Malware Analysis Report

2024-11-30 03:50

Sample ID 240601-1nsa5age89
Target UnityLibManager.exe
SHA256 c35d052840a11e04e79b507fbc5c6e086bc9101ab602ac745d9ed343f2cee488
Tags
epsilon spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

c35d052840a11e04e79b507fbc5c6e086bc9101ab602ac745d9ed343f2cee488

Threat Level: Known bad

The file UnityLibManager.exe was found to be: Known bad.

Malicious Activity Summary

epsilon spyware stealer

Epsilon Stealer

Reads user/profile data of web browsers

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Looks up external IP address via web service

Unsigned PE

Enumerates physical storage devices

Checks processor information in registry

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Modifies registry class

Uses Task Scheduler COM API

Detects videocard installed

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-01 21:49

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-01 21:48

Reported

2024-06-01 22:07

Platform

win10-20240404-en

Max time kernel

1050s

Max time network

1054s

Command Line

"C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe"

Signatures

Epsilon Stealer

stealer epsilon

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe N/A

Reads user/profile data of web browsers

spyware stealer

Looks up external IP address via web service

Description Indicator Process Target
N/A ipinfo.io N/A N/A
N/A ipinfo.io N/A N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Detects videocard installed

Description Indicator Process Target
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0 = 8000310000000000c15843ae10003248364b4b587e310000680009000400efbec1583daec15843ae2e00000038ac0100000008000000000000000000000000000000deb2f4003200680036004b006b0078004e0038006600640074004700450067007800350067007500440041005500490057004a00540063006c00000018000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 0100000000000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\NodeSlot = "14" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202020202020202020202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\MRUListEx = ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell\SniffedFolderType = "Generic" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202020202020202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1 = 14002e803accbfb42cdb4c42b0297fe99a87c6410000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2 = 14001f44471a0359723fa74489c55595fe6b30ee0000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616193" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202020202020202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0\0\NodeSlot = "15" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0 = 820074001c0043465346160031000000000084581162120041707044617461000000741a595e96dfd3488d671733bcee28bac5cdfadf9f6756418947c5c76bc0b67f400009000400efbe84581162845811622e0000009f520100000001000000000000000000000000000000bc45a3004100700070004400610074006100000042000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0\0 = 5c00310000000000c15843ae10005245534f55527e310000440009000400efbec15843aec15843ae2e00000027ad0100000007000000000000000000000000000000df8eaf007200650073006f0075007200630065007300000018000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0\0\0\MRUListEx = ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0 = 50003100000000008458b36610004c6f63616c003c0009000400efbe845811628458b3662e000000b25201000000010000000000000000000000000000008b2107004c006f00630061006c00000014000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\0 = 4e00310000000000c158baae100054656d7000003a0009000400efbe84581162c158baae2e000000b35201000000010000000000000000000000000000009feb7900540065006d007000000014000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4152 wrote to memory of 4348 N/A C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4152 wrote to memory of 4348 N/A C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4420 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 4420 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 3620 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 3620 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 4704 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 4704 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 32 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4348 wrote to memory of 32 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Windows\system32\cmd.exe
PID 4704 wrote to memory of 4636 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
PID 4704 wrote to memory of 4636 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 32 wrote to memory of 3268 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 32 wrote to memory of 3268 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 4420 wrote to memory of 5112 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 4420 wrote to memory of 5112 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 4348 wrote to memory of 3288 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 3288 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 3620 wrote to memory of 4412 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 3620 wrote to memory of 4412 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe
PID 4348 wrote to memory of 4812 N/A C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe

"C:\Users\Admin\AppData\Local\Temp\UnityLibManager.exe"

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "wmic bios get smbiosbiosversion"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "wmic CsProduct Get UUID"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\my-app-1.0.0" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2064,i,13244224882888002129,7530737924008173031,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:2

C:\Windows\System32\Wbem\WMIC.exe

wmic CsProduct Get UUID

C:\Windows\System32\Wbem\WMIC.exe

wmic bios get smbiosbiosversion

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\my-app-1.0.0" --field-trial-handle=3048,i,13244224882888002129,7530737924008173031,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:3

C:\Windows\System32\Wbem\WMIC.exe

wmic path win32_VideoController get name

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\my-app-1.0.0" --app-path="C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=3156,i,13244224882888002129,7530737924008173031,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\my-app-1.0.0" --field-trial-handle=1308,i,13244224882888002129,7530737924008173031,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1328 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\Admin\AppData\Local\Temp\screenCapture\screenCapture_1.3.2.bat" "C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\screenshot.png" "

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List"

C:\Windows\System32\Wbem\WMIC.exe

wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get displayName /Format:List

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3fc

C:\Windows\system32\reg.exe

C:\Windows\system32\reg.exe QUERY "HKCU\Software\Valve\Steam" /v SteamPath

C:\Windows\system32\reg.exe

C:\Windows\system32\reg.exe QUERY "HKCU\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /nologo /r:"Microsoft.VisualBasic.dll" /win32manifest:"app.manifest" /out:"screenCapture_1.3.2.exe" "C:\Users\Admin\AppData\Local\Temp\SCREEN~1\SCREEN~1.BAT"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name"

C:\Windows\System32\Wbem\WMIC.exe

wmic path win32_VideoController get name

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "cmd /c chcp 65001>nul && netsh wlan show profiles"

C:\Windows\system32\cmd.exe

cmd /c chcp 65001

C:\Windows\system32\chcp.com

chcp 65001

C:\Windows\system32\netsh.exe

netsh wlan show profiles

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESB3CF.tmp" "c:\Users\Admin\AppData\Local\Temp\screenCapture\CSCD670F0CB77D346239E87D8C7E9FA47F.TMP"

C:\Users\Admin\AppData\Local\Temp\screenCapture\screenCapture_1.3.2.exe

screenCapture_1.3.2.exe "C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\screenshot.png"

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\resources\app\" -spe -an -ai#7zMap16941:164:7zEvent30725

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.0.1803373962\713425991" -parentBuildID 20221007134813 -prefsHandle 1724 -prefMapHandle 1628 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3cefdc18-6525-45cf-9124-ab1c81e0f5db} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 1800 1f927aeb858 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.1.1662841818\850709779" -parentBuildID 20221007134813 -prefsHandle 2140 -prefMapHandle 2136 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a48184b-53fa-40ef-aee0-464c14908ee5} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 2152 1f927a03258 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.2.1801099499\1170912929" -childID 1 -isForBrowser -prefsHandle 2768 -prefMapHandle 2764 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {19d42238-1668-4311-9f3c-bd5e1a408c82} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 2712 1f92bdd1858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.3.770399107\1971328049" -childID 2 -isForBrowser -prefsHandle 988 -prefMapHandle 1272 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8d8123d4-bca0-4708-bba2-ec08e47f3cc1} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 3252 1f92a72fc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.4.2085376324\88920433" -childID 3 -isForBrowser -prefsHandle 4164 -prefMapHandle 4160 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {208303eb-97df-4b94-a55e-17ee3c8ba846} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4176 1f92d86f858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.5.2145196842\1895850156" -childID 4 -isForBrowser -prefsHandle 4884 -prefMapHandle 4812 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f2a1118-052a-4167-9e73-fa154e037efe} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4892 1f92de9fb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.6.1365361699\1766404387" -childID 5 -isForBrowser -prefsHandle 5008 -prefMapHandle 5012 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5aeb637-01f2-4bc3-b0c3-0daccd9592e8} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4912 1f92e295b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.7.1881966582\534379576" -childID 6 -isForBrowser -prefsHandle 5208 -prefMapHandle 5212 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {edeee37c-f212-4651-882b-596bfb534ca1} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5200 1f92e296458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.8.229107427\941548013" -childID 7 -isForBrowser -prefsHandle 5664 -prefMapHandle 5660 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4432fb1e-2056-46aa-9b4e-ef51e593d14c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5672 1f92ffa4258 tab

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe

"C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\my-app-1.0.0.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\my-app-1.0.0" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2904,i,13244224882888002129,7530737924008173031,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.9.2073735185\1112662048" -childID 8 -isForBrowser -prefsHandle 4992 -prefMapHandle 5004 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6e67ceba-b231-4210-b31d-7cdbbe388fab} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4924 1f92fe83858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.10.652334450\576406384" -childID 9 -isForBrowser -prefsHandle 6892 -prefMapHandle 5384 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e94c412a-b3b5-4d9b-9bb3-a477f0e48ee9} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5436 1f932e48558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.11.1951289313\1436378034" -childID 10 -isForBrowser -prefsHandle 10688 -prefMapHandle 10692 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1fffb33-f178-4c06-bb56-a8da82a381ce} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10700 1f9357ac058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.12.2105411011\1866493491" -childID 11 -isForBrowser -prefsHandle 6984 -prefMapHandle 6980 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {69a812ee-d96d-4fec-9782-abdbd419fc95} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10668 1f9357aab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.13.1894213355\1693502971" -parentBuildID 20221007134813 -prefsHandle 10464 -prefMapHandle 6948 -prefsLen 27772 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f0321fc-45aa-488f-bc24-79955437babe} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10476 1f935a6e158 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.14.343047911\97126295" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 10640 -prefMapHandle 6980 -prefsLen 27772 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3820b2c-028d-4222-a22c-db415f4133e4} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5360 1f935a6e458 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.15.1387081685\1940980341" -childID 12 -isForBrowser -prefsHandle 5188 -prefMapHandle 5264 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b858e8b3-645c-4620-a191-ae692aca65f9} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7044 1f935b64a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.16.191786396\655130475" -childID 13 -isForBrowser -prefsHandle 10244 -prefMapHandle 10248 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {885f77a2-25c3-4012-b750-5e3b1a6b2cbc} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10852 1f935c50c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.17.675215139\929472860" -childID 14 -isForBrowser -prefsHandle 9996 -prefMapHandle 10000 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {65ffdb7f-62ed-4594-9338-d363133311d5} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10940 1f935c51858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.18.273847160\907898803" -childID 15 -isForBrowser -prefsHandle 9880 -prefMapHandle 9876 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e64ac956-8fde-4d68-9542-bfe586b5e993} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9860 1f936886858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.19.1917304022\367023592" -childID 16 -isForBrowser -prefsHandle 5920 -prefMapHandle 9880 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc1058b6-9ad9-4431-b56c-486b2b2dba78} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5240 1f936666c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.20.760941763\1933453534" -childID 17 -isForBrowser -prefsHandle 9712 -prefMapHandle 9700 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e5f1755c-3bee-49cd-a462-9d18b60169e5} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9496 1f936dc0e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.21.1785488241\1641092538" -childID 18 -isForBrowser -prefsHandle 7100 -prefMapHandle 7156 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0689de7e-ef6f-42c8-9622-8ded5bb4335d} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4576 1f937062c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.22.1225557257\1877802796" -childID 19 -isForBrowser -prefsHandle 9248 -prefMapHandle 9880 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddb0ff3c-5923-4542-840c-4afb72ffccf2} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9260 1f93758c058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.23.1803959477\1273288896" -childID 20 -isForBrowser -prefsHandle 9080 -prefMapHandle 9076 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2de5ba34-6395-454c-8048-8cf15be16c51} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9088 1f93758d258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.24.1195030924\1946483244" -childID 21 -isForBrowser -prefsHandle 8884 -prefMapHandle 8880 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa677b48-5460-4113-9625-6323fb72613c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8892 1f937675858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.25.209551528\480971163" -childID 22 -isForBrowser -prefsHandle 9104 -prefMapHandle 8860 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {21b4aae7-d0bf-4fa2-9879-f243b77d9e36} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8848 1f937bbd758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.26.150607287\506918056" -childID 23 -isForBrowser -prefsHandle 8520 -prefMapHandle 8516 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4a43b146-2c4b-48a9-b3f7-6ac68a37802b} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8532 1f937d2f858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.27.1067592515\698175046" -childID 24 -isForBrowser -prefsHandle 8280 -prefMapHandle 8276 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {00949bc3-e0ba-4c70-be89-c32aaad5dd7c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8288 1f938569e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.28.913227166\1224683502" -childID 25 -isForBrowser -prefsHandle 7952 -prefMapHandle 7940 -prefsLen 27772 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b9c21fd-3bb6-453f-9921-7f29ef6a8c82} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7644 1f938a60558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.29.69601998\1159578509" -childID 26 -isForBrowser -prefsHandle 4360 -prefMapHandle 4444 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1b18149f-dc83-4fe3-8f48-4ee357b36ba6} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 3100 1f9373ec058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.30.111695543\393096539" -childID 27 -isForBrowser -prefsHandle 7996 -prefMapHandle 8504 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f615a88f-a51e-45cf-a882-86d99a065a24} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8040 1f9364bd558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.31.1676094721\1523805202" -childID 28 -isForBrowser -prefsHandle 5280 -prefMapHandle 8532 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d16e0b7e-87f3-4355-a245-5c9fd7cfd32e} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5596 1f937862258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.32.791109881\437074363" -childID 29 -isForBrowser -prefsHandle 8140 -prefMapHandle 8492 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {320486d0-4fdf-4773-be59-b4f445c83c5b} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8144 1f938b32958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.33.1968754154\518704597" -childID 30 -isForBrowser -prefsHandle 8024 -prefMapHandle 8016 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cf10a7eb-da0b-49a8-a2c6-8bd2918633cf} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8444 1f938b30858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.34.1902034799\1481556704" -childID 31 -isForBrowser -prefsHandle 5912 -prefMapHandle 9036 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a8846262-814d-4f7a-89d3-5e90f857ee3f} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8020 1f9360a5658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.35.1427848151\419397322" -childID 32 -isForBrowser -prefsHandle 6876 -prefMapHandle 7704 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {15c53e3d-a03f-4a62-a89e-3bc213a610a5} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8084 1f9398ce258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.36.1032164129\1403204751" -childID 33 -isForBrowser -prefsHandle 7984 -prefMapHandle 8084 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {443c28db-1f71-4a9c-a7cf-85d476e11043} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8264 1f9385e9858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.37.1148853470\252563701" -childID 34 -isForBrowser -prefsHandle 7688 -prefMapHandle 7648 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c1f6f0a-0377-4a12-ac5d-c0e8c68d2824} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7572 1f9368e5058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.38.1425765607\289968425" -childID 35 -isForBrowser -prefsHandle 8116 -prefMapHandle 7816 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0960dde1-a92f-4b36-b5a4-e807729e024c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7800 1f936619358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.39.888246073\59904826" -childID 36 -isForBrowser -prefsHandle 8572 -prefMapHandle 11004 -prefsLen 27781 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b96d416-3946-496e-b9d9-a053eac361d6} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7496 1f93609a858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.40.1356640391\1258689178" -childID 37 -isForBrowser -prefsHandle 10760 -prefMapHandle 7476 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {77b4f8a4-4b04-47b6-bdeb-0c3b68f54c8c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7664 1f93a28ab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.41.418220476\227800055" -childID 38 -isForBrowser -prefsHandle 5416 -prefMapHandle 6816 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b4e8be15-2a08-42f0-8737-36084652b41c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8048 1f93a28d558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.42.1524858105\197297980" -childID 39 -isForBrowser -prefsHandle 8488 -prefMapHandle 6876 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7dcd4cce-e164-4433-9df2-1ea27d98b514} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7996 1f93ac29058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.43.177203519\572385951" -childID 40 -isForBrowser -prefsHandle 7928 -prefMapHandle 5292 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {75fb9037-2eb4-4171-8a8e-b5ff7d56cc9f} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8140 1f9398cf458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.44.892374240\2083822636" -childID 41 -isForBrowser -prefsHandle 8220 -prefMapHandle 7688 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {32845241-5f25-423c-adb1-d7a2cd30b573} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7928 1f93ab68958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.45.5025422\1193478463" -childID 42 -isForBrowser -prefsHandle 9376 -prefMapHandle 9848 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {18fbdc49-305a-460b-a879-456abb3fb580} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8884 1f92d886258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.46.1385521303\845906994" -childID 43 -isForBrowser -prefsHandle 5616 -prefMapHandle 7544 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e6a970ba-1794-402d-99ad-12e0f0e98f4c} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4916 1f93ae7ab58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.47.1277899149\529138236" -childID 44 -isForBrowser -prefsHandle 6792 -prefMapHandle 7836 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b0fc1a5-f490-4faa-a092-b0add43f7f72} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7660 1f93ae97558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.48.1306673075\1394144291" -childID 45 -isForBrowser -prefsHandle 7776 -prefMapHandle 7520 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b26600c8-7e2e-453d-9e3f-cea4d216977f} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9052 1f93ab63a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.49.1306122666\970480651" -childID 46 -isForBrowser -prefsHandle 7668 -prefMapHandle 11172 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7b86d89f-ae9b-4643-9aae-29806bffded0} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9036 1f93b1bb558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.50.1848907324\722093815" -childID 47 -isForBrowser -prefsHandle 7536 -prefMapHandle 7540 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {34c105ef-aac9-4cdc-a799-eb46e9399432} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7548 1f93bf1bc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.51.995048858\487911130" -childID 48 -isForBrowser -prefsHandle 8200 -prefMapHandle 6440 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc815f12-c60f-4f0c-9f54-813b79130b02} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7544 1f93bf69958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.52.1800087145\95700192" -childID 49 -isForBrowser -prefsHandle 8116 -prefMapHandle 3616 -prefsLen 27790 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {595a3565-acb8-4b4a-b3fd-f4b209898e45} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 9056 1f93b2dfa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.53.1529676558\1200133643" -childID 50 -isForBrowser -prefsHandle 8936 -prefMapHandle 8932 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {531af1fa-62c4-48b7-ab09-bbfd69c536b3} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8960 1f93c5deb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.54.100503622\160730274" -childID 51 -isForBrowser -prefsHandle 8000 -prefMapHandle 7848 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1c53963-c326-4035-9d17-65d3eff5dd57} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 4560 1f93c5dfa58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.55.1985112273\846694034" -childID 52 -isForBrowser -prefsHandle 7752 -prefMapHandle 8228 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ebb37a3-a942-44d6-b789-3d196dc1e0e7} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7828 1f93c7a7e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.56.224832765\788918129" -childID 53 -isForBrowser -prefsHandle 4984 -prefMapHandle 8024 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b0667ba2-10f0-4bc3-a7ee-59c9544accce} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7532 1f93c7a8158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.57.324233709\1717324895" -childID 54 -isForBrowser -prefsHandle 10052 -prefMapHandle 5356 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a6dfe50-57aa-41f6-bf8d-6140c0530a0f} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8608 1f93d20f558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.58.1277111915\1609709458" -childID 55 -isForBrowser -prefsHandle 1636 -prefMapHandle 10456 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a0102163-7b7d-4c96-9141-da5e1108bb34} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 6252 1f93d20fb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.59.1589060155\651050037" -childID 56 -isForBrowser -prefsHandle 8320 -prefMapHandle 7496 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3ea48b6a-1c2b-46c3-bfdc-07185b12691b} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7624 1f93c8a9558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.60.1847908734\1537366293" -childID 57 -isForBrowser -prefsHandle 8844 -prefMapHandle 7824 -prefsLen 27799 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {32d0e831-f3b2-4a3a-8c03-f04d5cad8fc2} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7140 1f93c8a8658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.61.296197833\1897540157" -childID 58 -isForBrowser -prefsHandle 8868 -prefMapHandle 8864 -prefsLen 27808 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {28ee20ad-6193-4963-b895-a777cba0fcc1} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7996 1f93cc27258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.62.1620779992\1603250506" -childID 59 -isForBrowser -prefsHandle 8080 -prefMapHandle 9052 -prefsLen 27808 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cf3dcfc6-0a30-4858-9c01-6c468c017cb5} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7468 1f93cc27558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.63.85776791\210897278" -childID 60 -isForBrowser -prefsHandle 10028 -prefMapHandle 7568 -prefsLen 27808 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {623b5a2a-9956-46f7-91b9-3f1036055464} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7580 1f9306a6f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.64.1136874024\613203546" -childID 61 -isForBrowser -prefsHandle 7476 -prefMapHandle 7048 -prefsLen 27808 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b93b800-33ab-4252-9f67-61b5c66bd2b4} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 11004 1f9306a6658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.65.774560806\1638359148" -childID 62 -isForBrowser -prefsHandle 8816 -prefMapHandle 11100 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a948245f-825a-4b20-bd21-aa3669b1caa7} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 5396 1f93e04c858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.66.2025042335\1046603141" -childID 63 -isForBrowser -prefsHandle 7816 -prefMapHandle 8004 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a398b24-2243-46b2-a344-f5da4f649c7f} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 11184 1f93e09ff58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.67.1194039608\2120773280" -childID 64 -isForBrowser -prefsHandle 6872 -prefMapHandle 9232 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1432b87d-fec6-4c42-a26e-04f6fee372c0} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 2564 1f93d6ee358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.68.1281054358\1250897988" -childID 65 -isForBrowser -prefsHandle 8348 -prefMapHandle 5344 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {24cf0862-47c9-45d0-813e-0d6f4353ff5a} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7768 1f93db61958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.69.412743872\1962546116" -childID 66 -isForBrowser -prefsHandle 10052 -prefMapHandle 5356 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c6d4321-992a-48b9-b18c-8aa1096c6431} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8332 1f93e5ba758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.70.830648261\1237980301" -childID 67 -isForBrowser -prefsHandle 7640 -prefMapHandle 7824 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a35e11a8-8ce4-43a6-b2be-fabbaf13fc8b} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 10148 1f93ea12858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.71.672435472\1743121763" -childID 68 -isForBrowser -prefsHandle 1556 -prefMapHandle 7128 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f832a92c-9c05-4e0f-ad33-2d620ee56df8} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 7144 1f93f6e8c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4972.72.1499325289\1772303121" -childID 69 -isForBrowser -prefsHandle 10872 -prefMapHandle 5328 -prefsLen 27960 -prefMapSize 233444 -jsInitHandle 1304 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bdd76565-54f5-495d-8c1c-016cfb1e1934} 4972 "\\.\pipe\gecko-crash-server-pipe.4972" 8676 1f92dea1c58 tab

