfb5f9badfb9d77df74338bc66e69183757a5a3774ccdaccf
SHA512 97784363f3b0b794d2f9fd6a2c862d64910c71591006a34eedff989ecca669ac245b3dfe68eaa6da621209a3ab61d36e9118ebb4be4c0e72ce80fab7b43bde12

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_queue.pyd

MD5 f00133f7758627a15f2d98c034cf1657
SHA1 2f5f54eda4634052f5be24c560154af6647eee05
SHA256 35609869edc57d806925ec52cca9bc5a035e30d5f40549647d4da6d7983f8659
SHA512 1c77dd811d2184beedf3c553c3f4da2144b75c6518543f98c630c59cd597fcbf6fd22cfbb0a7b9ea2fdb7983ff69d0d99e8201f4e84a0629bc5733aa09ffc201

C:\Users\Admin\AppData\Local\Temp\_MEI43562\VCRUNTIME140_1.dll

MD5 7e668ab8a78bd0118b94978d154c85bc
SHA1 dbac42a02a8d50639805174afd21d45f3c56e3a0
SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
SHA512 72bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032

C:\Users\Admin\AppData\Local\Temp\_MEI43562\pywin32_system32\pythoncom311.dll

MD5 f98264f2dacfc8e299391ed1180ab493
SHA1 849551b6d9142bf983e816fef4c05e639d2c1018
SHA256 0fe49ec1143a0efe168809c9d48fe3e857e2ac39b19db3fd8718c56a4056696b
SHA512 6bb3dbd9f4d3e6b7bd294f3cb8b2ef4c29b9eff85c0cfd5e2d2465be909014a7b2ecd3dc06265b1b58196892bb04d3e6b0aa4b2ccbf3a716e0ff950eb28db11c

C:\Users\Admin\AppData\Local\Temp\_MEI43562\pywin32_system32\pywintypes311.dll

MD5 90b786dc6795d8ad0870e290349b5b52
SHA1 592c54e67cf5d2d884339e7a8d7a21e003e6482f
SHA256 89f2a5c6be1e70b3d895318fdd618506b8c0e9a63b6a1a4055dff4abdc89f18a
SHA512 c6e1dbf25d260c723a26c88ec027d40d47f5e28fc9eb2dbc72a88813a1d05c7f75616b31836b68b87df45c65eef6f3eaed2a9f9767f9e2f12c45f672c2116e72

C:\Users\Admin\AppData\Local\Temp\_MEI43562\win32\win32api.pyd

MD5 1d6762b494dc9e60ca95f7238ae1fb14
SHA1 aa0397d96a0ed41b2f03352049dafe040d59ad5d
SHA256 fae5323e2119a8f678055f4244177b5806c7b6b171b1945168f685631b913664
SHA512 0b561f651161a34c37ff8d115f154c52202f573d049681f8cdd7bba2e966bb8203780c19ba824b4a693ef12ef1eeef6aeeef96eb369e4b6129f1deb6b26aaa00

C:\Users\Admin\AppData\Local\Temp\_MEI43562\tls_client\dependencies\tls-client-64.dll

MD5 6b0b5bb89d4fab802687372d828321b4
SHA1 a6681bee8702f7abbca891ac64f8c4fb7b35fbb5
SHA256 ec4f40c5f1ac709313b027c16face4d83e0dafdbc466cff2ff5d029d00600a20
SHA512 50c857f4a141ad7db8b6d519277033976bf97c9a7b490186a283403c05cb83b559a596efaf87ca46bc66bdf6b80636f4622324551c9de2c26bebfdbb02209d34

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_hashlib.pyd

MD5 4255c44dc64f11f32c961bf275aab3a2
SHA1 c1631b2821a7e8a1783ecfe9a14db453be54c30a
SHA256 e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29
SHA512 7d3a306755a123b246f31994cd812e7922943cdbbc9db5a6e4d3372ea434a635ffd3945b5d2046de669e7983ef2845bd007a441d09cfe05cf346523c12bdad52

C:\Users\Admin\AppData\Local\Temp\_MEI43562\libcrypto-1_1.dll

MD5 e94733523bcd9a1fb6ac47e10a267287
SHA1 94033b405386d04c75ffe6a424b9814b75c608ac
SHA256 f20eb4efd8647b5273fdaafceb8ccb2b8ba5329665878e01986cbfc1e6832c44
SHA512 07dd0eb86498497e693da0f9dd08de5b7b09052a2d6754cfbc2aa260e7f56790e6c0a968875f7803cb735609b1e9b9c91a91b84913059c561bffed5ab2cbb29f

