Malware Analysis Report

2024-09-11 07:28

Sample ID 240527-krbjsaeb6z
Target http://x.com
Tags
discovery execution exploit persistence collection evasion
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://x.com was found to be: Likely malicious.

Malicious Activity Summary

discovery execution exploit persistence collection evasion

Manipulates Digital Signatures

Creates new service(s)

Downloads MZ/PE file

Possible privilege escalation attempt

Checks CPU information

Reads the content of photos stored on the user's device.

Loads dropped DLL

Checks memory information

Modifies file permissions

Executes dropped EXE

Registers COM server for autorun

Checks computer location settings

Enumerates connected drives

Checks installed software on the system

Drops file in Windows directory

Launches sc.exe

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious use of SetWindowsHookEx

Suspicious behavior: LoadsDriver

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Runs net.exe

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Modifies data under HKEY_USERS

Checks processor information in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Kills process with taskkill

Suspicious behavior: MapViewOfSection

Suspicious use of FindShellTrayWindow

NTFS ADS

Suspicious use of SendNotifyMessage

Modifies Internet Explorer settings

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-05-27 08:49

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-27 08:49

Reported

2024-05-27 09:20

Platform

win10-20240404-en

Max time kernel

1800s

Max time network

1806s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://x.com

Signatures

Creates new service(s)

persistence execution

Downloads MZ/PE file

Manipulates Digital Signatures

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubLoadMessage" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2004\FuncName = "WVTAsn1SpcPeImageDataDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.4.4\FuncName = "WVTAsn1SealingTimestampAttributeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.4.3\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPVerifyIndirectData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1\DefaultId = "{573E31F8-AABA-11D0-8CCB-00C04FC295EE}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2009\FuncName = "WVTAsn1SpcLinkEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubLoadMessage" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$Function = "HTTPSCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.4\FuncName = "WVTAsn1SpcIndirectDataContentEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2011\FuncName = "WVTAsn1SealingSignatureAttributeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.25\FuncName = "WVTAsn1SpcLinkDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubInitialize" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllRemoveSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubInitialize" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.2\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{7801EBD0-CF4B-11D0-851F-0060979387EA}\$DLL = "Cryptdlg.dll" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2003\FuncName = "WVTAsn1SpcIndirectDataContentDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.4\FuncName = "EncodeRecipientID" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.30\FuncName = "WVTAsn1SpcSigInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2006\FuncName = "WVTAsn1SpcStatementTypeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2221\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$Function = "SoftpubCleanup" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.16.1.1\FuncName = "DecodeAttrSequence" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2130\FuncName = "WVTAsn1SpcSigInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.12.2.1\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2221\FuncName = "WVTAsn1CatNameValueDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.1.1\Dll = "cryptdlg.dll" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.30\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{DE351A42-8E59-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.2\CallbackAllocFunction = "SoftpubLoadDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.2\FuncName = "WVTAsn1CatMemberInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.11\FuncName = "WVTAsn1SpcStatementTypeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2012\FuncName = "WVTAsn1SealingTimestampAttributeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllRemoveSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$Function = "SoftpubCleanup" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2222\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.4.1.311.10.3.3\CallbackFreeFunction = "SoftpubFreeDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllCreateIndirectData\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2223\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2223\FuncName = "WVTAsn1CatMemberInfo2Decode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.206.1001_native_6dadb0d087f224bac4b2ca1b54444e04_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-1807-4249-5BA5-EA42D66AF0BF}\InProcServer32\ThreadingModel = "Both" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-47b9-4a1e-82b2-07ccd5323c3f}\LocalServer32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-26c0-4fe1-bf6f-67f633265bba}\InprocServer32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-1807-4249-5BA5-EA42D66AF0BF}\InProcServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-26c0-4fe1-bf6f-67f633265bba}\InprocServer32\ = "C:\\Program Files\\ldplayer9box\\VBoxC.dll" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-26c0-4fe1-bf6f-67f633265bba}\InprocServer32\ThreadingModel = "Free" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-c9d2-4f11-a384-53f0cf917214}\InprocServer32\ = "C:\\Program Files\\ldplayer9box\\VBoxC.dll" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-c9d2-4f11-a384-53f0cf917214}\InprocServer32\ThreadingModel = "Free" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-26c0-4fe1-bf6f-67f633265bba}\InprocServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-c9d2-4f11-a384-53f0cf917214}\InprocServer32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-1807-4249-5BA5-EA42D66AF0BF}\InProcServer32\ = "C:\\Program Files\\ldplayer9box\\VBoxProxyStub.dll" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-47b9-4a1e-82b2-07ccd5323c3f}\LocalServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-47b9-4a1e-82b2-07ccd5323c3f}\LocalServer32\ = "\"C:\\Program Files\\ldplayer9box\\Ld9BoxSVC.exe\"" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-c9d2-4f11-a384-53f0cf917214}\InprocServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-1807-4249-5BA5-EA42D66AF0BF}\InprocServer32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\ldplayer9box\VBoxNetFltNobj.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\vccorlib140.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-crt-conio-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\tstPDMAsyncCompletion.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxAutostartSvc.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-libraryloader-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\capi.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-crt-math-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\msvcr120.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxProxyStub.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Ld9BoxSup.inf F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\NetAdp6Install.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxAuth.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxSharedFolders.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\ucrtbase.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\driver-PreW10\Ld9VMMR0.r0 F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Ld9BoxSup.cat F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-crt-environment-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-crt-utility-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\ossltest.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\NetFltUninstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxBugReport.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\msvcr120.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Qt5WinExtras.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\vcruntime140.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\comregister.cmd F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\NetLwfInstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-datetime-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-profile-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-util-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\dasync.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-processthreads-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\libssl-1_1-x64.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\regsvr32_x64.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-file-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxAuthSimple.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxDTrace.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-timezone-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-crt-stdio-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-debug-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-crt-multibyte-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\bldRTLdrCheckImports.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\SUPUninstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-libraryloader-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\tstSSLCertDownloads.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-processthreads-l1-1-1.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Qt5PrintSupport.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxPlaygroundDevice.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxStub.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-localization-l1-2-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-localization-l1-2-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\load.cmd F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Qt5OpenGL.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-core-memory-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\concrt140.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\dasync.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxRes.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\NetLwfUninstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\api-ms-win-core-console-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\VBoxSVGA3D.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\api-ms-win-crt-multibyte-l1-1-0.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\msvcp120.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\padlock.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\Ld9BoxNetLwf-PreW10.cat F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Logs\DISM\dism.log C:\Windows\SysWOW64\dism.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\ldnews.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\dnplayer.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133612734454925519" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-DA7C-44C8-A7AC-9F173490446A}\ = "IAdditionsStateChangedEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-AE84-4B8E-B0F3-5C20C35CAAC9}\ = "IStorageDeviceChangedEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VirtualBox.VirtualBoxClient\CLSID C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-3E8A-11E9-8082-DB8AE479EF87}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-48DF-438D-85EB-98FFD70D18C9}\ = "IMachineStateChangedEvent" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-81A9-4005-9D52-FC45A78BF3F5}\TypeLib\Version = "1.3" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-CC87-4F6E-A0E9-47BB7F2D4BE5}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-4521-44CC-DF95-186E4D057C83}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4A75-437E-B0BB-7E7C90D0DF2A}\ = "IGuestSession" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-CB63-47A1-84FB-02C4894B89A9}\ = "IHostNameResolutionConfigurationChangeEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-1F04-4191-AA2F-1FAC9646AE4C} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-8A02-45F3-A07D-A67AA72756AA}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-00B1-4E9D-0000-11FA00F9D583}\NumMethods\ = "13" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4453-4F3E-C9B8-5686939C80B6}\ = "IGuestProcess" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-42DA-C94B-8AEC-21968E08355D}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-00B1-4E9D-0000-11FA00F9D583}\TypeLib\Version = "1.3" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-44A0-A470-BA20-27890B96DBA9}\ = "IHostNetworkInterface" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-402E-022E-6180-C3944DE3F9C8} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-6E0B-492A-A8D0-968472A94DC7}\ = "IExtraDataChangedEvent" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-808E-11E9-B773-133D9330F849}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-0721-4CDE-867C-1A82ABAF914C}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-B7F1-4A5A-A4EF-A11DD9C2A458}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-D8ED-44CF-85AC-C83A26C95A4D}\ = "IToken" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-1640-41F9-BD74-3EF5FD653250}\ = "IKeyboard" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-762E-4120-871C-A2014234A607}\ = "ICloudProviderManager" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-A227-4F23-8278-2F675EEA1BB2}\ = "ISerialPort" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-3E8A-11E9-825C-AB7B2CABCE23}\ = "IChoiceFormValue" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-A161-41F1-B583-4892F4A9D5D5}\TypeLib\Version = "1.3" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-B45C-48AE-8B36-D35E83D207AA}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4737-457B-99FC-BC52C851A44F} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-6E0B-492A-A8D0-968472A94DC7}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-9849-4F47-813E-24A75DC85615}\NumMethods\ = "13" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-7619-41AA-AECE-B21AC5C1A7E6}\ = "IAppliance" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-8084-11E9-B185-DBE296E54799}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-E5DB-4D2C-BAAA-C71053A6236D}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-416B-4181-8C4A-45EC95177AEF}\NumMethods C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-8384-11E9-921D-8B984E28A686}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-CB8D-4382-90BA-B7DA78A74573}\NumMethods\ = "19" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-787B-44AB-B343-A082A3F2DFB1}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1739856679-3467441365-73334005-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\youtube-nocookie.com\Total = "331" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-4BA3-7903-2AA4-43988BA11554} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-00C2-4484-0077-C057003D9C90}\ = "IInternalMachineControl" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-AA82-4720-BC84-BD097B2B13B8}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ldmnq.ldbk\DefaultIcon\ = "F:\\LDPlayer\\LDPlayer9\\backup_icon.ico" F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-CC87-4F6E-A0E9-47BB7F2D4BE5}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-EBF9-4D5C-7AEA-877BFC4256BA} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-800A-40F8-87A6-170D02249A55} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-4A06-81FC-A916-78B2DA1FA0E5}\ProxyStubClsid32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-1F8B-4692-ABB4-462429FAE5E9}\ = "IDnDModeChangedEvent" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-23D0-430A-A7FF-7ED7F05534BC} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-80F6-4266-8E20-16371F68FA25}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-6989-4002-80CF-3607F377D40C}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-F7B7-4B05-900E-2A9253C00F51}\NumMethods\ = "28" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-71B2-4817-9A64-4ED12C17388E}\NumMethods\ = "14" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-32E7-4F6C-85EE-422304C71B90}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-35F3-4F4D-B5BB-ED0ECEFD8538}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-BE30-49C0-B315-E9749E1BDED1}\ = "INATNetwork" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-0C60-11EA-A0EA-07EB0D1C4EAD}\ = "ICloudClient" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-E191-400B-840E-970F3DAD7296}\ = "IPCIAddress" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-6E15-4F71-A6A5-94E707FAFBCC}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-1A29-4A19-92CF-02285773F3B5}\NumMethods\ = "13" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-0C65-11EA-AD23-0FF257C71A7F}\ProxyStubClsid32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-2354-4267-883F-2F417D216519}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.206.1001_native_6dadb0d087f224bac4b2ca1b54444e04_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4144 wrote to memory of 5116 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 5116 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 3208 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 3208 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4144 wrote to memory of 4444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://x.com

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffe8ace9758,0x7ffe8ace9768,0x7ffe8ace9778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1588 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1808 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2100 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2744 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2872 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4460 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4608 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3616 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4896 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4376 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3396 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4584 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4896 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5232 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5404 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4692 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5504 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5964 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6016 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3888 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2764 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5384 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2772 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=260 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5648 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2772 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5416 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4664 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4576 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=5224 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x40c

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=4856 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3364 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5084 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=6216 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=4860 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5028 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=5060 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=4720 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4724 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2932 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=884 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4504 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3856 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=988 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=5224 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=988 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=6260 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5752 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2796 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=6140 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5056 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4856 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=5532 --field-trial-handle=1840,i,4414588655793499407,13114521283753110504,131072 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.0.618603841\1506145653" -parentBuildID 20221007134813 -prefsHandle 1716 -prefMapHandle 1712 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {774af575-4a18-47b4-9572-67b5e3f49236} 196 "\\.\pipe\gecko-crash-server-pipe.196" 1796 2477c1d3b58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.1.1578354908\279468999" -parentBuildID 20221007134813 -prefsHandle 2140 -prefMapHandle 2136 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {981d2bcf-2b52-47d5-a184-8ccfb7f9b050} 196 "\\.\pipe\gecko-crash-server-pipe.196" 2152 24771072b58 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.2.1589808457\406855678" -childID 1 -isForBrowser -prefsHandle 3052 -prefMapHandle 3068 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {67a2cbe0-40ca-4def-90cd-956eea87134b} 196 "\\.\pipe\gecko-crash-server-pipe.196" 2792 247023a1758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.3.707062480\1239552464" -childID 2 -isForBrowser -prefsHandle 3528 -prefMapHandle 3524 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5c736d32-d532-4ada-91fb-0aa4e62ca2ce} 196 "\\.\pipe\gecko-crash-server-pipe.196" 3540 24700b1bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.4.1470075805\969540214" -childID 3 -isForBrowser -prefsHandle 3740 -prefMapHandle 3736 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fcbce082-e70f-4d2d-ba4c-44f45844f71d} 196 "\\.\pipe\gecko-crash-server-pipe.196" 3752 2470372e258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.5.1919360619\158938449" -childID 4 -isForBrowser -prefsHandle 4688 -prefMapHandle 2628 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {363f1704-0109-4fb0-9794-a171bf9e1481} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4444 2470498a058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.6.140982199\692310577" -childID 5 -isForBrowser -prefsHandle 4932 -prefMapHandle 4936 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2f4d5b18-6183-4e82-b363-931a1f0351ea} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4924 2470498b258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.7.89338194\256064112" -childID 6 -isForBrowser -prefsHandle 5128 -prefMapHandle 5132 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {89d28e0c-0f0c-41be-94f2-cf89becbe9bd} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5024 2470498bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.8.1195439114\77263717" -childID 7 -isForBrowser -prefsHandle 5576 -prefMapHandle 5640 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {367e96e4-62bb-4e9e-a138-61e5386e9697} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5648 247008a3858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.9.407698450\1497835255" -childID 8 -isForBrowser -prefsHandle 9616 -prefMapHandle 9800 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6f11a03-41a1-4044-8ef6-3ab532223c85} 196 "\\.\pipe\gecko-crash-server-pipe.196" 9604 24706146f58 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.10.72924947\2142332668" -childID 9 -isForBrowser -prefsHandle 9700 -prefMapHandle 4592 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ea9fa87-93a2-4612-b420-8f2e8923c919} 196 "\\.\pipe\gecko-crash-server-pipe.196" 2612 247043c9558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.11.1715398892\190850639" -childID 10 -isForBrowser -prefsHandle 9700 -prefMapHandle 5888 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b48eb526-43f1-4607-8693-8d78feab19dc} 196 "\\.\pipe\gecko-crash-server-pipe.196" 9668 24707ffb458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.12.1139766997\1945534413" -parentBuildID 20221007134813 -prefsHandle 8736 -prefMapHandle 8832 -prefsLen 26808 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d92dbda7-f1fa-49cd-ac69-f8b0aa48c429} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8732 24708141558 rdd

C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.206.1001_native_6dadb0d087f224bac4b2ca1b54444e04_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.206.1001_native_6dadb0d087f224bac4b2ca1b54444e04_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC489127C\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC489127C\HD-CheckCpu.exe" --cmd checkHypervEnabled

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.13.1708495238\411163063" -childID 11 -isForBrowser -prefsHandle 5776 -prefMapHandle 5788 -prefsLen 26864 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9b191bf-6cf1-4f69-82a6-a653a26b63c4} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8492 24706145a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.14.1628641325\173561190" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5048 -prefMapHandle 5064 -prefsLen 26864 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {21bcec96-446d-4bd5-a6f0-6983ca7438b0} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5040 24706828b58 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.15.1168499605\1643313111" -childID 12 -isForBrowser -prefsHandle 5000 -prefMapHandle 5004 -prefsLen 26864 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {28a65dc2-411e-47b5-b415-fb0db9bc04a7} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4696 2477105b258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.16.1222776033\683674898" -childID 13 -isForBrowser -prefsHandle 4680 -prefMapHandle 8488 -prefsLen 26864 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2efc2c4a-1581-48d4-9a39-180c13b4197e} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4672 24706e10558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.17.471281541\960808970" -childID 14 -isForBrowser -prefsHandle 5108 -prefMapHandle 5932 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6561726-cf6f-428b-b339-e765940dd7f5} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4528 24705746a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.18.991204438\862179816" -childID 15 -isForBrowser -prefsHandle 5700 -prefMapHandle 4592 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {70649f35-7dcd-4626-9cda-a8fd0cbb0e11} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5740 24708125c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.19.956722590\1454504168" -childID 16 -isForBrowser -prefsHandle 4992 -prefMapHandle 4368 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {251c24c3-6368-4efc-93c9-85199cdab059} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5572 24700972f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.20.1080781708\1631240597" -childID 17 -isForBrowser -prefsHandle 5308 -prefMapHandle 4728 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e71429e6-69f7-4dd4-8f2d-e37d0cd0197c} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5784 24700972c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.21.424944895\426420326" -childID 18 -isForBrowser -prefsHandle 5284 -prefMapHandle 5280 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d98a07bd-e346-4f37-a1b3-cf428aa41d68} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5788 2470672a158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.22.382392451\1189518625" -childID 19 -isForBrowser -prefsHandle 8256 -prefMapHandle 8260 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1007e10a-9c3b-4652-b2af-46d34135d327} 196 "\\.\pipe\gecko-crash-server-pipe.196" 3524 247043c7d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.23.369965655\2107504264" -childID 20 -isForBrowser -prefsHandle 7884 -prefMapHandle 7880 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {806c2e75-7773-4d5f-8ab2-208afea917ab} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7892 24708143658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.24.723110653\777928025" -childID 21 -isForBrowser -prefsHandle 5392 -prefMapHandle 5216 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {abe95a20-eeaa-46cc-a3ab-862dbf992219} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8388 2477102f658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.25.1888376853\1004765660" -childID 22 -isForBrowser -prefsHandle 7712 -prefMapHandle 7716 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {efdfa3a4-9698-45d6-89b0-4b2f448e548f} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7704 247043c7158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.26.2121625379\307229951" -childID 23 -isForBrowser -prefsHandle 7532 -prefMapHandle 7732 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {03f5b153-10e8-426c-889a-a192407cb117} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7500 24700e26558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.27.711899576\1846148398" -childID 24 -isForBrowser -prefsHandle 5392 -prefMapHandle 7452 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4bd0d5a0-081b-4890-9abd-7dc9186c9509} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7804 247029edb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.28.646459980\1183520084" -childID 25 -isForBrowser -prefsHandle 7352 -prefMapHandle 7368 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6724913b-83ed-4d88-9bfc-71e76756da4d} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7908 247029ebd58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.29.658841779\1428906216" -childID 26 -isForBrowser -prefsHandle 7804 -prefMapHandle 7232 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {902b1672-9501-4f77-9fc1-2fd5a80c7f66} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5392 24706146958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.30.561675581\598195309" -childID 27 -isForBrowser -prefsHandle 7152 -prefMapHandle 7156 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {734281dc-bfa1-4ea6-a6a0-9f9a902f1aa0} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7040 24703b17958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.31.709072344\442155718" -childID 28 -isForBrowser -prefsHandle 6792 -prefMapHandle 6788 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6069052f-259d-40a6-addb-dbec49081073} 196 "\\.\pipe\gecko-crash-server-pipe.196" 6888 247099e6a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.32.1165788920\1531267906" -childID 29 -isForBrowser -prefsHandle 6576 -prefMapHandle 6572 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c1941e6b-ccff-4469-a750-4a4bdbafbd70} 196 "\\.\pipe\gecko-crash-server-pipe.196" 6588 24709e40e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.33.162648978\179279685" -childID 30 -isForBrowser -prefsHandle 6384 -prefMapHandle 6388 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {92124786-a2f7-47b5-95a6-4347b0a92683} 196 "\\.\pipe\gecko-crash-server-pipe.196" 6376 2470a1d5c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.34.1146930287\980133871" -childID 31 -isForBrowser -prefsHandle 6648 -prefMapHandle 6616 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1cfd6a84-6963-4ffa-bff2-caa3e63324d0} 196 "\\.\pipe\gecko-crash-server-pipe.196" 6656 2470a1d5058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.35.2027468477\2134876777" -childID 32 -isForBrowser -prefsHandle 6788 -prefMapHandle 6720 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {24a91422-c541-4975-a9d3-d7bdbf0e67a5} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5840 2470a1d6258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.36.539000165\649955943" -childID 33 -isForBrowser -prefsHandle 9988 -prefMapHandle 9992 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e670079a-6ed1-434e-8233-d03dbb79afa2} 196 "\\.\pipe\gecko-crash-server-pipe.196" 9980 247082d7a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.37.1858566061\1064295957" -childID 34 -isForBrowser -prefsHandle 10076 -prefMapHandle 10080 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {04975383-9a2c-41a3-a2da-3b23bfdb6861} 196 "\\.\pipe\gecko-crash-server-pipe.196" 5688 24708451e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.38.121825131\1016372377" -childID 35 -isForBrowser -prefsHandle 8128 -prefMapHandle 10360 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1fa288e4-593a-4ccd-af14-93607f7edefb} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7020 247099e8858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.39.28177437\1878727285" -childID 36 -isForBrowser -prefsHandle 10308 -prefMapHandle 10312 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d5f3ea4-f4d3-4770-b687-72cc1418acf0} 196 "\\.\pipe\gecko-crash-server-pipe.196" 10428 24709e3f958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.40.685589506\1362596432" -childID 37 -isForBrowser -prefsHandle 10628 -prefMapHandle 10624 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d7bd8759-4e9b-4e8d-a607-485cbdde31d7} 196 "\\.\pipe\gecko-crash-server-pipe.196" 10636 24709efde58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.41.1700884227\1579270869" -childID 38 -isForBrowser -prefsHandle 10356 -prefMapHandle 10388 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {146897c9-ebd7-43fc-893c-ccdb8d759a39} 196 "\\.\pipe\gecko-crash-server-pipe.196" 2536 2477105eb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.42.813817331\297221751" -childID 39 -isForBrowser -prefsHandle 8132 -prefMapHandle 10324 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {06f7f4e0-3a7b-4bf8-8df9-1ba49e07840d} 196 "\\.\pipe\gecko-crash-server-pipe.196" 10844 24771062858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.43.897566916\1089943799" -childID 40 -isForBrowser -prefsHandle 11116 -prefMapHandle 11112 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8c9a618c-323b-438c-900e-ecc12f0aee21} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11024 24700b18258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.44.1376797937\1032203029" -childID 41 -isForBrowser -prefsHandle 11308 -prefMapHandle 11300 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6cc7a0de-df65-41b8-81b2-77cb7733dd98} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11280 2470af4b758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.45.1613859416\1622770859" -childID 42 -isForBrowser -prefsHandle 11364 -prefMapHandle 11368 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a966cd4-49a5-4486-9c83-0d39491e8bb2} 196 "\\.\pipe\gecko-crash-server-pipe.196" 9464 2470b193358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.46.969541170\2113441580" -childID 43 -isForBrowser -prefsHandle 11680 -prefMapHandle 11676 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d4192e52-fd9e-49c3-b15e-04bdcbe7ac2b} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11356 2470b4f2358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.47.1730590386\367566305" -childID 44 -isForBrowser -prefsHandle 11556 -prefMapHandle 11356 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a92f7d97-33e9-48a3-b1b1-a68fdb02e240} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11876 24709e40b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.48.1174075023\1357233445" -childID 45 -isForBrowser -prefsHandle 7228 -prefMapHandle 7220 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1af86142-a022-4150-9933-c2abe0fb582e} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7396 2470617d458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.49.1027612267\1822590415" -childID 46 -isForBrowser -prefsHandle 5004 -prefMapHandle 11664 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {58e23a5b-5150-4965-bd84-afa6eb40ac2e} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7436 2470af3f158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.50.244761381\188087088" -childID 47 -isForBrowser -prefsHandle 12212 -prefMapHandle 12208 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f402ab8-0259-4bb0-a69e-308b8b177593} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12188 247017fee58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.51.856084493\203395635" -childID 48 -isForBrowser -prefsHandle 7436 -prefMapHandle 12196 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c8a8e120-4622-4726-a552-6969aa2835a9} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12320 24705748258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.52.1899434006\1929069604" -childID 49 -isForBrowser -prefsHandle 12620 -prefMapHandle 12616 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5f0a7ce-2bfb-4cad-8310-59f3706a1731} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12212 2470c083758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.53.157097350\669242181" -childID 50 -isForBrowser -prefsHandle 12760 -prefMapHandle 12764 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c436e967-0419-4b5a-822e-3f5a6950be95} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12356 2470d1dc858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.54.266380779\1078504697" -childID 51 -isForBrowser -prefsHandle 12600 -prefMapHandle 12604 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d422ef08-6fd6-4eb7-93b9-eb26324a7bb6} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4600 2470f5af558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.55.107861808\2053696196" -childID 52 -isForBrowser -prefsHandle 9752 -prefMapHandle 5876 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {54921be8-528e-4578-ac73-1c6e52445d22} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7964 2470f92eb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.56.1686992120\531801111" -childID 53 -isForBrowser -prefsHandle 13024 -prefMapHandle 13028 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ad2bc934-d1e4-4e3a-8176-0eed2117bc3c} 196 "\\.\pipe\gecko-crash-server-pipe.196" 13016 2470f92c758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.57.505392736\529008699" -childID 54 -isForBrowser -prefsHandle 13224 -prefMapHandle 13228 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c0766bb-95d4-454d-a4ef-7a9a89e125f8} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8856 2470f5afe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.58.328392982\85163508" -childID 55 -isForBrowser -prefsHandle 13500 -prefMapHandle 13504 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0a1f92e7-d542-452d-8569-3083592b68d2} 196 "\\.\pipe\gecko-crash-server-pipe.196" 13568 2470c082258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.59.170327010\648500535" -childID 56 -isForBrowser -prefsHandle 13488 -prefMapHandle 13492 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {198f8629-5edd-43a8-9422-2dcbc75736c9} 196 "\\.\pipe\gecko-crash-server-pipe.196" 13588 2470ad7a158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.60.1535456291\227348271" -childID 57 -isForBrowser -prefsHandle 9452 -prefMapHandle 9592 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {60830e9d-0764-4e3c-8207-b55de57f4e52} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11360 2470098ec58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.61.742886454\1154056297" -childID 58 -isForBrowser -prefsHandle 14004 -prefMapHandle 14008 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b3146532-cb26-4bb4-a25b-c05cffb8fa0a} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8392 24706899558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.62.1378158260\745949621" -childID 59 -isForBrowser -prefsHandle 14204 -prefMapHandle 14208 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {21a51b7c-7595-420b-b1a0-5adca0d1d16a} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8432 2470b08f258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.63.1510868572\1893060170" -childID 60 -isForBrowser -prefsHandle 14008 -prefMapHandle 14156 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {95ef980d-1b27-4966-84aa-c52d677e1199} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14004 24712377a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.64.747148032\798202598" -childID 61 -isForBrowser -prefsHandle 8432 -prefMapHandle 6760 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e61d6741-38cf-402c-b61f-7553fed13215} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14120 24712378358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.65.765465677\56143200" -childID 62 -isForBrowser -prefsHandle 14344 -prefMapHandle 14176 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c0dd3a0-7773-4b01-94e4-facbefa40525} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14352 24711cbfb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.66.878887978\1942968501" -childID 63 -isForBrowser -prefsHandle 14544 -prefMapHandle 14528 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c8258004-2e3a-4387-94d6-9fc8b2fb080f} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14376 2470d01c858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.67.777581369\794375423" -childID 64 -isForBrowser -prefsHandle 14744 -prefMapHandle 14520 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {52cfd755-0499-4a08-89a5-2e432edb79da} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14928 2470d01f258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.68.1303207095\1419811639" -childID 65 -isForBrowser -prefsHandle 15064 -prefMapHandle 15164 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2d7c78fb-4816-4637-905f-f18f53f1ed21} 196 "\\.\pipe\gecko-crash-server-pipe.196" 15056 24711cbe658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.69.1446239332\1180028792" -childID 66 -isForBrowser -prefsHandle 8432 -prefMapHandle 14380 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {889c71b6-3943-4de7-97ee-825ba8a23f0f} 196 "\\.\pipe\gecko-crash-server-pipe.196" 14432 24709764758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.70.744283578\269475452" -childID 67 -isForBrowser -prefsHandle 6440 -prefMapHandle 6436 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b40f6ea9-3f0b-4127-a231-5054d1c2a84b} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7068 24703b15858 tab