Network

Country Destination Domain Proto
US 8.8.8.8:53 ipinfo.io udp
US 34.117.186.192:443 ipinfo.io tcp
US 8.8.8.8:53 192.186.117.34.in-addr.arpa udp
US 8.8.8.8:53 panelweb.equi-hosting.com udp
US 104.21.7.227:443 panelweb.equi-hosting.com tcp
US 104.21.7.227:443 panelweb.equi-hosting.com tcp
US 104.21.7.227:443 panelweb.equi-hosting.com tcp
US 8.8.8.8:53 227.7.21.104.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
N/A 127.0.0.1:50684 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 44.237.65.238:443 shavar.services.mozilla.com tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 238.65.237.44.in-addr.arpa udp
N/A 127.0.0.1:50691 tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 52.111.227.14:443 tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
NL 2.18.121.197:80 a19.dscg10.akamai.net tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 197.121.18.2.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com tcp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 166.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 9.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 203.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:80 file.io tcp
US 8.8.8.8:53 file.io udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.91:443 www.file.io tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 hb.vntsm.com udp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 vmhb.b-cdn.net udp
US 8.8.8.8:53 vmhb.b-cdn.net udp
GB 143.244.38.136:443 vmhb.b-cdn.net tcp
US 8.8.8.8:53 24.107.55.45.in-addr.arpa udp
US 8.8.8.8:53 91.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 hb.vntsm.io udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 151.101.1.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 172.67.36.131:443 hb.vntsm.io tcp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 142.250.187.206:443 analytics.google.com tcp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 analytics.google.com udp
BE 74.125.71.156:443 stats.g.doubleclick.net tcp
GB 142.250.187.206:443 analytics.google.com udp
BE 74.125.71.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 194.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 131.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.71.125.74.in-addr.arpa udp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.exelator.com udp
US 8.8.8.8:53 cmp.quantcast.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
GB 143.204.68.101:443 cmp.quantcast.com tcp
US 8.8.8.8:53 cmp.quantcast.com udp
GB 143.204.176.7:443 cdn.exelator.com tcp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 cmp.quantcast.com udp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 mydmp.exelator.com udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 108.156.39.27:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 load-euw1.exelator.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 load-euw1.exelator.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
GB 23.53.174.156:443 e4536.g.akamaiedge.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 23.53.174.156:443 e4536.g.akamaiedge.net tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 172.67.23.234:443 id.hadron.ad.gt.cdn.cloudflare.net tcp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 162.139.192.54.in-addr.arpa udp
US 8.8.8.8:53 101.68.204.143.in-addr.arpa udp
US 8.8.8.8:53 7.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 27.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 3.143.254.34.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 load77.exelator.com udp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
GB 18.244.114.118:443 d23sp3kzv1t6m5.cloudfront.net tcp
GB 195.181.164.19:443 load77.exelator.com tcp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
US 104.22.4.69:443 a.ad.gt tcp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
NL 89.207.16.210:443 proc.ad.cpe.dotomi.com tcp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 18.232.199.218:443 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 19.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 118.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 210.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 35.156.116.202:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 218.199.232.18.in-addr.arpa udp
US 8.8.8.8:53 202.116.156.35.in-addr.arpa udp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
GB 18.245.220.173:443 d1jvc9b8z3vcjs.cloudfront.net tcp
US 8.8.8.8:53 cdn.edkt.io udp
US 34.120.111.33:443 cdn.edkt.io tcp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 34.120.111.33:443 cdn.edkt.io udp
US 34.95.69.49:443 i.clean.gg udp
IE 52.30.74.247:443 track.venatusmedia.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 49.69.95.34.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 173.220.245.18.in-addr.arpa udp
US 8.8.8.8:53 247.74.30.52.in-addr.arpa udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 104.22.5.69:443 ids.ad.gt tcp
US 8.8.8.8:53 sync.smartadserver.com udp
US 104.22.5.69:443 ids.ad.gt tcp
US 104.22.5.69:443 ids.ad.gt tcp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 api.edkt.io udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 34.120.111.33:443 api.edkt.io tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 104.26.9.169:443 script.4dex.io tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
US 172.67.23.234:443 p.ad.gt tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 104.18.43.178:443 elb.the-ozone-project.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 104.22.4.69:443 ids.ad.gt.cdn.cloudflare.net tcp
US 8.8.8.8:53 pixels.ad.gt udp
US 172.67.23.234:443 pixels.ad.gt tcp
US 172.67.23.234:443 pixels.ad.gt tcp
US 8.8.8.8:53 pug-ams-bc.pubmnet.com udp
US 8.8.8.8:53 api.edkt.io udp
US 172.67.23.234:443 pixels.ad.gt tcp
US 8.8.8.8:53 pug-ams-bc.pubmnet.com udp
US 8.8.8.8:53 api.edkt.io udp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 itx4.smartadserver.com udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 itx4.smartadserver.com udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 198.47.127.205:443 pug-ams-bc.pubmnet.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 89.149.193.121:443 rtb-csync-euw1.smartadserver.com tcp
DE 162.19.138.82:443 id5-sync.com tcp
DE 3.78.168.176:443 eu-tlx.3lift.com tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
DE 18.197.136.157:443 btlr.sharethrough.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
DE 18.197.136.157:443 btlr.sharethrough.com tcp
DE 18.197.136.157:443 btlr.sharethrough.com tcp
DE 18.197.136.157:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 178.43.18.104.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 121.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 95.139.86.185.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
FR 185.255.84.150:443 hb-api-fra02.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 5e18784b45fa14a4d0326e4d008d5b15.safeframe.googlesyndication.com udp
US 8.8.8.8:53 tg1.aniview.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
GB 172.217.169.65:443 pagead-googlehosted.l.google.com tcp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
GB 2.21.189.169:443 e11385.dscd.akamaiedge.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.169.65:443 pagead-googlehosted.l.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 157.136.197.18.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 169.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 track4.aniview.com udp
US 8.8.8.8:53 feed.avplayer.com udp
US 8.8.8.8:53 player.avplayer.com udp
US 96.46.186.186:443 track4.aniview.com tcp
US 8.8.8.8:53 track-sc-was.aniview.com udp
GB 142.250.187.196:443 www.google.com udp
SE 92.123.135.86:443 feed.avplayer.com tcp
US 2.17.251.11:443 player.avplayer.com tcp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
US 8.8.8.8:53 track-sc-was.aniview.com udp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 cdn1.vntsm.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
GB 18.245.187.73:443 ib.3lift.com tcp
US 8.8.8.8:53 ib.3lift.com udp
FR 143.244.56.50:443 cdn1.vntsm.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
GB 18.245.187.73:443 ib.3lift.com udp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 86.135.123.92.in-addr.arpa udp
US 8.8.8.8:53 11.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 73.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 50.56.244.143.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 186.186.46.96.in-addr.arpa udp
GB 2.21.189.169:443 play.aniview.com tcp
US 2.17.251.11:443 content1.avplayer.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 2.17.251.11:443 player.aniview.com tcp
US 8.8.8.8:53 img.3lift.com udp
NL 23.62.61.72:443 www.bing.com tcp
NL 23.62.61.72:443 www.bing.com tcp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 2.17.251.11:443 player.aniview.com udp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 img.3lift.com udp
NL 23.62.61.72:443 www.bing.com udp
US 8.8.8.8:53 go1.aniview.com udp
US 173.0.146.6:443 go1.aniview.com tcp
US 8.8.8.8:53 go1sc.aniview.com udp
US 8.8.8.8:53 go1sc.aniview.com udp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 6.146.0.173.in-addr.arpa udp
GB 13.224.245.126:443 img.3lift.com tcp
GB 13.224.245.126:443 img.3lift.com udp
US 8.8.8.8:53 uploads-ssl.webflow.com udp
US 8.8.8.8:53 s.update.3lift.com udp
GB 18.245.218.94:443 uploads-ssl.webflow.com tcp
US 8.8.8.8:53 uploads-ssl.webflow.com udp
GB 18.245.218.94:443 uploads-ssl.webflow.com tcp
GB 18.245.218.94:443 uploads-ssl.webflow.com tcp
US 8.8.8.8:53 s.walmp.com udp
US 8.8.8.8:53 uploads-ssl.webflow.com udp
US 8.8.8.8:53 s.walmp.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 sync.a-mo.net udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 p.rfihub.com udp
NL 147.75.84.158:443 sync.a-mo.net tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 creativecdn.com udp
GB 2.21.188.239:443 ads.pubmatic.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 sync.a-mo.net udp
US 80.77.87.162:443 cs.admanmedia.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 h2.shared.global.fastly.net udp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 h2.shared.global.fastly.net udp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
IE 3.253.249.181:443 s.walmp.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 151.101.2.49:443 h2.shared.global.fastly.net tcp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 81.17.55.123:443 ssbsync.smartadserver.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 74.121.140.211:443 sync.mathtag.com tcp
US 54.162.50.227:443 sync.srv.stackadapt.com tcp
GB 18.164.68.91:443 api-2-0.spot.im tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 126.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 94.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 151.101.2.49:443 h2.shared.global.fastly.net tcp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
GB 2.21.188.27:443 hbx.media.net tcp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 a-emea.rfihub.com.akadns.net udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 a-emea.rfihub.com.akadns.net udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 34.120.133.55:443 api.rlcdn.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 54.208.222.196:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 s.update.3lift.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 assets.a-mo.net udp
US 8.8.8.8:53 creativecdn.com udp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 hbx.media.net udp
DE 51.38.120.206:443 onetag-sys.com tcp
US 104.19.158.19:443 assets.a-mo.net tcp
IE 3.253.249.181:443 s.update.3lift.com tcp
GB 2.21.188.27:443 hbx.media.net udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.212.235.85:443 match.prod.bidr.io tcp
US 64.202.112.191:443 b1sync.zemanta.com tcp
US 64.202.112.191:443 b1sync.zemanta.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
IE 34.255.228.162:443 ap.lijit.com tcp
DE 52.29.4.131:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 123.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 181.249.253.3.in-addr.arpa udp
IE 54.74.38.144:443 jadserve.postrelease.com tcp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.68:443 bttrack.com tcp
DE 51.38.120.206:443 onetag-sys.com udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 91.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 227.50.162.54.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 27.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 196.222.208.54.in-addr.arpa udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 104.17.44.93:443 gum.aidemsrv.com udp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 a.audrte.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 id.rlcdn.com udp
IE 34.253.49.248:443 a.audrte.com tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 34.201.222.0:443 qvdt3feo.com tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 assets.a-mo.net.cdn.cloudflare.net udp
US 8.8.8.8:53 pixel.33across.com udp
FR 91.134.110.137:443 rtb-csync.smartadserver.com tcp
FR 91.134.110.137:443 rtb-csync.smartadserver.com tcp
FR 91.134.110.137:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 assets.a-mo.net.cdn.cloudflare.net udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 a.audrte.com udp
US 96.46.186.182:443 sync.aniview.com tcp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 a.audrte.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 sync-sc.aniview.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 sync-sc.aniview.com udp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 206.120.38.51.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 85.235.212.52.in-addr.arpa udp
US 8.8.8.8:53 162.228.255.34.in-addr.arpa udp
US 8.8.8.8:53 131.4.29.52.in-addr.arpa udp
US 8.8.8.8:53 93.44.17.104.in-addr.arpa udp
US 8.8.8.8:53 144.38.74.54.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 191.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 68.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 248.49.253.34.in-addr.arpa udp
US 8.8.8.8:53 0.222.201.34.in-addr.arpa udp
US 8.8.8.8:53 137.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 ssp.disqus.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.krushmedia.com udp
FR 178.250.7.13:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.2.110.134:443 cs.krushmedia.com tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
US 3.220.53.67:443 ssp.disqus.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 172.67.40.173:443 spl.zeotap.com tcp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 34.98.64.218:443 u.openx.net tcp
US 8.8.8.8:53 cs.krushmedia.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 zeta-ssp-385516103.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 cs.krushmedia.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 s2s.aniview.com udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 zeta-ssp-385516103.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 c1.adform.net udp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
BE 2.21.18.175:443 e8960.b.akamaiedge.net tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 172.240.45.70:443 s2s.aniview.com tcp
BE 2.21.18.175:443 e8960.b.akamaiedge.net tcp
US 34.98.64.218:443 u.openx.net udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
FR 178.32.197.53:443 ssbsync-global.smartadserver.com tcp
GB 108.156.39.117:443 s.ad.smaato.net tcp
DE 57.129.18.111:443 wt.rqtrk.eu tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
DK 37.157.6.237:443 c1.adform.net tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
US 8.8.8.8:53 spl.zeotap.com udp
NL 147.75.84.158:443 sync.a-mo.net tcp
DE 18.197.199.178:443 match-eu-central-1-ecs.sharethrough.com tcp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 spl.zeotap.com udp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 172.240.45.70:443 s2s.aniview.com udp
US 8.8.8.8:53 182.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 175.18.21.2.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 116.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 134.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 53.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 70.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 s2s-sc-main-was.aniview.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 117.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 111.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 56.143.46.52.in-addr.arpa udp
US 8.8.8.8:53 178.199.197.18.in-addr.arpa udp
US 8.8.8.8:53 s2s-sc-main-was.aniview.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 track.adformnet.akadns.net udp
US 8.8.8.8:53 track.adformnet.akadns.net udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 s.update.3lift.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.net.akadns.net tcp
US 96.46.186.15:443 track1.avplayer.com tcp
GB 108.138.217.66:443 hb.yellowblue.io tcp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
IE 34.253.211.97:443 s.update.3lift.com tcp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 tag.1rx.io udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 66.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 66.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 97.211.253.34.in-addr.arpa udp
US 8.8.8.8:53 15.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 s.walmp.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 172.64.151.101:443 ssum.casalemedia.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
GB 142.250.200.10:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 172.64.151.101:443 ssum.casalemedia.com udp
US 69.166.1.66:443 iad-2-sync.go.sonobi.com tcp
GB 142.250.200.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 35.227.252.103:443 rtb.openx.net tcp
US 8.8.8.8:53 rtb.openx.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 rtb.openx.net udp
US 35.227.252.103:443 rtb.openx.net udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 ssp-sync.criteo.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 216.239.32.3:443 csi.gstatic.com tcp
US 216.239.32.3:443 csi.gstatic.com tcp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 csi.gstatic.com udp
DK 37.157.6.232:443 cm.adform.net tcp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 216.239.32.3:443 csi.gstatic.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 3.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 232.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.226.234:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 234.226.220.67.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 s.walmp.com udp
US 8.8.8.8:53 ads.eu.criteo.com udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 ads.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ads.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cat.nl3.eu.criteo.com udp
US 8.8.8.8:53 widget.nl3.eu.criteo.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 imageproxy.eu.criteo.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 csm.eu.criteo.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 imageproxy.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 cat.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 imageproxy.nl3.vip.prod.criteo.net udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 17.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 6.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 15.1.250.178.in-addr.arpa udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 3.78.168.176:443 eu-tlx.3lift.com tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 itx4.smartadserver.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 itx4.smartadserver.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
GB 142.250.200.10:443 imasdk.googleapis.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
GB 108.138.217.66:443 hb.yellowblue.io tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 225.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com tcp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 s.update.3lift.com udp
US 8.8.8.8:53 s.walmp.com udp
IE 3.253.249.181:443 s.walmp.com tcp
US 8.8.8.8:53 s.walmp.com udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
GB 2.21.189.169:443 e11385.dscd.akamaiedge.net tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
GB 2.21.189.169:443 e11385.dscd.akamaiedge.net tcp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
DE 3.78.168.176:443 eu-tlx.3lift.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 ib.3lift.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 hb.yellowblue.io udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
GB 2.21.189.169:443 e11385.dscd.akamaiedge.net tcp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 2.17.251.37:443 a1970.dscd.akamai.net tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 37.251.17.2.in-addr.arpa udp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 play.aniview.com udp
GB 2.21.189.169:443 play.aniview.com tcp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
FR 217.182.178.225:443 euw2.smartadserver.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
GB 142.250.200.10:443 imasdk.googleapis.com udp
GB 2.21.189.169:443 e11385.dscd.akamaiedge.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
BE 88.221.83.82:443 ced-ns.sascdn.com tcp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 82.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 apps.sascdn.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 www14.smartadserver.com udp
FR 91.134.110.129:443 www14.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
BE 88.221.83.67:443 apps.sascdn.com tcp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 48.197.32.178.in-addr.arpa udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 91.134.110.129:443 www14.smartadserver.com tcp
BE 88.221.83.67:443 a1977.dscb.akamai.net tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 129.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 67.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
FR 217.182.178.225:443 www14.smartadserver.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
GB 108.138.217.66:443 hb.yellowblue.io tcp
US 8.8.8.8:53 play.aniview.com udp
GB 2.21.189.169:443 play.aniview.com tcp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 track4.aniview.com udp
US 8.8.8.8:53 track-sc-was.aniview.com udp
US 8.8.8.8:53 track-sc-was.aniview.com udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
DE 3.78.168.176:443 eu-tlx.3lift.com tcp
FR 217.182.178.225:443 www14.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
NL 23.62.61.185:443 e86303.dscx.akamaiedge.net tcp
US 8.8.8.8:53 img.3lift.com udp
GB 13.224.245.126:443 img.3lift.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
GB 13.224.245.126:443 img.3lift.com tcp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 185.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
NL 154.57.158.116:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 play.aniview.com udp
GB 2.21.189.169:443 play.aniview.com tcp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 itx4.smartadserver.com udp
US 8.8.8.8:53 apps.sascdn.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 itx4.smartadserver.com udp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
BE 2.21.18.175:443 e8960.b.akamaiedge.net tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 59.139.86.185.in-addr.arpa udp
FR 178.32.197.48:443 www14.smartadserver.com tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
GB 142.250.187.206:443 analytics.google.com udp
BE 74.125.71.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.117:443 www.file.io tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 117.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 apps.sascdn.com udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 2.17.251.11:443 a1970.dscd.akamai.net udp
US 2.17.251.37:443 a1970.dscd.akamai.net tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
BE 88.221.83.82:443 a1845.dscb.akamai.net tcp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 apps.sascdn.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
FR 91.134.110.129:443 www14.smartadserver.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
BE 88.221.83.82:443 ced-ns.sascdn.com tcp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
NL 23.62.61.137:443 e86303.dscx.akamaiedge.net tcp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 137.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
BE 88.221.83.82:443 ced-ns.sascdn.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 apps.sascdn.com udp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
NL 185.89.210.180:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
GB 13.224.245.126:443 img.3lift.com udp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 img.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 www14.smartadserver.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
BE 88.221.83.82:443 ced-ns.sascdn.com tcp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 apps.sascdn.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 2.17.251.37:443 a1970.dscd.akamai.net tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 52.11.19.139:443 location.services.mozilla.com tcp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 8.8.8.8:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 8.8.8.8:53 139.19.11.52.in-addr.arpa udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
BE 104.68.78.171:443 e8960.e2.akamaiedge.net tcp
BE 2.21.18.175:443 e8960.b.akamaiedge.net tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
BE 2.21.18.175:443 e8960.b.akamaiedge.net tcp
BE 88.221.83.82:443 a1845.dscb.akamai.net tcp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
FR 185.86.139.59:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 apps.sascdn.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 8.8.8.8:53 a1845.dscb.akamai.net udp
US 8.8.8.8:53 a1977.dscb.akamai.net udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 www14.smartadserver.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 tlx.3lift.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 2.17.251.37:443 a1970.dscd.akamai.net tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 itx4.smartadserver.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 itx4.smartadserver.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 8.8.8.8:53 track-sc.avplayer.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 18.245.187.73:443 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
FR 185.86.139.95:443 itx4.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com udp
GB 18.245.187.73:443 ib.3lift.com tcp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.nl3.vip.prod.criteo.com tcp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.nl3.vip.prod.criteo.net tcp

