Malware Analysis Report

2024-08-06 18:11

Sample ID 240702-wajdvaxhqn
Target UnamBinder.exe
SHA256 a90ba5a56422c0d2a41f28da056affd69cc8929e14dcdab1583ec96b50b8e28d
Tags
xenorat rat trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a90ba5a56422c0d2a41f28da056affd69cc8929e14dcdab1583ec96b50b8e28d

Threat Level: Known bad

The file UnamBinder.exe was found to be: Known bad.

Malicious Activity Summary

xenorat rat trojan

XenorRat

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

Drops file in Windows directory

Unsigned PE

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Checks SCSI registry key(s)

Modifies registry class

NTFS ADS

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Scheduled Task/Job: Scheduled Task

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Uses Task Scheduler COM API

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Scheduled Task/Job
T1053
Scheduled Task
T1053.005
Persistence
TA0003
Scheduled Task/Job
T1053
Scheduled Task
T1053.005
Privilege Escalation
TA0004
Scheduled Task/Job
T1053
Scheduled Task
T1053.005
Defense Evasion
TA0005
Credential Access
TA0006
Discovery
TA0007
System Information Discovery
T1082
Query Registry
T1012
Peripheral Device Discovery
T1120
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-07-02 17:43

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-02 17:43

Reported

2024-07-02 17:50

Platform

win10-20240404-en

Max time kernel

451s

Max time network

455s

Command Line

"C:\Users\Admin\AppData\Local\Temp\UnamBinder.exe"

Signatures

XenorRat

trojan rat xenorat

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Loader_1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\loader.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\loader_2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\loader.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\1601268389\715946058.pri C:\Windows\system32\taskmgr.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
File created C:\Windows\rescache\_merged\4183903823\2290032291.pri C:\Windows\system32\taskmgr.exe N/A
File created C:\Windows\rescache\_merged\1601268389\715946058.pri C:\Windows\system32\taskmgr.exe N/A
File created C:\Windows\rescache\_merged\4183903823\2290032291.pri C:\Windows\system32\taskmgr.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:PID = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\1\0\0 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\MRUListEx = ffffffff C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Pictures" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\1\0\0\0\NodeSlot = "5" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239} C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\1\0\0 = 4e00310000000000e258ae8d100054656d7000003a0009000400efbe84580962e258ae8d2e000000b4520100000001000000000000000000000000000000e84eee00540065006d007000000014000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2 = 3a002e803accbfb42cdb4c42b0297fe99a87c641260001002600efbe11000000ac7c83e48986da01dad59d69a7ccda01dad59d69a7ccda0114000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1092616257" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell\KnownFolderDerivedFolderType = "{57807898-8C4F-4462-BB63-71042380B109}" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupView = "0" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByDirection = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\1 = 56003100000000008458096212004170704461746100400009000400efbe84580962845809622e000000a0520100000001000000000000000000000000000000420ff5004100700070004400610074006100000016000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\1\0\0\0\MRUListEx = ffffffff C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000050000001800000030f125b7ef471a10a5f102608c9eebac0a000000a0000000b474dbf787420341afbaf1b13dcd75cf64000000a000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000e0859ff2f94f6810ab9108002b27b3d90500000058000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Mode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1092616257" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\NodeSlot = "6" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239} C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\MRUListEx = 0100000000000000ffffffff C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6 C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\test.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\UnamBinder.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\round-account-button-with-user-inside_icon-icons.com_72596.ico:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Scheduled Task/Job: Scheduled Task

persistence execution
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: 33 N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: 33 N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\loader.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\Desktop\Loader_1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3244 wrote to memory of 5016 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 168 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 168 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 588 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 1092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 1092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 5016 wrote to memory of 1092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\UnamBinder.exe

"C:\Users\Admin\AppData\Local\Temp\UnamBinder.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.0.1838162982\1795832661" -parentBuildID 20221007134813 -prefsHandle 1720 -prefMapHandle 1712 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {35a50188-d474-4caa-8da7-03cf3f31117d} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 1796 2a1b75d8758 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.1.696269283\343156494" -parentBuildID 20221007134813 -prefsHandle 2140 -prefMapHandle 2136 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a2d0b344-4d70-4314-95de-778e30e91630} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 2152 2a1b750a258 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.2.67585702\1664086506" -childID 1 -isForBrowser -prefsHandle 2816 -prefMapHandle 2740 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d532797-a832-4648-bbb1-6cd58ff211c9} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 2732 2a1bb896558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.3.165165061\951042620" -childID 2 -isForBrowser -prefsHandle 3464 -prefMapHandle 3460 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5ccb82a7-dfb9-469d-91c8-f19267c46078} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 3476 2a1a5261358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.4.1932248121\1358595445" -childID 3 -isForBrowser -prefsHandle 4360 -prefMapHandle 4356 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a76fb5b7-10d8-45c4-a4cf-b2ebe4101e93} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4372 2a1bca1f658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.5.2011694752\1206954287" -childID 4 -isForBrowser -prefsHandle 4900 -prefMapHandle 4908 -prefsLen 26247 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9903cfb9-ca51-4992-8971-dc4632bc12e2} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4920 2a1a5230e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.6.150657535\210659595" -childID 5 -isForBrowser -prefsHandle 4972 -prefMapHandle 4976 -prefsLen 26247 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e1d8aa04-9f46-4486-a5b9-acf0ecedb3a5} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4964 2a1bca16a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.7.206663357\456081720" -childID 6 -isForBrowser -prefsHandle 5260 -prefMapHandle 5256 -prefsLen 26247 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {23f18998-8357-4c89-923d-5952b0132e6f} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5268 2a1bdbf8158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.8.1977277785\660893687" -childID 7 -isForBrowser -prefsHandle 2688 -prefMapHandle 2872 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {51596aa8-d640-4e4b-98cc-6430f3f8f563} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5408 2a1bb9aae58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.9.545846688\1997309539" -childID 8 -isForBrowser -prefsHandle 9440 -prefMapHandle 9556 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bdc4712c-0068-4080-abd9-4d90a53424b3} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 7044 2a1c03f5658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.10.860275604\487708463" -childID 9 -isForBrowser -prefsHandle 9408 -prefMapHandle 9404 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6ab09788-ddcb-4c8e-9167-aa3fec4f22ba} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6908 2a1c03f6258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.11.92138038\1677625479" -parentBuildID 20221007134813 -prefsHandle 6796 -prefMapHandle 9272 -prefsLen 26543 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6fd66f86-2761-4eee-846f-aeb902cf5d66} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9264 2a1b9f3b558 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.12.123121136\2129699214" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 6596 -prefMapHandle 9316 -prefsLen 26543 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {681f9b56-e120-42ae-a72f-2f049de0f15d} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9232 2a1b9f7d858 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.13.1979517338\507238854" -childID 10 -isForBrowser -prefsHandle 8896 -prefMapHandle 8892 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7184c55-1d3b-4368-abc3-5a7bc62b66df} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8844 2a1c1c0f658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.14.815218169\2015178511" -childID 11 -isForBrowser -prefsHandle 5184 -prefMapHandle 8976 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4489c766-706b-42f0-902d-65624798608d} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6212 2a1bfc2be58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.15.1710483095\888493008" -childID 12 -isForBrowser -prefsHandle 9368 -prefMapHandle 9364 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {66ae34bd-a3f1-4751-89a2-ebc6b4acf77f} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6616 2a1c1bd0d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.16.1042109571\531253065" -childID 13 -isForBrowser -prefsHandle 9380 -prefMapHandle 9376 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {902f55e3-622e-48a1-9402-6a8a341f6858} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5216 2a1c1bcfe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.17.1464702812\331521527" -childID 14 -isForBrowser -prefsHandle 6632 -prefMapHandle 6628 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b235354a-10f9-42dc-8776-ed2742997cf2} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6048 2a1bfcbc658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.18.329375247\819980230" -childID 15 -isForBrowser -prefsHandle 8636 -prefMapHandle 8632 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {550ec94f-49eb-487e-85c6-93eb9f452112} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8996 2a1c0114d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.19.1728269845\1316165163" -childID 16 -isForBrowser -prefsHandle 9644 -prefMapHandle 9648 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {530e5734-6108-4154-95b4-58686a7ac435} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9632 2a1c23e9858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.20.1372819129\694991526" -childID 17 -isForBrowser -prefsHandle 9836 -prefMapHandle 3772 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c2cad6d1-d79d-46fb-99e4-2185d572150b} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8496 2a1c251af58 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.21.398382183\1779267429" -childID 18 -isForBrowser -prefsHandle 9324 -prefMapHandle 9856 -prefsLen 26543 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ffd9d832-b8b4-47c9-b274-bc58b0abe8a0} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9992 2a1bca1f358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.22.763732081\99579206" -childID 19 -isForBrowser -prefsHandle 9464 -prefMapHandle 9468 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d30e22fd-20ca-4dd6-9fce-9e65f78b2235} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10188 2a1bf1a9358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.23.1574037602\909209212" -childID 20 -isForBrowser -prefsHandle 9476 -prefMapHandle 9880 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7de050d3-8162-4e3b-84a0-05de627e9ecb} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8580 2a1a525cd58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.24.632185184\264114516" -childID 21 -isForBrowser -prefsHandle 8260 -prefMapHandle 8252 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec07bbde-0202-4b9a-8615-a09b9a96d4fa} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8268 2a1b8fb8658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.25.807661621\812148679" -childID 22 -isForBrowser -prefsHandle 8236 -prefMapHandle 5900 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc13aa24-8ac6-4615-927a-8998e978271a} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8436 2a1b8fb6b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.26.983100067\644491881" -childID 23 -isForBrowser -prefsHandle 7972 -prefMapHandle 7976 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {128795eb-d7ea-4c45-bddd-eb7303b7dbd3} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8056 2a1b9038e58 tab

C:\Users\Admin\Desktop\loader.exe

"C:\Users\Admin\Desktop\loader.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.27.882602541\981819773" -childID 24 -isForBrowser -prefsHandle 9032 -prefMapHandle 9048 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b52abb4-8185-4da4-8048-814238aa97ba} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9044 2a1bfe37258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.28.1338222148\1204230226" -childID 25 -isForBrowser -prefsHandle 4912 -prefMapHandle 4636 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b4f9c34f-e5ce-45ea-be4c-08c468b156b7} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4940 2a1ba816b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.29.187300896\1606128345" -childID 26 -isForBrowser -prefsHandle 4912 -prefMapHandle 4636 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0bcc76a6-ceef-42e2-91cf-e38aaf8883ad} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8720 2a1c0948758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.30.1950018786\74141107" -childID 27 -isForBrowser -prefsHandle 8416 -prefMapHandle 5480 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {acb7b185-cad7-44fc-a74d-10dfa46e507b} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 7020 2a1c133c258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.31.280892925\1892710114" -childID 28 -isForBrowser -prefsHandle 3964 -prefMapHandle 7044 -prefsLen 26808 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {52227cb9-c57e-4926-adf2-dee61ed2b985} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8140 2a1bf858a58 tab

C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_UnamBinder.zip\UnamBinder.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.32.1565190973\1275359228" -childID 29 -isForBrowser -prefsHandle 8180 -prefMapHandle 8704 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2892ce22-50e4-490e-bc43-a66078617e3c} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4800 2a1ba7ec058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.33.945154002\480026950" -childID 30 -isForBrowser -prefsHandle 4724 -prefMapHandle 6648 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4fe88b60-f19d-4b77-ae88-8cb235ca2e81} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4672 2a1bfd65958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.34.1359844402\1574616624" -childID 31 -isForBrowser -prefsHandle 8616 -prefMapHandle 8456 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ab2d5d4-d599-4402-a034-523288623ab2} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4184 2a1c209fe58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.35.1579562337\1690395764" -childID 32 -isForBrowser -prefsHandle 9108 -prefMapHandle 4400 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f7f7562-4884-4976-971b-220527a03954} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5612 2a1c23ead58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.36.1118111800\144406758" -childID 33 -isForBrowser -prefsHandle 520 -prefMapHandle 8828 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {39623d15-2aec-4a51-88a4-1d224834a5dd} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5948 2a1c1fbce58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.37.374354031\1324939844" -childID 34 -isForBrowser -prefsHandle 5792 -prefMapHandle 5420 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e3ef152d-b23b-4bf8-8b83-13b642aa77fd} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4908 2a1c2514d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.38.319368769\1351095061" -childID 35 -isForBrowser -prefsHandle 6852 -prefMapHandle 6868 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6e8416e9-37d2-4aee-ac06-c160ff382a36} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8748 2a1c251a058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.39.1315605207\708244555" -childID 36 -isForBrowser -prefsHandle 8600 -prefMapHandle 8232 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bdd2657f-dd2c-4f1b-81b4-f60ce3297ef6} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9756 2a1c25d8858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.40.1907353845\562556415" -childID 37 -isForBrowser -prefsHandle 6884 -prefMapHandle 6996 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8ae9a97a-619e-4e23-a18d-f03c5f8dfdeb} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9508 2a1b8edd258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.41.278708948\1261947593" -childID 38 -isForBrowser -prefsHandle 6848 -prefMapHandle 6872 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ff3a46a9-d76d-4e14-9748-42aef4903e36} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6824 2a1bc2b7e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.42.1207787495\961776359" -childID 39 -isForBrowser -prefsHandle 4524 -prefMapHandle 5892 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1ead3e89-a31f-42b3-8db6-0482a561f1f5} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8660 2a1c3414e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.43.1610286291\601052168" -childID 40 -isForBrowser -prefsHandle 8184 -prefMapHandle 8212 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {66a8c4d1-5ee5-4a4a-b286-41409b474ff2} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4352 2a1c222f358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.44.810288708\52838491" -childID 41 -isForBrowser -prefsHandle 5488 -prefMapHandle 5424 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cec3adac-315e-4c65-99a6-014a99253cb7} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8280 2a1c4f07b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.45.241457706\1531685254" -childID 42 -isForBrowser -prefsHandle 1672 -prefMapHandle 5340 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {44b670d0-1022-425d-bb52-c1531dd2f14b} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5848 2a1c5058658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.46.51370559\1037045448" -childID 43 -isForBrowser -prefsHandle 7788 -prefMapHandle 4684 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e23c3af1-4215-43e6-bfa6-1711d5a6673d} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10164 2a1bfc2b558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.47.1822286750\531534084" -childID 44 -isForBrowser -prefsHandle 5904 -prefMapHandle 7972 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a7c5b33-ea89-43db-ae4b-0f1552cec6ac} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8644 2a1c5ae0e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.48.518945054\189337961" -childID 45 -isForBrowser -prefsHandle 4696 -prefMapHandle 4360 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1fd7460-3687-40ce-a19b-10b6da0d28cb} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 3200 2a1bc1be858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.49.16355882\1995347108" -childID 46 -isForBrowser -prefsHandle 6044 -prefMapHandle 9108 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c43c4e1-9fb2-47ee-80ed-3a09fae10998} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9076 2a1bc1bf758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.50.763192773\1360849900" -childID 47 -isForBrowser -prefsHandle 5496 -prefMapHandle 7504 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9080ca92-f12a-4c9d-84a9-42164cf0d131} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10096 2a1c5885258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.51.723355659\471092365" -childID 48 -isForBrowser -prefsHandle 7208 -prefMapHandle 7204 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b167ec8-b16c-460b-9483-f9dad2aa5c99} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 3324 2a1c5886758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.52.568133187\440404341" -childID 49 -isForBrowser -prefsHandle 4900 -prefMapHandle 5924 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {df38c4f9-3710-43b8-ba27-9456677a5aa9} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 3776 2a1c6578b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.53.381015259\1907306147" -childID 50 -isForBrowser -prefsHandle 7604 -prefMapHandle 8440 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc6b90db-68a4-42cf-bbbf-d207b4e9f71f} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 7612 2a1c657bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.54.1789145654\892678563" -childID 51 -isForBrowser -prefsHandle 8400 -prefMapHandle 9748 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8e603b1d-648c-4f39-b2a0-c63f16990ad4} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 7404 2a1c642be58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.55.826446531\309499563" -childID 52 -isForBrowser -prefsHandle 4696 -prefMapHandle 4676 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {68ef44bc-8892-4bfe-b8e3-09f076eefa2a} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9772 2a1c5fce258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.56.1802729837\60840047" -childID 53 -isForBrowser -prefsHandle 3788 -prefMapHandle 7404 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d98124e0-fba3-4f64-a00f-db92b8d3ce32} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 7312 2a1bfc18b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.57.1485060622\787553454" -childID 54 -isForBrowser -prefsHandle 10972 -prefMapHandle 7308 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {979cb178-ff23-4c9e-8e87-a939df4874f6} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 11012 2a1c6a24258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.58.1305816979\646342641" -childID 55 -isForBrowser -prefsHandle 11196 -prefMapHandle 11200 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab5a4527-6265-4a74-8a04-9a28e9850500} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 11188 2a1c6a21858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.59.2003859119\593989843" -childID 56 -isForBrowser -prefsHandle 10724 -prefMapHandle 6756 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e256c867-bb96-4ef3-9bf2-42d27124b6ed} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9736 2a1c5d54258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.60.1761390969\2084813918" -childID 57 -isForBrowser -prefsHandle 11452 -prefMapHandle 11456 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {658c8c9c-8b02-4ba2-892a-a0c05503cda6} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10884 2a1c69d9358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.61.1678288347\1525819538" -childID 58 -isForBrowser -prefsHandle 10660 -prefMapHandle 7364 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {47bde4b5-bd0c-4399-9dcb-3e39ddff0534} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 11044 2a1c7690d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.62.278737123\1399447610" -childID 59 -isForBrowser -prefsHandle 11696 -prefMapHandle 11700 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {28b8f641-9b36-4093-8f6c-8d03fe8610c2} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 11584 2a1c6818358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.63.1282435806\1683640304" -childID 60 -isForBrowser -prefsHandle 5060 -prefMapHandle 2872 -prefsLen 26817 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a43b25ec-bbdb-48b3-91ef-c6c148f66b78} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4612 2a1b9038258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.64.1472883440\111116022" -childID 61 -isForBrowser -prefsHandle 6828 -prefMapHandle 9444 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {98a6eac6-fa7a-43f0-920e-b83976bdb265} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 4704 2a1c2513258 tab

C:\Windows\system32\cmd.exe

"cmd" cmd /c "C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe" --input resource.rc --output resource.o -O coff -F pe-i386 -DDefIcon

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe --input resource.rc --output resource.o -O coff -F pe-i386 -DDefIcon

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c "C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc" -E -xc -DRC_INVOKED -DDefIcon resource.rc

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc -E -xc -DRC_INVOKED -DDefIcon resource.rc

C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe

"C:/Users/Admin/Desktop/Compilers/MinGW64/bin/../libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe" "-E" "-quiet" "-iprefix" "C:/Users/Admin/Desktop/Compilers/MinGW64/bin/../lib/gcc/x86_64-w64-mingw32/4.9.2/" "-D_REENTRANT" "-D" "RC_INVOKED" "-D" "DefIcon" "resource.rc" "-mtune=generic" "-march=x86-64"

C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe

"C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe" -Wall -Wl,-subsystem=windows "C:\Users\Admin\Desktop\Loader_1.c" resource.o -luser32 -lshell32 -m32

C:\Users\Admin\Desktop\Loader_1.exe

"C:\Users\Admin\Desktop\Loader_1.exe"

C:\Users\Admin\AppData\Local\loader.exe

"C:\Users\Admin\AppData\Local\loader.exe"

C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe

"C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe"

C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe

"C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe"