C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe

"C:\Users\Admin\Downloads\LDPlayer9_ens_com.supercell.brawlstars_25567197_ld.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.71.1513570499\2093702506" -childID 68 -isForBrowser -prefsHandle 13412 -prefMapHandle 4940 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cf49cbf5-d060-41ff-93e3-40f6be59c6bf} 196 "\\.\pipe\gecko-crash-server-pipe.196" 8804 24708453358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.72.397996416\588905499" -childID 69 -isForBrowser -prefsHandle 13004 -prefMapHandle 6008 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {780cf858-459c-40d2-9ffa-48356b2f0fea} 196 "\\.\pipe\gecko-crash-server-pipe.196" 10012 2470619cb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.73.1676942848\628797737" -childID 70 -isForBrowser -prefsHandle 12192 -prefMapHandle 7320 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1ed8297b-e71c-4b7f-8788-2e6de2e73401} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11804 2470b995b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.74.1362845183\1908580265" -childID 71 -isForBrowser -prefsHandle 12628 -prefMapHandle 12632 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cdc366ed-1848-4dbe-8350-15207532b5be} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12828 2470ba43458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.75.85920284\815117529" -childID 72 -isForBrowser -prefsHandle 12560 -prefMapHandle 12564 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0b0fa751-6045-4b9b-969d-54489e06bf49} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12208 247067bd458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.76.1727374985\1042058712" -childID 73 -isForBrowser -prefsHandle 12664 -prefMapHandle 12340 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5cd615f1-dd92-4281-9e1b-b54f358e3e5b} 196 "\\.\pipe\gecko-crash-server-pipe.196" 12588 2470bb11e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.77.1021145475\295791012" -childID 74 -isForBrowser -prefsHandle 7500 -prefMapHandle 7360 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {63e2d1e5-30a6-40ac-b44c-f1e7e51bd115} 196 "\\.\pipe\gecko-crash-server-pipe.196" 7876 247017fb558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.78.697991825\215528635" -childID 75 -isForBrowser -prefsHandle 13568 -prefMapHandle 13728 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c22cb8e9-09ac-42b9-8203-04bbc89502ae} 196 "\\.\pipe\gecko-crash-server-pipe.196" 13804 24706144258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.79.2010780781\67709999" -childID 76 -isForBrowser -prefsHandle 13084 -prefMapHandle 13848 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d41a8e76-3202-4cbe-8226-c948508338f3} 196 "\\.\pipe\gecko-crash-server-pipe.196" 10432 247065cb758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.80.635857518\1950974112" -childID 77 -isForBrowser -prefsHandle 13784 -prefMapHandle 5996 -prefsLen 26991 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e299b826-cd1d-45f4-a221-fb7df78c54bc} 196 "\\.\pipe\gecko-crash-server-pipe.196" 13040 247092d7d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.81.965549959\66174361" -childID 78 -isForBrowser -prefsHandle 12088 -prefMapHandle 10672 -prefsLen 27361 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0112b85f-fbe1-47df-bd85-89ea612b82c7} 196 "\\.\pipe\gecko-crash-server-pipe.196" 4940 2470372eb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="196.82.468161594\1214611235" -childID 79 -isForBrowser -prefsHandle 11576 -prefMapHandle 12492 -prefsLen 27361 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ac1c409-f6de-4521-874d-aa90db3bee8a} 196 "\\.\pipe\gecko-crash-server-pipe.196" 11628 2470617e358 tab

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayerex.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM bugreport.exe /T

F:\LDPlayer\LDPlayer9\LDPlayer.exe

"F:\LDPlayer\LDPlayer9\\LDPlayer.exe" -silence -downloader -openid=25567197 -language=en -path="F:\LDPlayer\LDPlayer9\"

F:\LDPlayer\LDPlayer9\dnrepairer.exe

"F:\LDPlayer\LDPlayer9\dnrepairer.exe" listener=655938

C:\Windows\SysWOW64\net.exe

"net" start cryptsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start cryptsvc

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Softpub.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Wintrust.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" dssenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" rsaenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" cryptdlg.dll /s

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\vms" /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\\system.vmdk"

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t

C:\Windows\SysWOW64\dism.exe

C:\Windows\system32\dism.exe /Online /English /Get-Features

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" start Ld9BoxSup

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxSup" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxNat" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\VBoxNetNAT.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "dnplayer" -Direction Inbound -Program 'F:\LDPlayer\LDPlayer9\dnplayer.exe' -RemoteAddress LocalSubnet -Action Allow

F:\LDPlayer\LDPlayer9\driverconfig.exe

"F:\LDPlayer\LDPlayer9\driverconfig.exe"

C:\Windows\SysWOW64\takeown.exe

"takeown" /f F:\LDPlayer\ldmutiplayer\ /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" F:\LDPlayer\ldmutiplayer\ /grant everyone:F /t

F:\LDPlayer\LDPlayer9\dnplayer.exe

"F:\LDPlayer\LDPlayer9\\dnplayer.exe" downloadpackage=com.supercell.brawlstars|package=com.supercell.brawlstars

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x41c

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" -Embedding

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s NetSetupSvc

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\..\system.vmdk" --uuid 20160302-bbbb-bbbb-54d7-bbbb00000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\data.vmdk" --uuid 20160302-cccc-cccc-54d7-000000000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk" --uuid 20160302-dddd-dddd-54d7-000000000000