Files

\Users\Admin\AppData\Local\Temp\nsd7466.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

\Users\Admin\AppData\Local\Temp\nsd7466.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\chrome_100_percent.pak

MD5 6c2827fe702f454c8452a72ea0faf53c
SHA1 881f297efcbabfa52dd4cfe5bd2433a5568cc564
SHA256 2fb9826a1b43c84c08f26c4b4556c6520f8f5eef8ab1c83011031eb2d83d6663
SHA512 5619ad3fca8ea51b24ea759f42685c8dc7769dd3b8774d8be1917e0a25fa17e8a544f6882617b4faa63c6c4f29844b515d07db965c8ea50d5d491cdda7281fc5

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\chrome_200_percent.pak

MD5 77088f98a0f7ea522795baec5c930d03
SHA1 9b272f152e19c478fcbd7eacf7356c3d601350ed
SHA256 83d9243037b2f7e62d0fdfce19ca72e488c18e9691961e2d191e84fb3f2f7a5d
SHA512 5b19115422d3133e81f17eedbacee4c8e140970120419d6bbfe0e99cf5528d513eea6583548fa8a6259b260d73fab77758ad95137b61fe9056101dd5772e8f4a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\d3dcompiler_47.dll

MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\LICENSE.electron.txt

MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\libGLESv2.dll

MD5 12b856d52c4fa5ef56d3c45659494995
SHA1 4508c0b4945803fa692263b3f7618b3717fd970b
SHA256 6d291deea8d51c56df9b62770fb8a9945581c033495e6d906b43aafa6e059db4
SHA512 5f7b19e7bc12024a96ca441e908ee8950a0a858f10983e0e9590e3acba6a1246edf4ed3b7e2792a27e0794228613759e45188a3c422344eda09c0a9cdcb8981a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\libEGL.dll

MD5 45dffa2e9952dd2a16d469f18a537fcc
SHA1 505c6aedad53ddb0aa4cfb67db52f002451af744
SHA256 43a699c4755587ae83367c3e68c3887b7ba5ea0dbca35b097ce83be0b9b9b778
SHA512 61be64013aa295aa732b954b45f61105924a75928f260ddc6cb2e95bf36bd9e724523775b58f5922820e953b56d2a40c41e1f677b30561515193ed12dc7604a1

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\icudtl.dat

MD5 74bded81ce10a426df54da39cfa132ff
SHA1 eb26bcc7d24be42bd8cfbded53bd62d605989bbf
SHA256 7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9
SHA512 bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\ffmpeg.dll

MD5 d58b365e329560098328860fe4f34507
SHA1 4ddac44fac5fbadc47ae7dfde2fdf76241e1b691
SHA256 dd42cbda8d0e5a001c44b2113c9cb133ccc41e1c039a4d4adf9379ee5e657d57
SHA512 8fb31668d684cfa251fe42f8a12e953345e496f4bd15eac6175b91e092014c385f923b96e1b4210b68602a5dc876d382aa93e6657e0a4426a8be7ae3fec771da

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\LICENSES.chromium.html

MD5 b620990ddbd932d6475152e5a833860e
SHA1 70de0b3d7ffa77900f685c1788b32997a61ec386
SHA256 921452a09f92f10da4cfef0521acd6ee6c689c630661ed35189e793de2c99fc5
SHA512 ba84b5e6281dd64d5da41d0db35942b6c0b1ee6b47d24dedd5006be40b2d22d90f58dc653e17893347900fb1bfcd37b0f2fff5b532175ccacc3b63d98fe42ac7

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\snapshot_blob.bin

MD5 8e5147968fb840b85f89db14273ca896
SHA1 b8b2974a28728d5699059e3e9582f9f90911ff62
SHA256 0bf9c736d0612db9a98a380e75033f0f1a93cccd01a879f01c723409dbae9fff
SHA512 fbf4c5588a43558412955fb4a84642bb8c0e8c5ee7435c6c163b855ca3fc083cf7dada2907f41b007913f03f5910f0647fd39a822f9e66b2c0726a11162e5812

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\resources.pak

MD5 6b306ad353b8d5701954dbf1e9fb06f2
SHA1 aeb926d9a89c6eb8a2dec61ce40814df9acbbd60
SHA256 a8538256645c4b136ec9a5724f91f06093c270708dabf948a06e1e5331a72dda
SHA512 ec009a47a962c6caf5706bb7f31333b5e97306febbc02aa8f022e3d68d6061a51efe4e92c524275158f06a9e85ece7af878903bdaf518a893548c0dcc4c5e2ee

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\vk_swiftshader_icd.json

MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\vk_swiftshader.dll

MD5 58a2d80f6b4745bc89ab1c23ca5d0217
SHA1 8e09ddf7a2e914af80e610a75f8da181c5559325
SHA256 f3f1f083e6478efde3ff702ba556aecab26e7b862971b2691eee3aeb44937d18
SHA512 5fa448859483522793c802bedc21ee02ec2b797e700f4f1c27539c78dbe4c7be2fbf5b391a477af4a7ae37f275b5e062ebef70e971a180837576fa14b752f5de

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\v8_context_snapshot.bin

MD5 0028b7601ef225663b8c0c57089617db
SHA1 40a46d864b59eefa30c2f825bf6530ffd8029be4
SHA256 367d41b832f2c870c544934b08fa271786b02b8a8cbadc026f02e869c54ce13b
SHA512 5a32b8e064d073b248154794a0452ec3771b5bbc6e4bab7582e30278c8863fb77d9b002588b2d05ce9cb5406739cafe04af8c9a9db7b010921d8660ce44988c3

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\vulkan-1.dll

MD5 f1b1c045e7dd29b1431a9354406b4dc2
SHA1 8237b0e2a959972f191f606e5f78a6ece3b28dfa
SHA256 1a09902ca051e1e11aede9832bd1103228fc2ce3381391f01b12956a7216750b
SHA512 8964769f906bb0101473324c2b1c6ea708533c76583045ad8975f3e027465c16e8f96aea09c4fa76f37cf49e2aaea9a63f6d4b61d5a28b7f4eb22bd36f9fb77e

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\am.pak

MD5 34b24f035bad74764b7cc57420488180
SHA1 fac3fdba1a94d7676ac4d71447178cfbd1fa4e82
SHA256 9cff5c4af5997b45fb2a384bd73560e56bcb7710149e1a7e3e172d64e6eda025
SHA512 a01da4c45c6295a57248603f01a6b6231c4ce400aa3ec94e4228b26e8cea995c31d52b2008f99d0f17482aad80f1d67725c32e0f37cad6b012b1022ecde998f0

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\af.pak

MD5 94af96b7f60a4cfb9d596cd8927ba37d
SHA1 556833517bc6ad77b5427000f2c3dccad91b92e6
SHA256 716e296c2f663ad90cdde85c5134582fc2305e5ebe10649fc9653bea533500a6
SHA512 6605688a373a358ff1dfbeda1c09dd031e4a63de662555f5304843c31eb3afcedbc8ffa4dae8ddc1483b04ea24cb709ecc639a9902caa68731d8e44d04cdbd83

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\bn.pak

MD5 696016f43190747d63befa354d76e50b
SHA1 3399e641930b820b627a4e28dea0a79fc457f929
SHA256 1e49980f89360b395a70e844ccd0c43b3a34eab84461b1499e7621f757149e3e
SHA512 3966fcc5988ceeb4dca79c0053fb428e5180029d44704faa4723334c69413a6eacf622e637857c1dcc096e129dd84e2369e4595ea50316cf8eb68696611a8430