C:\Windows\SysWOW64\schtasks.exe

"schtasks.exe" /Create /TN "SteamUDPUpdater" /XML "C:\Users\Admin\AppData\Local\Temp\tmp3446.tmp" /F

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.65.189357483\523768719" -childID 62 -isForBrowser -prefsHandle 7792 -prefMapHandle 7572 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {20227e35-43aa-428d-91cc-cc31c0e1288a} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 6716 2a1bfd97e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.66.1286323004\1379254862" -childID 63 -isForBrowser -prefsHandle 7356 -prefMapHandle 11696 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fce7285a-be96-4477-880b-037c3090d864} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 9640 2a1c2e70e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.67.1891391859\500275607" -childID 64 -isForBrowser -prefsHandle 5348 -prefMapHandle 8664 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c91c9567-a26d-4317-a7bc-7a60509f07f9} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 5116 2a1c5059258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.68.11069861\1683018132" -childID 65 -isForBrowser -prefsHandle 5024 -prefMapHandle 4996 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d1a78ce-bcc2-43f5-bf98-f55ed3b1d63c} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 11392 2a1c2b74858 tab

C:\Windows\system32\cmd.exe

"cmd" cmd /c "C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe" --input resource.rc --output resource.o -O coff -F pe-i386 -DDefIcon

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe --input resource.rc --output resource.o -O coff -F pe-i386 -DDefIcon

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c "C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc" -E -xc -DRC_INVOKED -DDefIcon resource.rc

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc -E -xc -DRC_INVOKED -DDefIcon resource.rc

C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe

"C:/Users/Admin/Desktop/Compilers/MinGW64/bin/../libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe" "-E" "-quiet" "-iprefix" "C:/Users/Admin/Desktop/Compilers/MinGW64/bin/../lib/gcc/x86_64-w64-mingw32/4.9.2/" "-D_REENTRANT" "-D" "RC_INVOKED" "-D" "DefIcon" "resource.rc" "-mtune=generic" "-march=x86-64"

C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe

"C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe" -Wall -Wl,-subsystem=windows "C:\Users\Admin\Desktop\loader_2.c" resource.o -luser32 -lshell32 -m32

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Users\Admin\Desktop\loader_2.exe

"C:\Users\Admin\Desktop\loader_2.exe"

C:\Users\Admin\AppData\Local\loader.exe

"C:\Users\Admin\AppData\Local\loader.exe"

C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe

"C:\Users\Admin\AppData\Local\SteamUDPUpdater.exe"

C:\Windows\SysWOW64\schtasks.exe

"schtasks.exe" /Create /TN "SteamUDPUpdater" /XML "C:\Users\Admin\AppData\Local\Temp\tmp9F5.tmp" /F

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.69.1707596399\155277696" -childID 66 -isForBrowser -prefsHandle 11220 -prefMapHandle 9792 -prefsLen 26826 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dd80558d-df98-4c7e-8a55-2aae297138b8} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10980 2a1c01ed258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.70.1252465738\1021802334" -childID 67 -isForBrowser -prefsHandle 12028 -prefMapHandle 12036 -prefsLen 26835 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ae07cf4b-6a43-449b-8207-5c7bfe6e4a73} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 10016 2a1c6f36a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.71.1113500881\614158768" -childID 68 -isForBrowser -prefsHandle 11996 -prefMapHandle 11220 -prefsLen 26835 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf877a2-9325-41fe-98c1-c1a323b0dc45} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 12196 2a1c2b05358 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.72.1788067162\1726062424" -childID 69 -isForBrowser -prefsHandle 12344 -prefMapHandle 12340 -prefsLen 26835 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {86cc7327-9c1e-4c4f-bd48-0a3cc0e010d4} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 8764 2a1cdc6a758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5016.73.1935244633\753826418" -childID 70 -isForBrowser -prefsHandle 11984 -prefMapHandle 12052 -prefsLen 26835 -prefMapSize 233444 -jsInitHandle 1288 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {921ea374-9631-471d-84f7-90393d78ca8d} 5016 "\\.\pipe\gecko-crash-server-pipe.5016" 12208 2a1cd62d858 tab