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

Network

Country Destination Domain Proto
US 8.8.8.8:53 x.com udp
US 104.244.42.193:80 x.com tcp
US 104.244.42.193:80 x.com tcp
US 104.244.42.193:443 x.com tcp
US 8.8.8.8:53 abs.twimg.com udp
US 8.8.8.8:53 api.twitter.com udp
US 8.8.8.8:53 api.x.com udp
US 8.8.8.8:53 twitter.com udp
US 152.199.21.141:443 abs.twimg.com tcp
US 104.244.42.194:443 api.twitter.com tcp
US 8.8.8.8:53 pbs.twimg.com udp
US 104.244.42.65:443 twitter.com tcp
US 104.244.42.66:443 api.x.com tcp
US 8.8.8.8:53 t.co udp
US 104.244.42.69:443 t.co tcp
NL 192.229.233.50:443 pbs.twimg.com tcp
US 104.244.42.65:443 twitter.com tcp
US 8.8.8.8:53 193.42.244.104.in-addr.arpa udp
US 152.199.21.141:443 abs.twimg.com tcp
US 8.8.8.8:53 video.twimg.com udp
US 8.8.8.8:53 abs-0.twimg.com udp
GB 199.232.56.158:443 video.twimg.com tcp
US 104.244.43.131:443 abs-0.twimg.com tcp
US 8.8.8.8:53 194.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 65.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 141.21.199.152.in-addr.arpa udp
US 8.8.8.8:53 66.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 69.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 50.233.229.192.in-addr.arpa udp
US 8.8.8.8:53 158.56.232.199.in-addr.arpa udp
US 8.8.8.8:53 131.43.244.104.in-addr.arpa udp
US 104.244.42.66:443 api.x.com tcp
US 8.8.8.8:53 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com tcp
US 8.8.8.8:53 84.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.196:443 www.google.com tcp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 196.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
FR 142.250.178.142:443 apis.google.com tcp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 142.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
FR 172.217.20.174:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 67.214.58.216.in-addr.arpa udp
FR 172.217.20.174:443 play.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
FR 142.250.75.246:443 i.ytimg.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
US 8.8.8.8:53 play-games.googleusercontent.com udp
FR 142.250.178.129:443 play-games.googleusercontent.com udp
FR 142.250.179.86:443 play-lh.googleusercontent.com udp
US 8.8.8.8:53 246.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 86.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 72.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 64.233.166.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 66.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 155.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.201.163:443 www.google.co.uk tcp
US 8.8.8.8:53 payments.google.com udp
FR 142.250.178.142:443 apis.google.com udp
BE 66.102.1.92:443 payments.google.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
FR 142.250.75.234:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 130.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 92.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
FR 216.58.213.78:443 clients2.google.com tcp
US 8.8.8.8:53 78.213.58.216.in-addr.arpa udp
BE 74.125.206.84:443 accounts.google.com udp
FR 142.250.75.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 accounts.youtube.com udp
FR 142.250.179.78:443 accounts.youtube.com tcp
US 8.8.8.8:53 78.179.250.142.in-addr.arpa udp
FR 172.217.20.174:443 play.google.com udp
US 8.8.8.8:53 id.google.com udp
US 74.125.138.94:443 id.google.com tcp
US 8.8.8.8:53 94.138.125.74.in-addr.arpa udp
FR 142.250.75.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 www.youtube.com udp
FR 142.250.75.246:443 i.ytimg.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
FR 142.250.75.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 162.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 230.75.250.142.in-addr.arpa udp
BE 74.125.206.84:443 accounts.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 35.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 google.com udp
FR 142.250.179.110:443 google.com tcp
US 8.8.8.8:53 e2c14.gcp.gvt2.com udp
BE 35.240.1.200:443 e2c14.gcp.gvt2.com tcp
US 8.8.8.8:53 110.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 200.1.240.35.in-addr.arpa udp
US 8.8.8.8:53 beacons.gvt2.com udp
US 192.178.49.163:443 beacons.gvt2.com tcp
US 8.8.8.8:53 163.49.178.192.in-addr.arpa udp
BE 74.125.206.84:443 accounts.google.com udp
FR 142.250.179.78:443 www.youtube.com udp
US 8.8.8.8:53 accounts.wizkids.dk udp
DK 77.66.16.92:443 accounts.wizkids.dk tcp
US 8.8.8.8:53 federation.wizkids.dk udp
DK 77.66.16.72:443 federation.wizkids.dk tcp
US 8.8.8.8:53 broker.unilogin.dk udp
SE 195.231.240.211:443 broker.unilogin.dk tcp
US 8.8.8.8:53 security-check.stil.dk udp
US 8.8.8.8:53 92.16.66.77.in-addr.arpa udp
US 8.8.8.8:53 72.16.66.77.in-addr.arpa udp
SE 195.231.240.102:443 security-check.stil.dk tcp
SE 195.231.240.102:443 security-check.stil.dk tcp
US 8.8.8.8:53 211.240.231.195.in-addr.arpa udp
US 8.8.8.8:53 102.240.231.195.in-addr.arpa udp
SE 195.231.240.211:443 broker.unilogin.dk tcp
US 8.8.8.8:53 atlas.uni-login.dk udp
US 8.8.8.8:53 idp.unilogin.dk udp
US 8.8.8.8:53 sli.emu.dk udp
US 8.8.8.8:53 sso.emu.dk udp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
DK 195.231.237.74:443 sso.emu.dk tcp
DK 195.231.237.112:443 atlas.uni-login.dk tcp
DK 195.231.237.74:443 sso.emu.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
DK 195.231.237.112:443 atlas.uni-login.dk tcp
US 8.8.8.8:53 74.237.231.195.in-addr.arpa udp
US 8.8.8.8:53 112.237.231.195.in-addr.arpa udp
US 8.8.8.8:53 212.240.231.195.in-addr.arpa udp
DK 195.231.237.74:443 sso.emu.dk tcp
DK 195.231.237.74:443 sso.emu.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.102:443 security-check.stil.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
DK 195.231.237.112:443 atlas.uni-login.dk tcp
DK 195.231.237.74:443 sso.emu.dk tcp
DK 195.231.237.74:443 sso.emu.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.212:443 idp.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
SE 195.231.240.211:443 broker.unilogin.dk tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
DK 77.66.16.92:443 accounts.wizkids.dk tcp
FR 172.217.20.196:443 www.google.com udp
FR 142.250.179.78:443 www.youtube.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
FR 142.250.178.129:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 28.173.189.20.in-addr.arpa udp
FR 172.217.20.174:443 www.youtube.com udp
US 8.8.8.8:53 ogs.google.com udp
US 74.125.138.94:443 id.google.com udp
US 192.178.49.163:443 beacons.gvt2.com udp
FR 142.250.179.110:443 google.com udp
FR 142.250.75.246:443 i.ytimg.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn0.gstatic.com tcp
FR 142.250.179.110:443 encrypted-tbn0.gstatic.com tcp
BE 74.125.206.84:443 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com udp
FR 142.250.179.78:443 ogs.google.com udp
US 8.8.8.8:53 25.24.18.2.in-addr.arpa udp
N/A 127.0.0.1:50960 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 44.237.98.207:443 shavar.prod.mozaws.net tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 207.98.237.44.in-addr.arpa udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 53.121.117.34.in-addr.arpa udp
N/A 127.0.0.1:50966 tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.196:443 www.google.com tcp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn3.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 i.ytimg.com udp
FR 142.250.75.246:443 i.ytimg.com tcp
US 8.8.8.8:53 i.ytimg.com udp
FR 142.250.75.246:443 i.ytimg.com udp
US 8.8.8.8:53 play.google.com udp
FR 172.217.20.174:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
FR 172.217.20.174:443 play.google.com udp
US 8.8.8.8:53 www.bluestacks.com udp
PT 13.225.10.72:443 www.bluestacks.com tcp
US 8.8.8.8:53 dbk589trlnxim.cloudfront.net udp
US 8.8.8.8:53 dbk589trlnxim.cloudfront.net udp
US 8.8.8.8:53 72.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn-www.bluestacks.com udp
US 8.8.8.8:53 cdn.now.gg udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
GB 104.91.71.132:443 cdn-www.bluestacks.com tcp
GB 104.91.71.132:443 cdn-www.bluestacks.com tcp
US 8.8.8.8:53 cdn-icon.bluestacks.com udp
GB 104.91.71.132:443 cdn-www.bluestacks.com tcp
US 8.8.8.8:53 a439.dscd.akamai.net udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
GB 104.91.71.132:443 a439.dscd.akamai.net tcp
US 8.8.8.8:53 a439.dscd.akamai.net udp
US 8.8.8.8:53 a1184.dscd.akamai.net udp
US 8.8.8.8:53 a807.dscg2.akamai.net udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 a1184.dscd.akamai.net udp
US 8.8.8.8:53 a807.dscg2.akamai.net udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
GB 104.91.71.133:443 a1184.dscd.akamai.net tcp
NL 104.97.15.58:443 a807.dscg2.akamai.net tcp
NL 104.97.15.58:443 a807.dscg2.akamai.net tcp
NL 104.97.15.58:443 a807.dscg2.akamai.net tcp
GB 104.91.71.132:443 a439.dscd.akamai.net tcp
GB 104.91.71.132:443 a439.dscd.akamai.net tcp
GB 104.91.71.132:443 a439.dscd.akamai.net udp
GB 104.91.71.133:443 a1184.dscd.akamai.net udp
NL 104.97.15.58:443 a807.dscg2.akamai.net udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 42.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 132.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 133.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 58.15.97.104.in-addr.arpa udp
PT 13.225.10.104:443 d23sp3kzv1t6m5.cloudfront.net tcp
US 8.8.8.8:53 104.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 35.156.116.202:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 181.86.160.34.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 202.116.156.35.in-addr.arpa udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 172.217.20.206:443 analytics.google.com tcp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 172.217.20.206:443 analytics.google.com udp
US 8.8.8.8:53 206.20.217.172.in-addr.arpa udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
BE 64.233.166.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 154.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 ak-build.bluestacks.com udp
US 8.8.8.8:53 a266.dscd.akamai.net udp
GB 104.91.71.145:443 a266.dscd.akamai.net tcp
US 8.8.8.8:53 a266.dscd.akamai.net udp
US 8.8.8.8:53 145.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
US 74.125.138.94:443 id.google.com tcp
US 8.8.8.8:53 id.google.com udp
US 74.125.138.94:443 id.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 img.youtube.com udp
FR 142.250.201.174:443 img.youtube.com tcp
US 8.8.8.8:53 ytimg.l.google.com udp
US 8.8.8.8:53 ytimg.l.google.com udp
FR 142.250.201.174:443 ytimg.l.google.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
FR 142.250.179.110:443 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
FR 216.58.213.78:443 youtube-ui.l.google.com tcp
US 8.8.8.8:53 youtube-ui.l.google.com udp
FR 216.58.213.78:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 174.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.75.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
FR 142.250.75.230:443 static.doubleclick.net udp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
FR 216.58.214.170:443 jnn-pa.googleapis.com udp
FR 216.58.214.170:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 170.214.58.216.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 support.bluestacks.com udp
US 104.16.51.111:443 support.bluestacks.com tcp
US 104.16.51.111:443 support.bluestacks.com tcp
US 8.8.8.8:53 111.51.16.104.in-addr.arpa udp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 static.zdassets.com udp
US 8.8.8.8:53 use.fontawesome.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 104.18.72.113:443 static.zdassets.com tcp
US 104.18.72.113:443 static.zdassets.com tcp
US 172.67.142.245:443 use.fontawesome.com tcp
US 172.67.142.245:443 use.fontawesome.com tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
US 8.8.8.8:53 theme.zdassets.com udp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 8.8.8.8:53 x2.c.lencr.org udp
US 8.8.8.8:53 bluestacks.zendesk.com udp
US 104.18.72.113:443 theme.zdassets.com tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 113.72.18.104.in-addr.arpa udp
US 8.8.8.8:53 245.142.67.172.in-addr.arpa udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 www.youtube-nocookie.com udp
FR 216.58.213.78:443 www.youtube-nocookie.com tcp
FR 216.58.213.78:443 www.youtube-nocookie.com tcp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 widget.kommunicate.io udp
PT 13.225.10.78:443 widget.kommunicate.io tcp
PT 13.225.10.78:443 widget.kommunicate.io tcp
US 8.8.8.8:53 bluestacks-zendesk-com.disqus.com udp
US 104.18.72.113:443 theme.zdassets.com tcp
US 104.18.72.113:443 theme.zdassets.com tcp
US 199.232.192.134:443 bluestacks-zendesk-com.disqus.com tcp
US 199.232.192.134:443 bluestacks-zendesk-com.disqus.com tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 78.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 134.192.232.199.in-addr.arpa udp
US 8.8.8.8:53 226.152.155.18.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 134.15.225.13.in-addr.arpa udp
US 8.8.8.8:53 ocsp.r2m02.amazontrust.com udp
PT 13.225.9.161:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 161.9.225.13.in-addr.arpa udp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
FR 172.217.20.196:443 www.google.com tcp
FR 172.217.20.196:443 www.google.com tcp
FR 142.250.201.182:443 i.ytimg.com tcp
FR 142.250.201.182:443 i.ytimg.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
FR 172.217.20.193:443 yt3.ggpht.com tcp
FR 172.217.20.193:443 yt3.ggpht.com tcp
US 8.8.8.8:53 182.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 cdn.kommunicate.io udp
PT 13.225.10.57:443 cdn.kommunicate.io tcp
PT 13.225.10.57:443 cdn.kommunicate.io tcp
US 8.8.8.8:53 193.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 57.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 ocsp.r2m03.amazontrust.com udp
PT 13.225.9.161:80 ocsp.r2m03.amazontrust.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
FR 216.58.213.78:443 www.youtube-nocookie.com tcp
FR 216.58.213.78:443 www.youtube-nocookie.com tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
FR 216.58.214.170:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.206:443 www.youtube-nocookie.com udp
FR 216.58.213.78:443 www.youtube-nocookie.com udp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 pornhub.com udp
US 66.254.114.41:80 pornhub.com tcp
US 66.254.114.41:80 pornhub.com tcp
US 8.8.8.8:53 pornhub.com udp
US 66.254.114.41:443 pornhub.com tcp
US 8.8.8.8:53 www.pornhub.com udp
US 66.254.114.41:443 www.pornhub.com tcp
US 8.8.8.8:53 static.trafficjunky.com udp
US 8.8.8.8:53 ei.phncdn.com udp
US 8.8.8.8:53 cdn1-smallimg.phncdn.com udp
US 8.8.8.8:53 media.trafficjunky.net udp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.21:443 media.trafficjunky.net tcp
GB 64.210.156.16:443 media.trafficjunky.net tcp
GB 64.210.156.19:443 media.trafficjunky.net tcp
GB 64.210.156.19:443 media.trafficjunky.net tcp
US 8.8.8.8:53 41.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 ei.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 media.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 static.trafficjunky.com.sds.rncdn7.com udp
US 104.21.56.52:443 prvc.io tcp
US 8.8.8.8:53 media.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 static.trafficjunky.com.sds.rncdn7.com udp
US 8.8.8.8:53 ei.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 smallimg.phncdn.com udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 smallimg.phncdn.com udp
US 66.254.114.156:443 smallimg.phncdn.com tcp
US 8.8.8.8:53 prvc.io udp
US 104.21.56.52:443 prvc.io udp
US 66.254.114.156:443 smallimg.phncdn.com tcp
US 8.8.8.8:53 21.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 16.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 19.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 52.56.21.104.in-addr.arpa udp
US 8.8.8.8:53 156.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 ss.phncdn.com udp
GB 64.210.156.21:443 ss.phncdn.com tcp
US 8.8.8.8:53 ss.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 ss.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 unpkg.com udp
US 104.17.249.203:443 unpkg.com tcp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 203.249.17.104.in-addr.arpa udp
US 8.8.8.8:53 ads.trafficjunky.net udp
US 8.8.8.8:53 eg-cdn.trafficjunky.net udp
US 66.254.114.154:443 ads.trafficjunky.net tcp
US 8.8.8.8:53 ads.trafficjunky.net udp
US 8.8.8.8:53 cs742.wpc.rncdn4.com udp
US 8.8.8.8:53 ads.trafficjunky.net udp
US 8.8.8.8:53 cs742.wpc.rncdn4.com udp
PL 93.184.223.43:443 cs742.wpc.rncdn4.com tcp
US 8.8.8.8:53 hw-cdn2.ang-content.com udp
US 8.8.8.8:53 hw-cdn2.adtng.com udp
GB 64.210.156.3:443 hw-cdn2.adtng.com tcp
US 8.8.8.8:53 hw-cdn2.ang-content.com.lds.rncdn7.com udp
GB 64.210.156.3:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
GB 64.210.156.1:443 hw-cdn2.ang-content.com.lds.rncdn7.com tcp
US 8.8.8.8:53 hw-cdn2.adtng.com.lds.rncdn7.com udp
US 8.8.8.8:53 hw-cdn2.ang-content.com.lds.rncdn7.com udp
US 8.8.8.8:53 hw-cdn2.adtng.com.lds.rncdn7.com udp
US 8.8.8.8:53 154.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 43.223.184.93.in-addr.arpa udp
US 8.8.8.8:53 3.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 1.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 storage.googleapis.com udp
FR 172.217.20.187:443 storage.googleapis.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 storage.googleapis.com udp
FR 172.217.20.187:443 storage.googleapis.com udp
US 8.8.8.8:53 187.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 ew.phncdn.com udp
GB 64.210.156.17:443 ew.phncdn.com tcp
US 8.8.8.8:53 ew.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 ew.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 17.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 ei.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 chaturbate.com udp
US 104.18.100.40:443 chaturbate.com tcp
US 8.8.8.8:53 chaturbate.com udp
US 8.8.8.8:53 chaturbate.com udp
US 104.18.100.40:443 chaturbate.com udp
GB 64.210.156.19:443 ew.phncdn.com.sds.rncdn7.com tcp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com udp
US 104.21.56.52:443 prvc.io udp
FR 172.217.20.187:443 storage.googleapis.com tcp
GB 64.210.156.17:443 cdn1d-static-shared.phncdn.com tcp
US 8.8.8.8:53 pornhub.com udp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com.sds.rncdn7.com udp
FR 172.217.20.187:443 storage.googleapis.com udp
US 8.8.8.8:53 cdn1d-static-shared.phncdn.com.sds.rncdn7.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.17.2.184:443 challenges.cloudflare.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 40.100.18.104.in-addr.arpa udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.17.2.184:443 challenges.cloudflare.com udp
US 8.8.8.8:53 184.2.17.104.in-addr.arpa udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net.sds.rncdn7.com udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net.sds.rncdn7.com udp
GB 64.210.156.22:443 ht-cdn.trafficjunky.net.sds.rncdn7.com tcp
US 8.8.8.8:53 a.adtng.com udp
US 66.254.114.171:443 a.adtng.com tcp
US 8.8.8.8:53 a.adtng.com udp
US 66.254.114.171:443 a.adtng.com tcp
US 8.8.8.8:53 22.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 a.adtng.com udp
GB 64.210.156.3:443 hw-cdn2.adtng.com.lds.rncdn7.com tcp
GB 64.210.156.1:443 hw-cdn2.adtng.com.lds.rncdn7.com tcp
US 8.8.8.8:53 171.114.254.66.in-addr.arpa udp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 id.google.com udp
FR 142.250.179.99:443 id.google.com udp
FR 142.250.179.99:443 id.google.com tcp
US 8.8.8.8:53 99.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
FR 172.217.20.174:443 play.google.com udp
US 8.8.8.8:53 brawl-stars.en.softonic.com udp
US 151.101.1.91:443 brawl-stars.en.softonic.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.1.91:443 n.sni.global.fastly.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
PT 13.225.10.6:443 sdk.privacy-center.org tcp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 199.232.213.91:443 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 204.79.197.237:443 bat.bing.com tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 199.232.213.91:443 softonic.com udp
PT 13.225.10.6:443 sdk.privacy-center.org udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 91.213.232.199.in-addr.arpa udp
US 8.8.8.8:53 93.82.68.104.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 199.232.213.91:443 softonic.com udp
DE 18.155.141.142:443 www.datadoghq-browser-agent.com tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 btloader.com udp
PT 13.225.243.154:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 142.141.155.18.in-addr.arpa udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 154.243.225.13.in-addr.arpa udp
PT 13.225.243.154:443 d1ykf07e75w7ss.cloudfront.net tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 api.btloader.com udp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
PT 13.225.10.102:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 notix.io udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 104.22.52.86:443 cdn.id5-sync.com tcp
FR 172.217.20.187:443 storage.googleapis.com tcp
US 8.8.8.8:53 102.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
FR 172.217.20.187:443 storage.googleapis.com udp
US 8.8.8.8:53 api.privacy-center.org udp
PT 13.225.10.129:443 api.privacy-center.org tcp
PT 13.225.10.129:443 api.privacy-center.org tcp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 id5-sync.com udp
PT 13.225.15.148:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prebid.media.net udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 8.8.8.8:53 rt.marphezis.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 wct.softonic.com udp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 rt.marphezis.com udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 api.wecantrack.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 api.wecantrack.com udp
FR 142.250.179.78:443 www.adsensecustomsearchads.com tcp
FR 142.250.179.78:443 www.adsensecustomsearchads.com tcp
PT 13.225.10.129:443 api.privacy-center.org udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 www3.l.google.com udp
FR 142.250.179.78:443 www3.l.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
FR 142.250.179.78:443 www3.l.google.com udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 0a810cee5b33d02e0db1475ec2cf8513.safeframe.googlesyndication.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
FR 216.58.214.161:443 0a810cee5b33d02e0db1475ec2cf8513.safeframe.googlesyndication.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 34.120.63.153:443 prebid.media.net tcp
IE 63.32.35.158:443 ad.360yield.com tcp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
IE 99.80.216.153:443 ap.lijit.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 129.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 148.15.225.13.in-addr.arpa udp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
US 8.8.8.8:53 173.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
FR 216.58.214.161:443 pagead-googlehosted.l.google.com udp
US 34.120.63.153:443 prebid.media.net udp
US 104.18.36.155:443 htlb.casalemedia.com udp
IE 63.32.35.158:443 ad.360yield.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 161.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 98.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 153.216.80.99.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 158.35.32.63.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ampcid.google.com udp
FR 216.58.214.174:443 ampcid.google.com tcp
FR 216.58.214.174:443 ampcid.google.com udp
US 8.8.8.8:53 ampcid.google.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 174.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 ampcid.google.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
FR 185.235.86.2:443 ag.gbc.criteo.com tcp
US 8.8.8.8:53 gbc0.fr3.eu.criteo.com udp
NL 185.235.87.16:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 gbc0.nl3.eu.criteo.com udp
US 8.8.8.8:53 gbc0.nl3.eu.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gbc0.fr3.eu.criteo.com udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
BE 64.233.166.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 2.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 16.87.235.185.in-addr.arpa udp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
FR 172.217.20.206:443 www.youtube-nocookie.com tcp
US 8.8.8.8:53 www.google.co.uk udp
FR 172.217.20.206:443 www.youtube-nocookie.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
FR 216.58.213.65:443 cdn.ampproject.org tcp
FR 216.58.213.65:443 cdn.ampproject.org tcp
FR 216.58.213.65:443 cdn.ampproject.org tcp
FR 216.58.213.65:443 cdn.ampproject.org tcp
FR 216.58.213.65:443 cdn.ampproject.org tcp
FR 216.58.213.65:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
FR 216.58.213.65:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 65.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 id5-sync.com udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
SE 104.73.92.198:443 ads.pubmatic.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 acdn.adnxs.com udp
BE 2.21.16.25:443 contextual.media.net tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 198.92.73.104.in-addr.arpa udp
US 8.8.8.8:53 28.233.55.162.in-addr.arpa udp
BE 2.21.16.25:443 contextual.media.net udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image8.pubmatic.com udp
DE 54.230.206.32:443 api-2-0.spot.im tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 18.233.190.228:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 imgsync-amsfpairbc.pubmnet.com udp
US 8.8.8.8:53 player.aniview.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
GB 104.91.71.142:443 player.aniview.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 imgsync-amsfpairbc.pubmnet.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
FR 5.196.111.69:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 32.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 228.190.233.18.in-addr.arpa udp
DE 51.75.86.98:443 onetag-sys.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 sync.1rx.io udp
GB 104.91.71.142:443 player.aniview.com udp
NL 185.89.210.212:443 secure.adnxs.com tcp
NL 185.89.210.212:443 secure.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
IE 52.48.246.250:443 match.prod.bidr.io tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 198.47.127.18:443 imgsync-amsfpairbc.pubmnet.com tcp
US 54.164.74.54:443 sync.srv.stackadapt.com tcp
IE 52.50.65.213:443 jadserve.postrelease.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 cdn.indexww.com udp
US 172.64.149.180:443 cdn.indexww.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 80.77.87.162:443 cs.admanmedia.com tcp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 142.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 69.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 213.65.50.52.in-addr.arpa udp
US 8.8.8.8:53 250.246.48.52.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 sync.aniview.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 104.22.50.98:443 spl.zeotap.com tcp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 96.46.186.182:443 sync.aniview.com tcp
PT 13.225.10.62:443 s.ad.smaato.net tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
FR 5.196.111.72:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 sync-sc.aniview.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync-sc.aniview.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
DE 3.121.157.160:443 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com tcp
US 216.200.232.253:443 pixel-origin.mathtag.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.net.akadns.net tcp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
NL 81.17.55.122:443 ssbsync-euw1.smartadserver.com tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 62.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 72.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 182.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 122.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 116.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 160.157.121.3.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 161.182.54.209.in-addr.arpa udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 175.18.21.2.in-addr.arpa udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 brawl-stars.en.softonic.com udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 23.21.79.199:443 qvdt3feo.com tcp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 199.79.21.23.in-addr.arpa udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.1.91:443 brawl-stars.en.softonic.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 151.101.1.91:443 brawl-stars.en.softonic.com udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
GB 163.70.151.35:443 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 139.45.197.253:443 notix.io tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 91cfc027156df6ea93ee8e168a0cff70.safeframe.googlesyndication.com udp
FR 216.58.214.161:443 91cfc027156df6ea93ee8e168a0cff70.safeframe.googlesyndication.com tcp
FR 216.58.214.161:443 91cfc027156df6ea93ee8e168a0cff70.safeframe.googlesyndication.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 202.228.220.67.in-addr.arpa udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.1.91:443 n.sni.global.fastly.net udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 www.google.com udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
NL 185.89.210.212:443 secure.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.48.246.250:443 match.prod.bidr.io tcp
US 54.164.74.54:443 sync.srv.stackadapt.com tcp
FR 5.196.111.69:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 c1.adform.net udp
FR 5.196.111.72:443 rtb-csync-euw2.smartadserver.com tcp
DK 37.157.3.26:443 c1.adform.net tcp
US 8.8.8.8:53 track.adformnet.akadns.net udp
DE 3.121.157.160:443 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 81.17.55.122:443 ssbsync-euw1.smartadserver.com tcp
US 8.8.8.8:53 track.adformnet.akadns.net udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
DE 18.194.142.248:443 match-eu-central-1-ecs.sharethrough.com tcp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 26.3.157.37.in-addr.arpa udp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.1.91:443 en.softonic.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.1.91:443 en.softonic.com tcp
US 151.101.1.91:443 en.softonic.com udp
US 8.8.8.8:53 leap.ldplayer.gg udp
US 8.8.8.8:53 leap.ldplayer.gg.w.kunlungr.com udp
US 163.181.154.238:443 leap.ldplayer.gg.w.kunlungr.com tcp
US 8.8.8.8:53 leap.ldplayer.gg.w.kunlungr.com udp
PT 13.225.10.6:443 sdk.privacy-center.org udp
US 199.232.213.91:443 softonic.com udp
US 8.8.8.8:53 www.ldplayer.net udp
US 8.8.8.8:53 248.142.194.18.in-addr.arpa udp
US 8.8.8.8:53 238.154.181.163.in-addr.arpa udp
US 163.181.154.237:443 www.ldplayer.net tcp
US 8.8.8.8:53 www.ldplayer.net.w.kunlungr.com udp
US 8.8.8.8:53 www.ldplayer.net.w.kunlungr.com udp
US 8.8.8.8:53 237.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 cmp.setupcmp.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
FR 142.250.179.86:443 play-lh.googleusercontent.com tcp
US 104.26.5.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 104.26.5.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 cmp.setupcmp.com udp
FR 142.250.179.78:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 stpd.cloud udp
US 8.8.8.8:53 cmp.setupcmp.com udp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
PT 13.225.10.2:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 d266zoinebx0lb.cloudfront.net udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
FR 142.250.179.86:443 play-lh.googleusercontent.com udp
FR 142.250.179.78:443 fundingchoicesmessages.google.com udp
PT 13.225.10.2:443 d266zoinebx0lb.cloudfront.net udp
US 104.18.30.49:443 stpd.cloud tcp
US 8.8.8.8:53 stpd.cloud udp
US 8.8.8.8:53 d266zoinebx0lb.cloudfront.net udp
US 8.8.8.8:53 stpd.cloud udp
US 151.101.1.91:443 en.softonic.com udp
US 8.8.8.8:53 6.5.26.104.in-addr.arpa udp
US 8.8.8.8:53 2.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 49.30.18.104.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
FR 142.250.178.142:443 apis.google.com tcp
US 8.8.8.8:53 plus.l.google.com udp
US 8.8.8.8:53 plus.l.google.com udp
NL 139.45.197.253:443 notix.io tcp
FR 142.250.178.142:443 plus.l.google.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 e3ca65ac409454494c52478d30cf1194.safeframe.googlesyndication.com udp
FR 216.58.214.161:443 e3ca65ac409454494c52478d30cf1194.safeframe.googlesyndication.com tcp
FR 216.58.214.161:443 e3ca65ac409454494c52478d30cf1194.safeframe.googlesyndication.com udp
US 163.181.154.236:443 www.ldplayer.net.w.kunlungr.com tcp
US 8.8.8.8:53 ldcdn.ldmnq.com.w.kunlunsl.com udp
US 8.8.8.8:53 ldcdn.ldmnq.com.w.kunlunsl.com udp
US 8.8.8.8:53 236.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 js.adscale.de udp
US 8.8.8.8:53 d2w45tum40fmzp.cloudfront.net udp
DE 52.85.92.45:443 js.adscale.de tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 d2w45tum40fmzp.cloudfront.net udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ih.adscale.de udp
DE 52.57.121.98:443 ih.adscale.de tcp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 45.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 98.121.57.52.in-addr.arpa udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
FR 185.235.86.2:443 gbc0.fr3.eu.criteo.com tcp
NL 185.235.87.16:443 gbc0.nl3.eu.criteo.com tcp
NL 23.63.101.153:443 qsearch-a.akamaihd.net tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 153.101.63.23.in-addr.arpa udp
DE 157.90.0.38:443 s.richaudience.com tcp
US 8.8.8.8:53 38.0.90.157.in-addr.arpa udp
US 8.8.8.8:53 push-sdk.com udp
DE 23.88.8.125:443 push-sdk.com tcp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 cd.connatix.com udp
US 8.8.8.8:53 cd.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 cd.connatix.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 cd.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 cd.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 125.8.88.23.in-addr.arpa udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 cds.connatix.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 cds.connatix.com.cdn.cloudflare.net udp
BE 2.21.16.25:443 contextual.media.net udp
US 8.8.8.8:53 cds.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 fb70eca989216c7e1eb59271daa9da82.safeframe.googlesyndication.com udp
FR 216.58.214.161:443 fb70eca989216c7e1eb59271daa9da82.safeframe.googlesyndication.com tcp
FR 216.58.214.161:443 fb70eca989216c7e1eb59271daa9da82.safeframe.googlesyndication.com tcp
FR 216.58.214.161:443 fb70eca989216c7e1eb59271daa9da82.safeframe.googlesyndication.com udp
US 104.18.41.104:443 cds.connatix.com.cdn.cloudflare.net tcp
US 104.18.41.104:443 cds.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 104.41.18.104.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 capi.connatix.com.cdn.cloudflare.net tcp
US 172.64.146.152:443 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ins.connatix.com udp
US 8.8.8.8:53 vid.connatix.com udp
US 172.64.146.152:443 vid.connatix.com tcp
US 172.64.146.152:443 vid.connatix.com tcp
US 172.64.146.152:443 vid.connatix.com tcp
US 172.64.146.152:443 vid.connatix.com tcp
US 172.64.146.152:443 vid.connatix.com tcp
US 8.8.8.8:53 ins.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 ins.connatix.com.cdn.cloudflare.net tcp
US 172.64.146.152:443 ins.connatix.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 vid.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 vid.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ins.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 vid.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 vid.connatix.com.cdn.cloudflare.net udp
US 104.18.41.104:443 vid.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 player.aniview.com udp
FR 142.250.178.138:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
FR 5.196.111.69:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
FR 142.250.178.138:443 imasdk.googleapis.com udp
NL 185.89.210.212:443 secure.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.48.246.250:443 match.prod.bidr.io tcp
US 54.164.74.54:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 138.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 img.connatix.com udp
US 172.64.146.152:443 img.connatix.com tcp
US 8.8.8.8:53 img.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 s0.2mdn.net udp
FR 5.196.111.72:443 rtb-csync-euw2.smartadserver.com tcp
FR 5.196.111.72:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 s0.2mdn.net udp
DE 3.121.157.160:443 rtb.mfadsrvr.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 81.17.55.122:443 ssbsync-euw1.smartadserver.com tcp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
FR 142.250.75.230:443 s0.2mdn.net tcp
FR 142.250.75.230:443 s0.2mdn.net tcp
FR 142.250.75.230:443 s0.2mdn.net tcp
FR 142.250.75.230:443 s0.2mdn.net tcp
FR 142.250.75.230:443 s0.2mdn.net udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 104.18.41.104:443 img.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 151.101.1.91:443 en.softonic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 216.239.32.3:443 csi.gstatic.com udp
US 8.8.8.8:53 3.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
SG 8.219.223.66:443 usersdk.ldmnq.com tcp
US 8.8.8.8:53 alb-nlrme3iinq4n8lu6ii.ap-southeast-1.alb.aliyuncs.com udp
SG 8.219.223.66:443 alb-nlrme3iinq4n8lu6ii.ap-southeast-1.alb.aliyuncs.com tcp
US 8.8.8.8:53 alb-nlrme3iinq4n8lu6ii.ap-southeast-1.alb.aliyuncs.com udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
FR 142.250.179.86:443 play-lh.googleusercontent.com udp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 api.ldshop.gg udp
US 8.8.8.8:53 invite.ldplayer.net udp
US 8.8.8.8:53 alb-jb6sn35is8rk9th51h.ap-southeast-1.alb.aliyuncs.com udp
SG 8.222.229.130:443 alb-jb6sn35is8rk9th51h.ap-southeast-1.alb.aliyuncs.com tcp
PT 13.225.10.16:443 apien.ldplayer.net tcp
US 8.8.8.8:53 d11tnhg3h7a3bd.cloudfront.net udp
PT 13.225.10.16:443 d11tnhg3h7a3bd.cloudfront.net tcp
SG 8.219.66.74:443 invite.ldplayer.net tcp
US 8.8.8.8:53 alb-shkm79to4v4xg6fs5g.ap-southeast-1.alb.aliyuncs.com udp
SG 8.222.229.130:443 alb-jb6sn35is8rk9th51h.ap-southeast-1.alb.aliyuncs.com tcp
US 8.8.8.8:53 d11tnhg3h7a3bd.cloudfront.net udp
US 8.8.8.8:53 alb-shkm79to4v4xg6fs5g.ap-southeast-1.alb.aliyuncs.com udp
US 8.8.8.8:53 alb-jb6sn35is8rk9th51h.ap-southeast-1.alb.aliyuncs.com udp
SG 8.219.66.74:443 alb-shkm79to4v4xg6fs5g.ap-southeast-1.alb.aliyuncs.com tcp
PT 13.225.10.16:443 d11tnhg3h7a3bd.cloudfront.net udp
US 8.8.8.8:53 invite.ldplayer.net udp
PT 13.225.10.16:443 d11tnhg3h7a3bd.cloudfront.net udp
US 8.8.8.8:53 66.223.219.8.in-addr.arpa udp
US 8.8.8.8:53 16.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 130.229.222.8.in-addr.arpa udp
US 8.8.8.8:53 74.66.219.8.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 bat.bing.com udp
BE 74.125.206.84:443 accounts.google.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 hm.baidu.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
CN 14.215.183.79:443 hm.baidu.com tcp
CN 14.215.183.79:443 hm.baidu.com tcp
US 8.8.8.8:53 hm.e.shifen.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
CN 14.215.183.79:443 hm.e.shifen.com tcp
CN 14.215.183.79:443 hm.e.shifen.com tcp
US 8.8.8.8:53 hm.e.shifen.com udp
US 8.8.8.8:53 oss.ld-space.com udp
US 163.181.154.147:443 oss.ld-space.com tcp
US 8.8.8.8:53 oss.ld-space.com.w.kunlungem.com udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 8.8.8.8:53 oss.ld-space.com.w.kunlungem.com udp
US 8.8.8.8:53 147.154.181.163.in-addr.arpa udp
FR 172.217.20.206:443 www.youtube-nocookie.com tcp
FR 172.217.20.206:443 www.youtube-nocookie.com tcp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
FR 172.217.20.206:443 www.youtube-nocookie.com udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
FR 172.217.20.162:443 www.googletagservices.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 www.googletagservices.com udp
FR 172.217.20.162:443 www.googletagservices.com udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
BE 64.233.166.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 162.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
PT 13.225.10.113:443 tagan.adlightning.com tcp
US 8.8.8.8:53 tagan.adlightning.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.1.229:443 jsdelivr.map.fastly.net tcp
PT 13.225.10.113:443 tagan.adlightning.com tcp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
FR 172.217.20.196:443 www.google.com tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 172.217.20.196:443 www.google.com tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 172.217.20.196:443 www.google.com tcp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:53 113.10.225.13.in-addr.arpa udp
FR 172.217.20.196:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 bid.g.doubleclick.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
BE 66.102.1.155:443 bid.g.doubleclick.net tcp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
BE 66.102.1.155:443 bid.g.doubleclick.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
BE 66.102.1.155:443 bid.g.doubleclick.net udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
US 8.8.8.8:53 e4751.b.akamaiedge.net udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 8.8.8.8:53 e4751.b.akamaiedge.net udp
US 216.239.32.3:443 csi.gstatic.com udp
BE 104.68.68.28:443 e4751.b.akamaiedge.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 28.68.68.104.in-addr.arpa udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 d3n1ms4uhtqgov.cloudfront.net udp
PT 13.225.242.83:443 d3n1ms4uhtqgov.cloudfront.net tcp
US 8.8.8.8:53 83.242.225.13.in-addr.arpa udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
PT 13.225.242.56:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 56.242.225.13.in-addr.arpa udp
PT 13.225.242.56:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 encdn.ldmnq.com udp
PT 13.225.10.101:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 101.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 124.242.225.13.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.1.91:443 en.softonic.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.1.91:443 n.sni.global.fastly.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 199.232.213.91:443 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 8.8.8.8:53 softonic.com udp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
PT 13.225.10.39:443 sdk.privacy-center.org tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 104.26.8.169:443 script.4dex.io tcp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid-stag.setupad.net udp
US 8.8.8.8:53 e10700.dsca.akamaiedge.net udp
US 104.26.9.178:443 prebid-stag.setupad.net tcp
US 8.8.8.8:53 adx.adform.net udp
US 8.8.8.8:53 rtb.adxpremium.services udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 prebid-stag.setupad.net udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid-stag.setupad.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid-eu.creativecdn.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 178.32.210.227:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 rtb.adxpremium.services udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 rtb.adxpremium.services udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
US 35.186.253.211:443 rtb.openx.net tcp
DK 37.157.5.84:443 adx.adform.net tcp
US 104.18.34.178:443 mp.4dex.io tcp
US 104.26.9.178:443 prebid-stag.setupad.net tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 145.40.97.67:443 am6-prebid.a-mx.net tcp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 199.232.213.91:443 softonic.com udp
US 8.8.8.8:53 cadmus.script.ac udp
PT 13.225.10.39:443 sdk.privacy-center.org udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 104.26.8.169:443 script.4dex.io tcp
US 8.8.8.8:53 prebid-eu.creativecdn.com udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 169.8.26.104.in-addr.arpa udp
US 8.8.8.8:53 39.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 178.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 227.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 18.140.106.185.in-addr.arpa udp
US 8.8.8.8:53 84.5.157.37.in-addr.arpa udp
US 8.8.8.8:53 178.34.18.104.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 prebid-eu.creativecdn.com udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 199.232.213.91:443 softonic.com udp
US 104.26.8.169:443 script.4dex.io tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cadmus.script.ac udp
PT 13.225.241.117:443 www.datadoghq-browser-agent.com tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
PT 13.225.10.39:443 sdk.privacy-center.org udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 117.241.225.13.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
SG 8.219.136.97:443 middledata.ldplayer.net tcp
US 130.211.23.194:443 api.btloader.com udp
PT 13.225.243.154:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 97.136.219.8.in-addr.arpa udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 130.211.23.194:443 api.btloader.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 adxbid.info udp
US 8.8.8.8:53 setupad-d.openx.net udp
US 172.67.138.13:443 adxbid.info tcp
US 8.8.8.8:53 adxbid.info udp
US 35.244.159.8:443 setupad-d.openx.net tcp
US 8.8.8.8:53 setupad-d.openx.net udp
US 35.244.159.8:443 setupad-d.openx.net udp
US 172.67.138.13:443 adxbid.info udp
US 8.8.8.8:53 setupad-d.openx.net udp
US 8.8.8.8:53 adxbid.info udp
US 8.8.8.8:53 13.138.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 as.ck-ie.com udp
US 8.2.110.113:443 as.ck-ie.com tcp
US 8.8.8.8:53 as.ck-ie.com udp
US 8.8.8.8:53 as.ck-ie.com udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 113.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 vid.vidoomy.com udp
US 8.8.8.8:53 1651846316.rsc.cdn77.org udp
GB 89.187.167.6:443 vid.vidoomy.com tcp
US 8.8.8.8:53 1651846316.rsc.cdn77.org udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 172.64.151.101:443 ssum.casalemedia.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 6.167.187.89.in-addr.arpa udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 vpaid.vidoomy.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
GB 195.181.164.14:443 vpaid.vidoomy.com tcp
US 8.8.8.8:53 1099493781.rsc.cdn77.org udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 172.64.151.101:443 ssum.casalemedia.com udp
US 8.8.8.8:53 1099493781.rsc.cdn77.org udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 user-sync.adxpremium.services udp
US 8.8.8.8:53 user-sync.adxpremium.services udp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
US 8.8.8.8:53 user-sync.adxpremium.services udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
NL 2.18.121.72:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 14.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 180.201.192.209.in-addr.arpa udp
US 8.8.8.8:53 72.121.18.2.in-addr.arpa udp
SE 104.73.92.198:443 ads.pubmatic.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net udp
US 172.64.146.152:443 img.connatix.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 ap.lijit.com udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
IE 54.228.103.145:443 ap.lijit.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
FR 142.250.178.142:443 redirector.gvt1.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
FR 142.250.178.142:443 redirector.gvt1.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 145.103.228.54.in-addr.arpa udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 creativecdn.com udp
FR 142.250.178.142:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 creativecdn.com udp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 image6.pubmatic.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 pugm-lhrc.pubmnet.com udp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 185.64.190.78:443 pugm-lhrc.pubmnet.com tcp
US 8.8.8.8:53 pugm-lhrc.pubmnet.com udp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 166.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 78.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 prebid.media.net udp
US 104.18.36.155:443 ssum.casalemedia.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 ad.360yield.com udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
DK 37.157.5.84:443 cm.adform.net tcp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 prebid.media.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 prebid.media.net udp
US 178.128.135.204:443 rt.marphezis.com tcp
FR 216.58.213.65:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
PT 13.225.242.114:443 d1arl2thrafelv.cloudfront.net tcp
PT 13.225.242.114:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 114.242.225.13.in-addr.arpa udp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 49.4.219.8.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
FR 142.250.75.238:80 www.google-analytics.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
PT 13.225.15.148:443 d1jvc9b8z3vcjs.cloudfront.net tcp
US 178.128.135.204:443 rt.marphezis.com tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
DE 157.90.0.38:443 s.richaudience.com tcp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 prebid.media.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 ad.360yield.com udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 ap.lijit.com udp
IE 52.212.132.56:443 ad.360yield.com tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
IE 52.19.129.64:443 ap.lijit.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 56.132.212.52.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.179.97:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
FR 142.250.75.238:80 www.google-analytics.com tcp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.51:443 ad.ldplayer.net tcp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 8.8.8.8:53 en.ldplayer.net udp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
US 163.181.154.234:443 en.ldplayer.net tcp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 51.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 234.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 35.145.155.18.in-addr.arpa udp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 advertise.ldplayer.net udp
US 163.181.154.248:443 advertise.ldplayer.net tcp
US 8.8.8.8:53 248.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 163.181.154.241:443 res.ldplayer.net tcp
SG 8.219.4.49:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 241.154.181.163.in-addr.arpa udp
US 163.181.154.241:443 res.ldplayer.net tcp
US 163.181.154.241:443 res.ldplayer.net tcp
US 163.181.154.248:443 advertise.ldplayer.net tcp
PT 13.225.10.51:443 ad.ldplayer.net tcp
PT 13.225.10.51:443 ad.ldplayer.net tcp
US 163.181.154.241:443 res.ldplayer.net tcp
US 163.181.154.241:443 res.ldplayer.net tcp
US 8.8.8.8:53 alliance.ldplayer.net udp
PT 13.225.10.16:443 alliance.ldplayer.net tcp
US 8.8.8.8:53 apien.ldmnq.com udp
PT 13.225.10.43:80 apien.ldmnq.com tcp
PT 13.225.10.43:443 apien.ldmnq.com tcp
PT 13.225.9.161:80 ocsp.r2m03.amazontrust.com tcp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 encdn.ldmnq.com udp
PT 13.225.10.94:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
US 163.181.154.241:443 res.ldplayer.net tcp
PT 13.225.10.43:443 apien.ldmnq.com tcp
US 163.181.154.241:443 res.ldplayer.net tcp
US 163.181.154.241:443 res.ldplayer.net tcp
US 8.8.8.8:53 94.10.225.13.in-addr.arpa udp
DE 18.155.145.35:443 cdn.ldplayer.net tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
PT 13.225.10.51:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 79.10.225.13.in-addr.arpa udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 34.217.165.32:443 locprod2-elb-us-west-2.prod.mozaws.net tcp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 32.165.217.34.in-addr.arpa udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 128.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
DE 157.90.0.38:443 s.richaudience.com tcp
US 178.128.135.204:443 rt.marphezis.com tcp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
DE 18.155.155.98:443 aax.amazon-adsystem.com tcp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 ap.lijit.com udp
IE 52.212.132.56:443 ad.360yield.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
IE 54.77.16.195:443 ap.lijit.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 98.155.155.18.in-addr.arpa udp
US 8.8.8.8:53 195.16.77.54.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 66.213.58.216.in-addr.arpa udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prebid.media.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.97:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 172.217.20.162:443 googleads.g.doubleclick.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 146.48.219.8.in-addr.arpa udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.79:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 30.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
PT 13.225.10.30:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 80.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 capi.connatix.com udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.80:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 16.92.85.52.in-addr.arpa udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.16:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 83.10.225.13.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.136.97:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 101.92.85.52.in-addr.arpa udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.101:443 ad.ldplayer.net tcp
DE 52.85.92.101:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ad.ldplayer.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
PT 13.225.10.83:443 ad.ldplayer.net tcp
PT 13.225.10.83:443 ad.ldplayer.net tcp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 ad.ldplayer.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.128:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp
DE 52.85.92.128:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
DE 52.85.92.16:443 ad.ldplayer.net tcp
US 8.8.8.8:53 capi.connatix.com.cdn.cloudflare.net udp

Files

\??\pipe\crashpad_4144_EQAVGGLKVBWNUTXW

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0effb5971e7d01fa1ae03bd9029945fc
SHA1 2985c9bf5c082976ab9d8fd22d6007df18e5e32c
SHA256 756e6bbc6cdbcbf78f9a3d0496d62a2c088c9c7fc4d776b6f89668f13723df15
SHA512 d44d635411a2b2cea5d75388e7eae812cda603bc70af2d4be1e06829a18e0de379f5d7f2a9865f5bccd39060e4a4363de0a895de8c6f090fbb99457a71fd3075

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0324ed453f84da0a378a5249b9e757ac
SHA1 092b50c8838a92a1bd1b841a9c24909c64e87f1a
SHA256 f09820fa257a3fd4c876c9838f085b955082908194c75940e8071f647ad6db30
SHA512 ec1b85954b4d1499e6e3c6477191faccaf5106528f4fd71207c67a58df162e9a52b5c71dab07783d41f3bc08a46161b2f5a032ec3429a3dd4e1c6ada0fcc499e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

MD5 697e8151c2bffcf6b03ec5fc35003813
SHA1 9d1eac7cf9f846d0f3b11d8cde9379dfabf7d36e
SHA256 49f006dc9c78ae3d620a3f798702e3c85d459806537fa019333c9262cf27f947
SHA512 77a8ec25d459af975ae69f828806dd2086aa7446f0b08dc5c744ec123808ab43711c26ec926f15ddbe6c7d3b3bea2f42f51252399834176189209a7b0209f59a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 15de2471d9ac8ab7586df6cf4a7fe899
SHA1 bbbe4592daaa3ad77fa33ef46cbb8d1a9ffa3859
SHA256 6b19ed324323bcdaf2cecc9d4f93fc4743a27462f5397822aded3418c7ef5620
SHA512 0a5b5243c9a5dadc587cc04a4156a5663d5b470216a707420f93eb750b6465907546a8332d0986076ca33ed8ebd92c0c82431c40b97f9b7d06eae3ee36844e36

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 0dc4b9c650ae6e56e1936ce0886a6831
SHA1 64185bdaae3981e202406ceffe3224091f23c12f
SHA256 2aec9ee603afe90be84ddc043be270777670fce479be5dc06f023cc34c325b00
SHA512 c6c64d3869718a707511a0115c5491cffdc1ec6b45b8b5e573c636914196b1c022f118544c883bf2201f86f4a27d7c37fac723f3eab548d0495274fd306df68e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 c38a7852fc8f0868abef9bb82846cc1c
SHA1 fe471cc0aaebd3c0e4c838e243da1800d2e407a8
SHA256 04546a1d59ccb68bcb6e4941ad922e689c87140164d57a38e241f6f24cd1476d
SHA512 194f5be27793eb0b42436c33eb4e327d4bc471b68d9b2b1429e1d0074eeca821e7ab42696e340833d07a163c7aec72b3d89b882b4c02fd6ed1f1413fbfba5b19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5 6de04bf2b9a4e635529bff38bddb88dc
SHA1 f1b98af5649bddf585cae694e1f450f0ca59452b
SHA256 ae3e4b0417bff54271d8fa820b5ebc5386354b8eb4cd00dda0837a38779e2820
SHA512 0f23089426d478aac26a4274bb5554976244c7af6d560681f42e57d4dce9ebd0d3170307216911712d56fd97438e04885462e321cf111fa3de6eb94dc8eb16cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

MD5 a1a9ebb1cb3933337853f48b8fe65d86
SHA1 7f082c6af4971a57fbde7c544f48b4aa6c3aa4f8
SHA256 75e30954635e6404d16ea1bb41fc5e1353b95bd7564b773715ef728afca8b22e
SHA512 7ee6362a36840512fc50d3b5014f768a40f7c3efaaf89d105274c5404b499da9cdbc73f2c88aba05bcb2e2d99cca30051e839ee5bd8c35e4e09f1a463f2e3312

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 09b694faf4079abdbd876d127566545e
SHA1 7c5c47a5b7cba72f2612662dbb69d1117103ddd7
SHA256 ff7c793634f1ffcba1ec44d01c955a28b5e8b42a21f45c11ba3b5eabc73b4c5c
SHA512 56541708c6c760d5d5c938c145063295625cb924685fd97206acb783665d7e3106e456cf711c9cc8efdb0d8214a61cba15ba733f565df5a4d375d92989ea22b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038