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\bg.pak

MD5 d08e8e493f0b3c8ab19070ab05a78af8
SHA1 c5fa430269dc2d32baa6885de2453fa84c36f2fc
SHA256 d223e994ad1aa6e747507187f724cdede8c369d2e8e0def50c4a6c912dba3880
SHA512 4b415fa2ae6ba399674f90ea67e571d90a35fff1ce93df77f20bf692b52c92bfc41e5a3622776e3979b1662fecd2d9665209d5d1d53ece1bff3ed01a28e499d8

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ar.pak

MD5 38b30dfa8ccd369c747c46bef204e2f2
SHA1 047976a9b0aad536cc61ac3dfbc37b20f39ecbf4
SHA256 516584da5741e7bb49ba6a70c9cf2ac47ff190ca9c4f692c3a30bc03a4560f50
SHA512 5396af2e915808abb6f0ff8c4a1c3a7675e620687d717193d5e69905a070accce08925b7e243b54b922e1b022fd6210884fd12b18681e1b7d08f28c542cc4c3c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\es.pak

MD5 2128a5e8be8bba99ece377804a831b76
SHA1 fdd3393c827533e7aba982e4533a44f872b505b3
SHA256 92c599470f59e6bc8e9ee3872418a1e6a5281e4fdd6ac3b01b2ed0936af4d18a
SHA512 2f69d6efc841b74998933910d11c9b67ac2d7aeae01924b6d8040e33caf69cc1cb172f8f6dadbe22ae23bd9cba4d666d04759075fb3c112577ab518c404057f1

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\es-419.pak

MD5 7c151af6aeafae6d18f85d67d5d42f39
SHA1 d379907e2f935c28d1379b2b64d6d7a123700287
SHA256 1e3e648efb45857b9e47261d9b57b82f8d01bfe830b0f2e6ccc20e0372178f49
SHA512 0df3186257ec0d486eac366cbcfc971e80cc9145b2a113919576e8a6432db14f520477883564b3b7577230fa075e032b1287b31ac21f4f0636cb195ab1c1400c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\en-US.pak

MD5 88bbc725e7eedf18ef1e54e98f86f696
SHA1 831d6402443fc366758f478e55647a9baa0aa42f
SHA256 95fd54494d992d46e72dad420ceee86e170527b94d77bfaaa2bfc01f83902795
SHA512 92a5c6cfc2d88272bb5144e7ee5c48337f2c42083bc9777506b738e3bcb8f5a2c34af00c4ccc63b24fb158c79f69e7205b398c9e22634dae554410450978a2c4

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\en-GB.pak

MD5 b98c06126d26961d99a7ee6e397afc94
SHA1 bb5249dda1029597c461564798b77efc1fc0d402
SHA256 a672387f6fb84ade1b0c44c456ff1a19dcd464c4a9e65e439ca95a115455340f
SHA512 ad3783d03e3e7bb343eac48f179a3e3f799146a8ba7b25e2a02e860c53738b01518dbf5e66097366f0b7202e6c02dc046c6b51c116115cffc02aca3ed962951a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\el.pak

MD5 271c3234e3a07223e6db8f6ab1c18f92
SHA1 dbc1ecc686eda75627f3fa60d034ea4021da0acf
SHA256 58ca76aa55e11a475c830ac89010d4431f455f531079c1e8a0943490b4dd8e4b
SHA512 50e6fab168889a283e26eacd7731367032db41841f39fef0f99543b98266c3784ee62a956cd4415c83a6fb7451b3f618f4f3dcf9807cf9b0f2f595ce26e24aac

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\de.pak

MD5 be9b3438f622428f971c92cd84681750
SHA1 80278ec6889973ba0fa47e542fb3e85ee52a3534
SHA256 400f965d457e958b063e60131d88eaacd74fdb6213ae14cf84c4b6b45809e04d
SHA512 8ec4388dd11829324f72b2828a4282cad5205488d4d47d90da83e25fd9f4b43d1aca1d67f9470a93fb0a23b21094b4c17dc68247fb285317dfd2b01f8e312cac

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\da.pak

MD5 4345285a4690b023767e352aa2a587f3
SHA1 9646a3a5662f2bf233e553e51e7cddf6212f8fd9
SHA256 10dfa841d08a3ab094f83e151fdc1edbd66bf8f2392f1511e325628e4e9c7a0d
SHA512 2d466e285b44eb0c30f1847015c0056a517dc1dddd4d49c907f070eef5f071d81286cb0834c2a30253d8da9eebb6c6f34271f49850e9bc0cfa7dab0eebdad52e

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\cs.pak

MD5 c0b5c8b3e46c715f313ee78a788401ca
SHA1 5a59b4c2214f52c63f6e8c7ef7a11662c30a1ff9
SHA256 f7eafc84e6e55fc7dcfbc749e0b7bbd7cf051390bef3dbc37f2cdeecf92637e0
SHA512 b6a28846601ee937b21dc5e7c3b19e612b2a654e4de7e9dd7943f7b981ca6c3a1c86a93ce6a4b801debbbfbf71fdb243ca81e56163d44b2bc0fe8415ca5a55c4

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ca.pak

MD5 b61ee1261b8c19b0207f257b97c6a4fb
SHA1 66b7f3180be435905175c21ab36b361efbf4a4fb
SHA256 36edc589fb6e468aae4dbc78a5a66c6848e700e50a88c57093c7b277903771cf
SHA512 d37301693fb74653dff44d7ee6f223363b7b1dc6628cf4041b8d9a83db45eab195b477c9243953f81a7e705e2aa74a15ceae60b3610beea7660228c029be45ac

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\et.pak

MD5 818d154524c0c900d15a8a25b3659c14
SHA1 4121be86ee3869c3c884e3467d82ca6b8f4ae0cc
SHA256 3610615dcac844cc9a64b843da606f4f8d29b1c945ecc19b288b54829d0e92e4
SHA512 1bffdc771102997bc16b3b5fb01ba009a61a85e7d9c53f32a2b2e713ff70f396a9be9431cc45ebdd28dc5eda43490b8d8d82866b42acd32f49e6368ec0b779ce

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\gu.pak

MD5 86b829b3cdcf383f11ffa787a32446a0
SHA1 c9f626a97bcf00541876caa7a49d23e0b84b83ef
SHA256 74c62dca0b7a310aa593d1dcca8b0b0b382b052837e7cae6b87cf05b8b346b1b
SHA512 72b69cc9846fb078a8c03afd60154a3b55bc828b9e13b5124a473c0ee528e3cb3ed67f67d7d763ec8e78883640c53d4c88a7a14552b851d493abf65e269353f8

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\hr.pak

MD5 427d00ead5500f7480cd6ef8de88b0cb
SHA1 4f271a9009201f00959a3eab337130ca9fad7557
SHA256 d1f8093b91663d061bc2fa20426e2c430d53b06fc605ac1b0b2279d446dc9317
SHA512 93190a72013d7fe155404585080c12b64f57948e829888a75d60284ea93cf59b6771956eb325b00eac484c7b424f8b8a1d5d293d90b221b7440ecc63c2899faf

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\hu.pak

MD5 92995b10868e466811b909c9702f1727
SHA1 6cd34086b876bf07dc1222cbd33e8fac60e401ae
SHA256 0a62d168c0f6d9d651dedb4e01be5b533b94e8617535cd70ad22717748fbbc64
SHA512 412d0f253d31eff5819fc05ed0da6284a39cd5dbc3f8dac81153511c69aef9cd3f1170d3c6a74616e3d9c51bc457045e9715456b1ef50e139f68f667d5662f53

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\hi.pak

MD5 3ddd4ae85a39fe6675365404dca77bf5
SHA1 2a3c2fc24612938edd46738f127098496262125b
SHA256 4b5585a8cc1a21e2dfcbd0d33f6cea87b7a583b8690f0f3635bd74bb5cbd2ed0
SHA512 fbbf103af336eceba0855f341c9e424bcb09c0527a63ce6ceb4773ddc228fdd5996b2b3bfbc2d11c77d82d012f9f4650317044cfbe50fa5adc0acb71c26e7da9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\he.pak

MD5 c8c0f0920541121e3127d1cf3b5edc41
SHA1 1579afa0503b70523008b592b3ed2de49af41354
SHA256 fa210b7cd9097e16b06f88ea5daf492b126c1d8b76291efd14fd4c2f847b0f95
SHA512 8e1b1370c382e54072574eea516008217301fa1dd423778c085f77d47bade5c3b56e1715c36b1041d59c777788a85a3c953010e5a502190ebbe3b1e7a0b40913

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\fr.pak

MD5 b96ff7d64d42aa11a76c111b683ffc2f
SHA1 bfeb5705c24a457420f67ae40be0d757b829d94e
SHA256 6166ea3e00cf7761b7a4ad841929eaf32061e86609d2dc92686daf4d4a032da8
SHA512 b2fa2d852f7cb84114e1a50988e5ad5582664d4924ec010d34e4ccc28ed35e5b9b5e7ddb32944f032321df33771f2c89e6212c7487921f27cf3d347e3ce2fc79

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\fil.pak

MD5 4990033756bc1b2410e77a607bb62f8c
SHA1 a02c0f347606bf50aa6f281e42d2d66ce6155299
SHA256 3265ae5b6c16a09b1ec9ea53181de78df75e951c3ce28f33d4c483088a9ab37b
SHA512 3d45c6dd30eea6d6929039c0cdaa7bb6f7b665fe67fc7a5ca79567d4fd3f907011857e5cb43c16cce9c558d4f669618bc5378f05fa583b19360df58b12b5f913

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\fi.pak

MD5 671cff3aa38e9810a6fdd11c91861acd
SHA1 6062122660beade0e00cb86d9e2c8abc274f9f59
SHA256 3e69afb533da49338f036ad2c286c4193ce6b5a2476230dc4a1140cdaf03a6fd
SHA512 3127764aa594de149528b716ed135aff1e45a3fdf4a0a936b9240785812be2509f61d629c4dfae1759c87defab61e34203bf2a196381e87633d0fd02a1b76454

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\fa.pak

MD5 b2d349ce08c9c1d8cb4280466e15cc4c
SHA1 2d7187fd2d13c6fc18885f7e87b2caee0db34d31
SHA256 c8bb9cdb28d8f80f20447163ac246d713adb83e8812f870e61796a5dce7e2eef
SHA512 3a54f2d0a226b976c0b9c5ce804eea84fa2ffc7228123b792bfd06a1ea438bc8430d49a4f8cec5727a8185af478b85cfa958cae24a67494656b739ef72f28aa9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ko.pak

MD5 c524ce72c7049c1c401d8685772e8d74
SHA1 56d28e03538e2fca873ac453ef2698fabda75a4a
SHA256 3ad0012db772293073acb05d24b8dfb26697d6cc5dd1612150df023dbc31b674
SHA512 ab764fa9b9f82c7146e1b108a2af792c35cba91b0e3be9accba48bac87a13612a61ec026705b77f006519d65a6415a5978139898239093b249ff583af0dc6aa3

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\kn.pak

MD5 a48fa9762b3504adc3fe4ec828c75149
SHA1 043f6ced7e30cee906eb15dcdd3ae59b9574fb1a
SHA256 333725ea1045d44acf2c19efc765bffc38cc5cea6e9977fe583ad6e203442582
SHA512 40d983b3df4b6cd8e3df855f4062e163bdbdd5142882088e6e8d5ca30bc538af44044f61803d33e94f4527cceafc44059c5de67c847567190767d3246bb93396

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ja.pak

MD5 ace3fef3bcb086a6caafbdfc9562ecee
SHA1 ac86efa1b8fe88f050a8936926b96b055485a8b9
SHA256 6df72da472ee171acc440c20a2a194a2a4af4839b6a88323c4654c50ff8b492b
SHA512 da5425b10b239ce941733781b6994581d37c8b683946b97d759c2915e96808e18ba967849354687b2ba5ba492387b740dc8e6e67badccbd1a812e349693eb9ff

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\it.pak

MD5 edb971b4938258358738c7254205cc8e
SHA1 17dfbbab2aa1c554188696b947b4f4cd6311856d
SHA256 4321fef2140d41d6e7700755c6ede505870c006211441492ed37028236e96edf
SHA512 5b10405c8151f895ea0b1b86256d59869585e7da1ed71e16ed26e98579b96ef418d5b4b2800398c57bec6cc562e736d791f49aa0691aeb2d109d5a67d5ffa24a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\id.pak

MD5 fb42de6be21c78da1b05c518c5625882
SHA1 7d8d4e28ea196e3e48df4999d94a04c0be31de16
SHA256 d9fc19e683240404a60d57037f24e1d8b20cfda4c8bcacfed577b86cd8988517
SHA512 63885e8c82dbef4902c75ae7bc4c3f953057236b07d6919bf3a9f8d1e6ec0ae2cb94cbe0366e56e1272653087faf2fb07b92b18bd312e8e1b38fc76ff5eb3922

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ml.pak

MD5 9f0422326953a0c48c1db82ca2a9d639
SHA1 2305bc895e9ccc5b9a3d661e891c4f06d8a503ff
SHA256 f2fb440eb0518dc695810fcb854b20b72aa47e5ffc75c803aacf05861d35a94f
SHA512 a899dd975a56a53503b5cbc7448f54423b18bfbd917f73f0871840d6cf6a574bbaac8d735ae8de6a074cd78c43b6640e3e46be1550dcef8f8cfd1971cc1513d6

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\lv.pak

MD5 e4993f39d6fa671658aa3ce037aec60d
SHA1 2db9bfc42b07060f6e256c74a01c348cd6c2ac0a
SHA256 1e6f9a40f4fa1206117063234399bd7c1e7d198cbf6c4ad633e5e18ad0929836
SHA512 4192274330be238a93e370fc3fc8ada444b38fa1464889f0e3d0f6c5e548f7f7de14248937d45f8aa84c043078a69174ac1c9a5894fc9b4ff8f10deef6f77e5e

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\lt.pak

MD5 1bab0f6c08b1cb26db455aaf581490dc
SHA1 3a32246b812e8ed35ddf0a6842b8bf26b19be9d3
SHA256 946351ed2d74f247dea0f2742fc36d89225355480f0cec99d71599ccce3ea9e1
SHA512 c6e4502fda62e2606e31a7c67679d59d21a04342c507e1fa39ac59156a4d1e1cab1923de4bcf30b735d5bcf89824d4283b57db11af9673b5b956c2f883a3bc7c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\pl.pak

MD5 12c3e7597522f09e87ff438ff2cf5c23
SHA1 e634c8bcd7d5f77fdb227f7428c146cac3e87b81
SHA256 2191f77aabe75522166a3325e2660395479633b936d5173d150120367ed501a4
SHA512 fd58c466458496316c659dea6afcd8dd8269b312c56a506d65db4bbcbd28d37edd137947f3c78e783cd1b3fbe9014480f3c625dc707ec4c27a63115ff8d877b4

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ro.pak

MD5 8c922129bfb61fe14fa035d965108823
SHA1 aa8d8dac978053163a303c1f1206480144d4b330
SHA256 06c6486e8a42b447a55bd789bf2bc794354fa4be062139481e4612550f16c755
SHA512 25f9c2b75febfe607cbdd872a82338aecb5f277ed2d3d80fe0ec01289e3361445102392ea23207658ac347a774a7f47bbe19672d49f080cd6aea220da5ac3618

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ru.pak

MD5 f6abd2a1e73f70c712b0e33cf225ab60
SHA1 17aa5a69cc2b0f4e0f96f266246ee18b69140197
SHA256 996d93fc5524a467f3b96fbd4a33a3438bd0f1b7090a1981e8b2b1263476711a
SHA512 a32ada035e6d6f1a058dd175896a9747e0660dbeb371c34f2f3b9f3798526484b07537b199fee4bb8d4720cfeced7cc79ecc0fd78a7c61efcc9efccfadc3a2b2

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\pt-PT.pak

MD5 e4565bfa531c9c4344f84dc8be207c93
SHA1 5d1084ad5bff80383129850a853fe1319c23199f
SHA256 fcd194e5caf36be4958c559acbde4f28a957083bf2aceac893f9e5c9e65d8a95
SHA512 531a318e8ef1683abe4bc7b44e7d3a4d6ef907d5e7ddfa1f5cea20414dd33060981afdb8d1f4813b05be90985f10fb892f9060f6c1f2b975984f12acc8cdce6a

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\pt-BR.pak

MD5 576c1c0bbac545348532ffe36bf27fc1
SHA1 55c614f9d31c5e6466080afdaca79b6daf8ab10a
SHA256 1deee32edff320827dbfbe22aa42e83d8caf79f95f7cf18013424da7cdadb975
SHA512 11caaa048778e258fdf2af5b442eaeadf3412921d2e50065b7217de2277980a5fde086b7d6749cb918090daf4feaeb5e89ad7876ded2fba9f62d9e809593ccda