Network

Country Destination Domain Proto
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 44.241.14.171:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:49773 tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 171.14.241.44.in-addr.arpa udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
N/A 127.0.0.1:49779 tcp
US 8.8.8.8:53 gg.gg udp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
US 8.8.8.8:53 gg.gg udp
US 8.8.8.8:53 gg.gg udp
US 8.8.8.8:53 31.42.215.91.in-addr.arpa udp
US 8.8.8.8:53 file.io udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 file.io udp
US 8.8.8.8:53 24.107.55.45.in-addr.arpa udp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.117:443 www.file.io tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 hb.vntsm.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 vmhb.b-cdn.net udp
US 8.8.8.8:53 vmhb.b-cdn.net udp
US 8.8.8.8:53 117.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 hb.vntsm.io udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 151.101.193.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 172.67.36.131:443 hb.vntsm.io tcp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 analytics.google.com udp
GB 142.250.187.206:443 analytics.google.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 131.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
GB 142.250.187.206:443 analytics.google.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 45.55.107.24:443 file.io tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.exelator.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
GB 143.204.176.91:443 dfh8hwrwbxm35.cloudfront.net tcp
GB 13.224.223.9:443 d1ykf07e75w7ss.cloudfront.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
US 8.8.8.8:53 mydmp.exelator.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 load-euw1.exelator.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 load-euw1.exelator.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 cdn.hadronid.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 91.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 3.143.254.34.in-addr.arpa udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 load77.exelator.com udp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
GB 142.250.187.238:443 www3.l.google.com udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
US 104.22.52.173:443 cdn.hadronid.net tcp
GB 52.84.90.126:443 config.aps.amazon-adsystem.com tcp
GB 23.53.174.156:443 e4536.g.akamaiedge.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 23.53.174.156:443 e4536.g.akamaiedge.net tcp
GB 195.181.164.14:443 load77.exelator.com tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 104.22.4.69:443 a.ad.gt.cdn.cloudflare.net tcp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 34.230.174.228:443 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
NL 63.215.202.146:443 proc.ad.cpe.dotomi.com tcp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 14.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 126.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 228.174.230.34.in-addr.arpa udp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 a.ad.gt udp
US 172.67.23.234:443 a.ad.gt tcp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
DE 162.19.138.83:443 id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 146.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.18.22.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
GB 18.244.138.116:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 49.69.95.34.in-addr.arpa udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 34.120.111.33:443 cdn.edkt.io tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 cdn.edkt.io udp
NL 145.40.97.66:443 prebid.a-mo.net tcp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 104.18.43.178:443 elb.the-ozone-project.com tcp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 script.4dex.io udp
IE 52.215.105.210:443 track.venatusmedia.com tcp
US 34.95.69.49:443 i.clean.gg udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 hb-api-fra02.omnitagjs.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
IE 108.128.131.144:443 track.venatusmedia.com tcp
US 34.120.111.33:443 cdn.edkt.io udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 104.26.9.169:443 script.4dex.io tcp
US 69.166.1.32:443 iad-2-apex.go.sonobi.com tcp
DE 18.157.230.4:443 eu-tlx.3lift.com tcp
NL 185.89.210.46:443 ib.anycast.adnxs.com tcp
FR 185.255.84.151:443 hb-api-fra02.omnitagjs.com tcp
NL 89.149.192.193:443 euw1.smartadserver.com tcp
NL 89.149.192.193:443 euw1.smartadserver.com tcp
DE 3.77.59.68:443 btlr.sharethrough.com tcp
DE 3.77.59.68:443 btlr.sharethrough.com tcp
DE 3.77.59.68:443 btlr.sharethrough.com tcp
DE 3.77.59.68:443 btlr.sharethrough.com tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
US 8.8.8.8:53 116.138.244.18.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 178.43.18.104.in-addr.arpa udp
US 8.8.8.8:53 66.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 144.131.128.108.in-addr.arpa udp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 193.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 68.59.77.3.in-addr.arpa udp
US 8.8.8.8:53 32.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 da53decba8032103940fa244179c39e3.safeframe.googlesyndication.com udp
US 8.8.8.8:53 tg1.aniview.com udp
GB 172.217.169.65:443 da53decba8032103940fa244179c39e3.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
SE 23.34.233.243:443 e11385.dscd.akamaiedge.net tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.169.65:443 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 track4.aniview.com udp
US 8.8.8.8:53 feed.avplayer.com udp
US 8.8.8.8:53 player.avplayer.com udp
US 172.240.45.75:443 track4.aniview.com tcp
US 8.8.8.8:53 track-sc-main-was.aniview.com udp
SE 2.21.96.67:443 feed.avplayer.com tcp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
GB 2.20.12.106:443 a1970.dscd.akamai.net tcp
US 8.8.8.8:53 track-sc-main-was.aniview.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 243.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 67.96.21.2.in-addr.arpa udp
US 8.8.8.8:53 106.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 75.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 cdn1.vntsm.com udp
US 172.240.45.75:443 track-sc-main-was.aniview.com udp
FR 143.244.56.50:443 cdn1.vntsm.com tcp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 content1.avplayer.com udp
SE 23.34.233.243:443 play.aniview.com tcp
GB 2.20.12.70:443 content1.avplayer.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 50.56.244.143.in-addr.arpa udp
US 8.8.8.8:53 70.12.20.2.in-addr.arpa udp
GB 2.20.12.70:443 player.aniview.com tcp
GB 2.20.12.70:443 player.aniview.com udp
US 8.8.8.8:53 go1.aniview.com udp
US 172.240.45.81:443 go1.aniview.com tcp
US 8.8.8.8:53 go1-sc-main-was.aniview.com udp
US 8.8.8.8:53 go1-sc-main-was.aniview.com udp
US 8.8.8.8:53 81.45.240.172.in-addr.arpa udp
US 172.240.45.81:443 go1-sc-main-was.aniview.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 ssp.disqus.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 cs.krushmedia.com udp
SE 23.34.232.193:443 ads.pubmatic.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
BE 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 18.209.191.158:443 ssp.disqus.com tcp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 secure.adnxs.com udp
IE 52.18.124.61:443 ap.lijit.com tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 sync.1rx.io udp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 8.2.110.134:443 cs.krushmedia.com tcp
US 8.8.8.8:53 optimized-by.rubiconproject.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 gum.criteo.com udp
DE 51.89.9.251:443 onetag-sys.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 35.244.159.8:443 u.openx.net tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 3.124.14.58:443 optimized-by.rubiconproject.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 216.200.232.249:443 sync.mathtag.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 zeta-ssp-385516103.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 54.221.116.2:443 sync.srv.stackadapt.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 zeta-ssp-385516103.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 sync.aniview.com udp
US 8.8.8.8:53 cs.krushmedia.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 sync.adkernel.com udp
SE 23.34.233.229:443 eus.rubiconproject.com tcp
US 34.120.133.55:443 api.rlcdn.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 cs.krushmedia.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 35.244.159.8:443 u.openx.net udp
US 35.244.193.51:443 lexicon.33across.com udp
US 172.240.45.78:443 sync.aniview.com tcp
DE 51.89.9.251:443 onetag-sys.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 u.openx.net udp
US 172.240.45.78:443 sync.aniview.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 61.124.18.52.in-addr.arpa udp
US 8.8.8.8:53 193.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 158.191.209.18.in-addr.arpa udp
US 8.8.8.8:53 251.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 134.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 58.14.124.3.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 2.116.221.54.in-addr.arpa udp
US 8.8.8.8:53 229.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 videoproxyservervip-2125505963.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 sync.1rx.io udp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 172.240.45.78:443 sync.aniview.com udp
DE 3.127.95.65:443 match.sharethrough.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 videoproxyservervip-2125505963.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
FR 178.32.210.231:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
US 104.18.36.155:443 ssum.casalemedia.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 match.adsrvr.org udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 65.95.127.3.in-addr.arpa udp
US 8.8.8.8:53 231.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 creativecdn.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 104.18.36.155:443 ssum.casalemedia.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 a-emea.rfihub.com.akadns.net udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 a-emea.rfihub.com.akadns.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 sync-sc-main-was.aniview.com udp
US 8.8.8.8:53 sync-sc-main-was.aniview.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 35.172.88.6:443 qvdt3feo.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 1.cpm.ak-is2.net udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 1.cpm.ak-is2.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
GB 142.250.187.202:443 imasdk.googleapis.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 66.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.88.172.35.in-addr.arpa udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 172.240.45.76:443 track1.avplayer.com tcp
US 8.8.8.8:53 track-sc-main-was.avplayer.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 track-sc-main-was.avplayer.com udp
US 172.240.45.76:443 track-sc-main-was.avplayer.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 76.45.240.172.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 142.250.107.94:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 142.250.107.94:443 csi.gstatic.com udp
SE 23.34.232.19:443 hbx.media.net tcp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 94.107.250.142.in-addr.arpa udp
US 8.8.8.8:53 hbx.media.net udp
SE 23.34.232.19:443 hbx.media.net udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 id.rlcdn.com udp
GB 18.164.68.117:443 api-2-0.spot.im tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 gum.aidemsrv.com udp
FR 149.202.238.100:443 ssbsync-global.smartadserver.com tcp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 dorpat.geo.iponweb.net udp
US 8.8.8.8:53 id.rlcdn.com udp
US 23.22.65.221:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 id.rlcdn.com udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 104.17.44.93:443 gum.aidemsrv.com udp
US 8.8.8.8:53 dorpat.geo.iponweb.net udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.31.82.199:443 match.prod.bidr.io tcp
US 50.31.142.191:443 b1sync.zemanta.com tcp
GB 185.64.191.214:443 imagsync-lhrpairbc.pubmatic.com tcp
US 50.31.142.191:443 b1sync.zemanta.com tcp
US 54.221.116.2:443 sync.srv.stackadapt.com tcp
IE 52.16.250.162:443 jadserve.postrelease.com.akadns.net tcp
NL 35.214.199.88:443 dorpat.geo.iponweb.net tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.68:443 bttrack.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
SE 23.34.233.229:443 e8960.b.akamaiedge.net tcp
NL 35.214.199.88:443 dorpat.geo.iponweb.net udp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 rtb.openx.net udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 117.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 100.238.202.149.in-addr.arpa udp
US 8.8.8.8:53 93.44.17.104.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 221.65.22.23.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 199.82.31.52.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 162.250.16.52.in-addr.arpa udp
US 8.8.8.8:53 191.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 68.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 ssp-sync.criteo.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.5.84:443 cm.adform.net tcp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 84.5.157.37.in-addr.arpa udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 185.89.210.46:443 ib.anycast.adnxs.com tcp
NL 89.149.192.193:443 euw1.smartadserver.com tcp
US 69.166.1.32:443 iad-2-apex.go.sonobi.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 optimized-by.rubiconproject.com udp
US 8.8.8.8:53 videoproxyservervip-2125505963.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 videoproxyservervip-2125505963.eu-central-1.elb.amazonaws.com udp
NL 89.149.192.193:443 euw1.smartadserver.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
GB 142.250.187.202:443 imasdk.googleapis.com udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 142.250.107.94:443 csi.gstatic.com udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.206:443 analytics.google.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 id.google.com udp
ES 142.250.200.99:443 id.google.com tcp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 99.200.250.142.in-addr.arpa udp
ES 142.250.200.99:443 id.google.com udp
US 8.8.8.8:53 play.google.com udp
NL 23.62.61.97:443 www.bing.com tcp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
NL 23.62.61.97:443 www.bing.com udp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 assets.msn.com udp
SE 2.21.96.104:443 assets.msn.com tcp
US 8.8.8.8:53 e28578.d.akamaiedge.net udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 e28578.d.akamaiedge.net udp
NL 40.126.32.133:443 login.microsoftonline.com tcp
US 8.8.8.8:53 www.tm.ak.prd.aadg.trafficmanager.net udp
US 8.8.8.8:53 www.tm.ak.prd.aadg.trafficmanager.net udp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 www.bing.com.cdn.cloudflare.net udp
US 8.8.8.8:53 www.tm.v4.a.prd.aadg.akadns.net udp
US 8.8.8.8:53 www.bing.com.cdn.cloudflare.net udp
US 8.8.8.8:53 104.96.21.2.in-addr.arpa udp
US 8.8.8.8:53 133.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 3.181.190.20.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com udp
NL 23.62.61.97:443 th.bing.com udp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 e-0001.e-msedge.net udp
US 8.8.8.8:53 e-0001.e-msedge.net udp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.110.133:443 avatars.githubusercontent.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 104.18.33.89:443 www.bing.com.cdn.cloudflare.net tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.111.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 30.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 91.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 42.56.20.217.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
ES 142.250.200.99:443 id.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 172.217.169.46:443 play.google.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 icon-icons.com udp
DE 151.106.39.238:443 icon-icons.com tcp
US 8.8.8.8:53 icon-icons.com udp
US 8.8.8.8:53 icon-icons.com udp
US 8.8.8.8:53 238.39.106.151.in-addr.arpa udp
US 8.8.8.8:53 cdn.snigelweb.com udp
US 8.8.8.8:53 m.servedby-buysellads.com udp
US 8.8.8.8:53 cdn.icon-icons.com udp
US 104.26.12.212:443 cdn.icon-icons.com tcp
US 104.26.12.212:443 cdn.icon-icons.com tcp
US 104.26.12.212:443 cdn.icon-icons.com tcp
US 104.26.12.212:443 cdn.icon-icons.com tcp
US 104.26.12.212:443 cdn.icon-icons.com tcp
US 8.8.8.8:53 cdn.icon-icons.com udp
US 104.18.10.248:443 cdn.snigelweb.com tcp
US 8.8.8.8:53 cdn.snigelweb.com udp
GB 108.156.39.36:443 m.servedby-buysellads.com tcp
US 8.8.8.8:53 d2yy6p64xsttp1.cloudfront.net udp
US 8.8.8.8:53 cdn.snigelweb.com udp
US 8.8.8.8:53 d2yy6p64xsttp1.cloudfront.net udp
US 8.8.8.8:53 cdn.icon-icons.com udp
US 104.26.12.212:443 cdn.icon-icons.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 adengine.snigelweb.com udp
US 8.8.8.8:53 api.gettyimages.com udp
US 8.8.8.8:53 srv.buysellads.com udp
US 104.26.12.212:443 cdn.icon-icons.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 104.18.10.248:443 adengine.snigelweb.com tcp
US 8.8.8.8:53 adengine.snigelweb.com udp
GB 18.172.153.48:443 api.gettyimages.com tcp
US 8.8.8.8:53 dzrpbziog0twy.cloudfront.net udp
GB 18.172.153.48:443 dzrpbziog0twy.cloudfront.net tcp
US 8.8.8.8:53 adengine.snigelweb.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 dzrpbziog0twy.cloudfront.net udp
US 8.8.8.8:53 srv.buysellads.com udp
US 8.8.8.8:53 srv.buysellads.com udp
GB 13.224.223.9:443 d1ykf07e75w7ss.cloudfront.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
US 8.8.8.8:53 212.12.26.104.in-addr.arpa udp
US 8.8.8.8:53 248.10.18.104.in-addr.arpa udp
US 8.8.8.8:53 36.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 48.153.172.18.in-addr.arpa udp
NL 178.250.1.11:443 dnacdn.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 match.adsrvr.org udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
GB 52.84.90.40:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
GB 142.250.187.238:443 www3.l.google.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
GB 23.53.174.156:443 e4536.g.akamaiedge.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 142.250.187.238:443 www3.l.google.com udp
US 8.8.8.8:53 77.211.65.159.in-addr.arpa udp
US 8.8.8.8:53 40.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 104.26.9.169:443 script.4dex.io tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
GB 18.245.255.11:443 cdn.prod.uidapi.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 adserv-fra1.snigelweb.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 bidder.criteo.com udp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 104.18.11.248:443 adserv-fra1.snigelweb.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 104.18.11.248:443 adserv-fra1.snigelweb.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 d2avimlm6gq3h9.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
GB 108.138.217.66:443 hb.yellowblue.io tcp
US 34.102.146.192:443 oa.openxcdn.net udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 prebid.a-mo.net udp
DE 51.89.9.251:443 onetag-sys.com tcp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d2avimlm6gq3h9.cloudfront.net udp
US 104.18.22.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 oa.openxcdn.net udp
US 172.64.153.78:443 mp.4dex.io tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
NL 145.40.97.67:443 prebid.a-mo.net tcp
US 8.8.8.8:53 adserv-fra1.snigelweb.com udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 adserv-fra1.snigelweb.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 assets.a-mo.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 104.19.158.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
SE 23.34.232.193:443 ads.pubmatic.com tcp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 assets.a-mo.net.cdn.cloudflare.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 assets.a-mo.net.cdn.cloudflare.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
GB 18.245.143.118:443 tags.crwdcntrl.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
NL 185.89.211.116:443 ib.anycast.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
IE 52.16.224.251:443 ap.lijit.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
GB 185.64.191.214:443 imagsync-lhrpairbc.pubmatic.com tcp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 34.120.135.53:443 oajs.openx.net tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 104.18.36.155:443 ssum.casalemedia.com udp
DE 79.127.216.47:443 id.a-mx.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 11.255.245.18.in-addr.arpa udp
US 8.8.8.8:53 232.154.172.18.in-addr.arpa udp
US 8.8.8.8:53 248.11.18.104.in-addr.arpa udp
US 8.8.8.8:53 66.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 78.153.64.172.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 118.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 64.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 116.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 251.224.16.52.in-addr.arpa udp
US 8.8.8.8:53 53.135.120.34.in-addr.arpa udp
US 35.227.252.103:443 rtb.openx.net tcp
DK 37.157.5.84:443 cm.adform.net tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
US 104.18.36.155:443 ssum.casalemedia.com tcp
IE 52.50.240.62:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 id.a-mx.com udp
US 104.18.36.155:443 ssum.casalemedia.com udp
US 35.227.252.103:443 rtb.openx.net udp
US 34.120.135.53:443 oajs.openx.net udp
US 8.8.8.8:53 rtb.openx.net udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 sync.a-mo.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gbc8.nl3.eu.criteo.com udp
NL 185.235.87.67:443 ag.gbc.criteo.com tcp
NL 185.235.87.238:443 gbc8.nl3.eu.criteo.com tcp
US 8.8.8.8:53 gbc2.nl3.eu.criteo.com udp
US 8.8.8.8:53 gbc8.nl3.eu.criteo.com udp
NL 147.75.84.158:443 sync.a-mo.net tcp
US 8.8.8.8:53 a9d142a0eae4c70dd391e34270816efa.safeframe.googlesyndication.com udp
US 8.8.8.8:53 sync.a-mo.net udp
GB 172.217.169.65:443 a9d142a0eae4c70dd391e34270816efa.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 gbc2.nl3.eu.criteo.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
NL 145.40.97.66:443 sync.a-mo.net tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
US 8.8.8.8:53 google-bidout-d.openx.net udp
FR 149.202.238.100:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 167.223.94.52.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 132.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 62.240.50.52.in-addr.arpa udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
NL 145.40.97.66:443 sync.a-mo.net tcp
IE 52.19.214.27:443 ad.360yield.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 a9d142a0eae4c70dd391e34270816efa.safeframe.googlesyndication.com udp
US 35.244.159.8:443 google-bidout-d.openx.net udp
US 8.8.8.8:53 238.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 ow.pubmatic.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 visitor-fra02.omnitagjs.com udp
GB 185.64.190.84:443 ow.pubmatic.com tcp
US 8.8.8.8:53 ow-lhrc.pubmnet.com udp
NL 185.89.208.11:443 prebid.adnxs.com tcp
US 8.8.8.8:53 xandr-prebid.trafficmanager.net udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 ow-lhrc.pubmnet.com udp
US 8.8.8.8:53 xandr-prebid.trafficmanager.net udp
US 8.8.8.8:53 27.214.19.52.in-addr.arpa udp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 8.8.8.8:53 static.bounceexchange.com udp
GB 142.250.187.193:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 static.bounceexchange.com udp
US 34.98.72.95:443 static.bounceexchange.com udp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 34.120.253.250:443 tag.bounceexchange.com tcp
US 8.8.8.8:53 tag.bouncex.net udp
US 8.8.8.8:53 tag.bouncex.net udp
US 34.120.253.250:443 tag.bouncex.net udp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 11.208.89.185.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 95.72.98.34.in-addr.arpa udp
US 8.8.8.8:53 250.253.120.34.in-addr.arpa udp
US 8.8.8.8:53 argus-fra1.snigelweb.com udp
US 8.8.8.8:53 argus-fra1.snigelweb.com udp
US 104.18.10.248:443 argus-fra1.snigelweb.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 argus-fra1.snigelweb.com udp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 u.4dex.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 34.149.40.38:443 u.4dex.io tcp
US 8.8.8.8:53 u.4dex.io udp
US 8.8.8.8:53 u.4dex.io udp
US 8.8.8.8:53 data.cdnbasket.net udp
US 8.8.8.8:53 page.cdnbasket.net udp
US 8.8.8.8:53 view.cdnbasket.net udp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 view.cdnbasket.net udp
US 34.117.164.152:443 view.cdnbasket.net tcp
US 8.8.8.8:53 page.cdnbasket.net udp
US 35.201.121.164:443 page.cdnbasket.net tcp
US 8.8.8.8:53 data.cdnbasket.net udp
US 34.102.249.178:443 data.cdnbasket.net tcp
US 8.8.8.8:53 view.cdnbasket.net udp
US 8.8.8.8:53 page.cdnbasket.net udp
US 8.8.8.8:53 data.cdnbasket.net udp
US 34.149.40.38:443 u.4dex.io udp
US 8.8.8.8:53 ce.lijit.com udp
IE 54.154.181.232:443 ce.lijit.com tcp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 api.bounceexchange.com udp
US 34.111.8.32:443 api.bounceexchange.com tcp
US 8.8.8.8:53 nginx-ingress.wunderkind.co udp
US 8.8.8.8:53 nginx-ingress.wunderkind.co udp
US 34.111.8.32:443 nginx-ingress.wunderkind.co udp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 contextual-analytics.wunderkind.co udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co tcp
US 34.111.8.32:443 contextual-analytics.wunderkind.co tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
SE 23.34.233.229:443 eus.rubiconproject.com tcp
US 34.111.8.32:443 contextual-analytics.wunderkind.co tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 226.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 38.40.149.34.in-addr.arpa udp
US 8.8.8.8:53 152.164.117.34.in-addr.arpa udp
US 8.8.8.8:53 164.121.201.35.in-addr.arpa udp
US 8.8.8.8:53 178.249.102.34.in-addr.arpa udp
US 8.8.8.8:53 232.181.154.54.in-addr.arpa udp
US 8.8.8.8:53 32.8.111.34.in-addr.arpa udp
US 8.8.8.8:53 ids.cdnwidget.com udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
US 8.8.8.8:53 ids.cdnwidget.com udp
US 34.160.20.10:443 ids.cdnwidget.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 ids.cdnwidget.com udp
GB 108.156.39.126:443 s.ad.smaato.net tcp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 34.160.20.10:443 ids.cdnwidget.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 185.89.210.82:443 secure.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 142.250.200.34:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 10.20.160.34.in-addr.arpa udp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 126.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 88.193.149.89.in-addr.arpa udp
US 50.31.142.191:443 b1sync.zemanta.com tcp
US 50.31.142.191:443 b1sync.zemanta.com tcp
US 50.31.142.191:443 b1sync.zemanta.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
IE 52.16.250.162:443 jadserve.postrelease.com.akadns.net tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
GB 18.164.68.102:443 api-2-0.spot.im tcp
IE 52.18.154.163:443 match.prod.bidr.io tcp
US 192.132.33.68:443 bttrack.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 s.company-target.com udp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
US 8.8.8.8:53 chidc2.outbrain.org udp
GB 142.250.200.34:443 googleads4.g.doubleclick.net udp
US 104.17.44.93:443 gum.aidemsrv.com udp
US 35.244.174.68:443 id.rlcdn.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 34.96.71.22:443 s.company-target.com tcp
DE 3.127.95.65:443 match.sharethrough.com tcp
GB 2.20.12.70:443 player.aniview.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 54.156.110.223:443 cs-server-s2s.yellowblue.io tcp
BE 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 bttrack.com udp
GB 2.20.12.70:443 player.aniview.com udp
US 142.250.107.94:443 csi.gstatic.com tcp
US 34.96.71.22:443 s.company-target.com udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
BE 74.125.133.157:443 bid.g.doubleclick.net tcp
US 8.8.8.8:53 163.154.18.52.in-addr.arpa udp
US 8.8.8.8:53 171.33.162.54.in-addr.arpa udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 102.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 223.110.156.54.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
BE 74.125.133.157:443 bid.g.doubleclick.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 34.236.2.103:443 qvdt3feo.com tcp
US 8.8.8.8:53 gcdn.2mdn.net udp
US 8.8.8.8:53 dorpat.geo.iponweb.net udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 s.company-target.com udp
GB 142.250.179.238:443 gcdn.2mdn.net tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 142.250.107.94:443 csi.gstatic.com udp
GB 142.250.179.238:443 gcdn.2mdn.net udp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 8.8.8.8:53 s.dsp-prod.demandbase.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 s.dsp-prod.demandbase.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
NL 185.89.210.82:443 secure.adnxs.com tcp
NL 185.89.210.82:443 secure.adnxs.com tcp
US 8.8.8.8:53 157.133.125.74.in-addr.arpa udp
US 8.8.8.8:53 103.2.236.34.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 r5---sn-aigl6n6s.c.2mdn.net udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 gcdn.2mdn.net udp
GB 173.194.3.74:443 r5---sn-aigl6n6s.c.2mdn.net tcp
DE 57.129.18.121:443 wt.rqtrk.eu tcp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 gcdn.2mdn.net udp
GB 173.194.3.74:443 r5---sn-aigl6n6s.c.2mdn.net udp
US 8.8.8.8:53 r5.sn-aigl6n6s.c.2mdn.net udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 r5.sn-aigl6n6s.c.2mdn.net udp
US 8.8.8.8:53 74.3.194.173.in-addr.arpa udp
US 8.8.8.8:53 121.18.129.57.in-addr.arpa udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 api.rlcdn.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 api.rlcdn.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 34.120.133.55:443 api.rlcdn.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ads.us.e-planning.net udp
NL 193.3.178.3:443 ads.us.e-planning.net tcp
US 8.8.8.8:53 ads.us.e-planning.net udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 ads.us.e-planning.net udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.7:443 ssp-sync.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 ssp-sync.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 fc7f9747be5c72b5f8f1634c7f262e01.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 fc7f9747be5c72b5f8f1634c7f262e01.safeframe.googlesyndication.com tcp
GB 172.217.169.65:443 fc7f9747be5c72b5f8f1634c7f262e01.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ice.360yield.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
IE 52.19.230.196:443 ice.360yield.com tcp
US 8.8.8.8:53 3.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 196.230.19.52.in-addr.arpa udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 172.67.40.173:443 spl.zeotap.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 tag.bouncex.net udp
US 8.8.8.8:53 nginx-ingress.wunderkind.co udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 216.200.232.253:443 pixel-origin.mathtag.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.net.akadns.net tcp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
US 52.46.130.91:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 pixel-origin.mathtag.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 91.130.46.52.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
SE 23.34.233.229:443 eus.rubiconproject.com tcp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
GB 18.245.218.112:443 media.istockphoto.com tcp
GB 18.245.218.112:443 media.istockphoto.com tcp
GB 18.245.218.112:443 media.istockphoto.com tcp
GB 18.245.218.112:443 media.istockphoto.com tcp
GB 18.245.218.112:443 media.istockphoto.com tcp
GB 18.245.218.112:443 media.istockphoto.com tcp
US 8.8.8.8:53 media.istockphoto.com udp
US 8.8.8.8:53 media.istockphoto.com udp
US 8.8.8.8:53 u.openx.net udp
GB 18.245.218.112:443 media.istockphoto.com udp
NL 185.235.87.67:443 gbc2.nl3.eu.criteo.com tcp
NL 185.235.87.238:443 gbc8.nl3.eu.criteo.com tcp
US 8.8.8.8:53 6bf9eafe2b1e9cea1fc07ea5484df027.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 6bf9eafe2b1e9cea1fc07ea5484df027.safeframe.googlesyndication.com tcp
GB 172.217.169.65:443 6bf9eafe2b1e9cea1fc07ea5484df027.safeframe.googlesyndication.com udp
US 35.244.159.8:443 u.openx.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 35.244.159.8:443 u.openx.net udp
US 8.8.8.8:53 112.218.245.18.in-addr.arpa udp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
NL 147.75.84.158:443 prebid.a-mo.net tcp
SE 23.34.233.229:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
US 104.18.36.155:443 ssum.casalemedia.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.18.154.163:443 match.prod.bidr.io tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 172.240.45.78:443 sync-sc-main-was.aniview.com tcp
US 8.8.8.8:53 sync-sc-main-was.aniview.com udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 sync-sc-main-was.aniview.com udp
US 8.8.8.8:53 cs.yellowblue.io udp
IE 34.243.83.209:443 cs.yellowblue.io tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 sync.adotmob.com udp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 sync.adotmob.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
US 8.8.8.8:53 sync.adotmob.com udp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 209.83.243.34.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
NL 185.89.211.116:443 ib.anycast.adnxs.com tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
GB 142.250.187.193:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 u.openx.net udp
US 35.244.159.8:443 u.openx.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
NL 37.120.141.155:22914 tcp
NL 37.120.141.155:22914 tcp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 www.file.io udp
US 52.84.52.98:443 www.file.io tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 www.file.io udp
NL 37.120.141.155:22914 tcp
US 8.8.8.8:53 98.52.84.52.in-addr.arpa udp
US 8.8.8.8:53 hb.vntsm.com udp
US 8.8.8.8:53 www.file.io udp
US 151.101.67.42:443 hb.vntsm.com tcp
US 8.8.8.8:53 s.sni.global.fastly.net udp
US 8.8.8.8:53 s.sni.global.fastly.net udp
US 172.67.36.131:443 hb.vntsm.io.cdn.cloudflare.net tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 151.101.65.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 42.67.101.151.in-addr.arpa udp
US 8.8.8.8:53 194.65.101.151.in-addr.arpa udp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 142.250.187.206:443 analytics.google.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
GB 13.224.223.9:443 d1ykf07e75w7ss.cloudfront.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 142.250.187.206:443 analytics.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
NL 37.120.141.155:22914 tcp
NL 37.120.141.155:22914 tcp
NL 37.120.141.155:22914 tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
DE 51.89.9.251:443 onetag-sys.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
NL 185.89.211.116:443 ib.anycast.adnxs.com tcp
NL 178.250.1.8:443 bidder.nl3.vip.prod.criteo.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
FR 5.196.111.64:443 prg.smartadserver.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 142.250.187.193:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 file.io udp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.41:443 www.file.io tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 41.218.245.18.in-addr.arpa udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 hb.vntsm.com udp
US 8.8.8.8:53 s.sni.global.fastly.net udp
US 151.101.3.42:443 s.sni.global.fastly.net tcp
US 151.101.3.42:443 s.sni.global.fastly.net tcp
US 8.8.8.8:53 s.sni.global.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 104.22.46.142:443 hb.vntsm.io.cdn.cloudflare.net tcp
US 151.101.193.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io.cdn.cloudflare.net udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 42.3.101.151.in-addr.arpa udp
US 8.8.8.8:53 142.46.22.104.in-addr.arpa udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 cdn.exelator.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
GB 142.250.187.206:443 analytics.google.com udp
US 8.8.8.8:53 dfh8hwrwbxm35.cloudfront.net udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 analytics.google.com udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 143.204.176.91:443 dfh8hwrwbxm35.cloudfront.net tcp
US 8.8.8.8:53 mydmp.exelator.com udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 load-euw1.exelator.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 cdn.hadronid.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 104.22.5.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 load77.exelator.com udp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
US 8.8.8.8:53 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com udp
GB 52.84.90.126:443 config.aps.amazon-adsystem.com tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 89.187.167.2:443 load77.exelator.com tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 1605158521.rsc.cdn77.org udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
US 8.8.8.8:53 convex-rr.global.dual.dotomi.weighted.com.akadns.net udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 a.ad.gt udp
US 104.22.4.69:443 a.ad.gt tcp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 34.230.174.228:443 nmcapps-onsite-tag-external-alb-315845598.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 i.clean.gg udp
US 104.18.22.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg udp
US 8.8.8.8:53 i.clean.gg udp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 34.95.69.49:443 i.clean.gg tcp
US 34.120.111.33:443 cdn.edkt.io udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 104.18.43.178:443 elb.the-ozone-project.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 145.40.97.66:443 prebid.a-mo.net tcp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 am6-prebid.a-mx.net udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
IE 52.215.105.210:443 track.venatusmedia.com tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 69.166.1.32:443 iad-2-apex.go.sonobi.com tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
DE 18.157.205.136:443 btlr.sharethrough.com tcp
FR 91.134.110.128:443 euw2.smartadserver.com tcp
FR 91.134.110.128:443 euw2.smartadserver.com tcp
NL 185.89.210.46:443 ib.anycast.adnxs.com tcp
DE 18.157.230.4:443 eu-tlx.3lift.com tcp
FR 185.255.84.151:443 hb-api-fra02.omnitagjs.com tcp
US 8.8.8.8:53 210.105.215.52.in-addr.arpa udp
US 8.8.8.8:53 128.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 136.205.157.18.in-addr.arpa udp
US 8.8.8.8:53 fa802e0ef31551d0ed8d4ec9e2a44e80.safeframe.googlesyndication.com udp
US 8.8.8.8:53 tg1.aniview.com udp
GB 172.217.169.65:443 fa802e0ef31551d0ed8d4ec9e2a44e80.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
SE 23.34.233.243:443 e11385.dscd.akamaiedge.net tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 e11385.dscd.akamaiedge.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.169.65:443 pagead-googlehosted.l.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
US 172.240.45.75:443 track-sc-main-was.aniview.com tcp
US 8.8.8.8:53 feed.avplayer.com udp
US 8.8.8.8:53 player.avplayer.com udp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
SE 2.21.96.67:443 e16009.dscd.akamaiedge.net tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
SE 184.31.15.75:443 player.avplayer.com tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 e16009.dscd.akamaiedge.net udp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
FR 143.244.56.50:443 cdn1.vntsm.com tcp
US 8.8.8.8:53 cdn1-vntsm.b-cdn.net udp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 content1.avplayer.com udp
SE 23.34.233.243:443 play.aniview.com tcp
US 8.8.8.8:53 player.aniview.com udp
GB 2.20.12.70:443 player.aniview.com udp
US 8.8.8.8:53 75.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 go1.aniview.com udp
US 8.8.8.8:53 go1-sc-main-was.aniview.com udp
US 172.240.45.81:443 go1-sc-main-was.aniview.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
GB 108.138.217.61:443 hb.yellowblue.io tcp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 eb2.3lift.com udp
NL 69.173.156.150:443 prebid-server-perf-eu.rubiconproject.net.akadns.net tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 35.244.193.51:443 lexicon.33across.com udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 dnacdn.net udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
GB 18.164.68.117:443 api-2-0.spot.im tcp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
DE 51.89.9.251:443 onetag-sys.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 104.17.44.93:443 gum.aidemsrv.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
US 54.88.237.240:443 cs-server-s2s.yellowblue.io tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
NL 81.17.55.170:443 ssbsync.smartadserver.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 35.214.149.91:443 user-data-eu.bidswitch.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
IE 52.18.154.163:443 match.prod.bidr.io tcp
GB 185.64.191.214:443 imagsync-lhrpairbc.pubmatic.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
IE 52.16.250.162:443 jadserve.postrelease.com.akadns.net tcp
IE 52.17.74.41:443 ap.lijit.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 192.132.33.68:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 id.rlcdn.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
SE 23.34.232.193:443 e6603.g.akamaiedge.net tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 id.rlcdn.com udp
GB 142.250.187.202:443 imasdk.googleapis.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 170.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 240.237.88.54.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 191.32.42.70.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 20.26.90.104.in-addr.arpa udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 pixel.33across.com udp
US 3.218.235.227:443 qvdt3feo.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 227.235.218.3.in-addr.arpa udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 track1.avplayer.com udp
US 8.8.8.8:53 track-sc-main-was.avplayer.com udp
US 172.240.45.76:443 track-sc-main-was.avplayer.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 track-sc-main-was.avplayer.com udp
DE 54.93.61.117:443 match.sharethrough.com tcp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 ssp-sync.criteo.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 117.61.93.54.in-addr.arpa udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 104.18.36.155:443 ssum.casalemedia.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 104.18.36.155:443 ssum.casalemedia.com tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.6.237:443 cm.adform.net tcp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 74.125.137.94:443 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 74.125.137.94:443 csi.gstatic.com tcp
US 74.125.137.94:443 csi.gstatic.com tcp
US 74.125.137.94:443 csi.gstatic.com tcp
SE 23.34.233.243:443 play.aniview.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 94.137.125.74.in-addr.arpa udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 69.166.1.32:443 iad-2-apex.go.sonobi.com tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org tcp
GB 142.250.187.193:443 cdn-content.ampproject.org udp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
RU 91.215.42.31:80 gg.gg tcp
US 8.8.8.8:53 www.statcounter.com udp
US 104.20.95.138:80 www.statcounter.com tcp
US 8.8.8.8:53 www.statcounter.com udp
US 8.8.8.8:53 www.statcounter.com udp
US 8.8.8.8:53 138.95.20.104.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 c.statcounter.com udp
US 8.8.8.8:53 plus.l.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 c.statcounter.com udp
US 104.20.94.138:443 c.statcounter.com tcp
US 8.8.8.8:53 plus.l.google.com udp
GB 142.250.200.14:443 plus.l.google.com udp
US 8.8.8.8:53 developers.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 developers.google.com udp
GB 216.58.201.110:80 developers.google.com tcp
IE 209.85.203.84:443 accounts.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 developers.google.com udp
GB 216.58.201.110:80 developers.google.com tcp
IE 209.85.203.84:443 accounts.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 172.217.169.3:443 ssl.gstatic.com tcp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 216.58.201.110:443 developers.google.com tcp
GB 172.217.169.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 138.94.20.104.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
GB 216.58.201.110:443 developers.google.com udp
US 8.8.8.8:53 norefs.com udp
US 8.8.8.8:53 norefs.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 norefs.com udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 gg.gg udp
US 8.8.8.8:53 twitter.com udp
US 104.244.42.193:80 twitter.com tcp
US 8.8.8.8:53 twitter.com udp
US 8.8.8.8:53 193.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 friendfeed.com udp
US 8.8.8.8:53 www.tumblr.com udp
US 8.8.8.8:53 www.tumblr.com udp
US 8.8.8.8:53 friendfeed.com udp
US 8.8.8.8:53 www.tumblr.com udp
US 8.8.8.8:53 friendfeed.com udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp

Files

memory/204-0-0x00007FFA9F7A3000-0x00007FFA9F7A4000-memory.dmp

memory/204-1-0x0000020A84770000-0x0000020A850D2000-memory.dmp

memory/204-2-0x00007FFA9F7A0000-0x00007FFAA018C000-memory.dmp

memory/204-3-0x00007FFA9F7A0000-0x00007FFAA018C000-memory.dmp

memory/204-5-0x00007FFA9F7A0000-0x00007FFAA018C000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\8b4fc697-f174-49f5-a330-cfb858be58cf

MD5 950913fcb7d7826ecd32c9688175ead6
SHA1 1150c1d9d987f2622ae3342705197a68a49b4177
SHA256 acdc7d040e4cde3abbc6c4941d2a1ab7ad12cacd4fa2d938986e88c623bb309e
SHA512 261a14a1bc71d2d58b403c1152b040806ad1a26b4fc755282ffbb61bf67b682801e41e95d6efb544498d5cff5ba10ad585dace2fc981d6f4a8877310c0b67532

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\31ce0635-8cb7-4876-9983-4d6009815896

MD5 eb907c3f8705dbd2d9087a744333f749
SHA1 35894f1df20e544e3e4511f8939fd120239c2620
SHA256 57213cb8ff8434b0bd54ae2991f10de561ef37aeb1711e464c31070d8229679b
SHA512 17735f8063917496a891c086f1f9dbba3d224ce07d6dfc924eb92ee742888d0c3cabe64e267cc71fc9332258f3c7783261ba0b95217a0a666dcdb08871c621fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\db\data.safe.bin

MD5 005128b40c5fe2f178fdf3189db58f58
SHA1 bd92dcdf43ea3909e21e87faf1e7826a0e5c6eef
SHA256 3c43b2b1f6ff20a61efb1312766cd760178a0a510b9e282eade5dbf5b42add3a
SHA512 ecf87b238cbe9c14124fc0eb991f831e073203f532b3b8a22e6b1414244e285f21aad9c8cfc68278bee385c24aa183f8aa6780fd72194589a9d0c9ab8d8e512c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 731c0e733fe1e3123d366af7c8e578ae
SHA1 9756304ea773dd9cd96e5996dc79de2ed6a9ae9c
SHA256 8f426b4be5e3440fa14d37480f018b7dc3d1a547b0e91c2fbfc6e31d9054a359
SHA512 d29e0f2356a3226f64692b390c122d4d70f09f677d9f5d086f2babaeba6574d670171edb24ff52f928871ec489680f57910e21fac1ca8ec08783a07d21b1f427

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 8c5ce0b6d4320c758185cc19bba726a3
SHA1 1cf025d63ec84cffea3e74c379404981ec1d4513
SHA256 a296ca320f80b267a0539759c8f45771b66e542e56739ffc6c4359731345ac84
SHA512 85cb8595d86232466e532e5858831dc3de743c5b90495d77c7f2d3e3bda8455823f6607c5c4a94e9045f66c1a10faa3e2cc725558aed29a46e07a698756fadaf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 050f221e24a85eb5c76923675c5d6011
SHA1 d5c1da90fdedc6b162b61a8e45fc69ef815fee23
SHA256 aa9b6fccf7da70bc344d00cec99c03c642c327cbb49e0dd63149049917424c7f
SHA512 e9ee90648924e761b0615e77da9f960a549a4ce241ae297831e597548cdb4a7bf9b0bbfd740c92df590b5afedc73ddbc857f046ba5d268eb4c75e68b39399ca1

C:\Users\Admin\Downloads\test.Z1FpCPK7.zip.part

MD5 545577b5a6f741d9ac4446b155fd16e3
SHA1 b8a149193d2da5474a16bbdd9ad85908b308f7b5
SHA256 c70e4393546e8eb3a979bfc9c4b9ce61382449be6ef07857619447077e94b47a
SHA512 1a8274d9741728d5abf571ab9c9b5e440f7c7614bd2804f274135c5fc553dd88ff2ccf5dbe4a64be08354a43307f14e5128eb1d3e00905e004ea2a18177e15e4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\11046

MD5 bf4f550f86488e29e260dfad71a8ce9f
SHA1 677776619f3cf643e8f8803ab2fac01d58d733d6
SHA256 ee1f149748546aaf8739ea51e182bb5ba2e15f336f5683daffc42e18c2b588a2
SHA512 1ef3189e855bfca02fec1accc97020eb627d2f2937cdcbb0f074a7d5920f441ef98c09261f40e49cda9ae12513d6fee830a0096eecd47cc85675e8308f0eadeb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\D28DE22FAC14939817047CA347A8530A61AE9CDA

MD5 9765fad7aa6bc704cdb97d69c15106e0
SHA1 a22ceb16e84ff7fadc518988029d73751a476e43
SHA256 9cedc3305e62bdc851cf897c25eeabddc3e0499eef060398fe97f0bc2b11a901
SHA512 3f57400ff59241dba6cee368177717c4092ea4e1eba43e4e23d12e32b6614fc36defe96885e3dd7238f8c98ba03d531b9d19bdef15ca80fb6617011bb0d89bc6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\FA2083489969D30038DCF1A73D2A1DE76CE5D9FC

MD5 a5782e94d79907dbc7f7b4b4b6ba7608
SHA1 37e08ae5c33bd4cb5ca3a5de503bbb547c15820b
SHA256 c224c5b113da78d8188a864f0c2c2f4d32626b5d4a26be66e20bae3a96b9ef47
SHA512 31c0eb03d6e06743c56d16a4a92f45d27251c0eef800d0aaf1cd944d545f6b7320fc08a1d27cef93b1135b67a12de0d4295834fc0e5642be7fd018206219f5b7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 7fce7700874a974065dba1d053af128e
SHA1 7bcfaa8306b6e838cdad11678fb7e11de57f9685
SHA256 a90a37f1e941af920c7ba7e1cfdf94aa623cecc730d6ef4dbde0a3c70a1d68fc
SHA512 0ad400b4d0a9bcdea53a2b068b77b60974c21d138ba516fb426c1892d8768ce09811bf871f03489a78e0df0aff13bc7d2ad62022d01bcaa8be84a955cf3f33a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs.js

MD5 1ebc375ce06c91ec6aaa1bd077356da8
SHA1 db24a77ba0130c9aa8dd9af03e2fa680dbe480f8
SHA256 e723d6c44cd313fe36e68cadba1753127785ae452e07ffed2c2fbc0bbe3191c3
SHA512 81c612390a89bf5bf9feefdb67cb4f6c05cf91a62b1d710f11aaa2d13c8f3c40f04655bcf9379331ea103f3e9c9590547f2c6006f6ef0251ec7bf224c83331ce

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 9cf593dafa2a26ced6ea9a55eab5e4dc
SHA1 314429be0e34a7569a562bc33290a86716abb670
SHA256 54e8ffe409d69f93b1ab9a4c8811493ba0aad5d7171a10e472e3dca47a7e39ee
SHA512 0244e78bc423537836df51474c63ec773b398967f3902d1a466c4be80d1745d93a780f319d96a31bcf378784e4abbac490ffba5b60599648a8f1f91968def15b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\8F57DD4F60916937ABB60803A2B94AF183EE778C

MD5 4df7b3ea92acc019d7317f5f531f3c94
SHA1 3430e1c02d6ecd569dd03671102940272dd534d9
SHA256 5d97cef498675ce0e1e800818acd1bcd394535cec7189aea6777fada5def924c
SHA512 9bc497908b1d11383f5dedec1ad0c28c77c7e6187f048bd9fde13cf9a73f7feebfca5fdf1bfcb629726cba0eaabde4af59a0ea0cf301ddea3c3bacdd9e4cb292

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 73ce79ede3b91b2775cbfe4f0097ac18
SHA1 189f41a688796b1f60fd7f4bb2bf0d093d580507
SHA256 7438c6ed64e8d5512b920e9fdadb9da7128c09ea33a0cb9ec97b6b95e04a7126
SHA512 d51fb4104af73544c2c75dff8ae1146748c5fc88c4f59b436a4d5bfa2bc2d4573c6807695508e7a4792e756f075495d4ccfef6b828829ca0fd0867681f85632d

memory/6808-679-0x00000000008C0000-0x00000000008EA000-memory.dmp

memory/6808-680-0x00000000056D0000-0x0000000005BCE000-memory.dmp

memory/6808-681-0x00000000051D0000-0x0000000005262000-memory.dmp

memory/6808-682-0x00000000052A0000-0x00000000052AA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 23c178038fe955a004fac3df969de034
SHA1 0e11da7fe3f622ae3c0c234e15a35d2aa1b8564e
SHA256 bc7120543f44c7eacc0abb2e5e42c1b418a71a9541c03f32e6557982160cf6b8
SHA512 f85079689c0ddb0e3709227af964bfb2f1a2f6f199f3952aa9f0332f0425aa03f481d9e1c1528a1e46219a49582a581afc7739553397d608f96b728257d9f919

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\AA5FD10E0406DDDDCE87F49C6C9BBFF5EAD73127

MD5 25f7da1a142294a4c6256a532b8d974b
SHA1 2fecd4a54b3a306f83eb6f0dbd2c520cc4e766a7
SHA256 82533f6a73d7a893c3a3337d123e5e52c2f83f1f26cd985e4200b10f6a1ce6a8
SHA512 bbeee4a480898e3f93ef1c47ef02cd04a00b91592d51026312da89921e5560e641d5aaddb1535bed193b92198eb167bdc30ad0d2da98a7768b2532d5a36e943f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9974e9ab11bac65e67479d5f158d99aa
SHA1 6a6dd22298ebc61d6cf2f762ca028e5b7a52fc06
SHA256 b949b51542408f51cd627409a3b42c1b815b8a2fc7de67dc3816d0492db54b0f
SHA512 245b43e3b3f25f5d05ca0119f9d73d34e9f94af039abe404795d7795997b4b89dc3b7ce162c98c9778297a24dae511300801f13ee6f91bdbb40cd40f02788e01

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3917f8b9467cb52e20d9c42bc50942bf
SHA1 60edac6e961fd02c21be80ca433e2bab61238313
SHA256 136ea604b1932d3d4194539d6b29d895c354242144c0a8776077d08bfc80cf59
SHA512 8e3a84ebbc2ba638ce61e7dc36da0b4aca9db22120c5fb52e34a28988f266a19162fde09f63f5b8d999f24ee73eeae63b237ef70cd4d94680fc6cfe8d02659fe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\22863

MD5 0b77b0d8f80823718b0b83fdc7f7b669
SHA1 c67e826749949b5184cc74eff55936cfdaf20542
SHA256 440314f2ed49ec38575357eb1e35b14475e7a7e014b311185433e601f79a4084
SHA512 1297b8ec7c697a59241aa41e2a09e65ec6593373ac5b51781f873e5e2683b0be667ad3bc5224522607c60786252edab8ba9816baecbaee96008941c2c360af44

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5d403d5c4f449650ae4c7caf2d2f6ccf
SHA1 b492866395685e32267e4d80c8eaec89941393cb
SHA256 ed6f20c8e35e6e7b3f65ce5ea7e8575c939a717f2ee7fb53b323264b24d47200
SHA512 c946cb3fb57b837f8e173ee589f5b022d89e9c417fc76b83b479a4bb6fa96c79394420068b84d3875fff8a5adc19f41405669fe15eb2c5dc30c920a0bbcea1d0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\F4DB32A33BA8ABD54C2F4557A74CAE91E42459CE

MD5 585d6b370083f6b83eb1b95fb433eff6
SHA1 fa6cf9ef18f14c4b3347f88b01f5495e4899d6b6
SHA256 8b1ce49653285a756e4f351fec5b81214b4d235f28481130df0986e571450952
SHA512 cd7aaa42e8e1d8e33d660553c1cb46ebf5fffd499f9f4973719a6c63717a018295ab05c4f0ccaa0a59ef51227e8d1fafc710f2dd8997069381a54076f19d0771

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\76BA72DF89ACFC3FBB1B6409FEE9F9035F5252E1

MD5 c5c3856d48e9e6d824074faa6dae3aa0
SHA1 8f86c60e9bd2b729c8e9ab178a90ba1074f918ba
SHA256 f930d9b09a7ee976de3b183b87e8af0d640aa9c9c1dd8987a18658d862e192f4
SHA512 d8ac2ee9070550a33a7fb7b4a01f3ecc47ce1d2b8864c95ff54d6368552f2123ab6d61a6ddfcf3b6479977efc99f998c803c1ad6609a905ece46b820c4ab3d0b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\31236

MD5 6efa78b7919a0d7ac0384fc455121eb8
SHA1 70afd59b028e6ef3ca9801a64eadc97a84b16d38
SHA256 832e9f7586a056a71d24d0be21df14c9418df02210480d2a55f5ef202a7693b1
SHA512 a20780c829565399df2cfba25c9742436bb10d2133cbb56570ec944450234c9fd760df49ebbb83e67c44ecfd93898ae8f57dc0065730e9f705898a333a6fc262

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\F72B374DC96EDF65EB8F4062EF3DA2023F9F563F

MD5 1bd480dd7ead67b5a76bca3eafe10018
SHA1 f99245d54718c267c144651cff8202d9c2f9d89e
SHA256 cb57853c41ef1c037cde136316773650652e3a68924e7432789964aba2aa5d97
SHA512 baa19c85ffffe453737c4aa6a09224de7cb6f5cd7c36ee9d1d2eed978a5d9670becf6d0793d0fe30ee9c480ea9533357b134eb990ed2bbdabafc4ceb7f16e850

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\88D2DD145122466A8C6F39785D5A392BF5E86A0D

MD5 ebf881e5a56fa9d2b01f2c7e91a01280
SHA1 225126be53f73c6ca440972cb05fa742c94dd5b4
SHA256 834a7e6d49f1dd702773f43a7e84bbd563474914d0ec4abb0124bb8dbccd71f5
SHA512 d99643e2df92c78b863139051e153940d39a8da400be4846640a6e1db622b552eb2f24f5a0ab746fd22d06c017d93bde23c21dc5f0252854f4a55f3efde4dd7a

C:\Users\Admin\Downloads\UnamBinder.RsWVXDQh.zip.part

MD5 f237a41c685740fc992e56af0ad9d723
SHA1 1af425b72d8681a0accc3ca93666af3734d3b153
SHA256 57b14346be6503fccb1671e7736f70cc66534f6ff9163d209fe7dbe5034338db
SHA512 ce97d06e50390ba2e7af41b0ce9bef76207656b37bc07e2f8c17f09c1c63b325bcb8d21a68497c13ad674e4d7924e7b8c9533b02efcf516e013cf60825ab7fa6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 88549d1828a3faed91769c106e394cef
SHA1 ec2e6fd51cd1fc1364f009128e92f28c410a72fa
SHA256 420f070de5bab8272abaa10c44d1f05f808087cc80c20346b11085d0638d24dc
SHA512 b6725830e17fdee915083e55beb606c183510a28c3977b560db724a2e9724948fe8639c5a39e767e6db093bfb112657b5e85798002b133a07b119dfd73e6641a

C:\Users\Admin\Downloads\UnamBinder.RsWVXDQh.zip.part

MD5 739cc9a0b654431504018c83bd1ae8c1
SHA1 68ffb44a9ba803fb9d6135e6595d3fbcc7e44708
SHA256 d722557eacaff8aca46764babce2e9849b0229ccaddc630c13bd73352b81e92a
SHA512 0fa6e116b32dc509d59267edf41359c973a9a11cb48a16c050468af8d947cb2de53301e993e3795570bc39b90aa3977ef6108aba65efe884f88e53451ac6900a