MD5 f998b8f6765b4c57936ada0bb2eb4a5a
SHA1 13fb29dc0968838653b8414a125c124023c001df
SHA256 374db366966d7b48782f352c78a0b3670ffec33ed046d931415034d6f93dcfef
SHA512 d340ae61467332f99e4606ef022ff71c9495b9d138a40cc7c58b3206be0d080b25f4e877a811a55f4320db9a7f52e39f88f1aa426ba79fc5e78fc73dacf8c716

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fdc3277b3d874299840858c098dd2cd1
SHA1 9632fcf1bab9af4c20d17ec82d987ffae5c51f6f
SHA256 e91d6414b4951734a755545e806dfdc4cba2fab3b59f49a2f709fd30704b52e9
SHA512 bf42db6c8492d6c8e189729d458ad57aaf50a68a5960b668c2b692c11e52f7fb2d232379a6a13ec3c4213c7ff066978aaa26726e9cbe184fb9ad7f0d1cfdc155

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e83c73099d77beeb6de0798bc1a89252
SHA1 0b25c77610b2b17a4536ee54450975d54f38c01d
SHA256 c53f5e0984e4f08b9e752bd35752ca6e61c1eef955e6d37d35831bf72333f848
SHA512 dd56520f1880aef7705d7b90075179e0917b7a2000b3ec0dad049508a45dd03274e85d8191e113fc3efa57b033589b72d53b40afc854c270596f4eb372a63ada

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2c8870c002ea63eb8339e0c88af01b8c
SHA1 27781b01d1feb7a3a3ec3849ccbe8c411e1c99bb
SHA256 741a69dd9a4422985fc605c84cda99f91a90f48ea65ea58193eaef5ee951677f
SHA512 668bd0a9da5affcdb26bda7a1d59ac63476b0a507ad15ea09093bf0054df3b1ca0394e69a6870f2defe13e91703b5ef54be84f8fcd4418f7317c693dd59dcb1e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 54f634725d94ffe2d070e5d7f6d6ac0f
SHA1 8f2cf2442e7c0048c8fa0b8931a01e77ff5f431e
SHA256 303195212c190dfde67f65697c76faec1e63925cdd1f417e2b29b117f424d511
SHA512 93446afd9f96fd925c06341639cda7f0a3fa7b25657004f8a526f1150d06ff3c4f172d5ef431e1935a4e07ce2bf2f2ca40c77838c2f7f1af151f0b9fd0b37484

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9dc4adf6e9a8fc54572b3d534482757b
SHA1 14fce2b8511e2c1404c85a58d1467b47a46da126
SHA256 ef9d6e9213fd198b0b8b7749523abf6e253ffeb12853a2d8ede32ff070fe3e5c
SHA512 c39fee9e46eb4677ce68935a97adc31a6e9cc1748f7ef514c51d35d11ad64bfd06c6afedb7fc5bfc4e5663c3ec02d0518d13ccb55d156e0c312922dd975a8c14

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58b735.TMP

MD5 303895f96ab6cf6d42db8c16b76f8630
SHA1 25f2f584de0b240d7dd53dba536f183206d35523
SHA256 4efd4e260cb8cc8b1884b293bd9271b56764cb3ddc87eed2c5c6ceaaf84f4574
SHA512 4ac285181834384936346a9b048959b6da43d7b9a1d7428102f9ce697b9b616eca082916ae029a93848f93f99a72994a1f05652accfbc077f81bfd6dc2c95b8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 33ca860d6a7765cfde1363a832a0e4fa
SHA1 ee1534456789a185882bde17db74078b22186d02
SHA256 205a8cb8ab96197fa9dca4a35ea1ea9795727ae631fc201cb95f92048f011001
SHA512 9cd1a3e4ed52e24ba81dda030b45d4174a1447d9b4d3e4f099fe1cb53fe47fe6a744970a0ff84b859cd8bb05c8a85f025a01dd0ca3e5f9461fb3c034e3106ed5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4b5c33b11e900accb1eddad68e9b93b3
SHA1 d725f174ab0e8633359ba7b6b212dd4e3b323062
SHA256 349730e41179f5008c8d304d7ad261ffd3bb3b04939bd064ef1a05d5d0b6808f
SHA512 91b814b896050726dae3b8073928e1fc60c38eac5a226869904a429ba4d0dc533f701bfbecaa6e44bc34ad2a921cc32008ebe5ac0361d9ab6da548967e373d74

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 159165b5c48527b5bab032f680ae6a82
SHA1 6473c07e5aa6b682c87f7d5d5f163b9ff45193e5
SHA256 dffcfdc0a6e5eea0c2f155eaad62422a593065e707d6692d4b8533025c5d6321
SHA512 2f80c4232a40d0207cdca70f6e69fa3d3363537798a1561d0f5420c4c49a86c9d0923d297f843a9d627f27926a9bfac6faca1c145191994cd0b1f7fed4d2b0ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5025d8e691e02f31e91c2e42e8f2e704
SHA1 a2ebc3702ecb2408de01a8cde768fa6b3efb348e
SHA256 eff5e0e37be25bc19eab2464c136200bfe70648b9ddf94ef32952cd57d3e7e28
SHA512 48dc6f92b0d41628e0b223d7a25721a46963d240c1b4bf4091ac1bbbcb2d433436d83fa471d6bc60ff6bd533e45d66b94cccd2497107b035b6812596b53ee711

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a041d9eb1e0613104b6c29ef0a301938
SHA1 c792801189c2827138468c351b47d819c0db5924
SHA256 217a0bffe7c7343eab49361e458dcc2663cce41fff7658b2c23a88ea6264a9bd
SHA512 c89e9a8b38b1da4281370a2f4aab92c578235407d824f354b312142f33e3f18ff720dcc0ead34318f82351d9fd75aefe0b245da26e4559749640a3e5992f8c86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5a4c8c25a572d311a7b88793031cf65b
SHA1 4553abf69b33d02d81b426a806495e64241f7eac
SHA256 7e766617182169e9ed6e9cfd926cbdef33292e006f53a660f0124b75ff16643d
SHA512 5f1ef4c865d5c2acdefec4d9bf611378e7db4a9d0d99b76e698ff10bf77df01241825a1a8545579663f39fec027283da57ece63e67270e9a22ee07abbf9d7970

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 56d764a149099fad81eb2b5e620d4214
SHA1 14a91ce7553417b44e87aeb387772b35c985b2bd
SHA256 07b0eff98e43e3d5c7552936312a7783b5e8e17696bf2526bb8fc4c2c77cca6d
SHA512 ffab03feff6a7c4e34bb66d8fa29ee0d04000dde3fdfd418af10f8ea955bfbb36610488ca1a1237529c3bf4a99390d24f9b46f9e71f1b61c4482b1da5a05f320

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b024352a52581b69d7c36e83095480a1
SHA1 f65ca41939bed318eec7be878f17d3eed7c1e391
SHA256 cc839da5357208b5bf8253a1e132df4bc6e3ae15a38ba89ff49397e38768c008
SHA512 3aceaabf180dd076981b7b53b8e58908a9c6dff756506b11ec8e5f48a9775d7ab07416f1fd0a2bcc94cf26b9c25a8a5a30f54d3fea848359184aa17eebf321d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 024f0f0ed884f71480b558082232b438
SHA1 28f88461a0193f37d331afa668b502c06d1051b9
SHA256 b3304a461c460434f973f64aba641e29110c8c6242bea8ef71c71d221d4ed304
SHA512 e5b17505ae482e913419b466c0ad5e7acb92c11232d4149e62bb9fc2fc26cbd09338fd75322db04edc74d6a765b38473204895cb014fad2c4a36e04d9187ceee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe597f67.TMP

MD5 ca79a1310636b47cbee43b84e96ea472
SHA1 66f4cc461fd46dbe6391e21b0291e5efd4cfbd6b
SHA256 ca08a0c26915c77a49d404cc73d4efc4923c91a8bf1b9a881c45c0269dde2de0
SHA512 103ebb1a9fecea90571d7e0024b214f47d66019db81144b42a601b2001b940c4d198b1a44838c85a42084ed6475610e15de9b3d3d243a87413fa0c410df37e49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 d4cee4b20ea2d20a36c512d21e88a055
SHA1 0904c9cac556f008e4a912d1b2dea4179f63cfa4
SHA256 b6800c36ecf233e1ff9402415ed2627aca3762aad9681607629a72cb548622c3
SHA512 4b3b251d78ad411e0d1e299e251a7d7b6d5a1e83f67c4e42efab7c650ad503c397d97257c6ff7a80a0caac37076547691a5113871eb50d07ffe09f8251eb6565

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cc7aca1c7ea1104ca15cd663ee0bf2fc
SHA1 9d761b7bc2e9e25992ae273e09c642dddbfe7c2e
SHA256 89893855a89ee74f1582df51e57b613afb5ced176475360bc3f12b7364ebd1d6
SHA512 7a43d4fc1e5a4ac40f894a979f22bb0a4f8d09b1859f4647639e9be35adf8d7f981872ba129f4e28b5bfc4aed1e155ec1809fbb59ae21de630a94ff1e0a7d9bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c1672cb433e255c6e700a6c418705967
SHA1 75aca3e0f3adc4f7d8307a78733b80a3a4c4f5ce
SHA256 950fd235e7feed870915a100cc67d6a69aa348d7b7697eec4c87c8f670577544
SHA512 ebc044fe1b30a75e7c49aaee76ca87f42e79b0648287c1d8fa517ae313159a29df3d7260487a3845d73b859ad6572cc8752084507454562110b232d3c2737ead

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 5ce7bdeeea547dc5e395554f1de0b179
SHA1 3dba53fa4da7c828a468d17abc09b265b664078a
SHA256 675cd5fdfe3c14504b7af2d1012c921ab0b5af2ab93bf4dfbfe6505cae8b79a9
SHA512 0bf3e39c11cfefbd4de7ec60f2adaacfba14eac0a4bf8e4d2bc80c4cf1e9d173035c068d8488436c4cf9840ae5c7cfccbefddf9d184e60cab78d1043dc3b9c4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 50134b3c174728d7e3f6221b155e2755
SHA1 0d914b69cb5bc11071d6f9b952c47de183bb491f
SHA256 063d5985d2954379f42fc61c2da7a6d7c06b59637547a09bd1a96da2185e60c1
SHA512 787833ed3c819ab4af49e03b081c24d8169c4fa8cdc6d8ec274c21287321dfbd6b93608e04f64173235925ac683961d26d791fa546a20cfe4e5be5be3c143922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 500ce8a17ce7f4d4b2f037d65632467d
SHA1 0333fa8404847a278bce26c636b0b5aff56df581
SHA256 5a71b896fbef3dd7e7f98984375a5be6b217075b1e8c3ca2156a85468ad723ef
SHA512 a711fa7d8625868daccfed7565f315932b5ff86b803da47baea387b1103ffdb8e8137d0dadd95e8febab72c3e167d52e8fd5346b6680eaf6c2e5d4be3c65c02c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 0ed8278b11742681d994e5f5b44b8d3d
SHA1 28711624d01da8dbd0aa4aad8629d5b0f703441e
SHA256 354730711c3ca9845bf98ec5dfb58a16e50984f9edcf0e8f432742326334f8a2
SHA512 d296ab1f1b418b125f09598ca6645d984a1cf67092a914956b8879d285ee35521b408363b47da195de79086e3be3ed9b1709bc8f9cd2e32d5dccb720a010bc8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

MD5 56fcce1e196bca8531644cca3bd7f9bf
SHA1 8de29eb2ba703cf628c5664e0ad9bdd677f7c586
SHA256 be620254eac5e0c239e88a0372ab2428a9a6322cbe3843edfdffdcf382ce1c32
SHA512 93a4923341b99810a5d6700e26a99a525f18554380714afc3feaf9244bbe23fd4a060468899dd1d8575a6cc2c542566c2912fecf1d4f67c62cdcb77789eabed6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5 4874fb82da9e619ba014c987a9d29f4e
SHA1 496a06b6bb1551f79ad40d25b06cc63c4754a5ff
SHA256 d24e3cbe3927d6225fb5aa27b745caf8b079266e9387c1b755fabc33b48c60f4
SHA512 488b6aa4ed0e810311b9a40d82707008fb01036aec8abede9e947ab9c6495b9455691caa7398b4f597546237aa3f34cfc10c7687889952b1db706c4bbe542efd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7442f01b55c4d2bc940c7a4db8743018
SHA1 094b1c3398d261c3cc88aa97d35ebfb3d699b7da
SHA256 3d1e9e39b7c207a7adfebacfe4b5e686f6242ee78ce50cceb14566fe3f9ae390
SHA512 df37ccc63e3785e40b6208036b434c100c6f3583acc6b9a2293ab5fd99ea1fbf6cf7a45fedaab47b566e1f8f4e306450691d090e183676475ed7f59895554c5f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 682d4c1f935f5cb8132342bf42e1cf91
SHA1 7e8d1d2aa5194cba4ce2a2dbc45e10367b9e6186
SHA256 526d3ed002b67136184cd3fdcfc0ec5bb5e09dd551b5989542799beae130f5c5
SHA512 b7ab77cf03be9ee6b6ae449ff1e6fe149db7547d743ad822905987c3445faf201e867c77814e6402c88be8441b8df337927d6bb65a00b90d5f3006c2ffbcf177

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 1e1ae6d2ff5b7edcad783cf370e03b33
SHA1 f9cb76e2e30dafa9083eaf5bb8bde6bcda02dc2e
SHA256 b96fdc0e364c4087912907f5920441d0c44debb57085728fca530f3eed0fd0c2
SHA512 7cbdc816875b83f2e22757858709c27b5588f92c35774bd56c0edb0c8d9502a35f8f70dd6ab9892869d698f4c973280dea7692589f08a78ca9c414bb065044ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a489bb35b597314896cb8f2b6484f325
SHA1 68c50b0561a5ec07ef2630937dd78cbdac54cccb
SHA256 60e7bfd789ea8e844f8644b8578dfd7dee9e9498557bbfd3dcb714251cb0909a
SHA512 a3eaf39221721bde40ad650a0050c975cb56816c5ae48f20e67810fe98fd3bc64430baeaf9a634e88773e2a477c2763be477c46a03bf15e582dca8cdd34ae86c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 478386347f1fc9f7df235edc0f3cb98f
SHA1 133009f29b43aedba6c2872fcefde81e3356c571
SHA256 b6c0634b4238964f824d340f91ef346b6294713aa44651f4c79d2463d78c6710
SHA512 3f17eb076d1d43bed429814570a923829761978eb0672cf27462b2cf96744be3944ba630cd0a6bdd4e8f00414bd01f945e6c867b2ff4a8362bca45f0a9a0dd29

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 223f6fb5d44f5580af0038e72ddeb95b
SHA1 2d2177004cb5fcb7319fd6f82dc2e88b293f97c4
SHA256 956df1e2647464ae73fa3ad1345f28b442b080f0f5f568bd61fa8b183b6fa189
SHA512 336390785cbfe2c6d3dd6637b1743c68efa8dc8c57e167393c55ffd5165a56437e17a262b28e641da50492ed7a2d0b7518fd5c12581dfe336606b9d942895052

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\NXZEUT171QEYIDC6NNH5.temp

MD5 5982c05d932cb03db9f32c5c365d82b7
SHA1 4d6656efc2181643e997ced041df747ebbc52e5f
SHA256 334c19bf481af432c7c8eacc5a0dcfe14f402446a33deca3966eb290642cf781
SHA512 f656532c7d083dbe4228e98de59aa6ae15ee498cbf2c58157285867cf13f2d444adad89d2b35fb7f203d34105e979aab3709ac510fff901cccd39407b3b2ebda

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 6fad61f7589496401aaf7f850f02903c
SHA1 7b69a3d42d6d4296fc661446ab2d294eb2b72961
SHA256 ffa580c33d44d29a906cb11f2cedef922c51ca98212a02a897b115a598ff735e
SHA512 040b3bc31d2562455310538c1f83269293c542edbc16418e4f83a11382441a0dfd172202457232b9f9c2305ecbc22b8ea302afd9c007e3370dfe050520f5f541

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 246ba2596ac6d2b99180079af1dff1b0
SHA1 d02f24f9dc70f18a374b49d3e0a05c055b546aeb
SHA256 d2bed8d7bb03f77cbfc5fee328d33e101147e1d55488ee6ab0536685267f9876
SHA512 eb4531e4131ebcbb2dc4eb6d31622172bae106b551d7e70590b03aeaa2bd321c388b3d0dfb4fc99324172b9e7e174a545a2486cbacc34c9fd30f7c36b4f45863

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 64a654fe5acc4132f4005c9ba947903d
SHA1 038bceb60c2d3485ae16fb9e976164801c5f2534
SHA256 3e88ee1a62c3c9a94b215e2ee2fe13d105398d1b383c25489ecdde8733bf1001
SHA512 7002c4266e55b12b5b847ab07c6281eec374e740f0663e6af0920c40f877fd1719c2a9f38a137cfbd571530710b713de39960ab57a4d0c6d77108c93d2b75b36

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 297ce83f948376abd086c34bc70c85dc
SHA1 e1f3de7ca738546b04a95033d823e0f8862ed782
SHA256 2789f8b6099b2e815f4a339f788275132f706edaaca96af8a4c204bf64ead6b5
SHA512 c76a916e512d844f72a408cec95e6e656bc23bfccd2d4d8756af129547cec9628136caeb3d2978081b2f9012f935e57f0ba982697194171412071ed6e82125ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d6b463d3df8f0720b82b53f3b8208d4d
SHA1 00e2dc74d9e6101a7262eca5578a7686f201a50f
SHA256 a1ce61966cc5f4c4072520044099e890237648321cf6d478f2c130d7b98695ea
SHA512 063ead398eeac374e15964a168cd534af9ced1c3488975a1c34ca884fe20d32706ce65736ed7d78f4b3b01194ad446317b1b659d25ff9a8632a4d255779264f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 de1243f9a69f389275e0a4f657a26b7c
SHA1 2577f6b30f1660c6c7df676cb2c5e184713c44a6
SHA256 82560de974ac4dc71a8686a455d74dc8a5f52d69b74642e394e1efadda24fe4f
SHA512 3247638adc8a90634d59d527b9c7ee85760a1bca27038d8f5499c8536cc840b726fca030bba9c503b87077b9f2ac098ec06cc1219a84d87314b8d79f64039154

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 80ef557dbef7c3d432c2ab545b0b2b47
SHA1 4946469e0f46a061a575e0fec986a1c136e93fc1
SHA256 e42b76ff2cbad13bea15112e011eb232bd2bd2763753e829f21d8d26c3afab9c
SHA512 94a71498f34bb6aca542b839d2534e2709f63cecd4aaab9f995987b5427c0fd2647dc191e11d1411d96e00322444070fe3a883f8a39cd06a5386643f3a018215

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ec707738234d08245ad89e4da086412f
SHA1 834ae10a9f0f1274a59b0370741c763008a86890
SHA256 e5f6a28ee7e18174abb38e3c8ca72e169a76529f31dd95f697f039713b9949b6
SHA512 e5a2e85a021a6c894571bd0c8518876bd910f3e7545d524a51d7715507f5a995ff38288026eb4258ca276630a4d6ab0840f9722f63be989691e8110fe07ed9bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 11f1bd38d902dce22b6b7f3e2e221731
SHA1 843075d1eb86d6b99c29e8f0307949e404eaabc9
SHA256 c88d03b4b3e985ef7ac2ee688e73c140cd5af2fd14c01f42ab6f05d779b1cc0d
SHA512 21cf7d9b6d65bef69eda1ae227dafb6a437f2ae3f87398c037b79a61f2e33e0636cc8daddc81e57539a865189f06124065d01f175b94c01a4ec4051d1fe89824

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\pending_pings\7297e3a3-b9c7-4751-8abf-9c0e02f768aa

MD5 563fdf0595a547f61b2ffbcd4b83af3a
SHA1 623709942b8a542235b2aaf4fa4d6f338a588c3b
SHA256 650aa4d89997b7529f7ad2472572a9ee7f6b5f64d7be1887925584e636e98ba9
SHA512 6edb6cc0f7d4dd14497bc3fdf32aa82ed8aa8ca3d24d9c4b22675545887a368283740f31aee4fa8ddd188eccf87c64a6aaa4bdae23d4636b75988fad2ab19062

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\pending_pings\a210f99f-db3d-4ade-9e0f-f85522a1305b

MD5 a56cd50598ac998698de099ffee6ae00
SHA1 28fba52527fc4faaa5b569c065249ff8efb55352
SHA256 aa1366c31906a7bfcbdb52c22edf6769971bf04a23f56ca447cb88593a35fd43
SHA512 ef99d80caad5c09164e5c741a83f58576d45a8fba4d9f55affd76b2ad6290e3074988c752ee2f9fe69aa24ae48fc8bcb7d0b96516ada42d6d8b03f9db6fe44b5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\datareporting\glean\db\data.safe.bin

MD5 16987f9c4299069034d11eacd5a923a6
SHA1 c2ceeb12f60c0dab7a177bc32cf731b4c1482db5
SHA256 51bdc5fe4d270cd33142beb0662196aa300d2e96a7813ab73556956abeb67543
SHA512 2d5d06055b8d609d863a64642cb4a2d670a6e2c38f30f9c26ba34539027b4af4e635ccb77dac73d5655498af5214b344b80f468150ee8e1e08a594c80d33bb01

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs.js

MD5 f0140613bb83309e55ecc5bc69b6df0e
SHA1 42514dcacda926be0b9a5ea5ee2a58569702384c
SHA256 ca418d968fd51fe17787ae7d38ec11d83601a19abc94c589e2ffd7040ae4a751
SHA512 84a96e66bc39ca0e01f35ddca0f96ce17b5d0e454a942a091f5632b3efb042963c4fd908d30189091f6614d30a3e4755cd479a47ed1db71c3bf93360249b3731

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

MD5 c460716b62456449360b23cf5663f275
SHA1 06573a83d88286153066bae7062cc9300e567d92
SHA256 0ec0f16f92d876a9c1140d4c11e2b346a9292984d9a854360e54e99fdcd99cc0
SHA512 476bc3a333aace4c75d9a971ef202d5889561e10d237792ca89f8d379280262ce98cf3d4728460696f8d7ff429a508237764bf4a9ccb59fd615aee07bdcadf30

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 065b815686318b389e86650948858453
SHA1 aea9383c2ad450d25ca60a2cc2b702841c543012
SHA256 1aa1ecc34358aafac6f760471c64fd15e880eb2f0118e9b4746e7f1a04ea5085
SHA512 016a2c65cdc1ddafb825f8e448d111cafc335be912dee049c652454632936070652fc21b0d2e4d037faffedde663ef8c54463dd3e91a4615ba2d1696b5df0c43

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 90342b8063601fbf6649c77973046443
SHA1 047c5970beac1a5dadc1ac05c79d93df5bde1a1f
SHA256 55a0ab3e71c837335dbe92676a72cbd8b3bf8db6e33dccdb3801e225f8380a86
SHA512 80ab383830b04ce4a2d7ab70c32fd1f7d67351242abe9529351b4f0c1c787b3afff2e44c0853ccb3d715e52ef2cc21d6483ebb71294a673b910f44528675165c

C:\Users\Admin\Downloads\BlueStacks10Installer_10.-DsGYY1k.41.206.1001_native_6dadb0d087f224bac4b2ca1b54444e04_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe.part

MD5 f7d59b091f24a3af080dfab10a36c5cc
SHA1 c015deab6bb286cd004f9c9b1e58ef6df385fa55
SHA256 3c603fe131e38402cefec773872376bcdc9af59ec29587b5202426e440522936
SHA512 b775aaf04491b88e3f10de7013b3393acba1c4427728215f3b33cec0cbeb6692ea03339cdec879fffdafa61cd356dc4c458c3762401ee78b45c4aa8671a09bb0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7dafd1be09870124af369272c6894ac8
SHA1 4f795fe9823ec8b3a6feca77557b91a214760f5e
SHA256 db17da675df0a4f958bf5f5b0959eaf1c05b1dc6e9dd3b93f2e2e72f0769f3dc
SHA512 3d384653b32df8360d89286d39e8f119ab7eae1b08b8b49808c667b0bb96f75de9cd537cd82bd33f9af06ce176fc9eaac05f01c3928364fd6933a76590c8cf61

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs.js

MD5 e8ade8691389a060aba3c664d8c32053
SHA1 986d3fed284eadb47535d9f4518a2e0ecbbf7dc5
SHA256 ec16ef6b75014cba968624fdb9be49751f3f7dcfed4073cb3e171b66056fd32d
SHA512 3d633f26da4e9bf318200fdbe30c52d3dff04f704b81289e902fc64f3a07271cc6a93d27411aa887c8b4cb000a0334877300df98f40343daa84d98f08bc67ecd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 674997fe611ad0b524fbbb957b7c9019
SHA1 ee180a914b7fd8a80426768b1c2f292c56538a5f
SHA256 0a43effb60d85b41b64c9a3c239b8de67acd7466141af56504eb48d665b843eb
SHA512 858166b3a6b59e5777ede771465084fda92fc8a00743e5bc48124f603f0aa0b48bd5c5a8930dcac896790eb2784490686fd3843c3b21f6a6586fe92fa16ccd93

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\16212

MD5 eec179c7d8b8f560568006b71617a4b8
SHA1 1999d6ca87f5ce9bafe8ac069ed1d3422a6c6173
SHA256 e4a5c58b52c07030d141d2ff28876ebb6f825016c95f20f6ab78cb7ab236c760
SHA512 164f203d8f7869e066cf78ff2abc01358da5d7620bb51a845840425ebfef6c6cc437e8e87fa97b2f87b6d8b0506b2253332618bf0ab11994a5711355da0a1cc8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14642

MD5 e49a523e2dbbb4f0c45db4007cfc08e2
SHA1 f6ccbc7b57af931d234d9641b315c435c4429277
SHA256 c6c250912fb971b7f2dcb4c8c5cc07d68d314456e7118bcd99099ec4fe9a46fa
SHA512 cda9a4e404791c4b3541f20bfaeb5eff7489da7d4c042dac35dcd383880a51b5b004fdfc5dd8b30abe62fa5fe6409877d8a882b02f5cfc071d505c25c6865013

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 dff070879c52b50844efa99fa01d16f7
SHA1 490fa8adbc4a159cb02600832f86e8da90524e96
SHA256 a572c0ef85d447211eb95b025803c8ae766a06095fd35cb8440e474a052c31bb
SHA512 a22793086a9ea7d70648f068361d24ebc9e69116536d17d1b6b70f304fc5c921679833e3c23d8824769ffa985e0523d7b8c95342849921a36b2c6d373644b69a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\10884

MD5 978f74bd77eb01744d745e4d0ad4afef
SHA1 933815dd21b858464c1da99b26083942177d088c
SHA256 767169301ec56efc6c818e90e06982c76fe5d0773625d3ee48ff89ae8d6bd14c
SHA512 7b5fe40985eacdde9b420403d981b165d9d73fee66be1cc8952f10d378d4f174232625cc7621cdaea6d7d3289fff37e0b8590ebb6fd3aae91b39d39564fa79f0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\30590

MD5 8bf67a22e35567dd9cc9f1f10340b639
SHA1 6f86ffdbd01150f84f83e702bea2efca69a3251a
SHA256 670ece70e8b49fc3c0b0750810bde54382f57785f85d2fe2dcab74543229cf43
SHA512 c08e78d5ee4e1c88548dc8dd1c2be88a39dbe991e2d44088846362b22288ca92aa5823eb64b075c647d5c7903052ecc19721119a6891d36db5f303eb055bc011