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\nl.pak

MD5 525b638051d9ac36fa759039c17283c4
SHA1 c1922ba3bceae681b90064b60fcb85a7e6c944b1
SHA256 a2335c62cdd4875660e955b0d65d9e995946b1281ed7f34521d3ee01cedd643c
SHA512 680c18b6782f977c87ae0ecae9d1cc0e2590ad75d8146a5ee3e9b1dd9ed1081530f310e871bbd6dccbba42306d8f59778f202691e5690da1859e22d485fc75b5

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\nb.pak

MD5 d1e0429ab9ad3821bb0ad398eb3ea362
SHA1 ee4efa5aa14bb10e70f3542dbe0b256df6c99fcb
SHA256 5844a4a660e41045bf86dca31242e33a6c4726b8dbde15161261446d29ec7add
SHA512 5189abc6844372ed0c115c6ce341387514034dc2c54f068fe6b479d12ee76d5a727653fa0dabb2950eabff6e6f529c17cdd7ae822515d20b74889012d27f7032

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ms.pak

MD5 c8d605a91b2b66603b379f5557783afe
SHA1 d6f294eb91675182f658158ff9399592935c779a
SHA256 7707f79a2a4aec553e68af87802a0f19d3714a25311fb7b8afdc6ff4a5b6c5ff
SHA512 a9f100dc1fe0a19a0a0a4360fff392af4e07eaed6613ab6dc61548d36afe55e4c9183e6584ca4e15feb477947ee8a79a96775718197129a555319a162281b9c7

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\mr.pak

MD5 b0e1f36587445f28f22777d555683a0f
SHA1 42f7cd3c596c2f52662b86df9d9096bf822a80f3
SHA256 a674db4e60152fc17a32d4b92add129adaebfc02a1a783a12653f984447c535e
SHA512 575fdea827497ceab51df5fc8783f960b87d180f6031f0947525279d224189a6299943df37a014f7bcefc637ee23327fb1ae82eb77c175d63c515b29947ac0d1

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\sw.pak

MD5 0787972a076c6690e7938758c2a92e24
SHA1 dbf02e5a3ae26acb060b533bb006756c19122bfe
SHA256 eb96ab83e2e08e811928742590178e97454863bc581dd8574d6a644fd3c6615a
SHA512 9f3560a3b648b1a7025cd8a98c39ec7634883aade1ac2c7836fde890cc04bd009aa5c1bca8354ee1259ebcd9482326c51a7d21bdee3caf92984ecbefab35d34c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\te.pak

MD5 d251d089aa789bccc27a0b473d39e46c
SHA1 283d8fb6b6195b3427144773ffc4691c82e31f0e
SHA256 8dd7d206379445bd9afa4e01ab986c439cf70841d080fca6e152b453e94fcc49
SHA512 27e6f13f6c7937c8121451d70ee90d2a2ce5e519d17e882a86b29a6a78764427022c36b6a99178e9933e01500b55bcbfd0dc79a6f028a046967c2c53f78424fa

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ta.pak

MD5 85403cab968fbdcbf7f92f3a4d49a4b4
SHA1 eacf6ecf2bef4ed5275ed237d3830754db9e1149
SHA256 e213c963248c93fcb4b88b1a45936dda28a5fe39cc0428a16556c6d737fc9940
SHA512 b49bcd260c38f302fa9fa83a2b17d2f7bf576bae14b64882ce9b38152141504a69fbb73d1f9ef8b47ae1a7a995a41e1127df3689c1e043e3b110cc35b73c0fb0

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\sv.pak

MD5 d5925395fb791adebe0d06ce055ce976
SHA1 73163c7420f6a70ac7fcb52bb8cd97f4828a3ded
SHA256 bcd070d70a4284fd3144bf37c5e56994ca3a69c8f65aa72a9231748b30210e00
SHA512 6e0bf0f4d488eaf388431f05effced112e597be52b9c8f199c88ebb6e7e6a28d06f9a180ba3a9e7bf9da5166570077ed895249af7806db74343a64bb598a4260

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\locales\sr.pak

MD5 044954b860180caff2b57af02aa4e1ec
SHA1 c006f910386d7a11c9d074586c60b629131caf0b
SHA256 35e57d972a60e161f123a5783e67e250f5cae1f66a2c11b119c10b81c43bd03f
SHA512 33d8a0fb6c76364b756eb199f629f930d419ea31f631b8e6935b2efdefeca7f755a87bc3ec5422f9ca9f00da7ed5564fd90e228b0f1e9951a82cd1a4deb9b2b3

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\sl.pak

MD5 998585ed4b877e6cb29bef5ec5675004
SHA1 d82e9c2127062187a0ad3906579cdc491f6ecf04
SHA256 7235e631afff75cad9d25b2e5a0e74696ea6b7f4b2a05753331bbd719a0699cb
SHA512 b0d4ad73c4e1aaddd156cd115dbadcda692e314e6f5629e26aa13144e2bac5fdb432db345b68eb79f732e6e102674ebf8cb90c06570ea4d49e4045fbd8cedba4

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\sk.pak

MD5 b74b01d80d6edcf13ba6514dcb1bf3f7
SHA1 405ddedaa9e3c9f3b5ddfeae6f440085c155a6f8
SHA256 7a1db23a5b4f8e4c7cbc80a832f4f4c33fe29e31d4ae78a814bd8ca85620968f
SHA512 2f649b116eb297c7ee7248a35858506f5329094c14be2e6c2cf52bca42170c519ef0446773be096c1571d1cb4502a5a840c3c934710c4900c8cd8344e4e9bd1c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\zh-TW.pak

MD5 197d88a99d2348c9539d388f4b825c4c
SHA1 7b634dcd2cd27b2f8592eacfe314cf23a37f316d
SHA256 a8b11c74a0512fed29b11748181ef4b1de84dc99197c48d9eecf316aceb425fa
SHA512 da7acb060d14f87743ed788df4e2c6ff3ca18a633e46f4d84c4619802edfc23b363f45cec8d2cb23c3e12bbaa547f6df1f5b60ce7ec7d770f689346b0e06a977

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\zh-CN.pak

MD5 6617a2bfccc344c5dc0dfe03762d219d
SHA1 9f9d5059515af878d273a9b74f32ecddd4a93f83
SHA256 48e32f53d07cad6e6dc12040619f7021fa8f0b3254cc6945905b7c6748acb787
SHA512 9ad87e1f4b404cfaa80ba4bd617217bd638cdf7255da0c74d03b8b3123e2afe9f1077f27dda07e5dc71edf82d08c69ac20a415157b12519731e1ebd45fc3b5c9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\vi.pak

MD5 d910fb70771f06c64f6a2d78ca25d340
SHA1 2b1ba5cf58c552984164e65e30cc05744d8ec419
SHA256 d7f676cf557d43db07b14a22b0b20ca761ced59285cadd75c07c68613486e909
SHA512 4e3626cd558cc75b8833308c816c45ca106203cc054e214a08ceccd3214aa296097153ad69635f584dbab9def2440ea2aed79c0e02464c164bbced572840f264

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\ur.pak

MD5 7b5fed5150135b728bf8865246f7c8fc
SHA1 214b0f507ff6384b1b305f1718db43023499eeaa
SHA256 a0c752a805da7dd6608ad04625734f4d27cb75b682f51b2dc8ef08350cc7a2cc
SHA512 81fc55db4b0635e09057fd060d9eb72bda5a5fd2d2e1e4284e1b45098b287c609526c766b030dd0eaebc0836a32bcbf6dc0aae94327c103f3f736b5cd051a8a1

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\uk.pak

MD5 8f894b4972b41dc4c7b65847ba856ff1
SHA1 63ce84840a90485fd376908c39a4125dfd53fc2d
SHA256 5dd2fcc64ef09be0775c2efe7e07dddfc18f5ba6059f878d0c22b9b0c2207cdc
SHA512 77ecdfcfd31803f308da51e6b2bbd47b7c0848104925b642cbcf877c6ee228c5c7e9dc7746a208d0640455daeeb6dfcbe954d7268119b9c096588deab3c2b53f

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\tr.pak

MD5 2cb8c1ccbf9f487116119530a4c3ed68
SHA1 5ca03535ee86c79f28c500d820d8b843d55a6264
SHA256 39d36d6d82f2a0a602620368ba593c7aac2190e323d776c6a72fa5ea269cf62c
SHA512 d076b6b1c8ae08001f700b3e02493044b8f4308563ad5f016b0ba3ffc1e20ede9f15fd729f55cc5370c2f3864ca08690bf50d3fe4e966b9120794bd93fe5deb9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\locales\th.pak

MD5 f30b74c4203bc2cdf830681b14651943
SHA1 47f541c0b5ca948dd371e657ac24f7e61b402ceb
SHA256 a4c2c305aa9d3df52d988c4da2bda398e8ee81d320e9da1de7d4d366e826dbc2
SHA512 a92ac611d43287060fafc66070d7b40d4d253d32cec9cfd01c15fd7892eabbc49c1ba63d03c39919bb2ba94e974f93c73f6e455263ce4e0080fc8161587f09c6

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\darwin_x64\koffi.node

MD5 d81af4228e3d62f0c2cf89ecde043eca
SHA1 f05fbc0e5a541f77d33e14e604c0f75f331458e9
SHA256 c20e4e5df2bba7608500fa6be5f51c83fec399803bf5502a37844df5da115488
SHA512 a888c26987a5376d6df027ba3da5e4f669a9110d1a84e0045387b6f6534b45088a2d8ddce5af25ef3df421778cdbc611282706ce8c3cd916f9d9121421911f64

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\freebsd_ia32\koffi.node

MD5 d8a45f0ac79a4c02a66d8570150f7818
SHA1 d538c11622e14c6785b1f53fd33c8c2136cf67e6
SHA256 a30c64fb1d18d4270dab5daf0927405c2da825b27bddb9148c97a85f3bddd95e
SHA512 1bdf59b973b495dcb03c2fc887b2196ba3ef42004885e8001bc422ebd9bcf5bde62a35bcf9a14e6a20ae3604cdd427bfa5458362ebabc31e16e9746419bf27b8

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\freebsd_arm64\koffi.node

MD5 6f6add10c7963bc0b0b28993b2b18030
SHA1 6499eb9c456bb68a5e92cab255c190310fef9d0f
SHA256 b8bf5dbf86997180ee4fd9dd05f0e831a8a467db400591d6d33741b4541ea1ca
SHA512 35a823865c2992cb24b9356d52d61db8f7f1b8c0ad8a412871630e0194fac61a697b9721b19005843a896843cd065a3c25c06500d912c6839b1457a664f576e2

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\darwin_arm64\koffi.node

MD5 b8631303cef2cc4c7028acd245ac0c81
SHA1 ae5a30d9b9280aac2050b37db4fb573c99b61f84
SHA256 63c89db717da2e313dd6f6ca2fe90e7cb040560db447851f2a950331b2238251
SHA512 92d9cc8b5b1e629b9370604615d67b0e0ab94478585bb1a59554ad978d283f6ee44fddba02d3ddff00d6fc72c83fd34a3bedb6e5f122d4973b77f3b211bb99b0

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\freebsd_x64\koffi.node

MD5 4c550402c1b5e6059389277a2802853d
SHA1 2529f025e54deddf4714478f74192a87d2f8d5ac
SHA256 224cfe329f5a06bc05318bfe994f21343be953d8727bbd530f43e986be9b9c8c
SHA512 a9e48fa4f64a72a45b7461b3851396fdb96bea3412aba5c5097d6cc16865c18965d1ee8cf58d26992654210ecc3d74faa32692502bfd16316b530f42db7e9712

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\linux_ia32\koffi.node

MD5 51fcab0ce0c80e81582a987f6527ba89
SHA1 11fea08a0d6586eb22a7fb04fd78927ce00e0bf9
SHA256 7722b44d96d37db8e48ef47fca228a0452968f514730c09e0b501e836e7b4c9b
SHA512 a33e5d822858d26ceb4d67017c8d965bdc3eb22db73dd9e5e3c28148dbcd12edc99ef2a957621a91b9f9b3fca621b171e2487663e642401be3e5d66ffc23e627

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\linux_riscv64hf64\koffi.node

MD5 96ad64976bbe2a529c118274a7efea3e
SHA1 d4f55a93e31655a1e5e275ac7f4d9f279b62d60f
SHA256 a3872b40a1934f77b5159f8907a21e869c589631b575508a18a07af8f90b6397
SHA512 879d16c4e3d2a5a394df2d694d1eb314af2774ec7fb455c40f4befc377fa1306c3757a0fa0671367516554109bbba58d8955c5780e3de5e85d7d0e19dc58de40

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\linux_x64\koffi.node

MD5 035a947e997df4688eaee94bd1ccf3a2
SHA1 5c1deffac10b5b80aac7730a3cbb6931db3ff3f1
SHA256 8d33cb3383cec7ffcb946a2a661e9c8bf1ca31d07ff8dabef647b18b6e92b362
SHA512 d7adbf103092ad94d57da3bafc5f52520030262229c9a2a2a0684e5fbdb1a186a1c46fd8e1552f5e3c0a3334113cd974822b9b4688c3f0299546ca7884f5d1be

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\linux_arm64\koffi.node

MD5 4fd860625055dab996e34290ae4d9beb
SHA1 6fa594f0c77ab941b7a5a0317c69907562065de6
SHA256 83aef394753ffb9fbfe6c0ee33a5ca122396525c4a817c6fb0714d3dc79a6bc2
SHA512 598414df0037ad63b3f0e2c6723eca33c9cfa4463fd19ae639e8242b1627ea582d37a37c0c96dfa6ef6195678fc84bb29392df823be8b345ee383788384c0858

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\linux_arm32hf\koffi.node

MD5 89c15edb696dea42bef34838e13bb6a6
SHA1 a8f58678faf50fb6a074c212e29276e9e36d8841
SHA256 41a801af4dab89b4809318c9735294d700475d5a0703d8fd19c537e5fd96f7b1
SHA512 36d39fc7cf21e2499922f19c01763c6eaac8854169f6afeb4d9275d2d2cec1683101edf4fa341968301298233d3606ee210e237975c3a7d3da15c7b4b4539596

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\openbsd_ia32\koffi.node

MD5 201d002136b7db90d0cd71726d9b6e6f
SHA1 608996a45a9a4f0744440c01e8f1415d618b5731
SHA256 559f26b1bcbe6562c427e123b4bda6058af81fd3d8a82bf23a82ac5b7068858e
SHA512 8a7c256e7f658dd0ca1d57a27c865e940da04dd14feb6764fecf17cf43acfac075a1e86c9a274f27550a20c54002f100538788dc685c634a79b9b1a0df6c2051

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\openbsd_x64\koffi.node

MD5 1185f0d6a2de30b127414be93bd46a43
SHA1 3e112c719be650c4a53083de820a2fee8e6d7e02
SHA256 eff00990d6a5d1340cf0cb9885dc9c46a5267ada9eb892a280f238ce21e667f9
SHA512 2e40ddbd40d16ec3d830835b06e6dfde578af6308910e9b7cc538bbce30437e415a8856a1fbd3973655f4d633b7d864fe96abdab073ce50c2925e69cc08717dc

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_arm64\koffi.lib

MD5 bf73c29dd4f6f1fa93657e611ab3cb75
SHA1 986e7b09bc9bd3741b846b124bda9f3d579f95a1
SHA256 2ffc8cc215a06553fa245513473213fd21a4abc37041106aae3bcb79d49694de
SHA512 6029242d707575b11343766c526eaa29b166253dbeff981953637867f0c714f461cba41df0b773d03fc9a24f1c51c03cd5270775188a485e2772da60b78218b9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_arm64\koffi.node

MD5 e491c1073f541854539384e55c30984f
SHA1 90dfeee0fa1617bd5a81ad4e9aec59f663958cf1
SHA256 8d169aee63a3014a32acf67687792fde7d97666f439485a8173b80da501c7269
SHA512 0760ecbbf9deb256c4b725788199e7c3cda79095a77a04bf5aca6a9a092ae25ef2c7669af05e2123d04877b7aa3bc68ea3fdf786f9dc11775c15eb24d30ae51c

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_arm64\koffi.exp

MD5 59ccf6f7af6d2c311170358640ed370d
SHA1 83bc434b586ff7aed529bfc9633b489b394e7952
SHA256 1a81b322d854704d328dbbd77525eef963e6cb5ac6292897361b2ac486a70f7a
SHA512 291b8e519e257519ab3c34b2214422e811ce623b2d779dce1b43b4adf03c08c16a3eb5f29757b26e94ad88973d432e9da4e2ec37af543ec799d51102a9b7af9f