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\UnamBinder.exe.log

MD5 d63ff49d7c92016feb39812e4db10419
SHA1 2307d5e35ca9864ffefc93acf8573ea995ba189b
SHA256 375076241775962f3edc08a8c72832a00920b427a4f3332528d91d21e909fa12
SHA512 00f8c8d0336d6575b956876183199624d6f4d2056f2c0aa633a6f17c516f22ee648062d9bc419254d84c459323e9424f0da8aed9dd4e16c2926e5ba30e797d8a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ba84dcdca159fd9cb5af30ac84b3dce8
SHA1 724e0c4b24bf75660c9e22839e7ba8ef15609720
SHA256 efabf2982a8a057448ab131f2bc2be4a0be246d7b29bed89df1fb7f53d3cf7d3
SHA512 659e93f3f9e3ac6daf67092086084a2abe714c92c6d891b7efd899328e1b7a012bab8c5d70bf4e82d80bf42075d9c0aa5a9eada910503371733c65f3b9731008

memory/6272-1644-0x00000164B8AE0000-0x00000164B8AF0000-memory.dmp

memory/6272-1645-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1646-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1647-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1650-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1649-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1648-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1651-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1656-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1655-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1654-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1653-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1652-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1657-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1658-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1659-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

memory/6272-1660-0x00000164B8C60000-0x00000164B8C70000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e5c6e4df434f0663c6ff7b88ea42bc60
SHA1 8e8c64e5915986037ba7b71f6641f7a340a19465
SHA256 aaa722009a991500b292fc68b2c14ce95d1ac55b341d4686f746357a6f21057f
SHA512 4fc18263c616ac6b226712c7352071c81d1f8d077e042ce98caa766c816bf26a92c1c5c8a331b01e0087d69d02771ef306fbb26724b3fcfee522dbf8b9425623

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\0CB5667EA187C56A69681B6432F52D1C8038EE8B

MD5 0ac89c8c7e0850bd8f36208022f816ba
SHA1 7d5f313904427b6a37f3a22f438caaaf923b3a69
SHA256 30b1ee18814f2c6ac69931fe17c039a9d992bb6584531c77c48d1ae4bc60cd69
SHA512 bf341226ba782ed288e9b63eb24ce4787c921787e0a3699eccea30c4687fb236ef14bd82c255151c2263b4c0827a40b5b87c6b827a3a9c8bd1cc4201e297b9ef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1cbe70d139aff7d09ab872309fd29a1a
SHA1 3a237a9e0243dbd30b650820b52bafd05f113a3f
SHA256 64c3422f949fd4a2fd611f1d641d676f0c2c0d2997ec3ae39a62865095d2411c
SHA512 54fd0225176d9edc841f2914253587da410437eccdbdb21f3b2c2f8e50f92e208fa96c24d33f9522fab4651462d4e9264b6557f966e9169d522acd61555a8aff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14307

MD5 7697fc10a52502b33cf96d0a9ec34fd8
SHA1 7489b8faee578b455f367b8ca329719ae7d224ca
SHA256 58ca331c5d376acdb9a32c662422dd432f1f6992be8cf25a55c76c7e8b3561bb
SHA512 a82d3a407dc32601e8530a03c1e41247f58adf6d7a8c62fc219da87fff1fa9e921dad57ae36250c12c86455922d28d77eb4b9f90a018a5ecb864d142c8850105

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\29962

MD5 8ae392a0dd5787e9244de25905554f54
SHA1 d6b89a3be11cf3697bb6f01ad1b3ea9ec061bb0f
SHA256 bb89c16c0436ae61233eaa4e88966de28029cb46b7eb9dc94ede8638fd73c86d
SHA512 69b5d4ab3bfc454eb8e31a8edf976878c0093bf628fc6c7de38d8fdc3f833902541fb7ae2202c9144868161140b0139fd201df5d8c46c02699da9a30cb8f32a0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\27741

MD5 361650f1a16a433085a656ec821167c9
SHA1 2dba3cf3483c184b3556acc147545809f4a4de94
SHA256 bb927fe5ec22feb413fd1f828013b3e9263fc21d7cbe8814723b2f884f6abf9e
SHA512 045ca751b2679048a525c1c239401d0f0c67904ce1730700e03a5c365ed3246edbadd635c8c6187c29d6c9514de351010614da3df81a63bab51cb5b17df54f45

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\28897

MD5 7428f148dd09d7baea03c647d3cf57c7
SHA1 05bfdab065b85904dadbef7b2c28614b90736a9d
SHA256 5e9ecb22ce4a6d27ad9587b3e2f5095130c9b499d9e93fb7440dd73b38f6d56f
SHA512 61a6955b88a1682123a78717452d10523c214cdd45d6e092ece4135005f229b786448acbb44a7e24c037ce4953ff98f2e4dff4812b2c17c6182819256a6598a2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 22f84efe0a94a320a403de1907cbca96
SHA1 0a43200a5eedeb71e701a9b6cbcaa21db3e59b3d
SHA256 11fc1b7426fb68ea06118152022bfcc54887893d6db2c4d9cbc3ead6ac1f461d
SHA512 259dc31f88229b89f578e314dc9b1cf8ee49bea401f82d85916f2369b0803df7d9d43fd4ed81f6fac25161b5fad6466232d6df179d0f8048e6315da2b1609e15

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 0c4723d7d174c32332a6b1ea93f1c4de
SHA1 993ed120555f9915b355bfd249a2cacbce23f509
SHA256 902a1055cedc4195ba57b22f4e30c0a08039b4f20bb1a37f78cfb6b936b1f315
SHA512 844b5a8709cec66651aa97dbc2e86cf4373daa4f382a9e0b8ed3886d061c07633ddef9c56e5f77e5d83ae46802c4fd881d0d78d36ef9165e56ecfbc0638f6cb1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\4266

MD5 b137f29c408ce6d2d1abffcec45e9a0c
SHA1 dfae12fc4e128066d3290997b26e61974555fa64
SHA256 95b0d34a0566bb091bfe59022288df17010ddf31c97345bc2e41265aabc488ce
SHA512 935150818d2596ca2e204fbc6431c721cfad9bb843d242d83efec69f2495fcfbddfd489ff7ce9db47a0af89936bebbe7cb3931859d420173f63115fc6f99795b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\2359

MD5 1aaa97a13c8c2a233954ba98303201ea
SHA1 5da8a7f09165a62454d0f200be31cf5ea2d583f2
SHA256 a5512d5019a3b6785fb6143104e09a2c61208c1229a393af3a7cbf24330e036c
SHA512 d6c9de163c598cec21cd8c3d36db5b7dc28dcd3e96ec904fad90c886eeda6f907606b70586a23d8b7539241e40e513803b3bd91e8f5ea2106fc675736f07997b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\7319

MD5 0430d20b8b3d38101d391bc49c4d0c8c
SHA1 6dcbb2e4772b71c36c12ed371097e61572ecd2d9
SHA256 6550b3188e09ad423218051906b223dfb1207fe2c94a9be811e493fda7060c26
SHA512 1957d4449522b4dbfd54ad81e0e2bc868a8f7ab47d110f6ebecfc8a36b2565f968b80ae2b8013d8171ef76ea063265e63860e455866d5f3b7070c65478dbc559

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\31884

MD5 caf622512bc4cc4befc0235b63c6191b
SHA1 d9a9f95e9b761d224ab3a044b7c0e44e81b0b0a6
SHA256 ba539ec995a1c41cf8cd0e87b3f751e2d63cf32f0ab05058942292f73efda7a6
SHA512 3daa127040e74d38cc1bf3b8cd3d25c2b49e08e84729b517aa419b8b891a2c72db6af7bbbbaf1a525408c73cf87c2049b58e9463c2a252021564663be14b89cd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\25353

MD5 2e76c8d9e682775b70d955acd5713413
SHA1 e0651dd275def3fc0596f319e7f05d4e5cdbd912
SHA256 054df101f70d9c9105cef34f8b51f9e5c02ecef83a738990a66fff038f810bdc
SHA512 f2a6b42e5cbe4a2b462d296004a55393a1963f5349049c481c27c5826bdca6b80dfe41bdbabe6e3c83c80e0470cf12bd0f13c1caea6a907284cdce4bac777266

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\31B8DD01D19ACB3BF5E62A24D693533BA3376759

MD5 ee6de8c2f2e1affde739c27b426db0ef
SHA1 1acb172fa5204f047cea9c1c3f6d90de81ae78c9
SHA256 cf428c2dc9f30817b829f05c55f290ac282ab37a3e1480143745da3644bd9e68
SHA512 ddfb672671bb1bd313ff3dd732cfba39f77a5ec35d62fafa070011bb420ec309971d2443c0a73dc8d59341b69ce78c0775455b8c57aa6024f5eb5bab90f3f99e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\EAFE32E744D7D6C438B2247119191149862ECFA4

MD5 1deb0a4e421d41cb50a65704400e549d
SHA1 04068703903ad1ca52653ed0d4a17ea33481a1e4
SHA256 049bf3cf616174c189be4d43fdd51fa50858356cc73840e3a0ed251ed4e8829a
SHA512 f21896fff2dd8ec461e39494dc2b55c64f77bc69bd26f58cfed4648a6ff34e21fbd56b3c57f6a63168d50d42030a0aec4379be3e316654a20c9d3387ddbd54b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\608CB619AD7C9A8C36A80F9DA20C8EF6F9FD551F

MD5 e1a8ab3a9b34d195be5e13e1a722dee1
SHA1 0886462614a8bdb258097f2b7ad5b4c4dee65c73
SHA256 e55d8cb009c7c9aad905f2b23d9146b7b47ced07be4e3268f9c65099f1a88fae
SHA512 c9a6664f5c81e5099af7d825efd772a5af66bf8e564b52fd0f8d1f0781f7e7a9ebb41ed73ecc60beaa3fad02711b9a0b2b88961e2520b98acbd33ac8819be8d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\CC0DE365C080CE34C8BE1CD6274A5D465A86E15F

MD5 890492ce6f973a48abf35a30f0f662b7
SHA1 8e5d92000d9bb77a14b0ef121b062ad12d57a5af
SHA256 f8ad2cd80d622ed6c1cb681b3b981afc9374b31ecf9f25600e885bb267dec78f
SHA512 10e15b22f25438762ce71c7b2cb1742bea4efb8681f696d83507d186eefeb8f2b578281f9df63d7f685fb35fda133e7dd73586a7e86d5f39dd1af4555e00c18a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\3190

MD5 a54058e9d8102ef64fd23b9d4347714e
SHA1 6b007d704d396f69fd6eafe221d576afff44fc4a
SHA256 8941210a1a84677eeaf5ef6fe6032d35f17b7d9a32635ade8465eb7be2f0c1ec
SHA512 460c811859b70db7e276672db3acb3ec6ac2e7e6b2533d365cef01bbaaa2126bcfe64f4043e355c06f278665c46172190ffffd0c1a070d7fbc5b6daab76f5a8c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\2300450CA43CD05967B48801814B10FC448EC21B

MD5 c3f30825651a3052b756aaa89377f1dc
SHA1 2539ab46205e138a08e44c244a637e19c3425733
SHA256 bc3099c7648b89d12554c4ec2ca1061080c5cca5d5fde1bcba23960dac7135ce
SHA512 8f77390bfc85a488497115dd50b4b8923d111fa48f574f28593da6313f2e76339ba0329c882d722aea39a615b0bf68fa8e377d7adcca8164de3293ce7e91a0c8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\28653

MD5 56bd3aad43954430aa62961b1f429866
SHA1 ed12614f620681343efa8bd868cdf81c631e6395
SHA256 31a6c7b10131715cf0912647d900484dd361104ef2fa64ec599a0c174245c082
SHA512 eb65da28f2d1ee1399b688b90ffec43d2e11b86263c564e9b4a0c7959528f5f3439d73bfbd7ef7e63088673b61b91efecab9a908fc0dd3948d4989f3f392c9b8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\5009

MD5 a90903450b66dd42242256a0b8c49c37
SHA1 970eed5a899891795b10d3ff19f9da075792ce5e
SHA256 8737a4b3477c677682258d1fae3b688b4017a41745a7c7f26d39b1b3f9fbf947
SHA512 fd6d96c3d66b5d8446b80a490f44a2175003c304d139a17634af5b61269a026cedf60356f6dfa349d3a5f9b3d6ff1dfa1bb5df0021f9b76baa83544bd87a893a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\32031

MD5 fd0c95172406b28362e94392c34d2535
SHA1 1850a1ba1c9b4c263c741240d8e55486e0093ffe
SHA256 c02461b63afbf5e64ae7758a4838408c2e3e550cf49f919a4887ac2fbab2c3b5
SHA512 2b860843dc550e2421f259fbd8552eedc3ac9fe3267d2f3aa4551b285fca4bfe2f21beeacbe1527fbc7fa47cd5ce79759fa79cae9f5f1ef004a0fcf6d00e0770

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\24625

MD5 fd7fa6f1df4e5a0363fce2cc59c0ea6b
SHA1 fd6278e496284f79792cd30087031f2b3143436e
SHA256 c8b7139aa7f43d0f663eba53c2ed5e27c5baf1d0b15689a0db9aa288cbc2bb7b
SHA512 03a4364aeada448b7296b026855315c01b34fb57b3f229e54c9088179d8872dc016f95a074d24dfed9504c60803947e26fa4be596b3276591a9fe80b931bfe1b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\AA6E35AAA027E5CC3EE0F267FFEFCAF1F0AFB32E

MD5 601643ad2133d3249b36010023f03c18
SHA1 e810a3775999e1be2120a1fa35d9a48a6dccf6b6
SHA256 676b23cb4ecb39f64dc5ca213cfb85665cb04fa0ba9579bab65f6bcff705681a
SHA512 6fac105e97646cd65dd90aaeeccfd33e59c5fd3110c5d2edce68db88700c81f8c4351f4c15a3b5a54983d6004a949f83a5883ce028c9250464d8825790d19b95

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\default\https+++icon-icons.com\idb\3423750125wdkn.sqlite

MD5 8737f6174c1425546d3dc84f07e04d5f
SHA1 2871c675f9ac472b8ad1e32e520a3fca9c5be8da
SHA256 380b730e226dce56a805bbd0b669f0d8b3788ce96765fa8fabfeb94159fae22c
SHA512 5215549cd834af7e2bba29f376805d58ca152fbb5698869e284793ae747087e7ec2874f5c346cb750112290b48a990a856b31ab341aaaab93d765a837577e390

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\25232

MD5 d4e7199185483108dd6ac611d84f92e8
SHA1 aac2f0f8dbd680328729ffcb8e0792feaa01a339
SHA256 b18b9f5307b34a95df1848d73f4081c19ddaa855a32c933742136a6021564acc
SHA512 c574f48b9524a2d5b31c5d0388099e7142d0af8e8a84389d8b1b31c90864c638993a5979c5ecc131c13b635874f00541dc461ba4742f62aff9be0806df22d25b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\15672

MD5 747de3907dcd967961f6e6dfc78b7f7f
SHA1 1b546f1a90c9ec54b20c0de3f2c6ba1bac16969e
SHA256 9bb8d3e127d6a374b1e1cc6ca8deac9e808944e5c170700f8136f47aa1851fcc
SHA512 530d6d8ddf246c4b9ea0dc6cb3c892f59e391101f0354e39c4376dea7cf8cb8cce309632015eab350c2ab82ceb2c026970557979061957a189b0fe16b61b906e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\20856

MD5 961214d4b7a57dd4c035e30e54f65052
SHA1 ed17471de76ca3a11028e2be785d51228e17b429
SHA256 d28bfc75ed8523f6ba3dbc834abb1a69d71dae46ffd98e920f299f7ae5f64ece
SHA512 ab3d9d421755f68d43c7a8ba1aa1a0ba562036ed0d93656d06f4d7bf61c8a63afa7f328891323640df33a18a0cc7d69a04bb790fd9c91d455a74048ec676dc0d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\31798

MD5 3783314966ebebe1051e7375778970ab
SHA1 945cf45d8a36c09558e9e1819eda70d9ac599e2e
SHA256 ea07c469831f5d596f4023dc9f6b6be0e8aa6711f3aebe5fd14e4cd51989b57e
SHA512 83526d03f4c6e42d26b699ff5838b276f43f08e8176f273ac6a72387f866af9efe690de2113343d950f51d0943e7f3bf4d3ba716c4c3f67fb56d116b5494fbb0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\20129

MD5 e682813d7c297761015b8ef466124eb1
SHA1 054ad9f85d32dfb46e800ff767f407a86f605e1a
SHA256 27f58f47de50c6a43a06d84981208eb8521ed68b61c4fe73272709c54e3143b4
SHA512 ae0be98b6c798492c76b17af64f72edf46ef004dafa351900bbfd393350a350bb8cb97b8b2d555fdffc292280b1366177596fcb2d183da6cfc4f82e9b87c5446

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\22172

MD5 ad422af07b52a53ab16bdaf8f4a736e1
SHA1 1bb5bef175fdb12fc829f0b3b3c7524a548f0df9
SHA256 5831bee837952aa3d7fa0c7a6f3ba6af8dfc4885d7dcb1f332fd5abb476e455c
SHA512 3e5c960bac7b3826f1601e60f4117ef940b814fe81cb90f6a5fbc08a4c71a2dfaa92996045225ab17f10fa8e1a35e4d03eac5ca02661e541cfc650b48c629aaa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14967

MD5 6f5cee4301306f7e43a5c5481486b50a
SHA1 c7b6262d3ed8d82145498298b0eea0b8d8cd7b01
SHA256 e991f852f7b5ac6fec94d859531ee4685b5ba7f3d6b68d0a8cac02531f6484d8
SHA512 fd43bad8b53074a551fb887fe64323454ada5a2870775beef14303d36f078970a021447affb0f8b9aad3b5f8c47258c46f59e597d3e318b84d489e480623f8df

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\9F5993AA9A2DC154EF43311E568E9D6BB61AC160

MD5 420d2d3031ed06f456bdfcd4926c609d
SHA1 90388c71186127f55551b44f38b95abbc766777b
SHA256 94f8b58c36ac74cb153d12cfea4f8b6fe0c04d56e47dbfa0e5b5267dce535269
SHA512 435b7234c6a224087063af5785155343e32f9b16d6b923c98103f0e3a8eff797275c0e226cf628743e8f250acc2b636136d7a33326ee77058acb91ca34cc7c66

C:\Users\Admin\Downloads\round-account-button-with-user-inside_icon-icons.q5anmGAU.com_72596.ico.part

MD5 1460d633776643a7875ec70bf100b483
SHA1 e9eb5d429cc236d16949f11aa88aaf54bb850cf9
SHA256 d952a0dcab31684ef74346dfdd97b9b47737bba0be1a65b90bd2cecc7c6a75a7
SHA512 40555d866131d356c25cd1843cbb1e4a7db39c8325e72edd097c959e25953a1b2d8fc3e3c3b31e207764cb50ff71c2ae7e4976bdfa29464056ec103cb30d4f9b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\11299

MD5 740e5d0530808dc768edd8ce6f925953
SHA1 669eda785786cac69d4ee5d695e424897f1eba5a
SHA256 bd493bb97b379ca0116204463ebd48584028e68cd79349ef1c812f95b149394d
SHA512 dd652a338adc2295a47c2bc25a83bb231bc38f51333a4e2e6668653ed1057a2429033f9508d19853c2495f388ee4ef7204dcd850d91c02c4c4152b357e7a9f14

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\27627

MD5 3ba91f26cd4f411f26d4248b3aa1c827
SHA1 377817c05b84fb09e9627ff7969395641b778355
SHA256 4f976d03682a0f797e349a97679145df2b015d7b604f69d230616a8e39aa7357
SHA512 14bcde19974278ea4aa9db415a61c42fc65e56b45537cadc7b77b20b71bff964b516fc10ae9c4fbf454119b8b7a7ed331b34f29f3b0160f031b2dfcbc53a1ca2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\3758