C:\Users\Admin\AppData\Local\Temp\7zSC489127C\BlueStacksInstaller.exe

MD5 e7b2fce869d7964ecb99702aaaeaba8f
SHA1 acab7cb37406e52fc8c9b8867453e74803afb1a3
SHA256 6c0d6a3c76c4fc213a39c1df9cc3c3fb53d89c4826b070a39cbbe8e37cec2b83
SHA512 9c7371adabc96a925472c85f54a2abc1e5dc9ce943a55639a2f87744732629e4928e422e5e53ba71d96396d6e94f6e1383a77376501758a632bfc42a1d1fa978

memory/5376-1707-0x00000000001B0000-0x000000000024E000-memory.dmp

memory/5376-1708-0x000000001B1B0000-0x000000001B218000-memory.dmp

memory/5376-1712-0x000000001C570000-0x000000001CA96000-memory.dmp

memory/5376-1716-0x000000001BBB0000-0x000000001BBE8000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b7517be3af37610a664801f2734ea4ac
SHA1 17a80eaed61c48a377817622f74fb5c135075e0a
SHA256 5de11789e5f1eed64b2b32d86064b7d05cd9d9d76fef00c7a7f5fd989f1a6dea
SHA512 36976ee40f6d0ba106ee44654c9512684339aaf425044531a78f3448073101dcf2c2f4d4f71bff22f6c8114eec3dd0b5296e9a872c48a899a9f1a1aea4d06aae

memory/5704-1753-0x0000015AEBB20000-0x0000015AEBB30000-memory.dmp

memory/5704-1737-0x0000015AEBA20000-0x0000015AEBA30000-memory.dmp

memory/5704-1772-0x0000015AE8CE0000-0x0000015AE8CE2000-memory.dmp

memory/3152-1825-0x0000020F13BC0000-0x0000020F13CC0000-memory.dmp

memory/3152-1824-0x0000020F13BC0000-0x0000020F13CC0000-memory.dmp

memory/5176-1843-0x0000020A23820000-0x0000020A23822000-memory.dmp

memory/5176-1846-0x0000020A23850000-0x0000020A23852000-memory.dmp

memory/5176-1848-0x0000020A33E10000-0x0000020A33E12000-memory.dmp

memory/5176-1897-0x0000020A35440000-0x0000020A35460000-memory.dmp

memory/5176-1992-0x0000020A38620000-0x0000020A38622000-memory.dmp

memory/5176-1990-0x0000020A38600000-0x0000020A38602000-memory.dmp

memory/5176-1998-0x0000020A36A00000-0x0000020A36B00000-memory.dmp

memory/5176-1988-0x0000020A385E0000-0x0000020A385E2000-memory.dmp

memory/5176-2054-0x0000020A39640000-0x0000020A39740000-memory.dmp

memory/5176-2055-0x0000020A39640000-0x0000020A39740000-memory.dmp

memory/5176-2112-0x0000020A4A760000-0x0000020A4A860000-memory.dmp

memory/5704-2123-0x0000015AF21C0000-0x0000015AF21C1000-memory.dmp

memory/5704-2122-0x0000015AF21B0000-0x0000015AF21B1000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\1GON3YVS\fb66abb1efeba1f10de790e34a3c0dba42d11dc6[1].png

MD5 5e2fd00ef2d461eec5def4d6f9c6a885
SHA1 fb66abb1efeba1f10de790e34a3c0dba42d11dc6
SHA256 4a61982200d88980e7e6ec657e96bc0a29c77becf512d519be31f27a7e92f7a1
SHA512 c06c0e029c6a359121f4a655bf449e134015c856425c5ff096dcab3a86a5515e4a10aedcdb898ec6537008978842427856b83ada47a225c196dbd4662f6e1b61

memory/5176-2149-0x0000020A38870000-0x0000020A38872000-memory.dmp

memory/5176-2151-0x0000020A38890000-0x0000020A38892000-memory.dmp

memory/5176-2155-0x0000020A38910000-0x0000020A38912000-memory.dmp

memory/5176-2157-0x0000020A38AB0000-0x0000020A38AB2000-memory.dmp

memory/5176-2159-0x0000020A38C10000-0x0000020A38C12000-memory.dmp

memory/5176-2219-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2221-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2224-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2225-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2228-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2226-0x0000020A23830000-0x0000020A23840000-memory.dmp

memory/5176-2227-0x0000020A23830000-0x0000020A23840000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 17fff2c2d430130b5adf450ccf632b75
SHA1 008255e6782dbaeb4e828b38422d2e924ed21a49
SHA256 55721704ccf3d93cac84e86aa385d934093146dcf6ad49d2e81afb715ce85cc5
SHA512 b252338354cc23dfa534845c5b41b0cf0a09d30d3e38dc23aaddac3563c18e1ae47c4c62f55853685cbbff5263e63fe94ec43f45f4fd237514fb9ef3b65e1201

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 563b5f9cad2a9540a3caa881c527ccb0
SHA1 9ee2e293bdd4737fe441ce738f02500af2e0ccd3
SHA256 f3cbcfe3d8feaf53f73f8104e0995ea957b6b679fd22e782221a579bd2d9e5eb
SHA512 c5493179801b6092ce27cd6b23092dbc1391b33985470919abddfd6af16db5f1780b8b556970bdf0216891a78ba382e44c97365a936a0aa7240a3b171836270d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 bf469c9c1ed0e3ee50fd061c05e9dc78
SHA1 235bd7fed31abb7f6e189101bfd89571d63eb227
SHA256 01ef1a7e8cc97224cfb62c316f9e65b53a689775da88456c03aa313443a906b4
SHA512 8fa202e3d890110527c35c50ba5be860157ab5c203a668ad45956ee242a231e915dba769d13df04bb576e604e9358f761cadcf5ce750c1c80bfdf387741d3588

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 4894987e119400d412d98f6b8da4b8cc
SHA1 887008f904de5f33c01eea421fe08c85f87e7afd
SHA256 52ac09ed906fe294c449f1ca885549ab3e071b18923b4947ebc2da4bd4fe9bd4
SHA512 df4c3fbc4bcd2edf5c2b33a9d19636fe3f0215088401420b81d071e52d238b33aa841ca3ce639bba5fa8de6748738aed7aac443a8905bc69bb41d1083b628b18

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 5627e16a9e42091d6ba510c2b773226a
SHA1 f46911cd915dc93739d10a549073458adbeab5f6
SHA256 9de30b72485b52daffba7e966dfc344ed126c2fd19c746a93619b956946e5204
SHA512 e78791f7ffe0d05e16f54712b298f9e8f7d81b16d8c1b499dd6f44f5cc61ed39d5b752ac4862c7c97e603c27a054d25814cbffd3ce8a97d68e597e8fd2b9c1f1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 630dc4854fe8ddcedd70c74007d0965f
SHA1 c65e0214047da62dcce3cf6b9d79994cff8be001
SHA256 d63c940a6eb2794e575a2018368fdc5df8f3ae41c92d505ab6d5c7581c0e1dfa
SHA512 328040f18db2f2bd30de921b6e09157a2b029235191c20311de4b5f2bb95e0fce057d3bd28b2f751b04271db4b9cf478777680ba327bffd795c79b28e3fa1110

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 bb6fc4c0c840b409b7d7064f8287f8e2
SHA1 b0a1fad97d0276d68b9071ef91c0b86c4d0f69cd
SHA256 83c50dd2a53cf8a93f41e4f87ee3fb3b1a29869e9d2d18dabb4e9f725cf1cb50
SHA512 b5101e14ec3c9b7158662c5bfffb9992f4aea21f7216b31d14ef087e530d5abcbb25ef21cd9d603ff628d6824f1bd11dfe357fdf8236c2a25264c10fe2ed2a1c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 0d86208a95ca5d85af94b186081d5c93
SHA1 1c18c70a1b29f09ab110d63020238bd0ad9c7f95
SHA256 55f3270ecf2977d0662c16ff7003f8bb39db95cee9e962ac94c1b56146c9afbe
SHA512 c33edd712027c0116c6ab2200ffcf4951e842b2127a5717cf831915dd3d957af9af7b4e84160f0adf8628c360d02e43faa2b5626a63bb043ca966201340ae2f2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 a8c236b13f5c533be49c4e0b5d780aa1
SHA1 7a816e527fee5ae0f54c1fbbfcb7807bb6ccd337
SHA256 e35018bff193fa08f4bf8cf772674064d4b71b238607ed0fe99cd254c482319a
SHA512 5eec8d2acd9442e62e9b6962af3aa8736d0372abbd060549561c587d34606be300300bc173f6a0fa47046c4cbf0975f35e4b20c75f42a4006c7e0886776311b8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 dcd406dec0ce97037348b267038b76c4
SHA1 871d0ca828df9c8e0b46cd2570a8960e860935e7
SHA256 4c728da70c48b663bb61774932d423a65760c0a8d16045d60cf8a95e9427c99a
SHA512 0dd8fc768de481cdd3cb4753525bd68273de7a23047729280f8b5c00da9c88da1a68168d883309bff0d8ef239ba7458fb200597271e64e66c0d3dfcada1cd7ad

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q7BUKSPQ\edgecompatviewlist[1].xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 25b1cbc13e89a89fb99b1dab24072f17
SHA1 5fe39b6a508638aefd2e239d6980ede8b17b127e
SHA256 34d4a8db5087dc46b892617d24116ee80e1832ecdd466960392281f80bb10a37
SHA512 faeaaa802084ee99f4311cdcc90243a0c78398241ee3386c66e73290f75b2890a25263c376d0776babc1e125a0479836d0eb3af8d78e158609b5b4b9abd1c92b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFC3FA76A87F0E8945.TMP

MD5 d3cdb7663712ddb6ef5056c72fe69e86
SHA1 f08bf69934fb2b9ca0aba287c96abe145a69366c
SHA256 3e8c2095986b262ac8fccfabda2d021fc0d3504275e83cffe1f0a333f9efbe15
SHA512 c0acd65db7098a55dae0730eb1dcd8aa94e95a71f39dd40b087be0b06afc5d1bb310f555781853b5a78a8803dba0fb44df44bd2bb14baeca29c7c7410dffc812

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\A874FMZJ\www.youtube-nocookie[1].xml

MD5 45ae2fd984cd4bcc6e9ab21530dd79b6
SHA1 23b222a007f03cdd4947af9cc41bb0d67c998079
SHA256 2d41d3e555a57ebc665bb763849cfcef8b081b23f1007cf29a1f102056948bc3
SHA512 7e8b476ca82db84705cab22bf1d0d693e350883f9a14b5c285d98c22f792dcbaf94e104979c84c31116c243e21a2c15a7ea4728dedbd8ee61facca3457c0acd4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f3dbe6b0bd6d2fc01a6cb7a433615b52
SHA1 cff9d974784506a47aaf16be51094475388b0726
SHA256 962c927f9a9caee18e6615dc53fae2287526780fdeeb330bf7e4581eceeeab1d
SHA512 691ea48e6bfc2659ab3a079311190bc2f0689fdf52e4bed2fb492eda6276ac020c1415cdd0efd8c118860c46ddbcd2df77d32b93d75788b4b6b5c5e7b339b3af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\storage\default\https+++www.pornhub.com\cache\morgue\28\{d8e4a273-8a16-42b1-8da7-7a52f72a911c}.final

MD5 4849126d62348e96de9f534891ee372c
SHA1 04208116ad7cb0edcb2c7c754042554104172d10
SHA256 92930e52c17a5e42a09f648d090ba0e48384fe2b6f4f6b3e3fc70bd8a0e6ac5d
SHA512 bd7769637a8707a21027e442faf6911019a2c731bff17fc11b9da0b74490162ea4eba2fca41942a7c114cc75ab1941f208c1fcc789bdc0a594b5ed269f6e6f25

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 4b61f1f5dd147e5601d4dfab751a430b
SHA1 cbb6ed08a2bd706a26dab20fc371275ce0e70ddf
SHA256 4598e0b8602bca6a785ba374a6c26438e8d51ad89ecc209d89fae81a4df6bc18
SHA512 eb88d3888d23f9a56e3442934b0c15e904cbf6cf35804e57a97746311a33cc78e9e5aca42c5c47880218506c46033a5938ec3acfe9de2d04db753d616ce9ab70

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 11281f56cabe1c6962fdb83b5079f8bf
SHA1 3ba0b92604092bbbc822fb62fd81d8b12d0370c2
SHA256 f0e0cd53bbd2a902ba7f4e0431b7f9e48ff8e24dc5b135eb93de02079250adc3
SHA512 b5aa517bf5697ba0d320c314a08fb25c878ec835d7db5990a90a7391b0ed487696ac3eb542ad67e4670d7f37c4c5130d1395beace5a34ce4922e058721057b6f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 33c15436c06e87c22be91b3e19750028
SHA1 8bdda3ed95271de64aa60c2590dc417d1ad7e502
SHA256 8cf39918fd83620c60b38aee4d53686828ca0b71f6baf181188327e7c7698815
SHA512 488a08c3c7f4c5bc0145fe99a82eb6a4c18149417a4902c554adc08bbc205d90cb0ad1394484b6fd7527622fd7886e4ff91c725fbcd4077aaf15f7a34c409736

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\storage\default\https+++www.pornhub.com\cache\morgue\88\{2963909c-ca14-49d9-bdf3-4ab554f68358}.final

MD5 932479fe19d996a5e8f139bf51085149
SHA1 da374dfebb658802ee62fc8ec320c3442fc93192
SHA256 c57de29d8406c0e2534d96c4c23199b127d8ee9bb86dce5230bf8157894b4f84
SHA512 ddbc216c01474d8ccc4f73fc78d228e68600b2bc148cdf3b7d12108b9fbdce3f2c91fdddce4841e669b1a2a609a8fae927e2a551efd11877e6513f7849edc05a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\2223

MD5 7e69d475c7b61f97a26e7db8d01caf33
SHA1 b34ee051a774e52612c342e52fba4cd81481c30d
SHA256 da12e1eca27698255caa876aea8f4647ac36f2313884345bc6401ed77735398f
SHA512 287ded46501549c0fbb12ba253dbc1286ee7cde9f5902387052c3d7be9c91845fa9707778b7b689e17c19f9687806eaf007e40e78670a4f5d3bef03a51f90486

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 af9c5db610fb27a4565af4c5ba21c71a
SHA1 d1d14c1bd26a370119ad006fa66a9ca16b3b6132
SHA256 63c26edee217d31626bbbeb1090353ffeb8b6ddc6dc2ab4207425313b69c909c
SHA512 471b00599d653094717706db3ce6dec0362da83d9ab91b3c32874b07077956f61747845b737482c99cf7586139b8b8731c9d9d442b8549fbdf06a25131a91b14

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\10445

MD5 b392bf28420e09ac85d5db81eef8a343
SHA1 c5083f0c3b2c1d60ed4b037faa5aab09b7f9e85c
SHA256 928ba0138c2db9530c5038cea82732b58183525ee967011ffa7501210f6e8418
SHA512 d590856ba1cfbcbf421d8495f3017ec9b11ec308c18a993c005dfacf25b7c819fa706ed0551173b3bce105c847932d5b16cb3eec9650bbcc1b7f72553eed47f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 2f7e53cdbad04f2e1640fb2afd6ff894
SHA1 a4bad42b6031a6d56acb45425ee60bd7c4cbc289
SHA256 67bec6e18db8bba461fd04811ef0fdb1b4652e5b4a7fca2287ab3b02640e7f01
SHA512 7496742b52ee40fba796a2447ec272723ff04e9cac81fe2a17956fbc52859fd16ea965b7ee103d9ad0e758b9cc015aeb8d61959ef9a0383e75a578e8c51e0d27

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\7686

MD5 4f48f2a3ae12da413f512d175238e180
SHA1 e24cffff35a2630850b8287c7eb48b0c7fd85747
SHA256 6289dd36f08515ee0093c8b13256184c8aded541e52aebfc2871aef0706e66cc
SHA512 1ca3c77a368cf105755f144e48939daec905e4b340893e18823600ed9830077831242738cb180e6523f129dda5bb1a2ff6af92fcda3ccb8927ffd7f39036c210

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14218

MD5 c71ebc68319925780edd94e713cc9220
SHA1 51af1d8fdb327adefca9df041bf6ca37d363ef7a
SHA256 627e96663f5d9687af44678f03e3e3db0d7f78091a41abd665afbf40ff47c27f
SHA512 d2d668e7a3ef7df3242f940dcf5d7a15762857fbac174f5e25130cc264fe877ad349e7740cc6ea76abff4e2496ce135fe7f1b953487e23df65d868d798f25c6f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\9166DFB190D3EC7ED07C8D0A9507C31A88313E9E

MD5 8b6c57b739deddb462f2135e88b2f085
SHA1 d5d20e21b2b959c02bf26ce8a63170853adf003c
SHA256 5d18a6c4224a228127cb9bf8342d8de8c5f6f5ef94ddccf93a1af5e25cd858ff
SHA512 ab128936094a061554ad99918a8e59af4ce57f2a64af3c18f801db4adeec841070af8cbe1917c5918fdd2fee7b37f6fc0e750fc89ff82ad028c4d0794191c35b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1165

MD5 343933b3f85527bfa403d6a5463d570b
SHA1 bfe160f90497eeec89115b8b564a78cad215b5ec
SHA256 a3bbea6550e645a4fdea711b3a1462cda647dd4e5e2bd4897ce17dad2672ebde
SHA512 066c3b8a66cee7a5d0d247f13f6d1f347355ddbc380479e7d0bc551d9422c425bbd54c1672b7d1f3134cadccdc977631e85e649a826a1fed461fe3f7d555749c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\19122

MD5 998fee4911c07208397d71d62d1c8369
SHA1 e7d8a7f586f76afdab04e83f4708de9ae638bde8
SHA256 0e1b4307a273ad54d845bf02b5db8843e21224667758460ff7b765ef493f64a3
SHA512 fec3235da99a07ef2b7d77a52abea727cc28cd74a30d4ba232796cd2cd1cf11c3848091b163e81def3552f905d41a479bdbafe2056c260461217ca397eefa81c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\561

MD5 9a096236e1dfacbde4c2bb8c7b6e2684
SHA1 8b0f5fdd4b54ef644fe80f4a98347a0159925892
SHA256 75f8c1da281455014bf412af0a08e73491c099c8775d3aa5a1c9024de7f03cae
SHA512 cb29a7df8f411ac40bf947f3d4d8b0fe212dd369df8085d7724722bb6c77ded01a6e0dd490a69f95443cff713f64b64be1031807d574083e043c134d3799fa13

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\8675

MD5 b6d2ee4e2fa1d122ea70fc09397a9102
SHA1 2235b53e3a48e3148c0157cfde66b99d2944ce51
SHA256 a68738bb381d33aea6e1192e0434390116f0fe00916714119f61429f581b7d51
SHA512 10cfa28e80fd0eef585406be64d360fb507244b3a1a6a83bf5e0f22b1173fc9745a85cf8512c6112bc0d623f498f8501592aecb34573cc60477b0d5d68bec502

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\22120

MD5 f18c5df9f1fb6fae175e4052ef00e9ec
SHA1 407ae20a74d93559a58b618ef089ee860fb03566
SHA256 66240fa9413243f5e984705e2fbe1d8e92e1d12e9c3700ecc6a40fdd96063dc5
SHA512 78662e77f224696a9dcc740eb86895d4b30432853de0fe3900534b0246582e5c1d3070f5117dfae81b92bfe97dfee6884aa6c86735c6b912a2db50f1e1fb332b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\34BDE065377C95C9BC155C256F86B9C34BA31EB9

MD5 14737b8ec5cbbbf0237547644ed0a6ad
SHA1 755cc9928ef720bfdbd6c6d9ba1fde36ed78fb1b
SHA256 30026e8c9b6e51613f04a2d4fa51579caca68cead9b2aedb47d624fe50858843
SHA512 a52f45619b5e258e43206a1bdaa7530ab3d5776cfe4b3bf7591b1c6524d16877cfe09f24d08c7c87043ea682c301899b612be0a80e653e250049672180a103e6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11124

MD5 97b8523263510a83f6d4121e4ba143e9
SHA1 7237dab0713f3cdfcd3a777dcf63b40df80df4b8
SHA256 02fe25c67ac6e66f2188cbf45db10600a3d7ef3e26157af8da8f2e7b0f7675c3
SHA512 bfaf7b7885a0daa0f9562d4628459ab6e8c4fd1546099d0eb21f934c66b6f4ddd395c8f11a817c506e00eba09134aeaee878aa8020248e18d8b269e700acc219

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9354d3113a6bf60f11b076585bcffc67
SHA1 2b9bf2413a724c051dcaecade967934689594737
SHA256 5ba9d8b67e72a34ca37b5f57a378d64ed2563a7a2d79faf336f5cc6f4d581d3c
SHA512 35187e8843216dbd6023009eb389d49f8d79df63d8cd68927645ce596ef4d46232e291c5fbdbc89f30d0a4d80495eba007b0562f2a96e52e9e39a16a5af5299c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\5E1FABEF26F288E560BCDDDEEE7DBAD8E0730971

MD5 f0be9933c72d22d55cfc09c6cea5a07e
SHA1 da41304f6a7438b1e0c1b35a1cf04d8859890764
SHA256 99796c52c9a9966a91db486d3bc46bea00325639fa4f4f0f186ec75adb2aaabd
SHA512 cb1f48a75ca4a998dd8e6b936b2deb6b835b8e434919a94207dc9e56e129eebef006bb7f30e43bd3e6811124f839d52cd363a94279ead941b12710d4339d5def

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\24798

MD5 484b538be42a5874b6cf7567ca5ef3f4
SHA1 bd7bd57435d021e94eba673db462f87abdaca76f
SHA256 841e7c69bbfafdff0e9f0963b86d147bdf0818cee1eb88781c960d0d34e6158c
SHA512 58ad40819373eea6518a39a74007764e2883158d2a04b4b2b0aff557e213881a0e55f1ecc1862ee062e064eae7a11e9f81e05f1280154381d2a9e983f40a5a09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23610

MD5 8aec2ed3703fda65633c488b0081df79
SHA1 93d102f7dd29d9836d7eeb6372c386d39c63288b
SHA256 dbf6f0181d9401b3aa9f19aee21e79c15bfdb23bdb7200847f474e3298e00b1d
SHA512 97d872bceca150500207c4962843936f415d513a93147a0b70c3c0326977ba3403117036280c7a7fcd7f6b19badd0161f80650a6d158f1181ea58b89db0bca48

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11457

MD5 a62be3212aadaf887d960b420a8879dd
SHA1 0197c8834259562a9edd53e4e753e551f53a0e74
SHA256 592116aef064efa7e1dc04e535ed29503114047af8eae764d31ab93a162440a3
SHA512 76554e92c04f42790ad0a2fe55fb30374b8eba9f49347415891d8ea0f892d2d4fea3911d6315b01165f9d9f0d2a934ab7b368771036b74084f883b92a36aa4cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 57afc6cd8d08e2c1bdd032f6ae623470
SHA1 65400074048017d5bdaede7294e275513f4c2f0c
SHA256 3fe3bbc17219f2661c956b669b50033f571b587c747aedd06629b8c63c58af65
SHA512 9329b9d30196bb1ab27fc883f9037516b1ad6c273f2b7d5b7624d1b624596ecbe3ca97f12c352300dd03ba0161381c81b95cfff81c6ff26196a70aa4d2631588

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\2806

MD5 caf69a0d70998de07d1b17c37d74adf6
SHA1 fe807f84c57ad2570705c86cdaa68b8b05deb292
SHA256 6d8865461fe1ecb7184f8181d447e958eb90d248027b18899c23dabcefadddab
SHA512 5d3524408be702caec84b309fc280a7b6e9a60937442468bf078d770c030be416093bc27b4b15300626f3e1798d28a7a68ac987df544df85bb9c7a6afc568805

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\20391

MD5 a182e5ed7743651c7bab3813c8d17ab4
SHA1 a8557c81511765c1580818492b91955e1baff8f5
SHA256 6168a8b78d8b2d9d277b181f677456fce535ddca11032372963f6174971a722a
SHA512 08b4f5dd8372ba5ff8625057cac9c3f8f73f3e43d3ada22a4bf2e02ca00ad729117e0a38c31017d6729071ba3f6f2a3bbb77a7f5114b61af302e61a033e96608

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\5065

MD5 2b27b61d1b6cf4d0e26db2fcaddc6e3e
SHA1 efccbf742840ac191f01b6542b2ebe5aefc4fd7b
SHA256 9f7ffe35e55a6f8e895520cdf4fa3898ca2070e72b7c1e6082294ee7f537b2ea
SHA512 f9b2eee1fff9ec399409fc4c1d7f8ef40f22ea159d47ae5ae15b188037cb8fa8b00986f81007e67d58da91fcc7e8261b778ba85247ddf259719973a9493f17b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\24209

MD5 23871e5f75866838483020d81bd46c35
SHA1 6c91d5527284c1839ebbf02907d61d625f5654ad
SHA256 bda5b809e0e1c404243c3eaf22333dbd6a1e385493e5027ff0376e5304f38fd5
SHA512 c148e26123dde8a146d1bd7083a056a5281ca9316dc1594873ed85261d1844183afc5f5df9ae7d16da03c1162b82847674c7c0b7bc9618b73b19c6a76e2f3c7b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\27397

MD5 680c3966640cc65fca9190fda061d94e
SHA1 d644f06ac12c22abe2f3b23c8f87f8bead20fe23
SHA256 00ab999faacf2d2db9f0241e619aaa077ed1fafc72c211f2bf7f61170b652fc8
SHA512 826165a4e0705d829733c1b5340959eed05db7d7bf4f9464a87f98e6d50fce20d301cc09f1b8c0ee51fac9a10d84f70e1946a4f5e9e1a1eeb14054b00dd86c20

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\06A5A433D07B14D8ADAE3897CAC5BFF4EDA47834

MD5 cf56ea4248fa7f26923fd74217f3cc43
SHA1 376c3284c56e31a244146e375dcd369032b90341
SHA256 da03e8faeecd3e7f965b8690ccc5f1d9edad2015c68cff391670335a28bb8ab2
SHA512 3eeab1cbbe5727227124a921220433ab6f38d631b00e760fbd53b87fc3148c30783dd9e19e9a43f35c9d886bb92abca311f0d640313ae670439a56f9d8639986

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\F6E397759C0CD41C8A6B79B325333B1BD9CB7D0F

MD5 775765ec4a55e4fa5c5189a808b26bee
SHA1 db28126fa546feceb335c3265688fc47caa7eef9
SHA256 2c1893b98f217c82abb505ddbae4b6f4d7a8e664fbeb2d728f3f6750c448bc75
SHA512 c65172887d51a0947bb44863515765959820dd96655c7fadf3af5d33f6536086e829f19b8faebb1a4105744c2f1945d7b2ebe8033ee8758076fd63bd05df0ff5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\8365

MD5 711d4c9abc9513f838c1d0d1caefd6cb
SHA1 d939daf1f63a479d38ca0d95d6fba0e7189c6f1b
SHA256 c49ca93b37b358161b8e481c0c9c56317bbbacb3769765b989b842cf644db21c
SHA512 98e5a03ef68c8e5ad710e6612fa272ac706741c5cf811abb0408ab0b1194bd0215858d438a01b526f6ce00421f4b718bbcec740dd7e04e32d32d0e8f0b846f63

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\10891

MD5 283f94d7b545e789a392619b563f9486
SHA1 a892188b16484050a44ab029850c7a6016677c5b
SHA256 e7f4788b6feac40c453d2cd9506b4b78bdb9323aab3bd20e7fda8aaf36562595
SHA512 20f6936c591f49d3ecb3d4fc656a413558e9328c65a2757db328ae134624f11354fb1e500b68876c203e5443957bae14a5c9e3084f38fc44542b3535ce798f72

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\6055

MD5 d842cddd864c8324744e51c1e8288da8
SHA1 d53f4e032a408166a70c45f13b6afc36b7f296aa
SHA256 257b7b13ef618188210109c3e5427c906e5dc7355bafa1e61462c56902455c5b
SHA512 b633524177462c6b91d9a067dfa817a9c83b4c452e80f508b9f177214c9a3a2c73394f631fe69b12a1f4d8151c2092224857832033b0533944accff46c227fb4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\20924

MD5 4632bbabd918b34ddf80d8c67d496da4
SHA1 ec510440d04fb998cba1a618559344c882e8714b
SHA256 b4a0af2dd728bd0432dded204465d76ee6868cee2602ac8da3688f773a72b3d8
SHA512 8de09f3e417feb98aa352c6f0f7e80a89bc5be9d75bbc941445010a4481f32b37cdcec2d158ca676a2b62961b157361ead723e2d8d26339d87c3161ae0f8148e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23629

MD5 e2f88527ffc293b78bea48aca8710843
SHA1 fdea9b4cdf2d949e54ff007c04f57b2a6b6dcb4e
SHA256 c5ff680bc2509e483682973d64d3e91aacc39f61e5148261ef3f29f329f31b49
SHA512 04cc337d5b50983a29af17ba4aa5348812c88c92c69afa33112df0d56ba90e7197fd2449b6c41180e722b6dd63933551a70f85384ccf0cdd9e55d3ffeb57b34d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\15414

MD5 312f252191266311fc0098686db72c97
SHA1 85b6994f08cde040915234d18aed33f4cc7f56b4
SHA256 ecc46fa3b6f1847e7c5f7f912d0ff4ebdd0f0f6ba10505ee902b377ce170483f
SHA512 f953cbcd21f016bd36254728070fa733c85186bc2c10d58c7e79a1c5f1cbed16b6d0f93cb57c124179f16a63dc48cc4cf6d7dc560a066ec64ee50c65c663702a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1555

MD5 fe683765908ab7686c3f968cb3dbc2b7
SHA1 2e738426ae4c61cc96d462082e00f6a6b74367a5
SHA256 598be06a1f611630f6baff88b5437dcc2b889a14490f275203a55d9bb058fd2c
SHA512 bf3997da096b339b53d1fa0bae884d9025c3be656c722a7fff82c17d4861b832a0c70ccffc2d1b1ad4ac7eefb43e33106d581cdeb7772d605aa30eaba9a128eb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23528

MD5 43b933ef0167784b6ca61d2d11541347
SHA1 0dafcf59f0d91d21615ef966b9b83a2bed90ba5b
SHA256 523bde2fc0abc5bb8481c5c88a89c78208c33687dc3e65f9f471f641f7075c00
SHA512 4bfaf10d0778b1609553be35e2d02af4219b34f202a43fb41c58bd7afc5e7cc292f233e92f281617c2c44b86be15379753af7672e221ed8ae627e99aa2766108