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_ia32\koffi.exp

MD5 73ccba5720fc9983035836a4b2c24699
SHA1 20e0ca877748b78c94a2752f0bfbfa61527e5478
SHA256 9fdd967af32c796eb140a9d6394a1832c61000311c6cf9ac49e315217bdf6e32
SHA512 9d03775defcbfbd0a53a278f3fffa68ba34944f9a15915feab3d31f9a3c9d8f7609e356ffe5d261b6ab5df7ec3ea1720071087fc258df78b758a51bcd30601c9

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_ia32\koffi.node

MD5 54c883859fc3a911c4fce4454084bb36
SHA1 b67d7213f06f1fe65983e7ce8a43dfec8475dd73
SHA256 e842bc77262553eec61a7a1eaca03437289bdb40a0b1df4f6950ae1be0fbd43d
SHA512 469b825c2eada20802709f2a94dc50375518d5d5de034ea87576473643bde0943944db63c241e40df12a9492187c4819052010e7c1ba8907890a61842ab707ff

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_ia32\koffi.lib

MD5 cb060bed26278eedb8eb758186df9149
SHA1 075073151c5a40d5b05b497b2587273922f59f59
SHA256 ea850f1b605d51116d3f48c5e41e2a70520cbb5990ec0d2459a0f0b85b1c78e0
SHA512 4f3b5af048a9dcfcb16eb98b56f6b3bbd8ac2dcff58def5320f35a6ca4b5529d4f6d1fcbcda7040d8be1601ab0755245d5f8478b7b01b100ae743d845a49f369

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_x64\koffi.node

MD5 8b0ee0b40dc18dd5638c45dd2299ae65
SHA1 83a8b245a64332225d8762d18f661c88df0c4968
SHA256 808ab5e0ca0fb3818e65ed7e689b4b92fbeda82656c9cd714eeede27445c0b4c
SHA512 738d9f92b01df49713122cd5ba6b037b80f4364711c321c348f82bb6efbfa0787575c7594e573e2d26f7aba7dc46b938e8525c113d9dc59d2a5c17ba3d4358ef

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\node_modules\koffi\build\koffi\win32_x64\koffi.lib

MD5 a7799c1fb27049ffc39236d5484487a4
SHA1 7ec581eaeb1f589865036e38c9c27733b930632c
SHA256 7c63e685c118e5f306d6c2137c1c02cd35eafabd1962deaf184633b612ed689b
SHA512 61391afe71c3c08138a8f67bf508b8835c3fb074c2d81736b91262ff67258d918233c0a9fa452f4a875356664f1d92eacfae2220afd79d9a97efb69ed7b2f8e9

C:\Users\Admin\AppData\Local\Temp\2h6KkxN8fdtGEgx5guDAUIWJTcl\node_modules\koffi\build\koffi\win32_x64\koffi.exp

MD5 f9f152aa5eaaa1fa8a0144c2ff7e4c5b
SHA1 5bf49d7698f371c3c1cbfe8a450d379df66d63cd
SHA256 42e2fdb92322afbdc31433d3a7cdd8ac61762822d09c963bc9fbb9a89e80e52c
SHA512 303ab02f4b75091cd01ad42df4a816c698a87e6ee478aa91f3404dbae1d49af48b4a96a56c711dbda9f07c9ce53bb79d1d75cac9e0903efec194bb3279e007f3

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\resources\elevate.exe

MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\index.js

MD5 d226502c9bf2ae0a7f029bd7930be88e
SHA1 6be773fb30c7693b338f7c911b253e4f430c2f9b
SHA256 77a3965315946a325ddcf0709d927ba72aa47f889976cbccf567c76cc545159f
SHA512 93f3d885dad1540b1f721894209cb7f164f0f6f92857d713438e0ce685fc5ee1fc94eb27296462cdeede49b30af8bf089a1fc2a34f8577479645d556aaac2f8e

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\app.manifest

MD5 8951565428aa6644f1505edb592ab38f
SHA1 9c4bee78e7338f4f8b2c8b6c0e187f43cfe88bf2
SHA256 8814db9e125d0c2b7489f8c7c3e95adf41f992d4397ed718bda8573cb8fb0e83
SHA512 7577bad37b67bf13a0d7f9b8b7d6c077ecdfb81a5bee94e06dc99e84cb20db2d568f74d1bb2cef906470b4f6859e00214beacca7d82e2b99126d27820bf3b8f5

C:\Users\Admin\AppData\Local\Temp\nsd7466.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.bat

MD5 da0f40d84d72ae3e9324ad9a040a2e58
SHA1 4ca7f6f90fb67dce8470b67010aa19aa0fd6253f
SHA256 818350a4fb4146072a25f0467c5c99571c854d58bec30330e7db343bceca008b
SHA512 30b7d4921f39c2601d94a3e3bb0e3be79b4b7b505e52523d2562f2e2f32154d555a593df87a71cddb61b98403265f42e0d6705950b37a155dc1d64113c719fd9

\Users\Admin\AppData\Local\Temp\nsd7466.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

memory/4636-765-0x000002807A9E0000-0x000002807AA02000-memory.dmp

memory/4636-773-0x000002807B4D0000-0x000002807B546000-memory.dmp

memory/4812-778-0x00007FFDD08B0000-0x00007FFDD08B1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ksn5skq0.yqz.ps1

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

memory/4812-777-0x00007FFDCFC00000-0x00007FFDCFC01000-memory.dmp

\Users\Admin\AppData\Local\Temp\b590cb9c-b44d-4c14-8e5b-af6c47c39628.tmp.node

MD5 1e5b6635e09e662d01e9a97c69f1cc27
SHA1 08e3a9e35940ee1ecd37ad762909529c64bc04b5
SHA256 b440ea84c0814e48b20433a8046087b997ab988eef9aacef896a4fd490150c6b
SHA512 1a7f835a51b62d5b512a2008830861bfb3892aa349379e3334c9c8aa5808ac5dd9dfcc5fb2c05736474ca5728347003a60e234e4044dc79d688ab35168b4bbc8

\??\c:\Users\Admin\AppData\Local\Temp\screenCapture\CSCD670F0CB77D346239E87D8C7E9FA47F.TMP

MD5 a6f2d21624678f54a2abed46e9f3ab17
SHA1 a2a6f07684c79719007d434cbd1cd2164565734a
SHA256 ab96911d094b6070cbfb48e07407371ddb41b86e36628b6a10cdb11478192344
SHA512 0b286df41c3887eecff5c38cbd6818078313b555ef001151b41ac11b80466b2f4f39da518ab9c51eeff35295cb39d52824de13e026c35270917d7274f764c676

C:\Users\Admin\AppData\Local\Temp\RESB3CF.tmp

MD5 1bdcf0a68ab7e61ef8516349b5d73c55
SHA1 ac912592ff509df4a06ed915f57b59ab8252a772
SHA256 a1fc7ebfe565f9674f11baab4ff1d8c60c369a5e0340008b6095dd5700fd0153
SHA512 313edd497e7c182916ff245452f793817f079ee61b647e962a0eb188d2c8f9fd1ccd56997ec0cd130c74504c718115879fce806a0fcd9cd37763f59786900762

C:\Users\Admin\AppData\Local\Temp\screenCapture\screenCapture_1.3.2.exe

MD5 01ffd003042537c438e231dc0c66daa2
SHA1 ca43258c3fda32f06ce913640c7364403dbcd79e
SHA256 19ab5c2f506afa44953d0239946c6169605057e483ca1b4acb66048b45df4906
SHA512 9516c01c6c25d02407b3c229fedb4eddabd69f341be95b04dc7096af0f4187d2f2206061f8828b1a077fb3fba21a2426c0ec3eb967877011ca07228668fbf9e6

memory/516-866-0x0000000000260000-0x000000000026A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\Credit Cards\All Credit Cards.txt

MD5 9ef0cbfa739a8cd4daa50041e13da0b6
SHA1 f8f96c8ddae556e86c65b14ec96976eb2b11db55
SHA256 168781455be4ffbca7bd2ae3c0b765a5953f52fdf0d8e56f7d817630ae27be21
SHA512 afc76f3026b64041e5d964d6445f627c69b9ad6c2db479f02d157d764e57176ec469ca85226ef3bb22871e00d6ee771f2a4fd2f674aed933f83b03d146bb6e73

C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\screenshot.png

MD5 56286ec6148e9321a29f64c337c20984
SHA1 6418ea0b4e24ea6de0994b56a0f363c3c29ee64f
SHA256 7072bfdeed7cfdaae7fb2bbf6ead9851572d73a3115757aef138a4c577391cb7
SHA512 4ce633ba6888edee90ad97a5945fc0248fb0c71c6db56dcf2174493c95278574ebddc4a684f2dc96c74104e0344f4640e9eda634de73f8c25a52453fd7807723

C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\AutoFill Data\All Autofill Data.txt

MD5 698a35da81736fce6e1521788d24f28c
SHA1 9e5ea5f4de84582507b8081e3e8d51b2972333b3
SHA256 b2d8ddde8a147f931cf5ba65a4afd3ca582107aca8c163b5427b17af9b3a0886
SHA512 09d2bed13c87d3ffcb55a3417de69830d141900289059d601a7a32cbdedd740ad9d239b29e747485efbf70741c03bd9d72b9324b9f0b18c53d5ddb669569b91d

memory/4812-910-0x000001C1CA870000-0x000001C1CA8C1000-memory.dmp

memory/4812-909-0x000001C1CA900000-0x000001C1CA9AA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\78b56fc1-ae61-4d4b-8456-6cacbef614b4

MD5 e1e07a32351654bb9bf6d238c97fa3b7
SHA1 5ea8f5721c35c42d7ccaab87aff5030818a26cf5
SHA256 cbf3f6b6563366e3edf6c50818b05e2403c510e0e70b8db8c84b890aacd77639
SHA512 7b3d62a4f9c12d9b26794243e332189a4537b4bf66f3ffef064acc4a130d3b9dafca6235e58df6a4ba23683f0d9be6bea42ff256e9d5d7e996df7cc0fc6a44d6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\9ce3369f-7b03-481d-bf8c-568628abb6c8

MD5 1228dec67f306eed29721c5b2ce9a895
SHA1 866b4b85dcdad2420c0e10a7ab707bc4e7e4b2a6
SHA256 64c3000b688a81ee1cf70a041bf503b310208175028f3e8065e10652f4be1668
SHA512 2946ddbd59a7bb9632a4d811d494e0a421d5be5b9f81eb85409c21a7be265e187e6d1f9fcc649331ce31cdf8860ce9686c4fbc186f0d01f5ccef4e53973ab33a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\db\data.safe.bin

MD5 567737024979b0ffb7659b0a689a5817
SHA1 a8920e7d276b1f7f5778467355df79e6a3a54406
SHA256 546dfdf928dd01ba1fb1a809f3019a3a5cbef533e5ec581d5844318a391adf44
SHA512 345f07e8877bc18e3dbacae82bd2a1da8da83cda9ae05851024a2437e7b922b544e2451f7bb89fbc95779c52761d2082ef0e54f29eb4ae89d4752988ef4bd3d0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 fad050fa88dc01ba2e452ddccde6a320
SHA1 aec69ed46122d4bb890f09707a2ffcb3d57086fa
SHA256 0dc1452f1eb63dd3a3bca3965b20c633c162096337b5789e1dcfc0eaedcfaa59
SHA512 f605a1cb9d1ce1e7bb3437596bee66acf9593c1e8eb197edfea0f31459f92011ae2341aef816fdcdb0ee65d4d01f55fb02c9688c19219c2e496020b0ba98f598

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e3409ae298b8ea8b57ea95944e0c5245
SHA1 31a2b5f9be87ef19cfc4b0fdae787048a47e916c
SHA256 e0d4ddcaaddc8aa20f9250377c8574dea647aa1f5b1a195f4c81d26bc045298b
SHA512 11ef8e159be64a1e9a5dc7b2b5080c1633d0aae5dd8463a8fbb261ceff10d43600a6507ffb19471928ab93a1f09bcf1390af4bfa9d3e2d28cca45a82c400f433

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\83E9220200E1571B8A9D3BD22F093A31723DBB86

MD5 c5cc85f3126ec7c103b55abb254ee85d
SHA1 e2d655920c7b0b3d445f8400a7caa5e4eb28f06e
SHA256 5b20d4febc60da65162b955198439442e9c709a7d593da0f7acf4a9c6585159c
SHA512 ab052b168ebb25905a3b21bd5aae117fa061c7391b7a7b3b189f0aa429d9d5dca53ecad3a772e35d580bbb6fcf47be713fb9f2bb7cec40938a9eec56ba38735f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 23b8c74765269148533d3459daf5f759
SHA1 12dee7114d8721706094ccd7a3a857b7fbe06677
SHA256 8dd1db333205aa672f9fdea52d124e2351e4fbda952865871eda36c2941211e8
SHA512 17965be24c2d1854bfaaff99618506393326e6ca66d179824ff0e6c075af84c2cae4413b1f3a523973141b6deda4dc445ccecee9498946456b30c3e1f46bd3f4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 087e295c836143be923aca8a1bbf3335
SHA1 84d67c04972183f02dbafd97c5b90891aa0df0e9
SHA256 514b6ed1e9465c6de5f318c8bd7f80b9d2ac9f66309f1ff46f8d8fa818fe080c
SHA512 9d2d7cfa435efdce3f932db7591bb6e9ad4c0ca85218ebb8b0cff30c4f1911038b8b5ee4efee76749fc7527bfbeb40432ac71cef6b1d7bda38d3beeadf588290

C:\Users\Admin\AppData\Roaming\my-app-1.0.0\Network\Network Persistent State

MD5 2a6791c1d001113c3f75786f3185a4bb
SHA1 f7a504ef24aeb5ca051b468d561f8fc7bc4fd1ec
SHA256 19d03fcf3160bccbb817849e2d3c899141bf8bb853006760796a2f145b7b83b5
SHA512 3c9c6e9df9e1786fa076d1e1bdfae183c7dfc4d88296fa8dbe3bec5e678067d135f81883cb7507af43a8cd91186f799d7acbb361a9a8d33080a417b814ada7c4

C:\Users\Admin\AppData\Roaming\my-app-1.0.0\Network\Network Persistent State~RFe58d136.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 4b3f54fd33cd951d9a5af6ba4519002a
SHA1 64b49115991372335b8e7e393455e321c48d7a7f
SHA256 045cc7bcaa4ad49b6fd71b9dfb916d36a354f9fe6e0a9312bad9547ad7c9c639
SHA512 e7b2ef218b699fd46c0db18e8e38a307ef9a46db4e629b99e053c1f4e31d79bdb801d53ac52739ac14e7569f15e3a61750725c082cedd8c96dcf038ab8f95499

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 66b64267ee42b5f3fbe4700217d8a20c
SHA1 60adbec785285981c8cc8d62ee5a22c8e3a4cea9
SHA256 855db36071e34aa4881b0f6f98d524533951eabfe55c0dfac755e5bc03322591
SHA512 a8d016aae8d162fd6e83def46aa5d5bbb2ddb13794fa19b34e21d060d59873e0a06b43c0ad32649bee3f041b432bbcf8768911629b4baf9f12d968c1e806c268

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\broadcast-listeners.json

MD5 72c95709e1a3b27919e13d28bbe8e8a2
SHA1 00892decbee63d627057730bfc0c6a4f13099ee4
SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512 613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\targeting.snapshot.json

MD5 1a2192cb0a558d07036e18738ddbe644
SHA1 c6fe048cf4ab37ff8846654f289d40522fcac53f
SHA256 a0d4cdac8af46690bdb1162693396bc9b3096189f797fa54dace0aa572d24599
SHA512 0a45e199b73a6bc0d55bfe00b3e050eca468b0103905c79a413d606c63c86ab2b3164e3200b87aba6d11218daad6a8c8eff3ec0552742c7b40556af667680f98