MD5 180b552922a9742491d1243bf434c3e0
SHA1 4b6c07969c92ee9adb990681bac888c3ac20e25f
SHA256 273e957170dc1df6b4c4e396cb396e3ed914e7ee2b72b3cfd110498dd264b9e9
SHA512 c2c5b9a6cdc6f6011822c767e47f697bf60e26a40fa104c88d0a324c69bea1b1469142e6146d06c10bbdaf556ed19d5ed4f56c84755e9c2992a5ae5cc9424966

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\29995

MD5 dca0e86fea2d063f169a850b32c24073
SHA1 86bea12a197870ae9d8c0f5fe37c5f94b47bf3a0
SHA256 69292ea9b22f4b63c1548481b23ad8803100c05a07dbabc0c58331c96f8d93a1
SHA512 f41e87dac84930edebd434509e07042be99efd6ea19baeb4dae2520bfc611775b7568b701917ff88137f291aedcd51dc2c2adc5ef04084c0954f473523625600

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\17192

MD5 fd8c46f79950ddd844833405ae761ba8
SHA1 2ef7fee1f47e0a549235e386e78858ab9c7c78c5
SHA256 92989357df12a4325210e0c7ee3e56f2e135d17a80c6518723ec8d795f492be4
SHA512 c6859d5c8c29107485ce6d6a74ae401d0407771e89b510ea1b779657a4df594cfa1d80ea989fff711e0b604a9b554678870bf75bad8ff7109c6ff7078ac0bea3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\19447

MD5 6c9e89e7304cf923b6a5c39614a52ed3
SHA1 e90cd4cb0c68de0fda00a5ef9a99534044bf3cc1
SHA256 1d49f186735e8d3bf8133332970acd3c68c38434c9e9b2e0ca91bcd93a7e7cda
SHA512 3225d3f40169624565dc19c3e740b667fda0133d14154ca9884e399b1f508ba6b3baed74eef3b618d924e7b937f5f86fc8b3bb543f2c070038d9a2b50bebc267

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\26315

MD5 9f617c683e9db65322689ee94e0e355b
SHA1 7e76fa483cf04c3e6e837bf0c4cf374dc28003be
SHA256 8d104c6b38ef499b11d2525fccc3289c443bdbc8d944fe36a381f2947b855387
SHA512 cfa5f3fece4fe7d4008a335deea57d39b359a650590602bad4d2c98d129af0c7fe1562bf2584f1d529a0c9d1906d2a98367b9c38982fdd01453bea9bd59e0ee6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\23049

MD5 aac3f5b93b453c8d0097a6be2de5582f
SHA1 c6eb35484f8f153d1186afeda8493a0dac6cade3
SHA256 33b52014e12300d86cf8fae77c481376bba2720ce91253da2e38fb1dc5e0188c
SHA512 55304e4de97ce6b1d9a8fb8f08767a91fafbc7d548e750b3b4c974833a0f2c34d3bf09d838f4551774203008100f3204ac6cd821c4469356f4d4ba0074bec511

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\31847

MD5 3939923a695d0cd1a6201b0025858b71
SHA1 1c8f1d1c43370668e6873056cfc00257eaeaad73
SHA256 09b0db066902fdf2666cd6e4316c5dab81e5e678912f9bdff7274f8347d12bbe
SHA512 04bdd953df7511069dc2669a2dd838c15032fb17ddd25d7bd3227fa253687c13fa9405b4b2113e2d4af87ff7bb1c052bef11501ecb3382f59901f76537d7ffc6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\13489

MD5 449aed1576f292ade429e6f9f47b44ac
SHA1 91ec7edbe9a77db8a1839f0f83e0d5d5b83fc4eb
SHA256 b6e6d461c78aa4f050c0432ebd426debdf599f19cdb40c4762de5b6d0c0b06da
SHA512 5c6c4682caaca071f7b0e95928658e95ef17cb1cae57cc6d8640685902a1abd7319ea63b6d0d39e3ef03db17c10e736e8d9b28dcb50797bbde945aec5156036d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\6509

MD5 f640e99a8312c8b0c241ea0d024cfa99
SHA1 58e17061ce2eb7f000a25b032fcc4903e2024f58
SHA256 7a1805564c40ef4a8015149e78b23e97b011c805b60e153ac96717fd72bb7f9c
SHA512 ae2af06da7f86388b3a6200322fd3c3d291c15e2039e80df45b9b4e8f2a2d9a2fc098c8c08e91386cfccbbe513c3e56b83bb9049304894b2ab95835beec568f2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\32746

MD5 f5237a019b8aae1411fb806d37b952f2
SHA1 9e0240d21f3ab6e77d09152d473c7b3d42487ab9
SHA256 0e60550b0e16626e1680db0882e91a88bfd1cacc711873e0b9a7ea5a2a2afa2f
SHA512 e0f460b076879cca0c960f2f55a1e887a73581a6998bae731121a637b95b9971c14c83c9fea8b01f5cb879c135f94e02b22e7708f290cd6713e44708cf9f136f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\651

MD5 dbe559cb84a49d076ae5c2b45c9ae9a4
SHA1 2dc9ac20675d111b2bddd9a77e19ae037b26bdbb
SHA256 160835681a13462fa654c2e8c91664189cd5c1de6499624d7cc937e680f8d1e4
SHA512 19651b1c4bdfc4d4c2c726d609085caa60eaa5e8a47c788bb0cc7eb25e2a419731d591a00b01087bbaa547a093d85fd054a1fb3975fa400f1840a030fd6005c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\4365

MD5 e587072e74d0fe49046fcf3a0e10deec
SHA1 b4100516e4556fd2d0dfe87598e920d46c986270
SHA256 7a84c90b0809f3b68470a22016860cefee48a4865bf84e4b7bae462fe6224b32
SHA512 97ee03c0fa9d109634f534f3e1aac82f49d45925bf0d48f61f36d398e386dc9555a77427fc7647cbb2fdb71a8a31b19fc645b34200914d97eb146905979362d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\2570

MD5 a17a6c266e12f54f909dfe64fb30c753
SHA1 34e1d99e64a2da3e40ac16a9602c9b08b2a02d3f
SHA256 db2098775a844598487cb7a7b72bc730402f6470873712e7fae98e3a87bd8e91
SHA512 14700ef7dddf68720f4913cbb56025c7aec28159ce36ad21a3e5778bae5f1f92eced844fc9fad7407263dd5d9fc54d4375611eeb26d1e23a63a4dbdbc2f7edbb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\15744

MD5 5f2b569d5162c23be692ae7e9f0c8d58
SHA1 ef571b249ec2a87aee1fdda17e846fccbc6ad061
SHA256 5f0e1d4b0fb5d7f434a534aef927fb85d786d631ec281581299eeadecdaac277
SHA512 36227e3401bc36c656fe940b28c91ff4e7d2c46413973ee2c5fc08eb4f10fbad5883a8a60c53a0ff27760a8bd4664cbcfcac294841a285cd217d02310479b035

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\30838

MD5 5cede24382b2dc9c4ed6a7b373bdd6d4
SHA1 cf5fc4856da63088051eebb96fd53dfcc325230e
SHA256 a3d77022ca0eb707ea9044e7a613461b25a66c7f8358616d0b6b0644a741ce07
SHA512 0278f3db7eacf7d57cce99e8fd7bf7f7f2edd13293d7e44efce1ab8dbf666ed4539f085a4acfc46628b72b42d5a315ebbe1baee86e3f2191b368c89ae84d6aed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\17776

MD5 0215f87b085ba10a87bf7373fd5c9dbb
SHA1 2ee2ed56ec8f46cd9e201d9d9dbb27bd5a482a75
SHA256 803bb8851beaadcdda9bca97941d3aab25a72e41fd660451345e3f185f72969e
SHA512 a585267f444c6206bc913155d22163949c799e0d61cd7aa6d081d6db4204b7da584c3bdfcd6ea8a69a9b0c828b75f5dad70f93bbe3692ca7548f8a92c9ba39b8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\32533

MD5 eedf45a1ef739b0438443744bff0a436
SHA1 9693f4901f54aedcf200f97a425bcff822b086da
SHA256 0de7de1288a61b492609291a7192aa4a81c1db39f164930710af0bf33c7c2091
SHA512 7d6d1a27904697f5f176163d4170f1b3320af747aae98cffbb1160ca5c27b8e4dbc3f4c9362dc29448328601fdf548dce9b7e4488fdf854d9606c19388fb497d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\11032

MD5 79d05efd23fdf5567814c4542d2d92e6
SHA1 2d87d8d5001d9e5f8f2f3644324fa720a34d37eb
SHA256 46024a8fb029cbb3d103bcf3f40f5178d8bd87b3c7d47addba07331f56fc1ce2
SHA512 c814ba3eb0dc722098a0c6e840ea13ee3b5409847bf91ed5fabea70f838bd0996f5b464280abcbec07e6b548f4a5a053673c24895c36a0f17948f4c00e893051

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\10471

MD5 976f7e065c3218317862923ec21682d2
SHA1 d204077d31d20ff0481b9a7a1463b0be504f0461
SHA256 34285981d2fbf9b3b03cf99c25a876a4613d5ee5c3e8d0c59f4a2bc2b6ff5166
SHA512 724773a3579c42991e638e5f28c1fe9eb7d72cdc63c01cd5509898bb62ac7047b57109737043f8884a4310e37d11d0f718117384b7b05911f21bd896a38496b8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\10033

MD5 4b395f1fdfd072c26d34a1001fc5d21c
SHA1 94e7d5f4f1cc8ad48e183df12f76e5aa32bbae6b
SHA256 e75b328f86d5713026bbd9884a7c7b97e3c9fae257be0220252f2c1ea5656234
SHA512 c5b2547cb1297fa9e9fb51d79ccb52a5167b2c24f5de260992f34687645084d000b67978f969e98410a7ee8cddd121edf754f5e7f6fb124b382dddd711f9f4f2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\9248

MD5 30f165aec9312fc19d7187f6941d6394
SHA1 24e388477b6d34de6f4b23eba37064f2d4670412
SHA256 5b945f7fa91778ea82a1bd86fcfa52f582e40190dfd373ea884d8fa1e1c609f7
SHA512 f17352a1319e613b3773caed7c0e118b2a831f7f23ca2171cb88507685536c5c3a982d54764f0485584b3282675506786b95e9d3b02fb40587cd7b2e19749f0a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\4636

MD5 be52fcb1c83dc5f8cd12e4917ac7b016
SHA1 8f0a4f8b011987f12fe9df2d5d806d5f0f017063
SHA256 cb68f3f4726605c48c244aea308362d986778034305c6df9cf3b43c990d5e67e
SHA512 687fb36052acd6ec572ad1d1d23c960b7a680717b58c30723b7c41598ae9af87e1020d4647fdf8834984894fb58b8b8e98905930cc9889ee114d957c49e4d425

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\1258

MD5 ac81e8905da47c0e563394ebbcdb82e0
SHA1 20838f572468571968bc39f729f274eeaf5a87b0
SHA256 1f2b7f44c706fa3a7a5266c7115b832eae85b1554a5b4436d248264964263cd5
SHA512 754fc5beb34c4adbb5ad008815fbf56b1f2e91ea344c56859cdb11e533058aa12e68d4154cbea227bec6daa5df0e5ae5972026c12a449d021e328bee01131f0c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\16015

MD5 5a195d310dcd35fb0ffe7a1f7f5d4b1a
SHA1 593131ec984097a8e9d4a3b86665a38ebdc2cd00
SHA256 86cb2a953bf332a7449f567760711436447a09b7d5399ec4282f6e30448f571a
SHA512 305fb9fd0986c1a5ca6376e864f82522844ceefa59f2cf4111781258c63215d415e1ffd2ba3683177844692983f2275a3dcd82aaa3cca032b0b0d84760464741

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\12637

MD5 5e06d9161f929440ab227b48e97f3e99
SHA1 d30d6a9bd0cd81c9fd4b0163980c6fc612ccdea1
SHA256 b5a468cb3d38e7cdb7e95b52bd14d566236b762314845f5bacdda04ede555ddd
SHA512 7cbd211ca204a27b097afe286bf0934b03fe8a1e831700938c03a457d2f7e3fd8a9faa2d6c177b3473de5d0063083eee025cefb4c23a5202097aafe277cfb4d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\19281

MD5 c010dc358a0604db386d07c34062eafa
SHA1 6b8f04a865c41d2bd413248cc925841190be4465
SHA256 abe01a5d357e4cb6c8fa6badba33defff60d0bf17388915126dc5fdd3a6525bd
SHA512 e3e3341c3a09974f8dd68573381700500ee6b653b9d562fdfb5dadb8654bae6c3f73045251d1c94e2a8bc110be3b3cca2fe79deeeafac12e6b1378b3ab8fb5d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\20190

MD5 102095e2c7ab3710588dfb5af4c1068e
SHA1 f7434d0ef14ee077be321789e590809c29738966
SHA256 6f0a00fa0fd2ffead2bc85f0c2ce7611f4a870dac23bbfac81d2491f5014224b
SHA512 4c30808751a25c618d5210ce705c84435c8f09b18d846088823e720e671fefe0cb4d5e055f8187333089447b4d2c51cda3ab912bb2d5da5fdc2a48e016ae1c6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\20078

MD5 cf328bd20ad868ecfa9c62d9b8d2a6b7
SHA1 871053ff24bae61b7b88349e546d15d22c12c2ef
SHA256 a1f410fe7087e0e21dfb9bb522e512a4ad629e7f4b7cb7034c6816e81d56bdfd
SHA512 b17e20eeff0ba946a2943971a94569d0cc777ebdbbf0e66231a6f4d7e0a2cf0f805c3fe6db2115b9b98da8a4de38e233738f3e447257697866229107a7a249d4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\19853

MD5 2dab452530c28ce61fd03d5c39beb794
SHA1 55a1c6399252d1f1c178237a99ad45d5be68347b
SHA256 7fb94f4bceae0de678288975c726e8b9c897ff4b92b54be6a185419af0e797e8
SHA512 658dd410b4ccef985bc7b8c294098b488dfe4f002e8f42a40b5a1317c3cf1b9cdd6465550a59f4fe080cc97d3b7f9212a00e4c36e2715e02123e5b9695aaf9bf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\28528

MD5 7512a142fbe5ffde6eff69084d833bf5
SHA1 dd6995f63a0594384a7784661fd14fd573f62eec
SHA256 4e4ed6bd0f46286cb1e8f315eae8ac3b4224432abb95780ce8b6f1d69a02f709
SHA512 33c6ed7bec37c4a4d72264f50900cd7a5208f121764db59b326cfb372be3fe71f96c7ea77825468130fe5c6f77358afaf892a869139b01e1bae64005ed460999

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\21323

MD5 e89ca8660fcf2a78c14a202e858d0b2d
SHA1 04a8ed7fc1f4d1900ab52ad5c0ed1573d7520d54
SHA256 e400c7b3bbfd5e374b91e3e94ed036211314d8d4d491d72cf0daa0c5283a0430
SHA512 c9737c01feece76601d5a5de0b1ca3810fdf9962eba712aa51f43648c5b279ae95643dc9dfc1614091f4d2425b3567073b3f04f96e22611970d7f2376a361092

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14792

MD5 799b7831e8071f33fce507b20eee0b4b
SHA1 b9e64c6a04750ef89c502c59ce211bbba2587caa
SHA256 fb6a44d668228bf1fa7b5100644b8f68a838936b73a844e385cc0705d11cb3c3
SHA512 2fcded27258c7f5741432bcff6fc136cf30a1b472e66b62ad677ef83b3e0fa508e11eff1375b7f0000aa39fba2507e46bf3cf266cf244a1d658298a4d90bc460

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\FBA7F47EEEDB5C272ED0BF8CD3CE98BA2F59032A

MD5 a87ced8e68613d0dc8a8a37571f7cba6
SHA1 65cd3d8dd7de945e9b695585124eb17a00a242c1
SHA256 8b7599e494dd2b6237ba39080742965e4e95b8e8486603fb51207736d9b5bfde
SHA512 c47cba6520a83644e7672b85c1507c468fdfe48e6cfbf7633a14498a70d7baac51d6b6c5b0c76fad3227d6bc982764d5ff1c4474532f07ac4a80bf8046b86111

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 76c98a831375839ad77370e4905b7024
SHA1 b8cd252d06d127f4edaf2116f83450d2d04265bf
SHA256 4287ec39edf8be9f47763a7b58b07f05574c1bd260ce68a6c6e2a6a3cbc5deae
SHA512 c6bbbeb9f84b0c13b13c86105c3a42e2d72643f84a34c4be847dfedab281ef06f281b42ce3b88d69f5410a8c384698e1d2b590083d83718198a2b0ceef12bae6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 14acb86a908e23aa5fd2ca3d33b82d65
SHA1 bde10075ce756752c99f511429daaddcd7cff725
SHA256 8996e66b36b154253af618a797d8fbe9c4fc6028ea167093f106a619ad242e58
SHA512 e3086427960f4e3dc0b485c8a49a6b5445440b9cadb8d126c0e56490bf33ffa5033d5c23480058f7b6560036298c4711fa918d2be3997e2e5c7cb718e0b67327

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\672E0AF83BD15596A38F6A21D9945B1337F963E3

MD5 58d9833c25f359de634850d5c9d3390a
SHA1 15b49b04c7946fdc3f9fd78578164b3d1f13d5e4
SHA256 d2f2508f9ff789ef7594c70fe0b0d5d7549d3d75f983c4233ce410efffbbcbcc
SHA512 e77764eac54ee188d0b4f54583fd9a3d2e663fc6513a7b0f2f965828a097c3db5979ea7191e9bde9336e1af493acb6796e9b61c8328e11fb398c73ae7f31bb6f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\6125

MD5 d1a3e8fd66bdda062d679776a22a6cff
SHA1 c2390bcf60903964eb717f5f15e5e0c6d2e9f0af
SHA256 969cf1d9ec751fd1c139d0f6336b781f6312e77717f66a725fdd736c8a5be1de
SHA512 c9020500a94bc53ae685cd46d29437393d03053dd4557f0f7877d766a77ba320f9d820062e766b7b3c970aa4980e4f0240a62bb793eac9d15d3b817faf65402f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\25045

MD5 1c79f1c48b993049b83aaa28a1503c89
SHA1 cd6ec2a7bd5533bab45b4cc3b30618aef2202c0d
SHA256 0659bc9243be0d3d30dfb70f88f7fbb641fb80e723c8742c8cee55f8ea0fc059
SHA512 5f5a186b74565a83034fde234817ef3f450229ca264279394bc6c7ac3cbb4985f2dcfdd43385628a662242dc12ef83f18b873cd1d26155cb34871d1c8369b7dd

memory/6272-3141-0x00000164B50B0000-0x00000164B50C2000-memory.dmp

memory/6272-3142-0x00000164B4F90000-0x00000164B4F9A000-memory.dmp

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\windres.exe

MD5 18cd4a34ca3111b58afd6b45d4c92817
SHA1 c1e73bf677aa8cec0cf2d11e196cceed24235a31
SHA256 f245956c930f220f0bedf355a751a5cd738b4ec6bb6c5d584199ab3fa6c0a1c4
SHA512 088207b82c8523e9c1e12f0d47eea05020ebb03e76306be891ce7c371c2ae0507037697336fc88a25fefa8f451cb83acb1adc6f9d1488917df8291e1f9e7546e