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\22069

MD5 da6397c54e9c375093a2264dda66904e
SHA1 8d49ad3942c84039c1655f2faf73b079435c6cbd
SHA256 2c86407196b9e18b97ae6649a5828baffc070a6cc0ff6c5c6cea9441bc7a2815
SHA512 2776b7e778a5f7b04b6b05050c872d73f8629cc2ffd9a7cfd897f355cf5c9f77dce97ebedb39299336d42fc8eb749fd0a8ea6124cf345bb613e650e9ce864c74

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\24751

MD5 14f6b7c8b98d02d6df46ca4453478ab2
SHA1 5a3a234f75caf22242155ec4d467af9beba88dc9
SHA256 9a3f9bc4961eaaf2cddf769dc8353084ec70c2ea174246ac6923d5f406a61570
SHA512 4da513921bd5e52b6929941a8025a17846cae3ba22597a136737f90dea86a72fdd970f0890edcd4a8868b1f4199d1568bea79a0c42d1eb41eb1152419ee08a2a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\21485

MD5 8ca5d49f50303004ccc3b2ce0f6e9eec
SHA1 aae8092a06306bb4e26031c1056df44996fe7a03
SHA256 7373262ba202b3ccc78e36ba37cdce22b18818eff8e83e0e72a422434eaca09e
SHA512 935c9c503fe9c2baa43366c93e68e68a964a6340ef2056ca5d5f0977cd1efd2d84547ae6fff47653e0728015affd2f9b87e3dd1587cf37d7dd108928c925afbf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\2340

MD5 242fe1afce5c203f94770bfe0d01c268
SHA1 88583b9238ae1a3350f6658545f720a02927fe19
SHA256 1f901caf3d0e6832e25636539bfbd8895a4768cff5ca6c9ed43487bdd3fe538d
SHA512 664527db1dbc321efa5c41a1c337988ae0a94a7d37a092dc2eda15d5d918dde05be749eced03928605982946df174a58410639c2dd8fecf23def3e5b90062310

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\31843

MD5 747cde4d690fcb48a72d824a009d47c0
SHA1 42716a6752d0b3fcfccc487cdaeeb28faf333f38
SHA256 8f98c045d7e18b8be1948fb00df11efd9f4ec90efd385bf7b64e81c7755113e5
SHA512 760dee35baeffd3a35ea393733c5c4f286ede848a795762f0eff9bbe3b28c7dc98641e19417fb335c3fd1042b560702a8f09e1d347ef2c48683e8cea6fe0425b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\6090

MD5 ec57bd33b23fe91db77a4ff399831a63
SHA1 5fa2f9cd6613459c0c42344cbd5cbb5d7dd0acfc
SHA256 e4780d13f4b1daf1d6626e66f1423eafaa31498e14f317911722164b7d879701
SHA512 0873f7dfaf8b0f41f5b62288c482f976ba178b2328e3f5ee12759162216791b53b63f17b6cd3449d442a8429e56b0b52f0ccdaca8f689ff9d0fcf38eb2ee09d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\24236

MD5 658774af3d9b392a4f571894a07d1e9b
SHA1 854f0710aa772f02f7c1642778c77024f9ffeda8
SHA256 fe27eaa1e3d4adc651b1ca5fb7eda4ecadd9b1ded25bd1918e9bbfb426689641
SHA512 8b9d0320cb12ec633302943ee1705c0cc1453737cda869fb1ccd8ae33048a00ec44ec8c3dffa36f00562865c7c985e0ebd106e99ab0b48f72b5332931199a8be

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\7459

MD5 b03c33944a7e10f0f0461834869da1a7
SHA1 3ff44d8e4bfd65787352e932c965b1a035908131
SHA256 aab0aa8535a630cfea137a9985ab56fc5ea9ac744013c065fe79c98511d763d3
SHA512 c4d91b1f9bb9893ce214ca419b2d91b2adfd006c3db1420bf4503722cbd657c94bebf002675ff86368c5a4be3df0965fcc45d11200d9e61552ce6e72b144fa82

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23226

MD5 81064acb3a884f127cac0d17374904af
SHA1 8287bdabe75f9e4736e60e09198e370bd6d2a477
SHA256 379ce616a48cb16b6d367e9c114d83dea6e1a31e733eba8fd0ca604b91da189e
SHA512 4c9ec9d52bd4e3445bcf68ca9595a2032d7f0ed23240d6d401fb8bcc0250b5e57d11ae47a719154d3b65c9534984d456a47f52b66fe4511578bec1c55a4c57df

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\31216

MD5 b07ae44549cc141148ddaa52a03c3332
SHA1 303bedc8a13de245ca6f7138eb140f0d257c9c89
SHA256 83fcb371d85ed535e714fe7f7ea83c90de7292c17c29bcf1d21eb6fde93e33b0
SHA512 cb4c76504144c67137ab5d5f3b34aa030931dc176b25adf7256039f45e68d9bbcc26d45d427a0463b009e810f7f1b796ec5b902ca15f18beddc025ab9e25ba1b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\28062

MD5 7647374ca7edd704adb3fbdabca78ab2
SHA1 a20d561bedd9738ead1e19500e77e7879e8c74d3
SHA256 c8e921d81893e62bec555a57eb90c0f20e48af2b8b71a6d95fa0d5e69fde3bc9
SHA512 a68905b77674f1f2a07ed2298f20e22ae62c5d93c02cd17cb4010b37edb150f5c7e4f07e75e7a3f1b708aa6b56f36c0761a024ec011d7df74b721f8e3ce23db2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\29818

MD5 ed2bd5f19e37dcba576638cc23f27334
SHA1 f5862465d4be20eea65cbc3ff53bf1cd8bacbbee
SHA256 76a532d64f1f390f838d8c9b3e20eadfbe17d311934b376c325650d033f65d9d
SHA512 e7b6dec8c91ef50beb23050d27a8db1c57365ecdbf59047a5a8bdb74d419702445789a917086fbda830d438e4a13dcc8c5a0f7181470dd58857fb3e744bf3862

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11494

MD5 06363b280b43a79b2908bf4a9bc88b26
SHA1 3f72f3a2b2319e751c901c02245ffb8440b69ee3
SHA256 3bf9135cd398b217f86d36136592d9819c18a458b228595f9dea58309e5c39a3
SHA512 a7d9f45ec56aad6a66a92f1d3e8da0679ca1dd424ddc27c3906aebf8b01768a3bfc7f2999bb38891238efe81b1d330bd0268d95b9fd88ea3d2a3611e0b9f882b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11157

MD5 20f508f909f9d7f10da48716310b76e7
SHA1 10491dca5064536e5d9963e80144161e74e983c2
SHA256 bd35f804810d047946f674f666dee8bfaba20dbc95ab924d653afc01b5f19f77
SHA512 d018068fabe61533ede534c6f66eef6b7bfa30c5220d79aefaf9a556b6957c4638f4c7c53a6c059041012747e48f930733094e6ff96bce13955480717864aa8f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\19394

MD5 79643ad270fce9c40d686e2e1a379647
SHA1 06c96ecceab80972ff86bc2d1ebdea76e93bbbb0
SHA256 1674b1ec76bac7d886cc55852610bad5e3be3649b9096ef0db1fdc0b3d1e5bfe
SHA512 bb114715b5322ec9e93b3b274542887ac4e9eaa97915376e87bd477cb9de4cae16d1eb8ae5c5322fae576e53fde446433bd45ed0e2d9b1a61688ca4076b7a495

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\5210

MD5 82e8ea9c4dd8dded947a70d48d1947b8
SHA1 ca122c19afa80730db77a079ba262f7857fd24c3
SHA256 6a73f1be79d7602ce268eda666f2b8e823068b541969c0f0a518560a4aca18e2
SHA512 a9548551a209f77de0e61ef2efc8fb2c4cbad07be9cc77c6780dc843f2fdf84924db26a3ade60a865030b359b5e495d840ea50b1ccc9c0cb04df8828b6da8809

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\22234

MD5 aabf91816863a7afda9eea36a0747d6f
SHA1 5269d0d309d6aaecfe3d0f8f98d7b98434fef5a6
SHA256 ab93f6c20d1699541cf05daadfbe12c2493af24048ae4aa7b4ccd77b1d48cefa
SHA512 6ce62e61ee2ed6470084cd957c418af10b4f9a670c6170aee24280355e9ffbb09bb1426ad45adcd6142719e5522fddb9a583fc24a81952a01a9a7cbc376e4f4e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23592

MD5 5d5343c4cc2efe50a8cfcc04e364f611
SHA1 b0c9e723ebda9ccc4ff26a18f4daaa0c726523f8
SHA256 9775b498f6eb28dc7e7a540b506eaf72431d6a955eced9728b68068f645c14ce
SHA512 72007f503ebb8d8c34aa7ca904ad44424919bff1f9469a7875218935cf94b2ee6dddad200e63e461015313c81ff6a193626023be978f23fd6df056196820b149

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\4347

MD5 61a99956ad0d207ab4015a1e018c11d6
SHA1 94819145f94757f41e2fa4074616b32ebfcd94db
SHA256 0d94a62f8baf9989675b5fbf489dae13c3614d42add2a2bc762aae894cb91edb
SHA512 f65b50f86b24bd0c431bf7bc069d7dcc523c7b1e604f01c458acd5ae4fd27f09e4fd8c32acecd09c6f0345c3f8c2bfcbbaee88482908c0a534ad01bc593e0fed

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 5888379a7ac05b0ecc4df5d3b824d373
SHA1 8271cce06fc7c34c791eb321d09954125dd3f4e7
SHA256 c68a04754b26e8b1ae37d24060d935c44704e6ce3d239e5c30cf0fef48e02b7c
SHA512 07f73614f0c66e7432477fdedc17b2b59d2c68baa452a1360ed87f60a6c9b5bd26b71ca1c9eea38086eab9f36431515562f27e96a106851c9f327bff26bbf20d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e8c00d4208c1a4ea4cd1ddeee69428bd
SHA1 02e96a9fe725ec91afb910911aabea05fd987c39
SHA256 f5cbbfb3c79e88d65adc21c8c0a9ee4cd281b34f582dbd41b6402d54a6e4df05
SHA512 f878bb0579427e7737d47ab917c4eb4016936447a3fce2413e7564a8f0abc9ae6abd4ad266b23bd77c2cc09a844e850557d0fe9030341ec9b6c5e6c0c34f0874

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\6908

MD5 f8320be9d2ece006b055f2e3d05c0d0a
SHA1 fc697ef0fd9948973c36acbaba5f6b987d2866bc
SHA256 58a7a8d1e5da2f77bb72ae9cf4c738b1701a6d8c3fc78d2534854765d144e53a
SHA512 695dac163bb79f9b4919e5a0ecf250aea9ff85598741abd2dd74e39b6835255178509531068dbbddb2ace84659dd3515fe1820b81f2db1ecdfb3179030cfdbb7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11868

MD5 1384601216fccfb422443c3aa9267f8b
SHA1 d1d98586b4074d151c6f7666eefe94662995276e
SHA256 d50433d31387949264911d37330a20693cae177c2f2581f3e587ee991b152890
SHA512 915ce3904a66f8bdd61f81052fb6061603e74eb8501a4bfb817704f80a7b768eb26358c8a2a7dde6a54c725532a1d54caf6c187169ee9b08a886aee70fcbfc54

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\7581

MD5 eb1de2ff436c64bfddfa96050cd37938
SHA1 96754e6b30cdc011f0232870ff51d0e6e2925351
SHA256 459ad9b9ab927f08795535e16d174690bcab4861cc00a99d7754b5c9d54a4041
SHA512 d356a0d61896f641e64ae2f1f37064fbc922dfc3752e16fc88833f96567fbd510753d287a73b8c0636ffced27dc98941053c72b1dc24c524188cde44dc50f06f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\6595

MD5 1db30ef01dbeb5399072bbca1d755a79
SHA1 d070042860654dec3f5ef49a669647b28fe2f826
SHA256 c87de252430bef46a96ac5e80964c6ebff65fdcb2231b22ead58f09b858a934c
SHA512 ffc4ac468cbbd48b6081d952f80011a9cfa0601809ce15f7d513bb19c4d44fd90c08e023b0cba634fb9aff3a22233d3753e1b59ba260c8a32cbaa3bdc810dff3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\4072

MD5 7f9d958a268f405b040236ccde14a488
SHA1 f56d9bd699a7ab17df026e8600aa0fe88bc6565e
SHA256 df1dfc5c0653b1c8cf9a87ecde22f50fac46f1b0ac77996b5a812971640580cf
SHA512 2733189e8a81389fd48a18f6835b2027bb11235e4420a3abb99240a5e9c762c908073af1951a48bfda58d7f0245f9289f1e541a02a8eebc377b5884be67ddee7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23789

MD5 e7941d1d6a3a06f708090bf73535dd19
SHA1 4a5ca52e10573d73cbf892ff3ac494684069fb57
SHA256 3be370e86322934e8311307814957ef4dd685943b32a4b93688a748371ab0339
SHA512 5e46628e69ee6552ffca369d21c625dd37a995fcf518ed468c49958475a71bac4f8d90d2c4e4e1324f788c3e4460811ada8733ece1109381ee80d9448aa6e85e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\storage\default\https+++en.softonic.com\idb\556220133rrae_su.sqlite

MD5 c037bba0c03ced4dc0713607eb60d4b8
SHA1 3540591daf49f12e1ace173c48c4b01e58099b04
SHA256 285dadff9707449e6a35f6006fb4300443a1fca00f7e651ca881f04cfa5c1cd9
SHA512 ba8dc26d2c611ce05bf799521d3e4912249bd974d8c797cafee637067f00972a23e08a52af42499f9eb5109024b3e9b05bb064591735b9a69dc5a6819198c065

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\DE6410D7D10A034A4B6C7DF000528E7D2955C71E

MD5 36d913ef925938d9a01c164d57820e19
SHA1 256aeac1b6ca805e757df7bc90d5528012d03b23
SHA256 a4380737ab83a9c64bc63cf9151c64f5b61cdbc9fb5ca899fe2bed73e3a9c154
SHA512 f724974f331392f19e69d2d42e265502bd80cfcb1522ebce0c2f1f994a0cdd5a4929b5171a52ba3a89893b7d2c8bfdb687dcfb2644636070dbb8439a9a06e075

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14174

MD5 cd7e2f6affe5d94f411a483dfca4e00b
SHA1 c54476b2d99845ed964570033eebc92c984ed79a
SHA256 6a7f03230c9350a11843cba0e9e60a46604b2085da16a5809a3ab9a552956e52
SHA512 8071614cbaf9c34429c32bf810d611fa6bb2e952707e7d7a279d124693c84997108fb072f4e871961f1b44094311ef7a64d2d8faa665585b2dd840205a963a11

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\D5BFCDC806F97091A1F24716A5D0C470D729226A

MD5 7048ca4ffe8cc3e959c430f38df5b71f
SHA1 08ba535e2f7e301755727fdfe4a24ec5995af810
SHA256 a05a894d95fa32f724c6315a4bdfd949d37b4c7f09789066b283048d3408cec4
SHA512 b9feccfdd52fb751d61d1f076c71083677968a7a7da457ddf65911c0684e2a597113e9e5f1e66f08b4dda4a05660fe14ccc654f30f52330f102353d2b3cbf67f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\BD4CA1D4B4266D61825709642FCA56121B4B4D98

MD5 fd665ef9e595ff8a746b92c762a66a1b
SHA1 4583751a159ad4cd42bba33b52e060b19da4f980
SHA256 a6e2e53c37f164215a194728c148c2154aa57416d0b09c11b008e05252217a42
SHA512 7d3db6fe76f9740f6c88ffff1655045fc77c9ad69983568770a1740162e0fdcb9462e770ec6bda8c9fe5eaa8b8a241cf2efbd449f294ae8512114b90d8cacbf8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\382B5B3827B4DDFA378A655D1BD82EE2B5E279A6

MD5 a80b5f166cb7b091e8b07318974c93c0
SHA1 28197a9628f627df23908fe7493ddbdaf296e8c4
SHA256 1dc10d3ef8948d815b52957f76cfcd4e60f4c341574455bb8a29facb36fadd62
SHA512 33d4cd13ac657190a0424efa7e108ea985954be6470cc43b1cd879b9f85f0d84101f7ddf011890ad0f249cbc09ae4d5a4f320e410ff2cb5539ffa1587c82be03

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\16375

MD5 a9027acd09152199b232fd3517e004b5
SHA1 8307743a3ed5c5e222657ffd81adfb17d8d497f3
SHA256 bac0d655bd9dbf481f6c7a335f84f53fcc57b84a63490511b5cbce4eea2bfc90
SHA512 62fe00c9202a04fa2aa94102592d23f0ad1d1b04001b6ab8e8c615999e6042decd94ac6dab72e7000b59b2f6bc1fc1c08acec76d8df4121e98a2b3610b662f58

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\519

MD5 3c88c37df533a2da27031a5f1f968df5
SHA1 a0ae0c630093e85582cb17a19b87fceaec37dc0c
SHA256 ca80705d9105e7a7701e6f80d7fcdd5b5ad3cd9c3769280f754f4bf96fb15a15
SHA512 180b0282722f0ac88bedf9552ea2cba04488aff9d42b98dde97831e895a3a191e09a9a0be5da68b5949388a727443cc831a9cb30f7d4624b0f3af8e10beddaa4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\16410

MD5 71862747f65aaced09e366fbbf337316
SHA1 3b80c67cc775aa70cb34f7dd3f464ac8945816cb
SHA256 f47b238f510849f7d5e6e1eafa410c8aab1e840d3940c9320bd158354e5d7217
SHA512 d77697ef0695f66e672f69c55e184481ed58b5b2445dd1fdbb973a71b3286109eadd91f1411a4c575a4806ef894a1c519a3db4744e945043851bd8b59a24b48c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\19114

MD5 3f0bba2567aa4fa56dc1891d5670de58
SHA1 32be39f18a64f80ed3234a6fb3af1ead9a1ccd03
SHA256 ab7b463e9829fb957f0805ee964081f12a65081899642e3b5feeba9ff288d8a1
SHA512 74561837c818facfa8311fac220926b89febdf31cdff0dc6be183b2c64398e435cba93683c89892e957307118bf0e8eb9a42d58227d6293730276aabd4f95887

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\FA42EBEC97E7BC4BD8596DD821DBD04B2CFE6838

MD5 b94c395b2eec379b9962ae9ddcb12663
SHA1 2188857620202bd430ada5d18e8ef3820c030f9f
SHA256 180912698a9a60c9b2236ba6cdc189beb66e193c4249cc9f77871a0e002074fb
SHA512 5a913c821d9a25af092574a34b2bcb5cae36aa350e67ef3dee6d85437ece3a6c52a283178f1929113740b979b66e46d63e04cde1049f3fa8158db1516586479a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\23177

MD5 5a37e81851bb9933d735e042c5fe83de
SHA1 3dde41aff6eaeb332c49678fc92deb16478a1688
SHA256 31eb786cb56f81bfac6acd41410945d2c7ac1452a5d4aeae80506f9fa48d6213
SHA512 8901d89f20aff09657b54e01b50f77a1177c5694d55c83b25797cf1d8525f4e1b47a71656ec395f7259784de04aa93f63473ec3c769fff27454e3d85f44363d0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\AA5654EC575DF7D190BA3F20D2698EA32B9501B3

MD5 f4a8eae8645ce43d41c73f878759bfb0
SHA1 a2bbaf7784cccb8eb4e66d11e0cae24435b18d35
SHA256 f7e6a98df310538683d92bfeb7e473c6e0fabfdcfdc12ef8e76cd987fde8fb01
SHA512 30d3e362282c5d89f7fe6d8d270b8bbc945dfc7c83f4e82704cf244ff974c172e485ef88bb053b49a97a3993288223567a832d7da8993fef8ca31ecc500b69b4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\3865

MD5 bfef2ec088097398fc283935e1a04202
SHA1 6dd215aa2690ac1b41c8e465cb0d1368e9d10e15
SHA256 7a269f1abd0f474897856c22e25555834ed2dfd7e8854bace3dad96b0e89da4e
SHA512 bbae67217fbf801d46d39091bb18f3b6b893c2856a3ec58f54a3b2d5fa6f307b4d4a1bf9660c93e9723393bbe3e287f2741207dcb8193f3be29a23c2a595ea06

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\DBD78B5F0DD5928F802E6B4677A914D2D6B73B75

MD5 987335c371cd7ec1512ef5eee56d5b0b
SHA1 9ffdc46ca919a2985d75950935b7b2207a344366
SHA256 72a1299a34e8e862522cd060199bbb1af7eff48b89c86a291fe5372ab0923f91
SHA512 f230e8199053dd1042dafed3e0b6617d8b64f82e685987f4e753d2ff966de086f1b071724023b66c1cae58aacf8ebf914f477dbe301eb72b3c083404ba6fb029

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\BF3F77370D9EF515BEE8D5E1477C52CBB3187430

MD5 5473e8b508d2eb8a341250db3c64fb9a
SHA1 06caf44b445f88b4b4e81f07fb7464a2fbd1fb56
SHA256 b797a1c0e6cedd5cf257688d0dac63435fc151f599db84f058f485b2e58916d4
SHA512 d4bcc75baf915ce5b8ea87794ba72e0627df0d0502a4dd0df06a267ee0867f482edc1491481ccb2c6f0a8c0eb619e73fd0ed52616d7551e5b13a7dbbcd5bf1de

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\B014B7C7359C253A9D4553E5C274A76B31275ED8

MD5 12d28f916c45810cc5f26c50f3213837
SHA1 5923279702608ba4948113013267f4858a7df2db
SHA256 796a26006579db63b525884ed0dae56982bebdf77b148a1a51d03dfa4a2bb96b
SHA512 23448b7a3afc0de5cad76a88e75979eb168d0a88bd4621670eb6ff9357e128d68f91d6e1ca170636bc1fac8b324ec1aff8a1cfd93ef32a889d5f15ff7418b5d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\30508

MD5 7e3e887b42ee23504a3e499831122951
SHA1 3fd2d52790b9751446a9ea61045629038ee224c8
SHA256 c091a21f831bf0535717b687b6cb0eca4b72fe88353f4024f992bdc9c39787aa
SHA512 7abf19523e661e6ccc30cf9a90c1226476a088aea82912e97c839f6abe35463d5cf738d96347c68a2af128db02958d4890fb448ca523d5c7f15840dedc0b664c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\11C04DE57428944158D7945EF8ACD2A26D7193D1

MD5 248e50dc8fcc6378cbcf4de6ad91fe51
SHA1 c09df78a86c7e67afd5b117cde1c9e00fc9dc7d4
SHA256 99211702b4fd6d07f6ba20a05acafce924fe98ac3386d292e7db3ce6206a3253
SHA512 d3d56953eeb6ebd30c82c6c18eac6e28b0acb9e9314892c179248f2579baa19c6758528b9f5828ee6855692526f52052cc636d1797176a8b450aa945b8d3768f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\30287

MD5 61dfe94ad4d20599b50bbed138c4dff4
SHA1 2c98c06acea23d34467e24111ce583f8efb43da7
SHA256 27130b47db8dbe356fd31a45ddbbae0d553aab698b19c28bea1090ace3e33eea
SHA512 7a0e3651e295772ab4d19d816c9cc437ceb5342c10ea43067e28983b5478930917e2202086a5338d81d85cc5fdc9051bbf65e6b951d4f11a1a0d6abf1f430ecf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\17449

MD5 8bab4e4352bcfbb6c09f5ac440c39a7e
SHA1 d4ee4d1b980526a0ae3b77eee896bdfbd290b267
SHA256 7a2c4a12cf1ffaf5a0ecd7f1f5f4df2dba5472d84b2544a34830b221ceccd1f1
SHA512 f55f30be86e82a18643747d1cf72401dac332ba168759b39334bfea91a0f6e0e88b9c4832dd1a9aebd8758fb896f4acb8ce7307f59a671a485aa56aba75966a9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\28828

MD5 dbc0a5f64273de3c6d98dcf83819ea10
SHA1 7e20f577c5f26f695b71c5a2bcb9f62777387701
SHA256 9f3275c092bc68375cba39b41501389a83f86e5741a0f5a71c36c05060269567
SHA512 d0fb0b45d8d4e3fc270521bb2a427a6b9d3af59e24bae50fd3471efa735e297593eadc33f9ed1dfa8d02c0f5ded3c52642b00625dc02e8ee43aa385311064c8c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\10144

MD5 095c8e81f473658a2b001782e39bfc89
SHA1 dbc104f1715c427273c135741eae178d0d11a98d
SHA256 16b72893658c8b474752e9444d2f2c21dda9e3adc1f5a4f252f3c524b48a9c12
SHA512 7df6ec1312372e357df1f175a37450f7aa62493a4c801245ccfc0eaf415bb25a864d4c2a45b34d4886b1bbdf8dae0b52b0322ec3c7ff6e06055e20f325474eed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1481

MD5 f9eb530d78dbd7b9dd76808ee32098eb
SHA1 33383b29a05a07946f879bdbdc09261d4be3e8fe
SHA256 09dc6b1d6a0d8c5703609e16125e5faa3fd671c1c5a838897059e28caa69a892
SHA512 a64791c58b7d3f48a55207f08c990ada39e113f702ce79260255c8f8e1d09b5929b71e8ffd5838f47720c1cb5f9f6a76b31ad43c8a6c0ab6552fed8fe8c82f86

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14667

MD5 600370ebbe6e762ac97b4ca10d1ad299
SHA1 231e7d7d5314afb58589bc879632636cb6dfc35e
SHA256 96cdd7c41692e4ef46c766bd7524df0b188d261db29d223e356220b72c24d6bf
SHA512 50e6d1eb5a686819a55ea7beaa818d6dedd8fd0857f389dbc08396f0f34e991a46fcc1025ef1ec8095fd22e8164d95555c64effe4cba895e8c6939ad78615caa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11626

MD5 7f20b60df6f35313d9e811737454cf26
SHA1 9d8e7968cb672be2a803e91634eec8f7907f6e3d
SHA256 3f2d8f8bed66e20f3359ef9bfe3f9d8f7628a785c4a70403b341e07289f37b22
SHA512 e2b0d6a70c0de3c4b0905833ae0e0eace363c4c41ba856efa623c939795be08ce12a5427c6bde36c04f5240b9937b2bc20b0913f0a3f66b6d7a745799eb01b70

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\27056

MD5 b1d2eb63baac85cc3091e512eac7e08f
SHA1 7a22201655c926dcb929db5f63c0940beebf78b6
SHA256 8c1afd3f79565af52d7b09e669a0dd42e4d07cecef388712ba26e056aad794f4
SHA512 09e7c31375589b2975b85160553ecada88a0ec302e22a6dd4267b2219c239124e47e12a68143b2cdd560c243c8bb70fe2b79e5b9a1bf31e87dcdd35724a1c795

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\8360

MD5 503244509ae8d4b4c65e183310b0c5d8
SHA1 3d39ad677fc8a9cb4b400d383b738c3e184b05a3
SHA256 e2683a0d40204d117ff0b1ab7de516e98a0a1a883e1747ec1ba3a134351b6f5a
SHA512 9bfc0620c0498ae4a506f4351482e9ac9c2a5b1b12660fc2fc04bcf7f9b1754f4fc82e3cf166814277a144ceedd4628595cba2f372d7e8049c95c2ce3211849f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\19627

MD5 35fb4aad4149e1dac6e2ae47874d2399
SHA1 1ee87f1ba5b4ce2ffb2a90e4087cca90209a54bb
SHA256 b452a43b99e307a4512f81f21ced521a9476198067ece8e0bde54eb39d8ec2be
SHA512 127e652085542ac07aebc73be5ebecb268cca9b54c636b46e286eebf1d2c91a52e73e996434c5781a1ad29f92acf234fe2ffb8227f27c9014d095c89ac38b365

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\15004

MD5 e5098164c8424584040226fe88fd4ab9
SHA1 65bd4a07010cf3ecf76ce2b3094dc2e652a43bd0
SHA256 362ff70a15876e1aabc580320d7dadfa9b7f2f37f9e7f1d43768a5e7c19ac316
SHA512 c45751c20f911fbb9daa426fd5d0da04467ab7d22ad1243cb43b00a0e517ffb8322ff1de46baf16dcb6df30b0a62e1732146f498128ef9387d336c5af56935f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14768

MD5 e00fbff08c6f60c5d828e03f48d628c0
SHA1 99dc0d3c1ce41f66458b860fafde1910c593f518
SHA256 a421733feb48fc0239f6aa57b991150077b2be76d3f00d5e58ae0d7f744604fe
SHA512 e386b13b4fdd52434d5345d4d8dccb76405278be8f4e689eeeb51f786f3b24a69ae11f9a90e5269078c871acd9b22b8adc7818c703c2fbeb87a6bde1f68e5a7c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\8910