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 d7d3c7ac7660f05b9bc9697232bceed8
SHA1 6e07d444cb6a3fb9a21341a4f71b87561892837b
SHA256 2e954848a561b153b7d6f9b58e69466e2533de7b3ae5eb8cc2037552ef1b97d1
SHA512 aad1b3fdd0abdf0085f80d7a2fdf27915c4790cd780eab5891ee11e3209fd87ae148f856b95a53d885bfe1bba93e1ccb28fb1ec11c97d3eef0c60b809a68a8e1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 eabdbf0eefa0b8379a3bc5ad8d3dd450
SHA1 901358a5a2e112afa368aeb911490d2a38929ad3
SHA256 f8c8370f6aff37a9545c50765bec7b743ed2ae16148992daa39eef6beb4ce41e
SHA512 3b5be916f75e7046ce6fa9c9d9ef149f7fdcd09b6a5f1bcb7da4dc3734c3b7da113d7883ae6fac73ae1ac9ffa21565e7e5f7604dfa676ecea24c32b53c65357b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\8249

MD5 d376db801a7ce0ea80a0785738c56e32
SHA1 4bfe406d86bf897e04df0bc3783d3abc671f4dcb
SHA256 88811bc1c4f521627c8aad43e8aacffcd03b1cba9779dada74fe1f8953e7b60b
SHA512 1afa5c5db94d77ddbed305f6d50fdd6beeafc322fdede12de95bc416833833c3430b5586c62a438dbfcc3d618513bc18caeb92bb7b7b163070dad88f521978aa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0ec8fcd4059004bfaec6ae66cca86842
SHA1 66c442861b6bec504f89164dd2a5f36d92a673d7
SHA256 19defe8f4fe4738b7474b157953f1981e43280e7f058b5ba07aa2c870fed5eb9
SHA512 b1fd28f6a08f20476d595d3d1be3ae321f9f5c30cd5c3df8c934b0cabd5d96132038685b677d4bbe371f2889ea1e1ff16333b32765bcef4ab5cb3b556649e465

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\17884

MD5 8c4fdad5e97e7e0ec722e5a3112e7e6b
SHA1 11f7bcd77a4350ea9a9b032419360016bf3b7432
SHA256 28c8522e0eb12c59ce99c88348efafacb093e678b0d28fa1a6c1fb280aeac757
SHA512 c0f51d57f8e5070e182461dad1fece8db2998ff854cbe55fb0c5057f4bd6f599ac081faf5ab0e76905d4592cdce09443cecfe0d4825debed4770ddd299822bd3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\E7977F6E10AFB3B4A8B829A51A5BF2749364C136

MD5 229c1ed08fb83e03e6cf74c98ccc1e03
SHA1 5d0956cb057049ffc3daf7b8f8c9ac86218424ab
SHA256 7d7465da876bf454a6a95b6d4935cc5f4d7d3ddbe2e75e7bbd84ec21629c10e7
SHA512 5358c247c2f8d0b56f223716ce25d358045d507d05789183294d2f1cc776d076c4a82f88078ee47962864f015509f218ce10ff596a1b4f41fcfcebc54f52d77b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\FA2083489969D30038DCF1A73D2A1DE76CE5D9FC

MD5 6b86cf46c98abfcdee60c39679b8ae69
SHA1 89020574a6ce855dc70fc6d22fdc21c4d82e0261
SHA256 78fc5adb32b900122391880f7598c0c26c37c922f208ae1108f32639b75fe9a8
SHA512 8d47eb1f55a01fde12fda162be55adf028a473038f759d4dfc1b1d5a95d0b57b4e91a01ebfdbe7ecc382592e320826d821afe48f407741074fca4089e785d690

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B97D3557F7FB6D914414CD2D9D66059E5A353224

MD5 5c14f9a92be9100fbb30db64dc86c65a
SHA1 27c2d47905f7148ecfc2d45ace923f7841c11944
SHA256 7df5f9a78bdc56def82c36608c448ce1684bad6beb170272f4a14ce6ecdfc40e
SHA512 37905c857d363485389ea331f78f2eaa98f966a24dabbc3061b1a4da5b841a96d1b782b11bef2029e8df1304302f56f97c5c871ef4cb8e94a266c3f76ba36a25

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\6CB810B147AD2628C09A534210013F4FDBEA7ADE

MD5 3e8a56114fa8a0e15b7fc68e44b90b1f
SHA1 d7b91020717aba7c7170c98cc59f75ab5f49c0bd
SHA256 f939c6748f6a74963c013ffe022534801a8ac0f04ba810f03f879418c918df4e
SHA512 e22774a96358a547595a1c47a36bfdbfbf0ef16be521b530cd7ab368d51ec6c6f9af8f9d58c47de7641cd45e0cbac95bfc42464d95f39382240c7a06f37a8a73

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bdda7330d48eb6de70014cb49a203d22
SHA1 09d9439572f493cb87f9847fbceb42c029d66922
SHA256 460a85b5bcfc49a178fafa3cab131f1ddd9fcb0a2cf66e9afbc1d5d8369d6fd1
SHA512 8559becfaa51c82a0fa39d56da70e7ed94b3a0d0be3ae3eb1d3f75f700cd5b122474342752db7945fd531c42e3d7bfb5ad2eb0b82cbc434fe9afbee923e3674f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0df01e18defb8182d77a81230ec74bc2
SHA1 b99950999ed47b5fe52ea7515237a87fcd1f4a8b
SHA256 b29a81bc03922497b7e14150abb53caa0c3389e44249272ac081e20f04b5de41
SHA512 22c0ac75e31555aea883427cdb3145efedf4d854a6abf5f7ffbe3f8de0ffa6b029b69d41a8be73e34b26794daf789705f2fec28a96e7228954751d4a037e8592

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\default\https+++www.file.io\ls\usage

MD5 3fea77d27ffdb11672e79999869d2d7c
SHA1 e2de97a913cb69ec28a5bc50051fc7023d746dc8
SHA256 07d7396e8e5952edaad7f4b03dab81eda35c5bafb7ae7510730c8bbb4e848680
SHA512 80a1bcbb04c986ab24b4fb82862bb9c7e76fc137f4a7e53c73f578d7054612a77c0b17d7c7fec49927557fbb26f13262fcb5533925e73bb94289cdbf5748f431

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\31717

MD5 a862d87865bec94a862ac9873477c70b
SHA1 18fb348a85d23fbfa2c9d70a82649cfdc6c08b56
SHA256 3a62b82bcb0bb1a1d325fdf22e21b092e5f6a19203d6899196bb38e00a789dc2
SHA512 61398490f0d786562ab7c5d6ac9e4c5ad57c30baf8ccb556bc76d55465a94b2aebb6241ee0ddf6c39e5071387eed4391efe2b7e7d8f5bb3cf41f6e38b142454d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 997e2832b50bd12fa23505f0a5b281f4
SHA1 51cfbc84f010f1c1fc7ae7dfd0585a2688b4d34a
SHA256 5fd6b6122d0332be20f036e0f00f3ce6a8e9c4b36d966fb353b420fb5f149da8
SHA512 f0f3d76d7e91ed77336b2773c50f2937acf67490fec7d6c2f9f292d78d7900c5f52c620fac97ee970083e99eaf7b4c6c166a329fb1b3202d9b515636f2830a5c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0ebe8bbf592fa5a4c22fb18ed711168e
SHA1 aca6a0a2be8f391be5f619a281bef8dcbdbb70b8
SHA256 723bc9e69cec31033a462268f99658ccfc1734f2b7b95ad819900a37a5c40a61
SHA512 455d6850b06151515e24afa4539bee4ffc6774d1310f680076721251ea6b3b6e39cd5eba90aace0dfbf5da9bcae3bcb0b6a31a89086a4e03bf995934752132c6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 21c627019e3676c5a7ac911762afca5b
SHA1 57c4b99f13968e2122c3b835875c36fc53ab5d5e
SHA256 e60a1dc1de75111604fed1e41ea26184a81ca46012dd6cf526f4e801e2b51f4b
SHA512 b24f3b92010ed21165ed965268eb5342f917eda2f9169ce0b0e7a578debfeb28ee46b845c1a0d5b29c6644a94e73c59ced48c6475c9fb6b057bcd7235d53cf6a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5ed7d6850f167de2de3809b87e9a7ff2
SHA1 ff8354c56771b0ccbbd2ca93d48e3ef19314687d
SHA256 1766207e823517d36ff740e19498ec225ddf76e2b5a74a00a85450322d202c34
SHA512 d451e62b4cd36a027357415e718d8b44831cee2c491b969794dfbcfa9b012eeb595b14a5961f2cb1934be8168f9fb893934fe2dd36511404a693a9653c864307

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5c25c4cc357793c72fcec66f1c54c3a5
SHA1 fdb54da8bea3f4dd18cb8e0c10e869dd8fa29c41
SHA256 cba53bd4e566ddc20f80e6efd82979b7ed9955ec2dece0e0c649718e4a195e80
SHA512 b693c4099d9a37ecd238470ea7da88883db5c14b355a52df98fbefa405078a8b36bf30e5628d5af70d650e01296b213a2ec184f98551fe76093346b69d933f7e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\AB8B2107D9B4B02732F8D9FDA1D03A038842745D

MD5 95d28ca7aba52346800b646101f76d30
SHA1 79d804b640b32b07828721c981ea8cb6404e3ce2
SHA256 cc94ac70fb9ae5c681e79b920e36c9c8cd38e7ccb50ea3b9a97272822ad741ab
SHA512 0b38868b18d852f4968fbc28fbe158ef929ce94061d091d31685082de1cf85c1f11bb65d7704a99896de683373b29a25c0164a255f73699c1da69f020526998f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\B9F1F109F2249FA03D53FD1AF9E254EB46C901C2

MD5 615153061801cfd2d78135ae9c319f5e
SHA1 d852f4b4c26ef9b588bc54dc27f48a9ef99530df
SHA256 3f1060abb4850487c36925a97a81b2fe9e08b4c0ec6571641461a34cf0b38dc8
SHA512 ccd7aba909c5934aff1279193a67d76e5333088223ea9fc771ce6256fb1df79da2faa0588b9ede137840f3c190e026e18fe3227a25e598dc2e565e4410efee87

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\24A9211782884A75B1A9C1BF23368A4DC47F6659

MD5 24dfb845f80c02185f39a9d3e9fec494
SHA1 d58f583354ed67955965ba2335a3b21136531035
SHA256 c9a9ef722e89f9415fa481a11d623b311d97b28319638c87a5c004093e1a4ebf
SHA512 63c5387e6299aa5325b091a303b33cfef79f9770724feb484cad090efb80234b35eca834948c695d07935ee12fa92c2b2480bdb654f0bb1fc7d73631e37db106

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 515705899348eefb95481633802c60e8
SHA1 65eba80d059aa8849c5c16ddc2cf6cff24d31b5b
SHA256 832411745c6027f0c041011431cbbe00ca6edb3c3a46aee6008d48cdb9c97f28
SHA512 b6cd8709636be1b73eee4fd03317b150baaea6051cf38c8026a2af5d837ae3c4610138a9d66865054f52806808d5d55ae9880048054fa9ccd7fed8154e3690cf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\386CEF6E0E3F967A83014C0DE34775CDFB98F6BA

MD5 75c3538bf202d3fdcc8216e8c7e51e36
SHA1 0fdb6e63e8899acd9fd44984b7f7861a281f42de
SHA256 459074d7ff651c6b5a93f1746d3867095e960f6384b193d0d2524b6df200e0d2
SHA512 16c4476782a2abbc469c653ea4d4f496c1d3bdb471ee7f849de63cb2a9bab2529d96d0895d32e4ffd791687022fea57c6f013c07095ca7d8d085a91a06cb4461

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\0E7038E312604ACEE5EB1EFD37E2DF26123B032B

MD5 da3d343699d6baf52b156739421856e6
SHA1 d655c548818c4983f47c34cd20800873a22d6427
SHA256 c0e8b59d41b5c12a134f9e110f79f0687cb44b938c6db2a68b0decb7ebece050
SHA512 59ff39a0c6f5841c654b7becfa46150d2c78dff968f705e973e1db2e602b6309783696bdaaddcd3433020f72ba0ab1d4e913b62e98d05cd6fdbf2deed5455b1e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\default\https+++www.file.io\ls\usage

MD5 ea828f3b3ceefcf81a20f5c3a8c5248e
SHA1 a171e2d3e4bca051261edc65b99bd86a9430d405
SHA256 0555eba059aa0934615117408a6d1110e1d0c64100f0372083336335a020afe7
SHA512 fa734162d9f3861f19c7e66f0695c19428b53f32dc4503810605c9dab27856c385a8a04a4b5a4e11d8dd34d7cdf80e6792afeb3e3de364f8b3c2fbc5cb070abf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 85cf858152897eb1a461059c7826d0da
SHA1 28fbdd3c6dc30c94b3a493ab9b0efb76199792ac
SHA256 0cb2306863816af0424356c7fb088975ea5074ef2b870419437e139702af78f8
SHA512 e05a2b12fce2f02354677f99de6d4a609480db1e27fe74ea5497f9070487608aafa51e15c334cc954909b1fd307690e7f0a5279a114d5d74881336d942d3fdde

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9259761448acae1d5d06e606317f559b
SHA1 2333f4bb2fc81dcf275332d3ed3a03c95c08414a
SHA256 fdf3a62caf7a5c33f760e26c4b450532a1ccff551a52e33a9cdd0f24ae552e17
SHA512 60291e3310776da182e59480127a27fb37bdf89641ea662f75f28bb82f81f66c570668fa3fd41d9ba949e53ae6ecf5b6812b14e32541c22fb7855abc9b6138ae

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\5B6994270F2BC48DB06FD9C556E5247B03EE0183

MD5 b6cbc4e7ae7ab7f37efc83c54b18fa7c
SHA1 022859944b5c779b349c55e682d8420af4f6ba22
SHA256 57250988772814d2bdd212010d569fddca138789ae03a17785dcf52dccf4a493
SHA512 ca91dbd00066c3ed154cb4823e2464142c2aa4cfb217163b1f74771bc9bc133a85faa263fbdd2bf54367ed3608ab9b443bee9dd7e1f055358c60bd5daf900361

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1600EAC766C6E7E1B8AF51C8DAA0B07F7B133841

MD5 c711b6e398e53b26788a7498793873b3
SHA1 f7113583ff97533f427db888a7f7a7ed5c1655ff
SHA256 3e992d330a806c4231f5380c8b249a7e875703573b4896baf7a278e163a33b75
SHA512 e0ab56906c736cae7d99e1fe1c0790b83c62296e477127efe216f315f46024a815d23bdf5a02e79a489292974e739bd4f9b466fc760cb62202aed6afbc19c27b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\880F4B5CCDE22729FB98D8CE5E79F2188172FD04

MD5 6cb26dfa9a8c98b1dce17f06b4bbf822
SHA1 2545f88af03c4908cc2b994c08e992aee3bb8327
SHA256 877ce0c354fb4d5d1474a1350aa9a3ab85399bcf59e58f3f77b2a1d16b11720d
SHA512 74dda84bcaddd500e2957038637f9ca5be3523c6e57589a3dc13d50fbb60636a9a1384d416be5d16e5182802e519a1bd4be343427970fa921a163050e2aabbc8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\DCD1994BFF626FBE1E184214D73CD4C161833DE3

MD5 3bbd4e8924b7fc99e4b3119368a204d9
SHA1 f9fddfc5dc38fa5375135180b74d865037c5df44
SHA256 c68af7825514ce994043d6c166681b6824272a70f18c1a70484e11b98e003603
SHA512 48120ad9d95b3fd5ec1c18fcf23e678f4882a0b14905c0a15bc970dd4d7399eeb90802ccaa9d0b7fe0b30837c78f99a8d9eedbefc26c96101f89ae76a00fc864

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\3D60C9D52D56554103D8E5660B6F551D10CF3CBB

MD5 6fb4eb1a31d9a824078ecda483bd2eba
SHA1 739a35ffbfb68538a6c7395cab4722d3f5c3d494
SHA256 6223daf89635c3b91e4936c3d25f043e2ae085903f6d3d3c294d0f4b6f28be15
SHA512 70ca844c530d80fae613bbe6aaa3f79b6126b8cb7f251c95502676016744fa0a9bc0f0239e16e2e14b597fcec6d26cd35c33392045b14eaf5e2c2886e8a4c50c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\ED9FCF1C0E3873AFF6FF1DD0D14A8195B7816AFC

MD5 0d014a926e64f34806d0d3896fc4f88b
SHA1 a274187ded225d3790c9932e72bdee80a6b63cd7
SHA256 29a7a09b32765979ca6e65e0c6377870db73d249e00cff273609a67cada5ea57
SHA512 ff6b2b17ff9cb8adae8be685bf4e1c0f5021a2239e7abc824d93de1183f4c7730a5927c0c0e8df78adf612806be469af1fee0aebbf66a51977694d7244485bca

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\A8055154F70B11390C4227B1715F63B4D80F652D