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_ssl.pyd

MD5 208b0108172e59542260934a2e7cfa85
SHA1 1d7ffb1b1754b97448eb41e686c0c79194d2ab3a
SHA256 5160500474ec95d4f3af7e467cc70cb37bec1d12545f0299aab6d69cea106c69
SHA512 41abf6deab0f6c048967ca6060c337067f9f8125529925971be86681ec0d3592c72b9cc85dd8bdee5dd3e4e69e3bb629710d2d641078d5618b4f55b8a60cc69d

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_uuid.pyd

MD5 46e9d7b5d9668c9db5caa48782ca71ba
SHA1 6bbc83a542053991b57f431dd377940418848131
SHA256 f6063622c0a0a34468679413d1b18d1f3be67e747696ab972361faed4b8d6735
SHA512 c5b171ebdb51b1755281c3180b30e88796db8aa96073489613dab96b6959a205846711187266a0ba30782102ce14fbfa4d9f413a2c018494597600482329ebf7

C:\Users\Admin\AppData\Local\Temp\_MEI43562\unicodedata.pyd

MD5 aa13ee6770452af73828b55af5cd1a32
SHA1 c01ece61c7623e36a834d8b3c660e7f28c91177e
SHA256 8fbed20e9225ff82132e97b4fefbb5ddbc10c062d9e3f920a6616ab27bb5b0fb
SHA512 b2eeb9a7d4a32e91084fdae302953aac57388a5390f9404d8dfe5c4a8f66ca2ab73253cf5ba4cc55350d8306230dd1114a61e22c23f42fbcc5c0098046e97e0f

C:\Users\Admin\AppData\Local\Temp\_MEI43562\libssl-1_1.dll

MD5 25bde25d332383d1228b2e66a4cb9f3e
SHA1 cd5b9c3dd6aab470d445e3956708a324e93a9160
SHA256 c8f7237e7040a73c2bea567acc9cec373aadd48654aaac6122416e160f08ca13
SHA512 ca2f2139bb456799c9f98ef8d89fd7c09d1972fa5dd8fc01b14b7af00bf8d2c2175fb2c0c41e49a6daf540e67943aad338e33c1556fd6040ef06e0f25bfa88fa

C:\Users\Admin\AppData\Local\Temp\_MEI43562\_decimal.pyd

MD5 65b4ab77d6c6231c145d3e20e7073f51
SHA1 23d5ce68ed6aa8eaabe3366d2dd04e89d248328e
SHA256 93eb9d1859edca1c29594491863bf3d72af70b9a4240e0d9dd171f668f4f8614
SHA512 28023446e5ac90e9e618673c879ca46f598a62fbb9e69ef925db334ad9cb1544916caf81e2ecdc26b75964dcedba4ad4de1ba2c42fb838d0df504d963fcf17ee

C:\Users\Admin\AppData\Local\Temp\files\config.json

MD5 8c40f53b5ff573eaec56f527a1b1a6aa
SHA1 ed799b99370a4d803c050cc48343dfe65d38124d
SHA256 a36a289b5365df56cbd7f6f4a38a8d9a547676900b5b68b04353aac7e2186bc0
SHA512 2e7403f7d919ca91912838c10ae7806b2a9baa4c6fba92b1b0f82f53226095f245618993c911173c61facafd7ef15bacb37aa6ad37f41ff79775b17ee44147c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9afb4922c035dac93289641e0e35fa7b
SHA1 e3b54fa5d9c1990efeebd7ee8fc1c12d9642ba4f
SHA256 80014d5328cc167f13026ca95d5b64a260b84abb8c6ee88dfe5c5c65080a6af3
SHA512 c994d0a9f9086352c3968b3d56161e7ff4d60f04128ee3a3175e62b59611aeb0d9d5cd40c45fa1abe8b31feb1b051d49e1b8962e3f853af21992e07300ad3b67

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 62ee46ae1cfc598a29991d99b96f1b5b
SHA1 c2e4c471424668a530c2edf13954ff8837ac3bf0
SHA256 ecef336612df7ccaeff84e6fc5ae526669b3e2f0a644d4b175d5517902c4600b
SHA512 da2183ea4b9aeee8e06c7e08d29afbd094108324474d45339a9dc26724ad2869d91d86467fbd385f5f5819348a48d7eb0211046007304cbd7a5d3bb3af63321a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57b9f9.TMP