MD5 3486ecaeb8b2fb6db2d7b80d2fdbd855
SHA1 dba1e71cd911829e60b03457e0839b920136ba75
SHA256 1e363903931c8a783bfff78e5a9c158ad60c1798d34920be19fbdce306ddfc6f
SHA512 9790081b8c1a683930a6293633328ca7eaadd3905fbbcc2ee6a46e153568cd35cedbee97bdb0880fb4c3287eda695e8df49cfc0a7281567a83886f01fbcbc99e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\5644

MD5 90a06b6f37fe22734f1ab3c8f9ddc47b
SHA1 9b4cc636e468fb2aa3e19af577cd0f2327ba2f23
SHA256 59d8836781d0afe42911a51de5fc984a2a0af02667bd710ab5cf8cf1d14b9e0f
SHA512 a8ee8d75809f03d77fa13779862e14f10d04c51873a33248536f4e712257b1b9292cb6d6e64d3fa4bda8028a7de764590ed1884dbf5d2c607cd40bafa18a2ff4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11413

MD5 0895735036144f01010805e52c202d68
SHA1 5ae18446f54219e7d7c23ba818610cd10f3aedff
SHA256 214357e4fbf1931382d4bb8fd6f678e62e6921a17c001cb023caea2ce5998c01
SHA512 17cb83be64115244c57a39d9896068e9796f92dc1750078269ac3b23540e4006346d50e10fe55aa23308929adcd562c7f7aa54cc0dded555012599f202e0fa8e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c077fa56f4372a96a8ad0c7159bee2d2
SHA1 1e31541e2292ccf82392dd10a72d1739aebca838
SHA256 090c17d4fc1017a4beb8c0d89083fed38c563c1a94b964a9577102ab0bf1008d
SHA512 e8ee485d502a27dfea44aeba2025853abb82eb6c8d46da788c3c1e44705afc13330fe8fa19e42c698238876206ac67ff2b2f79a92dacbaf829c7844addcd5d03

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1078

MD5 4c67cbf5f5b904f1ae93f96e2c886ce8
SHA1 3df45076c03eb15da10264b3e289b62e0fc1b1f5
SHA256 50442ab914c2be98f56e1cfd8d1639fc4e05b97b35c5b778577eeab2b4688f0e
SHA512 7e51d4b03a7805d01609660e89ec8f8c47e1115bcd90f63a0ec3e44ea422d4795ab6e31d663dc6f45669a7219e5aed03eb36d7c8c1103c9d14c3fe171d5ecdd8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\11235

MD5 3c107b4c9461b7f5e36fc2806f28c8aa
SHA1 3a984c278395b635be8ec14caddd2ab37b9a9b6b
SHA256 108d5f05635e13035b42dc68c4e565587493ba9f5138b3d1b52cfeb77bafdef9
SHA512 33f81001c668d51d67f901e72a3c78b35198637a0daaaf9dd1be03d467bf5033f7fe5ad34fa65b409d1868611463e08c02285fcd186b42585ec86edf7c0fcb83

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\27888

MD5 99d67d245987418899d86015871fe847
SHA1 6676b7081df099061a9d87cd1fd6700547b7efe0
SHA256 2d2a1e4dad7c8314e9e1c1f559b8b95e257d8c133285f87895a886acce05a175
SHA512 81b11ce529e2a4ef727f018d6e85547a99bb2101459bf7eb4e1038e8c58fbeedac3c6c28c9ac82ae6d29c8004329bedcce346b9e01ad7b878eae48b415312683

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\14736

MD5 56632e393d1f36e618e31d796650483c
SHA1 f0b376da73294edcbc2bcd674a6dd0168c889f0b
SHA256 d1e114ad48a6b09f5507e065a34e166de7b5ff0ba89e38ee99f4c11e990949c2
SHA512 c023e6bd72ca0313132522247acb4a7497f0dc381ce97c7cd270aa0883aff907224a0d888e0b698f761e715b62777da6bcacba615dd4b00d94d82f70629aee26

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1763

MD5 db09e085165c13f66b09e56dd64db7c7
SHA1 252e6b07f3676eed0807918fa1c77fde4fcd2b6e
SHA256 c8642ec4b6710e2cca30b815ce249140fb7560f2dc37bc7bea60843c9b580159
SHA512 155f94fcd5bb1263dd08178828859934df5d14a3a76a0959badd1ef443ee484dc4415af7f46d7efbb47daaf33237ec55832d3a777961b90f778ca59ed66abf8e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\13166

MD5 492458e994ff328b429864fdaf12bef9
SHA1 c4ea9549f71ae7067c95c26878901cfc7ae6bc3a
SHA256 b0ce48efa2693e535423483ba6daeb098124c9fe1d0acfe0f214cbd2d47b8ca4
SHA512 17ec71dc25648458a6b406e3d14e9353cf4a90c226e54eeee1986492de627ab803ac21df8ab1725f5517eff650f91652eda6bf7bcf3641c11276e25f12c2b078

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\5288

MD5 e3c3342dedb627b2b459491c7bb289d4
SHA1 8ba7012b9937da4ebac349bc1a66d990a608fb1c
SHA256 d6cf74412731d319400dc6f9a2a5855407f243e72b98d3539fdca12ed0fc80d1
SHA512 094f313f8972dfb6d50ac55fe648d5db66bb87fe773f7b8b8b3354bf4ead10f9b685028a1692f35a4245f7821cdfae4d9651b3f73ded7360d49e220cb85a409b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\19243

MD5 2c9e0cfb3dbe34d567f9bfef08a0e84c
SHA1 c226a4f20f0c0fd55a5d2148601aed2540e7cb01
SHA256 a8a52bbbe490056ee86e281227211dbe8a8e0dc336a438049092322a3614b320
SHA512 6be3d76198e4d1ac2c4ad24b02ff379ccae7c07eb15cbdfc694d25f4ab311c6ed88d60a18440713c4a9c37f981c41b3135b410d9ea2035bc156ed3254cbdae1f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\17896

MD5 0f5b48d73bbd97c78ac5dffc54e5c457
SHA1 82649e37cb26f46abd01f9fefd283908615edd65
SHA256 212721db8beb0abbcf5fbbe8da6b84832ac6883c3d2eb619f60b52ed7cbac1da
SHA512 521d59c3e3d6dfd9527ca39d3736f3a141414e5527deca2022bd71c8625c52fb30f97c51ef31aba5047ebdf85c4cb759e0860933f232fd25d20de0614409d799

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 86440988151b6c3142c658ede592ccc7
SHA1 b5c44208a143163dbe64847bbc472e5cf7e0e2ac
SHA256 c7929cd731b41942133388e1ccbb7d8d9fb56c4b6b8990d11a2952d619a5ee7d
SHA512 415013d69a08b2062f8ded36667d9e7a912dbb8117ba87e762f751fbb1a8361afef27204e12e67fbf966d03d8e07c70948375350344e1fcee3f565b92ead8ba5

C:\Users\Admin\Downloads\LDPlayer9_ens_com.cdhAdrAX.supercell.brawlstars_25567197_ld.exe.part

MD5 3470dad8219537a4b4d9f1ff73436893
SHA1 fc5ba88ce9719ad6ba6febbaab971801cd625933
SHA256 1f5cc5c2211c48f57acf7d4113a487fbbd74a423303102821c913139d7ff782a
SHA512 2cf931cf203650781ca27051cf58b61a26700cb492086ce04a8680a49126b63276c77241d5d3f31a8a948edf56e0accec57c78e620200d310af48fa076d33c94

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\91C9B0D5DC174F6DC40097EDA74D1499E73D60D3

MD5 951b16c76deca0e91c387d72654b51b3
SHA1 3bf74f37d53cc88f6e45089d78c71e994450eacf
SHA256 1a8f53bc08fd510d77f3c1c3566239b9ec0e0731ac2b13920c1e6ef92e22e269
SHA512 db9beb50e4e50d3939c7b368a5c50ca5876855edd6f76337410ba2a4c2fed72a5c90227954e911755f0dedcf7810ccc9abea8be91f2ec78e4a70a2622c675d7b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\29032A5C8B9EC6682AD1DDCA16BFDF43B9383616

MD5 d8904fec2b34ce15948838853ba2d499
SHA1 ebaa6a33667e3e690c38a17fb22bfe75c8a38f3c
SHA256 6e7a47637367c80f0957e6b789365a15eceb5a1701085d711da8a12b6c3b27cd
SHA512 778becec50db4c3ca8be2d3e78a8434c2d805ccf71a8eabbb33d4438755d0f2b3ce9957aecca47f42b04f381ec1073b07919739c0474071ca4ff796cc2687609

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\F884B417DE2A596726379F94AE3819DBCE9F9B00

MD5 01b4232b94a19063dd8558eaee81eb7e
SHA1 34b6cd38de8880bcba8d28c9d8d96757c9d74249
SHA256 45210c619921fa0d2ae07ac455fdbc75874dd37fa8abb2bdcb4104218e81421c
SHA512 6a4c452ad18c475c130c7911fe7f0b8e73eee98b8d3029049b923f2f411e89c8051806dd4794bc36d9811b5f69d35f751f737127e07b65ca32a1b91327a1a309

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\288B98D7346DF5DD3079D60756AFCA2EC6DEF87F

MD5 45663f1369a5fb448311c7b54c2ddb5e
SHA1 8933d1bb05bcc7a4fb6b3ea729500a0ff9f0e810
SHA256 ecac349916ddabd5a03b3aaba61d54c88527ac60ffae523b99a010ebddc9a453
SHA512 e78972fcfd6624b898479b441f2918db9015de8b48079d52a937b5036be8d0bbe28392d5ae45ed23ab14d076c8aeb6eeb34d277090c305eca1268989f7602fa0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\29B04789CDA6847832393422CAF2172D4C81FE21

MD5 ba0f48b692504c44e2fdb2fba37f8b11
SHA1 667368dcf68ec95d77f367628242a0f838b81443
SHA256 3add21d5abbb9c05ff2a3dd7447d6380b5c159b7b554adfbeb7dda5eec56be3c
SHA512 a0aa9895b66d61891036429bd55250cd22854419d4a9b5feedde3c09f7ea3fc611d65fa50aa44a7c09d327ebe8b6702f60d3291ca3cb537039976974b4825b1b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\A009B44A1B9BCC076D111F06397947E57CA5F58C

MD5 a4efa6f7e2d070698d27b05bbab8193e
SHA1 7517280a018a7a307e6104426b2f1b90025c5a77
SHA256 47fd4b08e8b23d48928f9ce3e55e58e08ae02c60aa7291074e9ed35b7daea819
SHA512 5134b2e147a827e457c942eba95c36f3d128b225d83506f0d32301b8166b83dea7711f3826878b2bfa72cecb2fbb05e598157e24cf54f85b8dccf19feb62b033

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\B7E4E569F6FC80B2DCDD41ABAEF99CD24BEDFB5C

MD5 bc7e8744bda2db04637a0d95f140c9fc
SHA1 8ed0ee206719edf5caf87767768a60397cfafe6d
SHA256 998c826809a9687f6b8c4a4b2aa709fa8ba9f8fd344ef351823610eb4e7ac41c
SHA512 ae9dfda7a330c2d73d771383cf3801d3afefb32fd72ae9f4b8401088e8fe757eec0cc3740b54f392751da301fdf5e2f0635929d30b917a7d83c0b37f65442812

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\3466086799AF07879F518E0F9D3D8B2BDABEB019

MD5 5d425185d40aa34a28710406e74283f4
SHA1 22def914411b69b9abccfa3e4d8b3f6532a00b60
SHA256 5ac65182da539200ed6b996104106206fd7fdb1c9ccf6c162d87f57079920087
SHA512 b62e2877695ae6c4680d4ecfbf2f2f91092133cd594340dadb8a5dc91bd4eafc15d77c33ed887d2643d3c068f127cfadad1719958b782ecb4d2d3992e11bece9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\C56EECF9B122A537E5264E3B688DED3BCC68E62C

MD5 736bd6445b736dbb52e11861d14e761d
SHA1 c76293d3dae99d1345575c6c519b723a03801ef9
SHA256 b08c77e50fb4788dd25e51346439f995e6607bcea77e2b6c091cc6f34c2badb9
SHA512 9a9ad18344b05c5e6785de488f9cf36a3c15a01a5b24e8438fef2ae354b6482f7284bab4221d4aa1bacd3f6bda5c29d33742427fc455f37a3c58ad771514fcf0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\D5AA3A2894729A8BD264ECE9438C93C8DC7BAA02

MD5 aec74bd03806c5e2e0d18dece63e4f7b
SHA1 120d9041acdcf5b3b9289ce88ee58c8e5cc6363a
SHA256 e36048d61b2b0f9a3cfd5b160c68e89e371f5a40643568afc08714f328116c29
SHA512 f403c9bc95c69ed13344d4b369e4c6ce87f84b674d27dd586896edeaec6d8688a8f739601fde09a4d649da37738c9407bf434ba773057ba6e885747f0318abd7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\9F72320EFB9CD3E5C8ABD411D06CAA9BCA3ACBE2

MD5 1785bb5569cd847cc8fc2d95638ce768
SHA1 d1fd0138b9506a279c37a56698a12fc1c3ae9673
SHA256 48376f959225e0b47a02f40f7815d8db4a12f44642e911b1ab468356efd3e887
SHA512 efef8e7435f1152191d8a0b582e5bff2eb0d16e970387e423e50db57b14c072625f00de160dc1ca6e73288840d8fa062a5d3be04e291c88da0797cdc0d470785

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\D55AE9680692C277445A1780212F3FA25ED815CC

MD5 d47541648f2efd52314ed938c723bbe0
SHA1 576adbd62f709feeb459f1274d1c77f6c7b5a478
SHA256 7e598573c4ce496df0abfd9de4a2e675313d3a675cd27c770d4bf7276c93c874
SHA512 2a6b5dc301651b20e1a3a93ac03b40e03aeb162d3f58a5383453e3d59d0b83e6bd54cad54a719f94636349e1af305613410b376e08415ec11a42992f398fbeaf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\4114D80F904A71C612F24BE53F0AB6B61A86E019

MD5 7da1e672c1eb451223695e4480a726e9
SHA1 e40f25758465925de39f078ef25cc8d802891d26
SHA256 3e9e591b956cb85746d9f101c812553bfb9f38999527c8e4c48db6826df4253e
SHA512 d699b9b095116f98fe86f03192635ae0a671ddce25af2401cc7ba9275be7a1d41a4741e2b45467d46b74859d65b39bdaa809827c4b01d3b9671dc652674167ec

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\F8BE9D499518F26DA2C974465152FF993B4E53BE

MD5 d475908124b7c8b5487e0412b4925b89
SHA1 0deacf83d17ebedd4a1dfaf80f57ccbe4f639b66
SHA256 4f0951e42e8905e01ae4ded73a1d48147fbd7d82f45c956ff575885c5fdbc3c0
SHA512 61adc021c4dc11c02f73f074fa11f42922f0fa5883e25426e9d8bcc41de6a5130cf42e108ce92ba07f13a6c247a9575f5696eba8cc2f22b58e9448d1a9901046

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5 7d5d3e2fcfa5ff53f5ae075ed4327b18
SHA1 3905104d8f7ba88b3b34f4997f3948b3183953f6
SHA256 e1fb95609f2757ce74cb531a5cf59674e411ea0a262b758371d7236c191910c4
SHA512 e67683331bb32ea4b2c38405be7f516db6935f883a1e4ae02a1700f5f36462c31b593e07c6fe06d8c0cb1c20c9f40a507c9eae245667c89f989e32765a89f589

memory/1540-8629-0x0000000008100000-0x0000000008114000-memory.dmp

memory/1540-8630-0x0000000072C70000-0x0000000072C84000-memory.dmp

memory/1540-8631-0x0000000008620000-0x0000000008B1E000-memory.dmp

memory/1540-8632-0x0000000008360000-0x00000000083F2000-memory.dmp

memory/1540-8634-0x0000000009490000-0x00000000094D4000-memory.dmp

memory/1540-8635-0x0000000009570000-0x000000000960C000-memory.dmp

memory/1540-8636-0x0000000009610000-0x0000000009676000-memory.dmp

memory/1540-8638-0x0000000009BB0000-0x000000000A0DC000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6b7a54ff85d8c3a0ed05d17ba99acbb9
SHA1 758e4243e1812c009bd921fb87117d67b680ae26
SHA256 67e8a7fef968fb4f2064989ebc8dac8f15f57232c3bb26ff3f4f84b918018f7b
SHA512 76afa6cef4cd8b3790abbae6a56a5dedb84a42d0c6a4f437f1992bea728264153f19e1cf4073de15ca138e251d374d26f3cf7ea0a3a22f0e9a0dae664d9e99fc

memory/1540-8653-0x000000000A320000-0x000000000A32A000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\9668

MD5 ee648a8c7191628bf8a4bb48a950c539
SHA1 ee379489301705230fa53813c6aec2bd4317c2ba
SHA256 7360f194fb736912b6e2b96607509e47784ee92a33425228962c46161393ec11
SHA512 c3008275d941f2066ad59dcb11fad1e68ebab25fe7545eade458ddff42706d0576d2f479e5ce12cd7b5c68cc676341ae3b792a34f43347edadf248b2f315f844

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 cc0cc0f6a670ad548cd57797aaca7ccd
SHA1 e05c47b8ca83f3a5b775a7f12d5d9e06bf9e0bbf
SHA256 07010255c6118c19d1b728d82e00f926a5a351d308fda35b9875b3e1e01e2f7d
SHA512 f44f369a62add7b44880e95bba9428b49625655c3f07a6834198d7ef3388bd7e2da50605db62b20c1337d7420c16aeb820ebf5aa0e8d5565f5aef36b04104ad5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 59c76a5701a764d15fbd0683fa10188c
SHA1 53d61f7a0a24a06f3712dfc93e62f8ea9ca99aeb
SHA256 87712549ba2426569a04fcd3991e56555cf1a19b0d129c6476aa9a30cb6f63f3
SHA512 8575c79e72b6077c8b875985719ea1d72945c01e17e2b9adf930321febbd9dbe57a5600640a6d155205f30cc089acc35838b4e5ea3f40f62044057e0a4de2abb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\78E55FC9895194133709451CDB86D403CA93A929

MD5 2a591a127080dd5064d668ade1ae00de
SHA1 b8e725ae4c05ed91c413ab7cab944025ec0be6bc
SHA256 515e5f0b8a260e5044fdf4242886585e877735c1cd1261871c727da15b2b09ec
SHA512 b695b138e037fb642ad40eb1402c471c68d989a0b1fef9ff28003386c96af9880da8c6d2781e79e453f6a42eb677b07363ff30934887fa5bc4760f7351e51afb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 b163100f689c25b1d28f6174c95553b7
SHA1 366753c32994874220812ad226d4bc0168f75213
SHA256 e6ec1bcebd846e54f9948498ccefb98b21744463ee2e92ca7314d57564da93b7
SHA512 39557024cd35e214cd2bc90e1eea623492c96469fb655323a25dbb578f2dcc607c616562fdd44b1702f8baf683fa4572ff51d5d66d6ed8f483cb78de004be709

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 96ac7c4e03c836e9d722dfc6dc75b59b
SHA1 2624f49a3a52e67b472da19c76a872b9cb679156
SHA256 4470616d2679e9cfb032a56eb0b07c19adfe9f037cf7b70a95355153985fcfa7
SHA512 8ebe86659a33eadc85dd69781504af55baa8c1febb47db885eb83e9f3d7556a16c9a603bca9b76593aa57752be827eb9956d844f71764af2069c3044c8427a3c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\61DB42AD312894A28306A2751A79527B0E117A07

MD5 d29803f8b8b1f1a06fdb0bedf15fae6f
SHA1 ba4df6f4f405bcd46841364a1e73606790b870db
SHA256 b0b626abfdbbd4d0ab187d68ff5cb977c68999fee77808a620e6b78200854661
SHA512 b6f60c6f1699d7d1f786d4aa2b09326f7ed78ba5f8d5986a514158fbe1f5cb79313e72a469d539edee0e478deb1e43f76e7fe4c6669b457a930789021dce1b37

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\8B8C58EBAC9472340E5D316E0FD90107B7D7B75A

MD5 1a72882b43fb9d53fb1c6f938599b566
SHA1 1e973cd6a8934933e28f8a1b4f90d89798ea8420
SHA256 955276a73ccd8a7590440bb09236cbe4c092e3ce6199b749ad2510b9c485aef3
SHA512 d53387a3a066268e7e0052226e356abf5de85f4c5c6e80eb521de687dc6105ce2f3746432a234bba8b931f10bc1b1ba417c2560eae48df0dc05bb436e51ae98f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\ED7C14751024D4DEE3C848F3925F4968536F5881

MD5 9fcc5f1592d661fd31ef4cb34ec4df30
SHA1 a999e95bb3b51ce9944a1f29d66581acd0c95531
SHA256 2676c4ef278a9a24d9ea0af21cf982ae5a73a96243e7f2e2d878a13b28889970
SHA512 a1db5dec2b72d5a4cf27381e9c0bb8d2d4658decf0a381ca7a881c60b3d75ff944b0d7e1392444ca2965f5e6f5f705349589e78d28d11dd76163f2bb004a377d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\24D32CC1B822BF30FE64DF1A291DE4A2B09766DE

MD5 8b9b4a4331a6c4c3294b3b7ca8fa2467
SHA1 360bff030f45bf685477595ed33227795f3b76fc
SHA256 7a95a313632262ab86b8e1b116cab0733ebe0820a16d059e3ce088b99b07f301
SHA512 acaabaf7e6c850493d020039264d7daadec70ece8c65c0d2249bf41274968a5aec87ea6b37d8da4ed44482ff4fbd460fe9cc538492c8fca018f79e90b0885511

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\3C9AFDD2E4A8B18C3F839FF12E44D39BA0A610B8

MD5 22d79d3fb2efc70e8ef720beefcf2863
SHA1 1ed09f3317a04bd2cf497c0fda7a1ee83fedc757
SHA256 6c97f3a84d195ed6b53329e394d497b6104c1413772b0370ddabeea2ba8d785b
SHA512 cd3464dde7c5669041e7e4067de5cc98a009579278dbd3d7a4d9f616bfcf2b8152e5f96d2b7a76a3ef6d25fff906829cf5c9ea40ecbef651c99e0e9229a0a8f2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\54F4CB1C8E62B98D8A589168DC6E4FB0D602B695

MD5 c459541d29c45522fd2a308a5a741154
SHA1 af5dece7d1534a5f1525bceeb2de60d779b87a12
SHA256 82e7dac1cd10046cf324b86c05037cc631d9a9dd566fea52261a906219bec04b
SHA512 1204d049222e185b755624f498e1b0a9e1e27b5ca362549efe868535cbeb388d97b4372ddb8a68750490f881e06a382013fcaa7d63c53875568f31c641d56736

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\925D12C1595D665128EAE65FD138AC91E0F04017

MD5 8feaf36bdb8daa3940ffe023f420660f
SHA1 a1cfa669a60c6c5c1dc681a5f1549a0cb8b13465
SHA256 37d46f6b4a7f2ad23422e8ab2d16fe64e10dbc7551681d55b2be697f7c544c5f
SHA512 d7ee3faa154f162e65aeb956428adbfb77f65338d016b7ebf9c4ce78487e69c742c9570d8584c9ab272f408a50e7f4b599ae1e106136bcfb58ccace5fece9391

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\B5B0894E06DFDF9FF5AFF8A406E785359170E3DF

MD5 c908aff5e9dc6097a3dcdbb7ffac6344
SHA1 e92c3f5af423c813a941471fe776ab127b07e546
SHA256 2af146d5a6ab8013614f76c336825ca70425947f006a61b550e5f58704641fdb
SHA512 988fe666d570af292136cbd98ad15a4dbb63cc1125263f2669c976d58745fe94b985dbc1cb1fd356c52a37b0e70a38d49fd3772cf08af60c94dc87de88209548

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\6A741E6EFA1661859F7D16AAC71EA065ED3AF85A

MD5 3b3f70741d273296b219ddd9bf538a39
SHA1 787c7c9b37d59ad12f115d68e30e5c30d6f1bf44
SHA256 a33e86dc6be768b7f7278961eeeb4fe255c5b88452f22047c7e59ac8ac331eb0
SHA512 92f73e405c0c6c0900477a20c813d5b9360668a46ab4d310bcc77e67d5aa77a7743f7c852fa55b35b8f0bd63268df570bf2a17c29a534f960abd506e57c7ae63

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\920998CA1E5BD3EFEBDCCD81A6CA9F185ACF75C9

MD5 ed2160d2dd76f89bdae026b534bb3b9a
SHA1 ad6e5e639662c7697ae4d8051595602097127c7b
SHA256 94a3287492d12eb1a93588983d000e47453b4f706d989644fc1beaeb89967930
SHA512 e63c44192fcad533c5f3c36f5c696c4964a066be49f31d45065cbdece8e99e045c067e05b900322315d560e432690c8367fbcd909499e6a14f38df67c3219a16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\A897B34251AA73D014B106F7D1A2B409EF2061FA

MD5 1e18013446165582355af0badcac92b1
SHA1 135df2c40fad027167969b0176814a27fa676dbf
SHA256 493b16e8d920bf30a710aa576cb2b6c2813a56b2fdbf9ac7bbbff945ee70bf1d
SHA512 e5f945ec7b9bacd3150f5cedc34b389d45545d2aedf5e567d839f672490030345bd08f18ade000a995bd0158a204b9ebae6783a2d0331d39dd82736394bfd5c7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\D0468C893B0603CFC144312DB46482D97CCE0515

MD5 a98694bf94fc7a9d3fd6d265b3b16452
SHA1 d84e192db57dc7f251dbe40d2ed5dfc7d708457d
SHA256 2f1bf3684d003b35d32755299cf4ac6900fca6b27694b7d8000d0dbaddf47797
SHA512 6d5d3e54e616164b0239352a472df6a446bbd001248481c51b0ef7affcb763a7f4cf8b38f7d2ed7ed4e0314204d150ff28bcefa0bb0609c62031d0bb35d6ccfb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\8E68FEE39A64B0603034DCB74B918569F0DEA731

MD5 ebb492551ce2b95c9c553fc5a4da8a25
SHA1 326760e2c4e0f5feb4cbaa7dca39b8b0188686e5
SHA256 7ad3bf6ac3675c130298b5669ae9204f3f76cfc143b35108d280deba80cb3804
SHA512 cb0d1f34f199eb4e0f29c1f5dd3651cf8087f09d3f8997c5414e4d8cf461932bd0b7da7b327f4f12bc70eda71b18ffdc951e2ee9a5b9ac3212ad04dde1694578

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\2176786159C624184A9A88EF72A047914E9C9F3D

MD5 6b6c81fccc4bc6ace12bad6023862582
SHA1 6a01053c36334c92148bb22cc3c48e21eb67f8e8
SHA256 f0893f09817cbff3836f67fadcc41588247c5568fda4ca86259db27b1bb6cfd2
SHA512 fb0fd3ff8e1b365fbb9b31a5b9bf443a79251ffcdd7e9a358634b94b60f8256e830c0fb91c471b3bbe07395d6a5c0a2d7170f2bbd42432c9dcc3c00c7f2d2923

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\FC654B90CC93F506DE1C2C8E2F41AE8BAA44FC4A

MD5 367e61b232afa11a3a82f102386e943c
SHA1 0c960b91cf30e459bb23f5d29086d5a1413c9a1c
SHA256 6d8fcac8b974d3f0174e35c7a889732561541be1c4340c19911e4397f7f5aba1
SHA512 c40c87ec5a98570e3951d0351255158fabc1c8f1a22f4b06f5e2735b3b502730728fd03de0e3b2efb2392601b16aabb56a4b13d7c432c24290a9dc74bc863c44

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\6FD4B7B7EC2E0FFD2FC0728C4B512068F99BD180

MD5 df4e7cfb5cdc491f3d210ed959bdf015
SHA1 47940050ccf90a54a7419627ad99255c7df0ae58
SHA256 ef7ccd8a962eb50280f6c3b6f1f56d15ffbde3628e41008edd8e3eef9ff0d443
SHA512 9721a5575db913d73481395f4f89902458e11e0b868960436e79967214df4ecb2b306f0212d1805a5c2eed366e5025605473dc67d256feab45aa8cf84eac000e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\71BB1B8CBCB78A8C45214D048A800F2FCB75F3AB

MD5 6f0f0f10001ee374494a3b8897f71fbe
SHA1 291cb22ff5289826812b5192ba6abe645a6f78b1
SHA256 af95691c49a4b677beafbf9a6c61c7be8307db48b77e52151d9f0b99a0c661ed
SHA512 3798e30c33def614de62a6c256b50c91b2606453a750464c9651321c07693181e9d94d39c8f2f2983e10fa3e535fcce726c2790fc73e5156373bf9687408e8fa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\0DA8B0F91A7D5D3DA3AA604EC502F0EB65F231D3