MD5 666e233f9469b734596db2ae84248cd2
SHA1 c3fdefd788d5cbc835bab652f9c23dbc7b1cb77a
SHA256 ecd69c507c887c6084f65d6d4ab1fe3dd17d7b637c19f63bd97aea6049c90168
SHA512 ce5f02c1a8dcda65c7e374d85ea9676bca0d8e387d0c669a39efafedc97afe561e369385239af0ac9ab477847b4a5128bdbb5ceac85020cb99550a411648355a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3281f6ab1f848a2d243329fb0ffceb2c
SHA1 115e0262e1d82c7d7ce7ee2d45c5956f09990438
SHA256 7f1822fadbd6c7927afd55fa86be32b4eb65f01df3b3d1a14efa60d343b410c7
SHA512 a1d45a093730f0bf627fcabbff5b119e75d9c95ad1db29288e73d4865718ed17d910b2ba75d9a140175266998c47bb44bf9b1e31ee7c65c02d881cf627a28ef3

C:\Users\Admin\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

MD5 d22ac5f28dfcd81d70e47afa51b21f4b
SHA1 691ffb943f2fb940fce27a5f167e213ddd8951fc
SHA256 f357662abda766c80f516236b0801eb6653df8154f1c599be9783c8e2af2dbdd
SHA512 d15d53b1dfdfeca1391e5aba919a07e35cd766fd0aaf66b43f1d86d00fa15b049b44b05558a8f3c3d248edc6fd8ee2388f02f69d3e17f289376eade2115580c9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a51f1fe5d7daceed95e853af99198aa5
SHA1 22908bf670a059d03c8032507ff3dcdfc78fcf83
SHA256 b3e127887845400f1a299335819578fa9746ae5e1d7de50dbdfc2166d4815188
SHA512 a9ee51e81e99557531c2ab13b64fd01693a7fee9c51ccf405089077f3ce20e04ba9a397030109cbe5aa416fd4dda31f09189533333f8b26773900704f8af5729

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8e3eb6a6a3899a3acc4ea1e8eac90434
SHA1 de2e9700cb9b5ca086ac703c723c88c8084ebe79
SHA256 5f09dc02c66432ebf6bccdebde38817bc2b999dbedfed4ae177e407a6f4c84ef
SHA512 69e5810aeea877701c838d06a358f4863a5c297dcb79bf078151d28bbe5e8cd61f9a3b5df970a0c0407aaaecd67125fdd52c5704372879761f840da294ddeeaf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5c53cb05a94855a91d1303f704d81a0a
SHA1 2fa6c5daf4e9e14b8297fbdcbf742efd7ec4c9c4
SHA256 fb9e2b5cfef6157f87f9926a82fc8f6585827158e500e74cf4faa1750c083628
SHA512 e0369d33141df009ea98e2589691f1949dc8b7dc8d70a1aa45d68e7f59ab246684a69f03c7c317ad06b21b4189b7e361a7066922addaa8192b88b995652b3d0e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\842740E48265536731CDD1D5C605E7AB2B5479F1

MD5 7fbf97b8e60f1d84fa7de82765a1808c
SHA1 fa106966b2134ead57bd315de5d0b67b2b059ca5
SHA256 ea7a37493c3ae8203669081c2a256c52aafe58e0f8500b29e1c1a53aa1831545
SHA512 d3eb9425f8832ede4796b4000e9543c806ddaddc90c2749e23c2caf254392531cb4c1a5f2a3703f4a7a38d6cc1ea380be0c894c95a4ea2678d92c1c64eeca3e7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 59af84147bd015eb744cc7e28be5ef87
SHA1 0071c3cbb249893494e0a7d4588ad65fe7605937
SHA256 3b37ffb06794a6b3d156669ac14547612a72023edfbd26b6a114bb333f398796
SHA512 d8568c6eee7c950c782f9b47af61b76d0adfff5b457cbc07880c0722a231fd2b1ab9ab4b067b8cfbb666550bb1a530a5dab99b42aaf2fe6a8c691a9379338a00

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7a79676d9d5469e53f5b1997826f960e
SHA1 2a72b2e3205d59a9982e768f1e6707b74d11e127
SHA256 10d75c61f620cb24e6de0691e96d0c52670601af8ad5ccbdce7142520280b10d
SHA512 d2e057239321393d47183b113930a60bac6398e17bfaad9613e3c68aa00045a3a524deb5843d705916e98726420991b8a84b476e5b2984f4fa2d2bec7ddd580d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e92c4c48a43a629791d3dbc2b4dfe53c
SHA1 d681ee663296d1d3e7dba5546d7b545d081a1432
SHA256 a29ac26f792edfb594bfe338b97c3b428ff104c12abd2feef04ee7ba0790026e
SHA512 2437d7d8f73997cd8278d3a50aec99077cdca6c8edd3c36a8e0f1b2da7530994189d1255fe58f490093a47f33057b851442d6e330b2fda16fffb4e1011d42f4d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\4562838C1EBC27FC59C5F652598058253744941D

MD5 cd64e2535e1d4f309223a8edeb754f1c
SHA1 751622d21b2ec6ea3d5c3de02b65ab933baefeb6
SHA256 84bc4df7d48394e674457524afaafbc4b451422b77c60a7cfd4d814f4181c166
SHA512 89f14e185614a6905e72bfc79975c61282e1d49adc52246013817ee88382b3a39d28cc2ea6afd82b1207d4c7bbaed4aebb60cadb75bf18dbf32068c2082de897

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d54fe8fce0a87f99e55b4936a4395487
SHA1 d1a05f2a5edcb7f4a757e822151751c0c01e94df
SHA256 d85f002a4e7835889bc8733fe16f2290178e97688c5e3d3edef9263618c5a515
SHA512 c44c0a392d306d82e3a17b9bc8649fad9bfcec0b1d12f453f6d3bd30008b1b5bcd6c4778d74b172450f6cf0eccc7c10e2904b67ab8e575b35ae67a190cd29bf4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\58A087C3E095C950D5B03932E027716CB28BAFEF

MD5 c0cbc713a903d3d062cd9e8c6f92942a
SHA1 a1bee27bba9f2aabab3e2e8cba8d97d3be3424e1
SHA256 370a41940d5d7ba22c288bb2f638fb128b20c5bbb73e3be0651f348d223b89ee
SHA512 500b3b7d205b3a4a2788d9ec64630daa45c62619337c4dd64f6e4fe3363dcd17f336b779d6e4198ac667d6e75ca197ff822c0febe019bb9aa3b520d1f78927a0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 4ccaaed21a30e9ca61e2f559ebccd087
SHA1 3c1cd25de6d53d30fa561a48c41706015870bfdd
SHA256 20d6f13b6f0a40d51693b5d140a020b6472d8046d3af7d24d504d82f5a08cbe6
SHA512 9ab5eb41f933a5aac8dbeca388515ff82f995aafb0ac873b4c42c9e556990d5a9be084fee411f92eae294e70eb56ebb1e068dc546fb729e386cc0b6960c2516d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b5a53c58eb1b6f13bdc0c431e269277a
SHA1 caec07c4bb09d21debe24cff1b55958921d407e8
SHA256 499d0c4591878f7b1e16f64a483e5ea0b7520992ae08814d62e18976eca87bdb
SHA512 4e08f111cc6139fa49208aa491a52cbf6945024086b4bd2ef803d483f0368eb1f0d11c03418b841507cc55e7a338590d9ecbbe0d2a05553846b675eeb8db042c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9051590435d0c32b90f8194faf5d2f71
SHA1 a45223868877bf666dba1ae7a54e9f2f1809832f
SHA256 282b946dcb86d2a7ae00c804b79bd5e866d57c204658a9252707d99945f34923
SHA512 8f186be7b1912b37acf50979b95c57cda1bc100fc41d0b645705ec1a66716427c9b9353c858a96ba2ecbe583c4cc955c77e0f16d6ec46794bbc32a8509a9cee1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 77ec32fcca6d27e62d7a528944fad78d
SHA1 0da27a898b751830f3d243895ce8eb9f47d484a6
SHA256 3671c66141fdc4e49bb8ac07a3c3d640a1ee9ff575579c80c878a0b7d22f8355
SHA512 30fce8d91ec27206efb2d153a4e09995a63d0f6fdb444e482c23bbf4e2a4103df34860aa1ce0e198f03505558efec620f13f53aab470bbbf48082f9fabcddead

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\3100F9DEFF547BDC0AF7915C005C3E18FAF0FF6B

MD5 c81353830bf37e9a0281c1c6137e4301
SHA1 7a182bbda84f97e07ac03bfc328ae13d75688fb1
SHA256 0d2f97ab7d7f0059af978ede7207c04b753a646374b634547afc08971da5b5d9
SHA512 830c372d5c93010273466297aeb462e84a1e166cb756762749cb7eccf526bd7416b7173d4b1f6310e663fcce44ffc390b5da11c5a1bcbc9420031b380884e34f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fec84e0ae2482de538737c1fefb1d180
SHA1 21e003e1e9b896060febd109b2125fa140215adc
SHA256 ccac8c2e807df134a5f99b0c7842f5f231142659f3fe8812482e1573695d1276
SHA512 d2c0a4f17af49eda747fb1141d986028ef4b99cdb1a69fcff720bfa931d69db07012228a59234e308213b242ce1e691406eca1aec18ea964da7325c058bae267

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f17a72cc468355932da401578a9e5737
SHA1 6586a1941cdb5365fd1d095dc0e6bbbac427f749
SHA256 e39ddea9ec00b6fd1cf94c646140ce25c866566621242b425776cecf18356b5d
SHA512 51bbccccfc30d925f80c6d5dc590e355646effd93b05d3fa6abc1b619155bbfba6419a32da822337d8d980d71763c15cb180c48f441ddb170e434a03b0a0b5bc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 01e2b806d11e31521986e5eb4122eb6a
SHA1 2bd0fd3674e6b59a81ac3c5fe070acaa049f31cb
SHA256 faadc1d169a6d439fcb6ba3372ae340a0f18f92f056d813dbca6aafe3e28ccdf
SHA512 2bdfe4ea865b4bf4b656e891212912e45283ffeb22bc090c3e9127930d3c2516fca9376fe643aec58001886ec990540ed26a24ec32c32efd860203ee84a9b735

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e156dfea1e1ad373dec74a90c2977b52
SHA1 7bde0e3c8b7f333dbd1e00baeeafc74eb031a3da
SHA256 933c8787045abc0199e201b01205d424d963c8b40b28cf703f43e8431b325136
SHA512 d0f96f62c5218e191c08d612884bd8f03b93161b001e4d8d4c586ded2bda2578219891e8cec5519e0c0045eb4ea21d6a21d53a857b691ff249d0c654fac7d916

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d3db469666f643a9ef5111d1d92acc25
SHA1 3a225b39290b45baa37cf573c6029c0714215f6a
SHA256 283d2e42275eb663e233096828e2bac57920035bf8177e43c81cbc4269510d69
SHA512 1c9762b6a755d2f05d505b2c05aac67bc314a5437401ae7dc7ce741e1f0df1be66557622ed8380ef6bf63337c229bccdec082f6a0035d7fba04b98dbf775d104

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\AD4B9C59B7D660B075AE740F1C40F90B39D33A6A

MD5 408568b91716c7818b58fa9f7d585d36
SHA1 aa8fa2dc0774e3abef7492a4e63eccbd670babb7
SHA256 af485da3ca3a8c5e78a4a69563407554aa0ac7c27732e899199919f8a9e8029c
SHA512 ab819c68bd6b1c32e74c0dc7bbe54018a162b98ef24c3f35bc69d94b4b38b40d62e6d7411a965622bcd3bd793a4dc7dd83141fb8677f04a3c371fb29354c0633

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b612af052f04d8b2c69f784e2f6b9b12
SHA1 c67da026245950dc95fb57b516401cf9c83b94d3
SHA256 26e0a26d4409339e01f7cac35c964b6c36c41397807172ad3eef61a9d90bd73c
SHA512 d98e95be7642c4cf44fa5b486956229fc1a64a49c6d7d1f47a36eba354f02cfe295bf78b936c37f7496e69c428fb638b95a4d602cb23c5aef0b3eb5d5a463843

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 eea59955ac499c290ccb3c71dd18a913
SHA1 48de1a41fd3026acb960f6ea76c0549daa523f4f
SHA256 38b4cfdc3115e3950f4edd64d5756a6c34c08d46a31752bc9f63d5ff30817438
SHA512 b777a645da00a9eb71225745ab2bfb0b245c721a8e626321e5294b90685b26d531fa11ec3b414d6d5c9060a8550cd6e4ca0559bdc6e21991274039ff5f9c8a02

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\871FE35E6B5F0AAC2F3FBA14825EC09FE4224C5A

MD5 5acf41d18ac18f9c6df7e2537425c651
SHA1 a1ba77fad79166c527df7b4e1fd778c727262b5e
SHA256 4994a7c93d871476baff0e8865087c13c530da6363d8248f45294242f307b3ad
SHA512 1b1a5ffb82a7080c9491886eb50041195cb29358e93cb209973631750810d9808e304ed050cd87c9752df70cc9197e72f765be2eebf09cad6332cb4fd30f87fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7e5d440bba79c64b2aaedb449c822fcf
SHA1 84b7abc7925af90c0a278c9c5c765a5312cdba88
SHA256 b3263fe1a22c685213451c65c55d6378c37d6af848e48845ff4db8f3f16fe25a
SHA512 47923586bc60d85bb29dfcd90dd10aac8877b16072cd33713e3d200426f7f8dc774ae766fa6f8a9a998d8b14e0395c5d6aad6420d44fc3d01f46e54c7f2690bb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1A97325089FDE5BB3DCF24DD38ACB261D2919759

MD5 99b1617df111a1ccec9261c9a20f2c06
SHA1 c77b73597ff7cb048bc730082cc3905fdd5186ca
SHA256 a4415cd2654a67682a24d26d1d5259ec227e09c4bf8bb69154f75c124bcc08cd
SHA512 cb134fb19efc550d1a5d04668d7c7ba244bcbb5474d48bfce3460a17dad52c3008221c582219e7ce1a0b529db0aca9c0803f887ae40d0d1bbfd92603dd553648

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\87EF3D14F470A181392980C87E93467E1FF1998F

MD5 5a83ef683a2dbebc7340802f10c38b20
SHA1 f9933cb9c8fee03a7847da92d33dc322ca58e201
SHA256 bff44809fbe73716e1e4ce5111833af4a9fff3bdae44f10039f1a65a2b1abf02
SHA512 5e150fc98b74121aa0c5a44bbae456da757bffcb19c4780be4d514918482a611325cf8199e96185bda460312c95f9bc1e9409ee4183b605c7d11bedb9e6ee156

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 686ea98ae3eb99720c1927548d98b1b8
SHA1 9c71564cb870ee1a49a84c6a9d3222879ac4186b
SHA256 d1493e8a48b55b3bff8f36cc07942239e8aa188b18fc312a2064e7ce38054795
SHA512 d0ad844ecd50fbce31237639f1914646a381ced63d47f236b107c886705ff040e956afd75db381f790af3317c50eac371fa2a00c922fb9f54ac7b9f6df0b6563

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3e4dcff709f4aab1667602b9f3632c01
SHA1 8ffc4aeb9788dd5865aae9971ee90550b1307f42
SHA256 fd08a96f6645454ca9d2c493465ecb4e09465b545cb5f2c74155978eed9af2f0
SHA512 f8e87ff7ce1ee71d587f6dc5e1787a8911d8c871369331ca3aa00e925d6bcf004e663ecc75c7596aa43375855753bd4a84029971ad308d7baf149fb964df6783

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d6d76cac5e9c4ba2e025b7141eb8aee5
SHA1 92badb902cb0c0f864040dbd04e11eeba7c2e492
SHA256 35caa213003a0cbcbbbafd531ab195421c563c0d8afff8def7a8359fde2b1266
SHA512 85a0550996cdf8e7154b27fee13cf0401e157a4b32ad49a8129d9254088e3c2bceb6b0f944e3b60840c6b984acc1236300844a779ad7f02ab1c1ac05d2b49d33

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6bdfc91fd738e10905eac9df7438b722
SHA1 b41883e2db205bc60ae68b4fb21b9f333a7bf9ae
SHA256 5a1550a2ef5d814bc5ae0a0dadebc2156bc854a16efb863f74de64998a60f8a5
SHA512 87ac71155cec0d3f782b61541e080de2e32e1ce01f7ac45ab42920f3add582127d9a42cd073234f376b65120694acc59dee979117652070a67d8afb28cc72bd0