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\gcc.exe

MD5 43acaac9b437bd941c793ca6d9e776f7
SHA1 c7de884538ea84e50127331fde9642c4b99fa966
SHA256 27d8ea1223c1cf411773a39e8ef406d1f1d5d8956a0351ba8c74cc6c87978258
SHA512 6587acc6c03afdfb7ac5e48f01978832dac491f9cdd86d1bc68f997e85000056cbfe6c27462ec3713c4bfad139f7a4937a0258eed98cede48dddacc2f17cac2d

C:\Users\Admin\Desktop\Compilers\MinGW64\bin\libiconv-2.dll

MD5 661d92527d19257cba74a711bd3a5666
SHA1 5c02b30aa0facdce317b981eba7a46827942e783
SHA256 5e3e889409110f7b7c2400f522b31d77b64fb3ab76ccfb9733acde34a07b7ad3
SHA512 b9a5a59a82abae523db746f48465bdadd655f6553c9dfef92a3b14fd2d561e67c90605ce01210c7476c77ed688e8ef398e25ed5f319492a79cf8284dae8398a8

C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe

MD5 72d8fe1f322d4eadbe4b825d0fbba8e3
SHA1 14111de0cf33c5608e2d800e96f0bdb8132b7105
SHA256 6ce68e248fb64e366aaa6a5fe34fbf530299337de34f03d51dac6b59c86b9a0d
SHA512 5f0e73be9ad6f5661b8a9a276966122c96453f73cf6f2dbbf10ac31eee8888c20217ac0b608f69e8302029352e620036804ee8733a5e5e62a104adad9245ffcb

\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libcloog-isl-3.dll

MD5 301bccd39510e47ba9bcb199c15319f7
SHA1 a1c0ade259f3c504e0a3d2a06b1f23218f15f0f7
SHA256 ff6cadf145cd39b19af0b4183eb7c98bbe2e9195d03ded4117be153052ad46bc
SHA512 2d692d7581ad3dc95c6222b02628dd805748ccaf5276674d5f4633d3cfc64847a6d81b87f9c82a1f866e4a0a3b48493671db4e3caf6d400304eb547c6ead3997

C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libiconv-2.dll

MD5 48e2735197d6dcdb9e770de6c9f6da6c
SHA1 2048bc4f47230541d4c41706ab63e2f2cdd0a178
SHA256 ba2285e9081fc62a7bf6f6bb3deaef88b43df5312d2aa2c5216ca061e0b3f462
SHA512 73a15c57cbfe79e69a1361833d667cdea0e12154c7ab79a31519eb507dc145e07bbae320aef62e69f94f4570bbbbfdcd15e345d491448ab54a06b3343455044f

C:\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libmpfr-1.dll

MD5 5610d32d53b668c95c69b530c2250dd7
SHA1 bd7e2953c438fd5e8d0a353f7f07685055ba80c9
SHA256 33180906b102967534f32d640c43b9e4bf7de7c4967368a76349d45e8b490b4a
SHA512 2cfd8f398b14e76ca051a17fa2366470c2aefe0c0ceebc1b609682f2decd7ee28df13b2a0419eb6258e484d6d549ddb321d11506dc884a254d227d9a439fbfd5

C:\Users\Admin\Desktop\resource.rc

MD5 d2a70331bbc48412340ce88452092073
SHA1 43c18222baa7c86a2eb1e6241c760ef2b3e88ec8
SHA256 5613984c776bc88a336e67d3ba1f7919e6ea5351482621743199fa3a0c6cbe7f
SHA512 028ba35f2bf9fff55c90003fd045b8cd6b6501cf0bbb6e30e3211ac7fa0f76e9debe8df129eb90ff5604625a9b08b84ce5b123b90a669fd6796026442252917a

memory/3440-4089-0x0000000000400000-0x0000000000502000-memory.dmp

memory/6272-4090-0x00000164B5130000-0x00000164B51A6000-memory.dmp

C:\Users\Admin\Desktop\loader.manifest

MD5 0153f157ed0588573d3696e7ce917058
SHA1 212cb7f95f09e79f8bcc17a64140a9377d1b5332
SHA256 aaa31d3014add2bed309b0c48901266365a35f174b6ed135eed0aa44de042a24
SHA512 1daf514fe7458237e4dc2ab5835409da76ac1a1f73062716e1fbc7c3cdf233fa2ca122182b9342a57dd43bd96b77bd8b48ed5597d3eca31b3c163e294991ca38

memory/6272-4091-0x00000164B5010000-0x00000164B502E000-memory.dmp

memory/6592-4086-0x0000000066200000-0x00000000662EB000-memory.dmp

memory/6592-4085-0x0000000000400000-0x00000000004CE000-memory.dmp

memory/204-4078-0x0000000000400000-0x0000000001149000-memory.dmp

memory/204-4083-0x0000000066200000-0x00000000662EB000-memory.dmp

memory/204-4084-0x000000006A780000-0x000000006A86A000-memory.dmp

memory/204-4082-0x0000000068C80000-0x0000000068CEF000-memory.dmp

memory/204-4081-0x000000006FE80000-0x000000006FED7000-memory.dmp

memory/204-4080-0x0000000065600000-0x0000000065619000-memory.dmp

memory/204-4079-0x0000000070F00000-0x0000000070F24000-memory.dmp

\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libisl-10.dll

MD5 22ae27db2aa723df78bfb0082c8d655c
SHA1 13c22b295c23e838fded260d3dd68370f9fead17
SHA256 1d210067f31ba2d8135416c61805b22fb191add0ab2165e6da4ef549a8fab5fc
SHA512 04486ed3ce9dab682bf8307391c98c9e191805b777ba9bd490290b9a30bb53aecf8859a918ed6da0f11e52fdeec3012618a77d9895ea59edb847c33685add32c

\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libgmp-3.dll

MD5 fe5c6a36e0a8829823ba55b9d6429521
SHA1 b0fcdefd0c045c8d5b2bb7e1a95cf6a0938c8b9b
SHA256 3bd2deaddc781222f78722e1b734a91da27b9f0e679238e624d83015506a2a54
SHA512 c1134a9e515db42ac062de0a79995a7d5cc44ad67461ba960ef3239c4ce467c10af4c3a5017c0ad75197b82f3f9df53bb975e5af01ef07430e6414d13252c39c

C:\Users\Admin\Desktop\Compilers\tinycc\tcc.exe

MD5 08c121c2147e21032d5212f3d430660a
SHA1 e93e7cca5c3ba779a36fb14e5fdb3182d745279a
SHA256 54f013a8811498a3bd20d8440a497698de96b659930001874f7c7f638f887d1d
SHA512 7b4eddb5e77d78640b56c4b970f96070bd7ed6d281f9a2d5895e7a1b4361cb5edb027068b087d71363ad617609109e6c42795022ec46b16a48cd2b468f711d27

\Users\Admin\Desktop\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\libmpc-2.dll

MD5 06bd9185c36cf58b25f3cb76eb8cca45
SHA1 aacb00411e2870f4e21b986bd73bd270f25b4468
SHA256 615088d6ae8eb77a6cfed97616a76a992843794f67a6d0e2a496dd1298a9b5ad
SHA512 a3c15d0482545091ca1de236987b12af3db4f81aadd65b306a5d04fd4dcd3f3d11759f9ea247dfeaa8e8675e038ba92cb16d1b549a8c4fc474a8acec900d5af0

C:\Users\Admin\Desktop\Compilers\tinycc\libtcc.dll

MD5 018d32ce36c442b94c89a112282106ba
SHA1 d64c9b5ade44b0c766790581d31d2925f80c8fe8
SHA256 5673e555abaf7adc8856c04e2ecb63fee657aca2c1cf538f7bf4ddcfba8b78fd
SHA512 cc77978a01379cbae0c45447bb8dcbc3bee99d6fce5eecbf0b5128ca965ecc71a1b86f6ec8eef79eeb4b79af1a2f9f436eecbac2ec5880f2c10e3a5cb2cbede7

\??\c:\users\admin\desktop\compilers\tinycc\include\tccdefs.h

MD5 b6b2dcd5bbc4337e2706c1c85acc23ff
SHA1 4bce6f082407dd411572bc0c9bb283f20d637d1f
SHA256 91a313663ec43ad7a74e34e399cd8a7310a7c906fab016bfef67759d9506dd4f
SHA512 da8a86a7ad640a95154c85b326a7b6f9a10139b38565c41686c14c9e9e30713fc67c036ca856f2258a91eb0e881db4e057e7bbc602f032be0ea0f37e88ebb49a

memory/3012-4143-0x00007FFA9E200000-0x00007FFA9E265000-memory.dmp

memory/3012-4142-0x00007FF63EB70000-0x00007FF63EB86000-memory.dmp

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\ShellAPI.h

MD5 4ee0793e98c6a3a1989eb8d97afeb293
SHA1 b22cb542a64f26b984b5b49289303b179a987f2b
SHA256 9c47a28185d0338270e72cc9918bd8b91ed46ae2cd04e020210bd100d418b325
SHA512 84fe7877c638edc302b10c872fc588f1b5d510cea976b990b5436214e4ae728f4f60e6e33a429b43eda369a77c938063a1613b07451527b225f36f073fe35109

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winreg.h

MD5 0f0e5cb60e379839ac67467a6fd5280f
SHA1 0783bec9c6f621aedd45d2f1010740d9a6152b0a
SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
SHA512 06c87ae227bf6d9c00e8404c728cc77de9840237647605aabf197a85131e4835ff6ee96d7bee24fd7b423c86f64d673669d2d2e8061f03473b2b0a1e10dd8bca

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winver.h

MD5 f0ef1b8ee3a22c3fa3ca4dd26012e309
SHA1 4d78773275154677a5bb66d6393636ca2418ee69
SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
SHA512 7b230b6be986e12c639dee195198ee87ff1e9e0895fe3c101a3e8553d272986b9800c3c74b53a89128821d2d8d439a4968e48c29b2eda43096e48f51b871b18c

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\wincon.h

MD5 a7eac92053e54e029dc3b8356a49df4a
SHA1 475df5425a60973ca79c1b0d5fa05dfd59e99e6a
SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
SHA512 1a1f5032e2ba7a837fb043fc7b3dc15796b27fa481b2d8593f8012d503d1aab5c82ab54404898fed81418ffc3b64712476dbc89acaf92aacac051ff40dd3f7cd

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winnls.h

MD5 71300a6ff6d42614cdd9a671f333b4e1
SHA1 8ca456c24c9c9234ac3c888e74b26c3d0f60067f
SHA256 49c076029bd862455f3f0d6fe4712be19cbe60c8c25dd81d20a4ccdab2745f50
SHA512 9f800e79723fbac22e433e2492b949ae71a972274ef3572d2521de36c53b20e6dac1d8b7e4c823ea22269610025f6700fc0f5cb0c57b4204e6d36befc320679f

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winuser.h

MD5 3243b7c1189cc2c02075c2b175592ea9
SHA1 b520f45e195a50ab00acc161efec7e6620e652af
SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
SHA512 cdaa9d91f80127028dc877924d2e41b4ef55714485536c4b64955195c94e8ebfbecf9a0d7545df535cbf4c1977ca53c14379b96abcebf7aec461bcbb87ef040e

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\pshpack1.h

MD5 f7ce406b57af97c8ba95eeb9d7840c1d
SHA1 ed211a37e0efca13a0146f9fe775875d32db3496
SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
SHA512 b7ee10fbfe60f4f6e998d48d88c36095dfa70524b9e24a6e3bdd6c0a62fbfcd66725e28f227da1469448c909d08dc57add7484d7feeca35b2ff3a4f526756256

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\wingdi.h

MD5 fd80383f6f92379e074379ba54d68bdc
SHA1 0a4d4926df853e126fcc52150c84822af1ef8035
SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
SHA512 4ed6c5508c77a8a3272835c6ae1323514e42d015f3cb53168382ffd78fb1a73d806af5421378d1430ed344ba1200e3006d5aaf4150e925c1f2267a8d637a50a4

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winerror.h

MD5 8a51f06df0cb380eb7e944203bfede79
SHA1 92b3f5d7ebbaa0f35f30f5fa68698d93a708b0b5
SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
SHA512 e50c7d2391c84b3f975f5e6e732691102595bbb857987ad0577b370c34d9c9c32de3fea64dc8dd45608320eb0e7455ee306ca50b1f19d4b209bfe1618ef9b22a

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winbase.h

MD5 18908ace3445091e5966cc99f9d4b5b9
SHA1 130d1cfa2d8a8a17fa2afa4ddf4fe3dfba4542d5
SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
SHA512 0e63d752b56051057c4e553307a708c2359eac58ea96ea0077931642482eb8b6e0b28984a278663d85c6b1739564cab6ffed3d9582306473841a355bd0cbee61

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\pshpack8.h

MD5 4fa6301a9105c4442fcd8181b17bf100
SHA1 cd49157fa734af5ecb57bde0e7c57b9bc425ce98
SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
SHA512 ec6c5d061c788463d3e262e69ed74f5a21022007f4e3bc5dcdaa64ed641d0c4953a60a465e7972756e427e3b9ac71103aa36ef298f8e5d8fc946210152612599

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\pshpack2.h

MD5 5f9ba2a3122f6963219bdd95eff0d63b
SHA1 fc7ef1dbf2d51d9e38e79bc4d2dfe7f89107263e
SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
SHA512 4339e932da337fc33cb8544fad3065f82f689e17ae9cfd6a3035a0a1c62271ed0efc44553a75c29207e97555e55ff8f76d42fbef57b46b0e117b087a367a5d1f

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\poppack.h

MD5 584ebd620b89c671805eb5917278c46f
SHA1 645dca8a4775e323eed290eb1262a898e3bd8df3
SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
SHA512 f80c37df443967189b8b3e246e860e854a65283b9e7dbbfd87fe30e6e8285c785df2d6f74ac9d7d59cdf655e543b830042a51574fedcf5611714946da2d1d542

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\pshpack4.h

MD5 9e2e16a461b193bae9e69c59c9a3e040
SHA1 17aaa9161d3f9d7270edb80bc850b3ad1cd9151a
SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
SHA512 37c580b406eb30fc66b0135d91d8dc743a9f2abbf830a58272ecf910e4f4bde10ed9a1cf07a8c0f24bfa2d8e86883af76c5a7805fc70a2ae69f1a9d8225774df

\??\c:\users\admin\desktop\compilers\tinycc\include\sec_api\string_s.h

MD5 544899f39ca616ae07d97a2fee8de3d4
SHA1 2f95831d27cc918e633e8d711087ccf7c3da918b
SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
SHA512 20dbf6c25ff2270402bb4eb99430b83128f66d577b7c9277cacbf8cdb5438ec58b6b1ea468499d1f48338cf4f2433a1a0e59e242f812b419c6afc637340c86ab

\??\c:\users\admin\desktop\compilers\tinycc\include\string.h

MD5 7e3ac3220bf883da2db8cdc7b8100d0b
SHA1 666e6f91306ef6412ae912fa386b3decc6332ad5
SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
SHA512 1e27e9e73c5d3fbec7ce41cb3b5fd6615bacc416991321bce22b599150902352cf60078cd447bbbbd49f3106254c5e88e3fb01ca7de62da9a4dedb6fd60f9b7a

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\guiddef.h

MD5 d65fffb282c1f60ccbfc4dcf1410be1f
SHA1 2be8badb6c6fb0db0b023bfbc7b6842e0ab73a8f
SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
SHA512 e7f9554980671dcb14c62ff462ae34961c01e0dd1afa9f8e010370b0941e22ba619abea98dce090762888a1e485586baaa0917167ff6373c8309374ebce8054f

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\basetsd.h

MD5 4bf8483ca6a55237b88b3fb04917c9b4
SHA1 1d5a57a8af15ff88521335970f6c547eb2bda403
SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
SHA512 7c4e012ef32a9529a0fa648320796d2abb287c3c37f22d2cfefe62fd0851cf68b5d373316ad70b51d09f0d0f1f48843a5d6e430c12367b5363648eeff1160466

\??\c:\users\admin\desktop\compilers\tinycc\include\ctype.h

MD5 22e5a00491e32d15b40b196397ad01c1
SHA1 b0db6fcbf4abd2f4fdea2771399c1e502d9f8106
SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
SHA512 28839104776441738233334a20de6ce3ada51179fb50366c27ab60432949fc78e1ccf735d2e80216f8779d84328634005c322d0010875e8fe0ff33d699ecc114

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\winnt.h

MD5 67fb88877fbdeb629c2b760dfe1e77e1
SHA1 656b9a3667b073fb0f8c8c245b164dca29a7f96f
SHA256 d4d1a1d444d7b18cee12b875c1c983aa23ac5d6526dbf5534de4a3c9cf61abda
SHA512 301a3dfa2547ce8c93e713f4c0ce340ad74447a96a9da625774fddfcb4366ed900542111fc6dfdb781b9720d9751f2d6b766b90c4fb88fa0444b5786a4ca8830

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\windef.h

MD5 4149cf07a0fcb5fafab7f58bcc951d8c
SHA1 dbf6f1002b67da30ce63be5d41e0eaa76263ac9f
SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
SHA512 1bc969d3700c3beb6416eed13942142315efee5f929c55f539e11fb9196c8865ca05be0a39094c6e7457b671ba33299d3861aec6161dd0429e8a375f378659a9

\??\c:\users\admin\desktop\compilers\tinycc\include\excpt.h

MD5 d236372cba09e14c37b4e48f81baef83
SHA1 11a3bffaacedfa1caa4b4bb836cd95297a4ecc6d
SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
SHA512 d7c22525fbb97bf8950db69645511420f1198abe33f5d0fe07a5ee8dd6b5cda07038b6db71a2995c6f5ec1b85d8b98e4370330193132e95f2a65e3a847f04408

\??\c:\users\admin\desktop\compilers\tinycc\include\winapi\windows.h

MD5 3c6791cb204a9a3a24332adb2da36bef
SHA1 4c510346aceb0dc1577edf738f10e772c49cab17
SHA256 7b2bd9dda845c0c3bd8e26abefe09660ce23386bc2a378c185ebdc9dc508193c
SHA512 1f82707483f507a4fa6657485619c95d500f39745eaaea0f0180652092d7467d1874032f1d7cd124693b2424c533e2248db2a8c0a8b6400ebab5f9250b9d4370

\??\c:\users\admin\desktop\compilers\tinycc\include\malloc.h

MD5 537bc027e86f7252d88b6bf2fe5b2f35
SHA1 7f3361d220f96ad1b93669254937929f267cc333
SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
SHA512 3d7693f46fe1272decba8efb6a01853786419055cf338cc900c9fe3ec1b795ba25e16878a5d53261bf3bc3bab7525110b6f1844501d5fb6be45c57b5d277f625

\??\c:\users\admin\desktop\compilers\tinycc\include\sec_api\stdlib_s.h

MD5 ae13bd6218c4840eacac71f31c45b2bc
SHA1 e05d796ce8f5aeaa629ca9f1e3f6d4ac154148a2
SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
SHA512 689808a64c20260f3091e94dce6eaabf8662ba627b4de4c43ed685390565186e69ff229cb4755e9d3bd12b5c46e16ccfd848652703572e790df7bbab3824ff9a

\??\c:\users\admin\desktop\compilers\tinycc\include\limits.h

MD5 5be6b04221366632fd3ea3110213676b
SHA1 5fc1f334ffe514780798f6178330f756bfcf9972
SHA256 395d8bf72ed91b83d512234089ae8a96d8a21e72f5fdcbd56af4aef6e1110c62
SHA512 1326d02376573e3bcdc9567c00d443d56b4f72b07452bf96f508f0f3a49c5e09c73e643b961aa5e47c212517002f8dabfd34afbb840cc09eafba1f6cb8edb7df