MD5 71ba6fd4624687cdc79bf51c35e0cc29
SHA1 9d30bc5e40d72dfe2549da67b3bf8bcc371066f2
SHA256 78c73c8e1b57f0842e29a06117be9757f252d35b012d1b70d7fb93f2a67c602f
SHA512 5a026cce320e409d5152eed0fd017b1ed5365adc09e6209952d25dfcfe382e2c9ef0576b3bc65f1cd6fea7e331d4ffa7e6653745c12902cb5ad30331fca9e20f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ea32784c451a1e882449af6f1abb1f91
SHA1 5185cc8a8e4af0bbb84e2fc02025bb7852c98ab1
SHA256 540efb21846e949949b8a3fba49204422b0132028460d9e3372f4f12426c272c
SHA512 bfc397791d4eeef0735386bf8914bb3b4b40eb521e125974f28af671b3e3bb010a2593b3eac2efe3759195d1503f94af9d586ff943dd04250279cdab662b1d6f

memory/1004-279-0x00007FFBC9A80000-0x00007FFBCAA0C000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 44e7816da7fc0a4566cf6b55ee08e2e2
SHA1 421377dad4b7d97ae8ecbe9cc26e9ed6784094eb
SHA256 d4e978427cac31436fba15bfb84cf6948bc3ddd306a165315a51237b633f49df
SHA512 8e385e8f217d67d8cb3937d93dea1e532ce27798e810fda9e371342c534a78e8bee2733e72e49a2041e4287a336c8174f24559611326ea83c997e329f0324fe2

memory/1004-362-0x00007FFBC9A80000-0x00007FFBCAA0C000-memory.dmp

memory/1044-559-0x00007FFBCA310000-0x00007FFBCB29C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\files\config.json

MD5 74114083df0366a26082a359ce2f2002
SHA1 e8bbc9af5de91b6ed5046655575e862aae930485
SHA256 72a79434278cde96205841f61c01f333025cb509fc1ff392f1e85eea5d258aa9
SHA512 3319c4d76421b296c99f11bf5be9b87dac3641332dbb9b21dc91d657093ec90ce7ae0c92e691c12545a550037fe240760322680ad89f49295b7830857301c6cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 107f7a398a4fa5448a2a20d3f0ce324c
SHA1 a1ac456a97fd456eb67f89e961f3a5648af869a2
SHA256 ede66944a0122bd9e74c9f6c09da8b54ce53a8ce94fd9b8c69656e231a39d1e7
SHA512 34b5e8a3d4ffdad0333a9471c2c374fce832a385152db450f237ac0169de4c70af4decbe092115857ac30890b3bb2bc669b54e485d5d0ec0af9616ad92fc404f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ec4146f75d9bf2d9102a2009a5f9b4b2
SHA1 ba0d6b53ba8699a1be98f0caf329359651b964b4
SHA256 a180cc563ca1ebb5aba94255372ba1841d3fd5a9131e0e6ee1a562fd541dfbeb
SHA512 6064595cbafeadbacfa8281fcc3a430d451db4bbcf020174971942746468f2b5c03f0761262198a37a24eb0561edef80ba24a2c879f7504435889d9606dae11a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 89ce09704a324452801bb32c360c3df1
SHA1 91f52d849fd96587115d94102d59c0aa82be7f3b
SHA256 189c0687e22d574b98bd949abd02d94f471270fe6d9249acdb02624b806114ab
SHA512 5643f586fbed0c34e5c42597435a640becae64e63c61f9150089c5095bd6d1b5af93e18a888d86c5664c38f0b3d9ab4b479c514e67341808e339ef905522adee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 3a42416efec17ef3c621f7acc751a446
SHA1 957e92afab8929a73a3bc9360b67ebaf38182596
SHA256 67963c0f83ce30637e4d5b780242aedc68822970354f8c2e9fc9621ad93d4aa9
SHA512 06dac48211f76604bb52c8992981fb2934cfbfd0f52fa0f3be761053a456f5cc22dd7fe94e5aa3b6e3145ede343acd6741f968a59a4bdf1f2320d1d60aa9da43

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 71e5bfdd9c1f9dbe793a1fd0e1621de9
SHA1 6b48022d55f3ea210d1f6d4c701734400418a0d4
SHA256 53d2d008da6c49a0c034b3eff81c0c61302edaa1cdc8b9f4dd5847c9a839308c
SHA512 f66bbc6d0d109b75c35d273b515a02b35347545fce5202f5fb34bb4c8701cdf73c7a8062744b8ac257861a2c638a70a85d3c18aa9bdafac58e71a8ef97009be5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c3eb70a0ce0ccf1d6ae0f59e77ddc9b0
SHA1 cf7258437de3cb3bbecdffec089ced83289e16d2
SHA256 3c57407925706847dce197bbb36ba60d0a837c321024fee139fde6f8b895f8d6
SHA512 c1406d7b3c5a6820025c86ed943a660bbd615a194395393be969138ca46d4243d19dff38b7b81f5760e46b6ef7dd0696e8f177e262165d7c440b4aa8adc54d69