MD5 a3814c20228d93153f5db94bc9955d0f
SHA1 6abfa2c7cdd4780bc45dbbd5c3142c209bbc3468
SHA256 79e6c5fb7f7f2e4df01fc786c763036e9ff2f72d110d953c20f24bea11b3a645
SHA512 0ac80f616165dcb635212b7653f9ea7ed68c9f6d6f08f79dee1e6f4f34c61cd4accbd143735fea88727ccaa1e6171acfba80d8747c29a1a03da639fe1e135cf0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\12DCD3B46307DF0F6DADF7F4A5E5950641C2D959

MD5 0b12cff6243c2cd75c2cd23ca8438bb8
SHA1 50672b26c07d180334f4578f1badafa852ae8950
SHA256 64357e20ab7170d6ed3e7ae27b676d343b0b85b30ff5ad8066ad95693989e103
SHA512 dc0881af7b0b04a26ac41a037d3996320af53f33ec17154886fc7522e02325792e5fb74b64bbd9affe8732865b192833d1a0143a4a2b9a447a7644087c10168f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\69A3FC6F1027C5F5D907579933725219A81FEF1D

MD5 fea1e263698feb64023e5e3a1620b00c
SHA1 5355f2116718c4a14e31da4c64cb1a65d30cac75
SHA256 a94ecd7a6b28f13350d172defd6e29727b101fbebf728906eaa5f90db7ba9e0c
SHA512 a84bf380e6357ec33ca9c9acab194ecc43596191275d693c5a4e955cba43b5de8b054557193d38d0b8c46665527a2cc3b57ca08f1daec3821bdc8dbb38f9e238

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\CEF68508EB9B66B0E81E2EEF96312CAEC849D4FD

MD5 4733131f0950604b8fe1226dc1affb94
SHA1 018e70d9e64a0c7eebd74b7ea45f70c8762fc669
SHA256 a940130c71fa74a57189388a253b204b35009fb178c203a3f893611052d9b837
SHA512 602d37905aaea144aefc688d2fcfa9a88c487d66b53e902eb664632e51da72e95509b35dec2176fc53811c2b2bdd3b0af8818b346843b056be681033124751b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\51F8E809EE388722BC3EF67C4D02745BA00DE740

MD5 2bfa1596bd79ed5d9baf62cf7cde45a1
SHA1 928506b7e750f6e43f7197527d50155a029378b2
SHA256 b1bf6fb0028eff0c4a4da12a693b8cbf6e8136d40ed0c2871d4feba986499780
SHA512 acad4f970bab5ffb4a593fd08720826bedf25a6319806e82c3b4dfe351f6212821caa827af82d1bacd7b73d128bc58ef0f881383d29b13c138757bf21e41eec3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\E405CF317E2A2A62BA056E817C45C8C4C0ED1D11

MD5 68b01c6e1668a2ddedf4b26aaa742d23
SHA1 27927b8ff7de37bbe99af916b7cf1b0baa3e8f8f
SHA256 9251b07eff46f3fc76b28eff028ca84389dfa8ab5b2e910aaef13f61d0e3dd2f
SHA512 0c0b0160f4f376e77153f957145dce63eb5c3ffb5eab3929a78163c00450ee2c74e62f703ca62f283e8f7ee31edba3a2dc11e46d2ea9b683c6bb7758e059b434

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\36D6DF4AD8C0766B0933230966E294F3F32205FC

MD5 a24fa390990fd04b07bf34acff0835c7
SHA1 1c0b4cd426ee5f12b6a6af46ebe0700fa8ba83b6
SHA256 d935bbf808a3320bb96deeb3f4275c79141cacee9be52ea7da11d807766f8fb2
SHA512 4bdd14d14f2e5ab47ee618f6c942d68c2f79626114c20979cdd82313b5e2ff6a5b117cfb78bcaffa096ecd894d753b502f8bcda5aa8fba1665b5bc5d10e97320

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\03917DE066844A0B95DCC41D32E066EA7277523E

MD5 e642d3840b9782cdbda18a6648de8f0d
SHA1 ad85ea3b82769989bf5b177b292f922b2944f713
SHA256 3f32d0b95c6c7dcebe8862aa0644eb5ffb564300ad361f2147050bcd34f48b82
SHA512 e6a96ae2c8a9f2874f37fa2501ec144b5d0178c6311a1a17f3d7cb4f45ae8659fc910fdd50e3fbd280a9d7ebd361fcea01228656ea164fa2b0052dad6103993f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\4A4CE2325A3C12908141C68F0E13D4E69A634A2D

MD5 552be8902f128c818e97d10e9868c16c
SHA1 61789e23e326e9191991c29e1d268de5a6e2403c
SHA256 d1312ad403a4ccf10807ab5445b18225dd7e9d86c4eba42d609582ecc4e5933e
SHA512 1863434a5c28137fc71480d2165be25debb583ad03c3788950287cfb4716f022263de1f8ba98b627fb5bf17a120a1d40ed484694fa965f0ebbacec7aa644d3d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\EE9AE07ABF048E536C70EB6496ED926F41600F63

MD5 ab1f6896c0ae8aab69843fb28a71453e
SHA1 fb2a7a6047491b34731c697fe4ecc5bab4524700
SHA256 7e02454fe2c660fd10cc7bd9d967ba7e6a069ccf879b77e11d6fdb291997e09d
SHA512 48b3c8e228df158ea45b28b2f5339f7ae5c2579c79a634bacccadad57a9ee0ef64fef9aa7f7d05cbde3a2f8b3aaecb0181f8156b6dc87798f5deb27eecf90ef1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\59AF071A76DF19B059B34E4896AE861DE2E4E2B0

MD5 f32dfa15aff3d000e81787c62d7215c5
SHA1 dcb07c3a3cef4c4e3535967f22d7f6a399e8c913
SHA256 44b7d9971617fc0522fc06adddf1bbac250eeb0ff9dfde1457d97dda2733c617
SHA512 6a7c11ea13bd4f60fdbf421184fe86aeba48e100787886db4820d76113e78fac800df413155ca8b68d60637a60634e9664648158f60bdbbf702b0eae1c41c19a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\2C165044ACC8CB8C73FCFB6DE5375141E3770452

MD5 11e1c9d226a8a831605a7a8fca54e08c
SHA1 38b889ad046f73238b6feb0210ed8a1c54a1ae87
SHA256 8c1e96ac6b1dffb44b4c2456d86b9ca60c1d4713dd9fd44214bf6c247fa6f393
SHA512 df8391345ca8272dabb70482ba48c9d33a45f6bef88b7e2d48522b64a32f857c56c1efd079f535d2159352a14908144f373796af26e7fd84b7da7a425f9f266b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\EA87465A6B977981215042B94E7AB9FECDDEE708

MD5 86069f5b337ea4f6d08262078ea48b80
SHA1 b45918b71232e14c7bb2048eb9da2b7bdd6d00b8
SHA256 b1d7f5cbfd2a06297e58c87b7df636aea4e0ab750a61dc21d609a2a85cfdd6f3
SHA512 2a87086a1b1aee964b3d3a5b34beaccfd29f0ac6d925e885bf4f1f92781d0d1f8efdc2440c5b4d353a4c5e12031f89904216e8b84d5a99e3c7cedf1db1eb34d2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\C01A5A91B3215B34E7411A2001698454305F7026

MD5 1e95755eb0ea26a2037283afabb75804
SHA1 ff12f6500d216f6198ea31e09615eb9226a26824
SHA256 17a607aeabcb762e63ba3eedb4ad0d801fe2287cb692ee0547ab3231c2b1717c
SHA512 94131a1ec8239ac571659735664a01e4141bc71740b7a6332316a87ade3fd1ecf169e7d24d719ae13de5d715613461bd582bad10ccd50375c2dfcb5287b940a8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\broadcast-listeners.json

MD5 72c95709e1a3b27919e13d28bbe8e8a2
SHA1 00892decbee63d627057730bfc0c6a4f13099ee4
SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512 613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\1300E8F7AC3D7317AD5F266608684A872F3DE312

MD5 5e0688bafdeb1f3cfb14c663fef2930c
SHA1 460556c8e40d77400f81c7d30c67fecf7dd1b717
SHA256 fd89fe2a7ff4ad0a6ce77cc2b0bed7604757ce564938cbeb85b0f7a4131a13e3
SHA512 282797ead9d99b1d1d03e3845a0499858dfa697e1581e3791aedad1e7956c52d7f177236090a98b2e6f68d0da473cb28b2b3ba00ab7de47b6864379b54386a15

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\B4F0B063F9649DE525B5FDB1959723A90855147F

MD5 84621523e3d1ac24b63b71e3d5c4d5e6
SHA1 8792e83da1716110a148aca62e0eb361fb14eb98
SHA256 82ba52f3fa97aff53dae41985553a788e115d31c575821db7931e4d3df46c4fe
SHA512 8adead5f87c6e29b4a3f957c2cb92d7bdaf9f63a54195d729a2eac424621b97126c7d6ecaa55c9e6ebeaf926e7e8432685812559f4f1aae084946f7ba04194ae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\prefs-1.js

MD5 9d09ace736b95c2b41c08e5b7936f2e7
SHA1 24fbd23d40cd1d6f8040277dcb9678e482c1b647
SHA256 668e23a922d8752edaed9f761d0ecaa016f25062df75e88107daf4a83db5fe42
SHA512 b59fabe75e064f7cd2f2469da0518071df6e3c32f6cdb9981a35d856157deb61722d2db8114f5662dbda9da6b539dd8224c409678f2864ebc6b89cbcd43b34c2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\bookmarkbackups\bookmarks-2024-05-27_11_fHex2gcaYrcM3bB6rAfVHg==.jsonlz4

MD5 06d87d126355fd690e457ce18b4778f7
SHA1 3de1658c09f3729a9ef1e86d20a4379192b125b3
SHA256 d7f1acf55995a0c37cee175af46bd974fa2bb09f2905e9001aeaf604166b7294
SHA512 78ea844adc923e9d7383c4c2c2566aa99097542d69ad04655398dae6ae4e7b9b63037c5c5a7776e939f6337f216e5e906fac5f3faef5bdad8302b117ee653eb5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\6877

MD5 53548e0ad65884eb2cfe67addd4842bc
SHA1 94340b47f9e429e80061a158552db2f3f71fbdce
SHA256 8530709b829f0943e38525f37bbbccb8a00b99500278b77fcf67742592a1606d
SHA512 414fd13c86998e9745ac85ba408aec34e6d9c5cd388e9c508176db54236400490293b1403cddebce2f7013c1479cfd279d0690104fe1bbcf91c30672effa481e

C:\Windows\Logs\DISM\dism.log

MD5 e13d0bf70f3c0feb10ae7ef2b16c10f4
SHA1 50b80e46e63b56a2bc21e9ef7f5c27913b0cfc6f
SHA256 5dee8e6f0e4f5caf90d144b5b8f3dcb9fa0fa54c0fd5f5655c6f51ebc0dfb504
SHA512 aba11bb4329407a46054dc3bb772a0226b8ccf967a3637937adc6378b709c08ebfb635c3d79e4c3aaafd1026e3434bc162ebb5e119a9890882bc303c72254522

memory/9632-11210-0x00000000067B0000-0x00000000067E6000-memory.dmp

memory/9632-11211-0x0000000006E20000-0x0000000007448000-memory.dmp

memory/9632-11213-0x0000000007560000-0x00000000075C6000-memory.dmp

memory/9632-11212-0x00000000074C0000-0x00000000074E2000-memory.dmp

memory/9632-11214-0x0000000007910000-0x0000000007C60000-memory.dmp

memory/9632-11215-0x00000000077D0000-0x00000000077EC000-memory.dmp

memory/9632-11216-0x0000000007C70000-0x0000000007CBB000-memory.dmp

memory/9632-11217-0x0000000007F90000-0x0000000008006000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_x1njm00q.qnl.ps1

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

memory/9632-11234-0x0000000009030000-0x0000000009063000-memory.dmp

memory/9632-11235-0x000000006D940000-0x000000006D98B000-memory.dmp

memory/9632-11236-0x0000000008FF0000-0x000000000900E000-memory.dmp

memory/9632-11241-0x0000000009160000-0x0000000009205000-memory.dmp

memory/9632-11242-0x0000000009370000-0x0000000009404000-memory.dmp

memory/9632-11320-0x00000000092E0000-0x00000000092EE000-memory.dmp

memory/4764-11401-0x00000000073C0000-0x0000000007710000-memory.dmp

memory/4764-11418-0x000000006D940000-0x000000006D98B000-memory.dmp

memory/7580-11594-0x000000006D940000-0x000000006D98B000-memory.dmp

F:\LDPlayer\LDPlayer9\ldmutiplayer\ssleay32.dll

MD5 0054560df6c69d2067689433172088ef
SHA1 a30042b77ebd7c704be0e986349030bcdb82857d
SHA256 72553b45a5a7d2b4be026d59ceb3efb389c686636c6da926ffb0ca653494e750
SHA512 418190401b83de32a8ce752f399b00c091afad5e3b21357a53c134cce3b4199e660572ee71e18b5c2f364d3b2509b5365d7b569d6d9da5c79ae78c572c1d0ba0

F:\LDPlayer\LDPlayer9\fonts\NotoSans-Regular.otf

MD5 93b877811441a5ae311762a7cb6fb1e1
SHA1 339e033fd4fbb131c2d9b964354c68cd2cf18bd1
SHA256 b3899a2bb84ce5e0d61cc55c49df2d29ba90d301b71a84e8c648416ec96efc8b
SHA512 7f053cec61fbddae0184d858c3ef3e8bf298b4417d25b84ac1fc888c052eca252b24f7abfff7783442a1b80cc9fc2ce777dda323991cc4dc79039f4c17e21df4

F:\LDPlayer\LDPlayer9\fonts\Roboto-Regular.otf

MD5 4acd5f0e312730f1d8b8805f3699c184
SHA1 67c957e102bf2b2a86c5708257bc32f91c006739
SHA256 72336333d602f1c3506e642e0d0393926c0ec91225bf2e4d216fcebd82bb6cb5
SHA512 9982c1c53cee1b44fd0c3df6806b8cbf6b441d3ed97aeb466dba568adce1144373ce7833d8f44ac3fa58d01d8cdb7e8621b4bb125c4d02092c355444651a4837

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr120.dll

MD5 50097ec217ce0ebb9b4caa09cd2cd73a
SHA1 8cd3018c4170072464fbcd7cba563df1fc2b884c
SHA256 2a2ff2c61977079205c503e0bcfb96bf7aa4d5c9a0d1b1b62d3a49a9aa988112
SHA512 ac2d02e9bfc2be4c3cb1c2fff41a2dafcb7ce1123998bbf3eb5b4dc6410c308f506451de9564f7f28eb684d8119fb6afe459ab87237df7956f4256892bbab058

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr110.dll

MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp120.dll

MD5 50260b0f19aaa7e37c4082fecef8ff41
SHA1 ce672489b29baa7119881497ed5044b21ad8fe30
SHA256 891603d569fc6f1afed7c7d935b0a3c7363c35a0eb4a76c9e57ef083955bc2c9
SHA512 6f99d39bfe9d4126417ff65571c78c279d75fc9547ee767a594620c0c6f45f4bb42fd0c5173d9bc91a68a0636205a637d5d1c7847bd5f8ce57e120d210b0c57d

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp110.dll

MD5 3e29914113ec4b968ba5eb1f6d194a0a
SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssl-1_1.dll

MD5 e8fd6da54f056363b284608c3f6a832e
SHA1 32e88b82fd398568517ab03b33e9765b59c4946d
SHA256 b681fd3c3b3f2d59f6a14be31e761d5929e104be06aa77c883ada9675ca6e9fd
SHA512 4f997deebf308de29a044e4ff2e8540235a41ea319268aa202e41a2be738b8d50f990ecc68f4a737a374f6d5f39ce8855edf0e2bb30ce274f75388e3ddd8c10b

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssh2.dll

MD5 52c43baddd43be63fbfb398722f3b01d
SHA1 be1b1064fdda4dde4b72ef523b8e02c050ccd820
SHA256 8c91023203f3d360c0629ffd20c950061566fb6c780c83eaa52fb26abb6be86f
SHA512 04cc3d8e31bd7444068468dd32ffcc9092881ca4aaea7c92292e5f1b541f877bdec964774562cb7a531c3386220d88b005660a2b5a82957e28350a381bea1b28

F:\LDPlayer\LDPlayer9\ldmutiplayer\libeay32.dll

MD5 ba46e6e1c5861617b4d97de00149b905
SHA1 4affc8aab49c7dc3ceeca81391c4f737d7672b32
SHA256 2eac0a690be435dd72b7a269ee761340099bf444edb4f447fa0030023cbf8e1e
SHA512 bf892b86477d63287f42385c0a944eee6354c7ae557b039516bf8932c7140ca8811b7ae7ac111805773495cf6854586e8a0e75e14dbb24eba56e4683029767b6

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcurl.dll

MD5 2d40f6c6a4f88c8c2685ee25b53ec00d
SHA1 faf96bac1e7665aa07029d8f94e1ac84014a863b
SHA256 1d7037da4222de3d7ca0af6a54b2942d58589c264333ef814cb131d703b5c334
SHA512 4e6d0dc0dc3fb7e57c6d7843074ee7c89c777e9005893e089939eb765d9b6fb12f0e774dc1814f6a34e75d1775e19e62782465731fd5605182e7984d798ba779

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcrypto-1_1.dll

MD5 01c4246df55a5fff93d086bb56110d2b
SHA1 e2939375c4dd7b478913328b88eaa3c91913cfdc
SHA256 c9501469ad2a2745509ab2d0db8b846f2bfb4ec019b98589d311a4bd7ac89889
SHA512 39524d5b8fc7c9d0602bc6733776237522dcca5f51cc6ceebd5a5d2c4cbda904042cee2f611a9c9477cc7e08e8eadd8915bf41c7c78e097b5e50786143e98196

F:\LDPlayer\LDPlayer9\ldmutiplayer\dnresource.rcc

MD5 70058f2d60daef1ccc7bbcba210f0ace
SHA1 ef214ade419a724272ac82e9de5233d7c0afa64b
SHA256 43b26f40e04ae6854569a01803541245abffcd130f1345191afd8bf6b0ca7873
SHA512 a0b3ca59ffad882fbff69012023eaa8aadb77d3ff1252562e5480e7dc3c9336afb3c5f58fb435246ec48c758d3c9d17ae9ea8a28f9d4766fad1a4c672cbf9b9a

F:\LDPlayer\LDPlayer9\ldmutiplayer\cximagecrt.dll

MD5 66df6f7b7a98ff750aade522c22d239a
SHA1 f69464fe18ed03de597bb46482ae899f43c94617
SHA256 91e3035a01437b54adda33d424060c57320504e7e6a0c85db2654815ba29c71f
SHA512 48d4513e09edd7f270614258b2750d5e98f0dbce671ba41a524994e96ed3df657fce67545153ca32d2bf7efcb35371cae12c4264df9053e4eb5e6b28014ed20e

F:\LDPlayer\LDPlayer9\ldmutiplayer\7za.exe

MD5 ad9d7cbdb4b19fb65960d69126e3ff68
SHA1 dcdc0e609a4e9d5ff9d96918c30cb79c6602cb3d
SHA256 a6c324f2925b3b3dbd2ad989e8d09c33ecc150496321ae5a1722ab097708f326
SHA512 f0196bee7ad8005a36eea86e31429d2c78e96d57b53ff4a64b3e529a54670fa042322a3c3a21557c96b0b3134bf81f238a9e35124b2d0ce80c61ed548a9791e7

F:\LDPlayer\LDPlayer9\dnmultiplayer.exe

MD5 f96c25bb4feee47fe4111660fa0706b3
SHA1 284126ce4f80b6bfd6037f6137dee90c941e4eec
SHA256 9b5d44c60b18b36bcc1cc0e28585ae168d92239beda197d739c3e64edb229867
SHA512 b4297728f031863ccfb50de52d18f443d6ae893322e2f6b315497e187329275fbf41828867e614b35e9ff60ac6e3e1ae77d876fa8e131336c2d6a1fb6ff7db36

F:\LDPlayer\LDPlayer9\dnplayer.exe

MD5 a723044f1c511790dd0ee3a3fa68c4cf
SHA1 670e6f907c2557c9685ad26c26d6d8fee5139942
SHA256 861be3e240b075752d52c7b50c41bf22eab9314db4f11a20362c648198a0f2e4
SHA512 0fa7da71864d1abdff83d3aa01597f5902c01899513b0333bcc5d756a15be02b8c5293b55c1d88e556010f53412a7dbd27b57b63b1074565f1f6de8e2952377c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 6a088136779343e7145b8b5e34fc8cea
SHA1 026d0c1ee6a1bf505c4929e183b846a39860a7db
SHA256 f8f40e6259ac4506aa49954a9b1c6a975e6d1d92b43b436020f028653882b6e2
SHA512 6f989621100bc9931fe00070b0cb67e95311550d6ea801e10a3722a18b041872b12af8d149247b1e4ddc078c131eb851ea760b605b0d499f8577fa64af3b41a3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\entries\FBB7E64BEE87F502C69E338BA33431DAFBEF304D

MD5 6a9ac7014a20354408e64c7a3eaaa782
SHA1 03896f5e7f0b6b1d7a4a229564e3b6605274ee24
SHA256 27f856c995c771b71fc25dbbe593d86ddc0f0e746868d53821b678d5aa07e90f
SHA512 c6f821bb9e34c112405b1cc92df074705b0bf4064c98128194f368625f18f6ba2b25c919ab9d34e7d5927128314c1c8af4a5165d5af36c6ab5a5e69c2457c1f4

C:\Users\Admin\AppData\Roaming\XuanZhi9\ldopengl32x.dll

MD5 6de0ef4a83aadebe5d7e07a64fc9d220
SHA1 f2162f30992ced0b882bfced0477ebf62b7ce186
SHA256 b7c4de833b0e2689724414802fbdda35d7cc1c4529eb95282fd0ffd175119008
SHA512 eebe007e0ece66c08138720bb46864470826a6b49a8edb1fd1593c4efade4bbf32c764d205383ef4745a738a1242f92e4c396abeb56e6ff9e785977ce8f646da

F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk

MD5 4d592fd525e977bf3d832cdb1482faa0
SHA1 131c31bcff32d11b6eda41c9f1e2e26cc5fbc0ef
SHA256 f90ace0994c8cae3a6a95e8c68ca460e68f1662a78a77a2b38eba13cc8e487b6
SHA512 afa31b31e1d137a559190528998085c52602d79a618d930e8c425001fdfbd2437f732beda3d53f2d0e1fc770187184c3fb407828ac39f00967bf4ae015c6ba77

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 ba9005b74d997fd0c8d178c3f7311ae6
SHA1 eb2097367da505edbec938adf920bf3929a62182
SHA256 26c81438b70338e44e4a2509cf655fd75b9be4653e486b259ebc7e0beea5481f
SHA512 8cef46c3f7046f15c670cb8bfc08c73f1d64954962cb5e3e4f126d8c63d2609098c3193edde42e1d2f22119ef6ea0d09241faaeb9839c610a07bef848eb5ac14

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\AlternateServices.txt

MD5 fe10ea6285b5ebbf8ebb339d8e276bcf
SHA1 37651a50fb7a45c8a53eea33b13300b508e6ed18
SHA256 b5ac5c606e8bdcdb369a27e38c0e365e44b53f87ebbea0e8b829db022a6bc1ca
SHA512 f27c44ce8132feffa632aa909dbd5da8314ab4fcde218c360fdbced70173eb519b0a86ecff1be439505b297cf53a7aa800f6123f843935399ec6b8984c6efd94

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41eh5pdr.default-release\AlternateServices-1.txt

MD5 7b59fcb8089c3541d2f2f38de857f755
SHA1 5ba2b53fef69de1d7031d477acc44469b900e671
SHA256 03ed473f98e0f581ab04964053799199f3b80ece0f273b32fea9e6f5114646af
SHA512 d540fdfc481ed45b88c2bab143ddf0a1359946b663bff24341909d472e8701c50a151429d27723eb18f41607e535f5c500dcd9b8e8643a4630c71364946a33e3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41eh5pdr.default-release\cache2\doomed\1482

MD5 1b0e6367f6d03057c7ef75f9ff0f2be0
SHA1 9ba9e487bbfc75fad723ecb05e78bf795a1facaa
SHA256 336aace0cbdf9b1b96c0823c33d664367b503cd2218720a36de211649cc26271
SHA512 b4923760a2ca1a6f6ecfbc95aae3f47e8d759db241812160d8c44f6cf4dec38f3d574029f0608118a6b7542aa4d19cccdafa6224890544333f102f98d90f0411

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-27 08:49

Reported

2024-05-27 09:21

Platform

android-x64-20240514-en

Max time kernel

1824s

Max time network

1791s

Command Line

com.android.chrome

Signatures

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Reads the content of photos stored on the user's device.

collection
Description Indicator Process Target
URI accessed for read content://media/external/images/media N/A N/A

Processes

com.android.chrome

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.204.74:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 accounts.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
BE 74.125.133.84:443 accounts.google.com tcp
US 1.1.1.1:53 accounts.google.com udp
BE 74.125.133.84:443 accounts.google.com tcp
US 1.1.1.1:53 x.com udp
US 104.244.42.65:80 x.com tcp
US 104.244.42.65:80 x.com tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
US 104.244.42.65:443 x.com tcp
US 1.1.1.1:53 safebrowsing.googleapis.com udp
GB 142.250.180.10:443 safebrowsing.googleapis.com tcp
US 1.1.1.1:53 abs.twimg.com udp
US 1.1.1.1:53 api.twitter.com udp
US 1.1.1.1:53 api.x.com udp
GB 199.232.56.159:443 abs.twimg.com tcp
US 104.244.42.194:443 api.twitter.com tcp
US 104.244.42.2:443 api.x.com tcp
US 1.1.1.1:53 twitter.com udp
US 1.1.1.1:53 pbs.twimg.com udp
US 1.1.1.1:53 t.co udp
US 104.244.42.129:443 twitter.com tcp
US 104.244.42.5:443 t.co tcp
GB 199.232.56.159:443 pbs.twimg.com tcp
US 104.244.42.129:443 twitter.com tcp
GB 199.232.56.159:443 pbs.twimg.com tcp
GB 199.232.56.159:443 pbs.twimg.com tcp
GB 199.232.56.159:443 pbs.twimg.com tcp
GB 199.232.56.159:443 pbs.twimg.com tcp
US 1.1.1.1:53 abs-0.twimg.com udp
US 1.1.1.1:53 video.twimg.com udp
US 104.244.43.131:443 abs-0.twimg.com tcp
SE 192.229.220.133:443 video.twimg.com tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.187.227:443 update.googleapis.com tcp
US 1.1.1.1:53 gexjgrshddbjdbu udp
US 1.1.1.1:53 sdrnexiebs udp
US 1.1.1.1:53 tcndkiyzylql udp
US 104.244.42.2:443 api.x.com tcp
US 104.244.42.2:443 api.x.com tcp
US 104.244.42.2:443 api.x.com tcp
US 104.244.42.2:443 api.x.com tcp
US 1.1.1.1:53 appleid.cdn-apple.com udp
GB 104.78.170.24:443 appleid.cdn-apple.com tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp
GB 172.217.169.10:443 tcp
GB 172.217.16.228:443 tcp
GB 172.217.16.228:443 tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.204.74:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 encrypted-tbn0.gstatic.com udp
GB 142.250.200.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.14:443 encrypted-tbn0.gstatic.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 172.217.169.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 g.tenor.com udp
GB 142.250.200.10:443 g.tenor.com tcp
US 1.1.1.1:53 encrypted-tbn0.gstatic.com udp
GB 216.58.212.238:443 encrypted-tbn0.gstatic.com tcp
US 1.1.1.1:53 encrypted-tbn1.gstatic.com udp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 142.250.187.225:443 lh3.googleusercontent.com tcp
GB 216.58.212.227:443 tcp
GB 216.58.212.227:443 tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 216.58.204.67:443 update.googleapis.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 www.google.com udp
GB 142.250.200.4:443 www.google.com tcp
GB 142.250.178.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.238:443 android.apis.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.201.106:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 142.250.180.10:443 semanticlocation-pa.googleapis.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
BE 66.102.1.188:5228 tcp
US 1.1.1.1:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 142.250.200.10:443 semanticlocation-pa.googleapis.com tcp
GB 216.58.201.106:443 semanticlocation-pa.googleapis.com tcp

Files

files/dom-0.html

MD5 0d2dfad42c897fcf9622286a0f9a6049
SHA1 d986e374196676f0e5810d5666d9a190363746f0
SHA256 8637bd353365d28b8088ed0645e1da200ebd19d99cb27ff25afaeb0c3eac8eed
SHA512 04132b238b36004b631f58540f27f56da07e861f4f36bb6a5c44953212fa9052573a07dc801ba3d7645762a978bc4e44b890ef07764064472120095031c9d593