\??\c:\users\admin\desktop\compilers\tinycc\include\stdlib.h

MD5 13f9d6f0f5fa1994d0a164a2ce8d3145
SHA1 5869abf7724e980d0acc9760776cac2d9e5d1686
SHA256 44a1655e92cb9aa0154023e55ca570cfe410e0db024bbb0b784cbad61a3e5d64
SHA512 f0f3664fc54b1af161d9f3d19dbd8fce87de29ebb0bad503e316dc25ca44a2fd1b2024ce73b305de78c24a0ffdc9a899d82d0bc5eb0905d913c8adb24304126a

\??\c:\users\admin\desktop\compilers\tinycc\include\sec_api\stdio_s.h

MD5 3c28755c2186dabae016938e1308b77f
SHA1 9437b43cd64ed70638df695b1b9eab34c1b04f57
SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
SHA512 9d89fe5e5b8396998a552e443970f45c8e9f2f04f180d14f1cbbdc56a1fd5ae0f2c9f81b8e25d0dcb20fb1437d9bd178a6dad68a323aa0e9eaef31b6b6d40f33

\??\c:\users\admin\desktop\compilers\tinycc\include\vadefs.h

MD5 dda4463da15121ed7ad4f091fbf61dff
SHA1 84b4c4973306ef725c3f61446ab891cac6aa66a4
SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
SHA512 d3417cf7702a17f0f327cbaf8d167d7830a2955c19d553893329696cdf2312707595cf0f6ddaa36ea18d0cea41f24e6fa9c15ac14d5bc567bc25a1cc81b733fe

\??\c:\users\admin\desktop\compilers\tinycc\include\stdarg.h

MD5 7b52fb5e54fdff4c741f5180844cb24a
SHA1 b2d080a82d0d365cf563c685da15f6094e004054
SHA256 a38f8d34f5e09658cc3a8892b3a7e80ff566eaeedc194e5a85ece0b675993137
SHA512 db442c6d0778e97fd00ca42804bd668dcb00db10418af54106c7302a140cd47973ab3859d119ae8e2413fbba0ea233c60d05d786a84f27e539247f98e16dcfc6

\??\c:\users\admin\desktop\compilers\tinycc\include\stddef.h

MD5 6bc4a5a0894639efd36ab6d597b70419
SHA1 5f66229dd24c366c3ed079b2cf410c4346283ce9
SHA256 af03437868a4f8a60da48bec4cabf42a85bfa2be67839bc91dd0f99fede7f907
SHA512 45ce26c12c5ddd01a6a58baf91b78dfb19fa89a59ae686da4183bf68a06ddbeac63b01e1d4de668ee9e17598b51a9205a17ae457567ee2688dd2fdb1c279ee7e

\??\c:\users\admin\desktop\compilers\tinycc\include\_mingw.h

MD5 3b4e52eaf66a0434ef4bd79587b95243
SHA1 c0c21c145420487f4925e8b8f05e4eb5cae63fc0
SHA256 f574410ada4c9ae430b17af722102f6b9dc749d7ec8dfe45427e51e269abe034
SHA512 333b50e44756a6763ebab63719aa2f22332301fb4ddb8b992d10b0685878765eb22e5e56c540ca4ff1d3cd79e7cb7bd119845ca97ca13a270ac3c24d401220e7

\??\c:\users\admin\desktop\compilers\tinycc\include\stdio.h

MD5 f4948adea7d9f60748de8b427ab85684
SHA1 101ad5424e182236eb7f537f17ce846c917ced27
SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
SHA512 49847ca1a78bc100739b3afc8a0d607ac37e340cebbb0c04b2c067cdbdd6ed33ac5557214282699a89e39f4b8bb3a8b6383fc0a25c19265089e09b08765ea693

C:\Users\Admin\Desktop\Loader_1.c

MD5 e2446e3e264368dc6c358e9d39d5899a
SHA1 67ac9995b2c8ae3336039d451d09c2ce5b395ef1
SHA256 3d07a4afc57f7470908ba73f3a5bf08068d6670f7913010c3ea9ad962d566838
SHA512 c663d4106d4ad54ced877cfe96af8ca10c62c37df5bfb1fdef41fcd07e0e91bd2fe97ab26808620d1d65c3f77b94866e651a1316c7a94a69fe6ae5b32a930de0

memory/5580-4158-0x00000000004F0000-0x0000000000512000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\XenoManager\SteamUDPUpdater.exe

MD5 9908883bbcee91c29c9086198d8d8146
SHA1 eae0d98cd5147fe75379c165900f1b07d4970505
SHA256 829d1379ee5a8da6b21af8a5c4dd9c262a569847b2664d39f5c415e0dc74c399
SHA512 4706586c902c7deaba67a7c58ed60df4960cbee62d63148b05c4d82b83fc685f61201904d09615936d1a505f0ca61cd376a7fe37e19b3570f51c73a740073629

memory/1412-4176-0x0000000006030000-0x0000000006096000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 5518f8cf9afea6694ddc238c046803fa
SHA1 bbf2ee73766818b6678c885a3c7986c27dd4cdfc
SHA256 82bfcbda6677c8942d9ac577bc1115b30f37bc4229c419f493aabca277ac73cf
SHA512 12d95e86f0a4b4c1b86fa03b12e79a6d2e82e07d9c888426e13009e333851a67e002bacb61376a879d360fc01469ab253a3b6b81a7f38a1c3122003c90d281a6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\thumbnails\88ea52cfc6efcfccfda37222221f55c8.png

MD5 52b558ab302976200c679e816790e30d
SHA1 4158be18925dfa111b5ec6cd3b1e7cf04722a0c4
SHA256 058006b42f047bbd719a3a44e100de4774f022fd1ebb75a92726885a0f2ef322
SHA512 2ba0d89b7413fc3e98285a9ef207fb2c9f4ce86bc6438797e2808dc28a8fd7aedc4b579acbb411f667a06e96ec6bb91efd1c405d682cd5b6dd850028636c3d4d

memory/7080-4231-0x000000006FE80000-0x000000006FED7000-memory.dmp

memory/3084-4233-0x0000000066200000-0x00000000662EB000-memory.dmp

memory/5684-4235-0x0000000000400000-0x0000000000502000-memory.dmp

memory/7080-4225-0x0000000000400000-0x0000000001149000-memory.dmp

memory/3084-4232-0x0000000000400000-0x00000000004CE000-memory.dmp

memory/7080-4230-0x0000000065600000-0x0000000065619000-memory.dmp

memory/5628-4240-0x00007FFA9E1A0000-0x00007FFA9E205000-memory.dmp

memory/5628-4239-0x00007FF63EB70000-0x00007FF63EB86000-memory.dmp

memory/7080-4229-0x000000006A780000-0x000000006A86A000-memory.dmp

memory/7080-4228-0x0000000066200000-0x00000000662EB000-memory.dmp

memory/7080-4227-0x0000000068C80000-0x0000000068CEF000-memory.dmp

memory/7080-4226-0x0000000070F00000-0x0000000070F24000-memory.dmp

C:\Users\Admin\AppData\Local\loader.exe

MD5 f701562eb6bc2d60da82bb8fe907594e
SHA1 b4a927d39ec3eb6fbf3ff087ee4d23dc9dfc158c
SHA256 17e8ea093d6505417598efa6d8b888fd164bb1e0006fa2e466c9d20e0dadb859
SHA512 bf2f37d5764e57195d5688b0fcd179f471605cacb6c1adfaa6abbce821a83217fb9fecd2a28c87253fe4de126aa42e82e79e639359ebdf1a1b7b11ae448a63d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\events\events

MD5 81e2b0cc2486594b9b9d79a657bea992
SHA1 8f2443024d23ea3a6536d4a166555743959d0e1b
SHA256 ca1766136c8ff7b33ee197f166e52e6599ed2dea3a84e7fb97f919703127c3a0
SHA512 4183804d2021ec45f46135a20541fc8b60da816e6ff1c39a078b8ef6eec18adeab3e10c889f05623780be82dade9544acaebf794dec6119cc4225d52fc7dcec5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\13944

MD5 55a8d252894266300a89f31bc69524dd
SHA1 10f14b568d93306a704f4ba0e0d971ca9e269ac2
SHA256 3767fe678a58a2f88e95f2feb19bde57c5b51f2dade1bf9b91f883fe97e6fe0c
SHA512 120b98e8f1f372735a07630d09f9f23ec47b4e2bc21cba09b6d1b5ec4a10252789b44c54ee4af2a384c0d0c5ebe3d473eb7f0cf9af55a1b2b354eddeb94fd89a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\96

MD5 6e819fdfc610915a77fe2cfbabd7b145
SHA1 e8cf18ae57d66802977bfbf4ac202fcd58ad536f
SHA256 1584b520f67bc4f31e6d6e9340f0b8ab39bf043bd8167bce9612386c2f7006dc
SHA512 cea800b3b0767a24e403d61b95d51772ae24319f0e1845e33830eea96789fe785f861b5896333e05dd84168c18513f0de791b72f48e8b30ba0f9bf8af0a0e7ff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\E026A905450C1DE6A0139A4AD0D6B2293183152E

MD5 2e439cf4617e199d70ea95f272dd3c8c
SHA1 d80881fd8d0f1d9849143069288806d5e4c1fe70
SHA256 78944f359db22634b711dba08e7e190c2183969d355e61f0694b36b2d90e5152
SHA512 2253ff11b5fcaf6f54bb6a74cfe9c2aa3911f1f1dc263739b4601b4039f00c6731c353f9aac403875991fa0e2154a3b446275ccedfde5f9d4a134db86ce0f649

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9d62f150af15a31c895a7b7ab8a04f9e
SHA1 a6c9616a2d71f4e8bb3e4196460299b430df14c8
SHA256 83e9a02ad1f63a07274a62317b25896dde6df7428e3cafa94ec409f7b74b20f6
SHA512 5d6cbe92f2e762a4396555495cfaae26798ac0f37010489d5e78de1857d5e56613533c72c641fc01b3ab3ab0b3b117b2945495679ec7b48f3351ee9889a826a2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\D11D42B245EE0BA6B2C92AD7103490C5ECB57259

MD5 cc52af11cc2ec89d7f689871c67a251f
SHA1 82f20050bd752b45996f7d432d092fd6268d2c2b
SHA256 3f6ae42520bd0e91acc68163ea1fa45ab21f77158ec455dbc9281ffc6c1ecb76
SHA512 fc8ac8bf3297af801d600fef72761f892be14064cc7c17e463f6e14eb561f8cfa85828af1dcf94103211fc5bbf17c23263bb9fc8b929c77193ab1cec1a55c21b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\3D6CAB1238E538905A546420A55F25421C1FEFF8

MD5 f2b1d77b5e2564cc64b9df353dd26dfe
SHA1 8ada2bc5064f8adc32649e36b6657ab373f16f3e
SHA256 20a4ce438af8de2d993bd4089de1e7c0c0fcd4566b5df7729d29758555478ff4
SHA512 449002ed238f4ef435a9dc9c43593a36909b654429f58446efca1c62ed7ea7a603f466ab97625638fce1464967bd9396614988311c3541e6568f33b7218c4e06

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\12101

MD5 1b01ce11f86289a0ca5d008a08321d16
SHA1 04477b6a66fffb288fab395ff9279560949903bf
SHA256 b0dcf3b9f4ad4179ab426aa82f8d4adc75856a6704554262d6c42bfa43858f83
SHA512 217ec03e2b8d332fcce24d12fd056b5dd55eb87b8b1a5eb7363e95d87f9cf696e7a25409a23c4670636e4456f92b121f6c6dab8cd36098409301861f80b811e2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs.js

MD5 31e0e50826bd3309c7206733313ee9e6
SHA1 4ecec8e926bc93ad538383cc2dffcc7795ccb082
SHA256 f26e0f70916214d4e2cad46d4e97e88047bc5d7adab4f64c6a2d667fb0e451c0
SHA512 ea3630881cc27387d2a0a058d5c7d0c9ca9a10bda72ef6e064c82104dabc772e25d851ac5dd5a68e500be9270e0bf3b43d303cef18836308219218766bad7514

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 b529f6ccf3c0c117fe06dec93db93b6d
SHA1 f1cf538a7bd0c9ef0b97d1d72782f6f6b060ad8d
SHA256 1e57a37d7018be8a93ffb6a6d15e238716ba4e54cb9801925ead00964e843b67
SHA512 ce6360468d35e0f27c3dc0a96358a09925f54044a984d47856970b48ba30c39f98216b8b887f76fc8be67f80b907191959114ef70becc1028fd9cecc0acd1acb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\EE049F7A8DBCBDB6D7F07A74C8D4B776F0747710

MD5 245937dcca3f8a24c11427db3c457700
SHA1 b1284123fa2e19f2cf22e0416b9bce9bcbe647ce
SHA256 c0a7ed9da26e0364126a9bbd0b1ea801e01b29d0724640ed4c24a04d6580c723
SHA512 391738aa51f213bfee574bf5d2194675eaa893dd7a529f282e02e36d630f423fcfd508c1ddaa3db783018b2d0376b93783f405ecb411319a745d0b01155c0662

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\20454

MD5 94a697444b3a06def3647fa8097a713c
SHA1 9f83399511e3c7f3a7ff358fea6e1b7e7e687ad0
SHA256 11615a2fe715a498d4b94c30a35dbdc638a87b08953bb148d12f6c002fc78a35
SHA512 dad62e77a955588db37213eca094dc6214b944ebbbba4a1fa624f3436a4a650619d12296b78eb02b229ca7f9183a1a3c0f6646a1ab9b86febe499d7b1135e038

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\60664D6652F989F224F6D91E2C0286D5087A769A

MD5 c2567f79dd854f82554137b607ca65a7
SHA1 55dc25959a5e8bef3b4f6e5f1c40c003d598e91c
SHA256 86ef68dcc4f4ecd87e85c8793208c208db0bd71739cdb0b10c51af73c67d94ac
SHA512 842fcb82a23fd46b0e8e5db4484100a339eaed40bb94f18cb1d502e6b1217aa4e96b2a140b36de823cc980868023f2c6cb45e3f17f88aafecb22487d03fdd0ac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\AA9B88642D3A65A4009509BC44A3DCB0A74E3D6E

MD5 42379358e7c622b9b75a56fbc2bffdae
SHA1 431b4e3fad939803bb5b2234c2ab805332732b15
SHA256 c583cbeb6b4a9ac707a835e47c10570d1ecedcedc3b3dfba996e69c96c5bc6a6
SHA512 f98396df3781775844a3a962e0c99ed42dec020b3c27a2304f4637ebe6588b7abc555a8ebd016c5a4286c8bf1eeb82f457c8a7d7a261c7819a63b0885f8246f9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\23955

MD5 df3218b3682b781acb064a868d9bef35
SHA1 a6efff5df2e0601c3297a22c0ea0476c1fb4d101
SHA256 3e1a84953be8d411b5e8567d4571cb637f8f6e69bcca92c37e238ca18f6e4dc6
SHA512 25922fddfc61234f1077c0a70219071f53f58d08705ff114d649b843646c6bfd55efb74501d71f8c842b49ad276cbbe0df7e8f68cfe3a319fa568938d0d6e2ee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\22980

MD5 1263785dd42d65a949fe5afe345b8217
SHA1 754ce0689354bcea2767cb02d143f9c5af27cc0a
SHA256 6a8f0c22ae3aaf05cae1479a78fde0d85ebc61bb87332117089858e4dd8ae382
SHA512 201d0ec146d305f29ffa13ccf5bb15ecfb3aaf0eb2f377dd8078b43bb5152c27e3b9e3a700a6ed69830a5eab2f2b8664cab1a1bff89cf0f314905cbce4eb67d8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\16406

MD5 6d4d5a57e7fdf639b61a50776e36b8f0
SHA1 4d43eb853ff2998a1285566dc0e93bb62fbeb2af
SHA256 94e5909e368546d4ecd49b1ade44d75c8e62f3dd70c81ea6fe58ee048a030602
SHA512 47a693ac412c94d2333a5e1d39fd7097f7eabeafdf9dc69c29baed71ed5cfa78383167662c6dbadd12f4f55bba5f3f132b7d3737c1f4e7409bf03a9cbc2f6bf8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\3A53D943CFA335A79F6356B781CC8CEEA73F88D5

MD5 0bdbec0ffce597b73f172e50c3a6fc2e
SHA1 6cf043cf030f586262a8574ffbce0778ce187b50
SHA256 1f42f68a223a533da2123756465285bd5880c1dcd13bfc445e34428a1a541e5a
SHA512 f47c6160e8405cf00fadda346a758ae6ed34413e73250d53a73cb13777a078372804682d61c066a33ef951bf04031d570da3a062e4e57d4b20286ca05cfa2cde

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\5510

MD5 3ec0e57f3b6dd36f3972e92011cc26ee
SHA1 18c364e22b76398b58967dd4c3f679983fad4cc3
SHA256 f295e7501cc90e4ac13d713dc5db19989bffdb07f0e995e5d35414dd1f83d36d
SHA512 78058895407a170e0d35de752da44425921eb6d43b5b48069e5fa471981f75be04becb1da9fb8ad6dd3b28017352c980dc8b42b2edf4a4d3a7714c67c619f615

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14073

MD5 35267bfa144614660bec077565d29e10
SHA1 384c13ab18ea94a281b4fabdddb378fcae220fdd
SHA256 c10546b5234ec649166b39c16bf46a3bdf26cc89d92b56cdd18eb709fe93ed80
SHA512 936d59631ebabe03bfde29acbf772e067c26d2a5a090722fadf9052a37135467c9b82b174510c090295162b85aa9778a470eb2d2b9e4d97ee7aedce3a2867e93

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\26350

MD5 4177485ed7152afd7e4edb6722c1f38e
SHA1 e5c18053635bd558c6c6e9be55f38e64a6f32a8c
SHA256 59a7877bcdbcde001d1ee64dd5e29ef2d7b159ff3ca1d286f3a7ca50e901cffb
SHA512 bb276a8119cbe74e99014d58d4f227b4b113cd44e9f8e7306162c647c90c7c39d232da2018054bf1e60c024d30b7d3713be122c4c4f20f372651c8b403b55433

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\9236

MD5 d247cf0978779fb191d5a21f5e1c0457
SHA1 1e07d9a02dd7efbd221eeb80dbfd42ae4a1b2ec1
SHA256 18bac1d66c3a1ba5dcf22b52916f0201fe0fc03bb4a13decafd3e9ef28aa5e7a
SHA512 1e91b04a1359cccdf7001b3ccda8e532989429472f149a76a8e33b7a85c0a623149217865882e083fd7f606fa26d5d9ef9a8d55630a3d2404105c27c1c6cde34

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\17462

MD5 9efc0ad1b5871c1e8ca0509f04c2a3d0
SHA1 be23f9415f63028ec308cfd0a4b10bb34a4bdafd
SHA256 2c33f5ae239265af23fb133dfb87aa8bb718d0441923eaa346e817a5fb7d3a5f
SHA512 c11d32af5e3500f908bdd05f2fb0fbe9c1ff03b04ca28051c989333f8f7262c4c65d2cf9173640966703982cbe978d138f4bccaa55a7f80741fa4bdd2862868f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\30188

MD5 b014a1fef4836c68ad488de1e1275712
SHA1 3b8387db86373ada260fec3dc0f5d9f1fd546553
SHA256 7279bcbca047465e35b48f076fc927b4baf70d14a0bbbc872bcf40d7386999b7
SHA512 80077c56b777783b2b3140045ab1d993c548f2e30cbe843d674d3c2dacb519be7e66cb1f27c1dc9518760279a6a21f7995584390ed8d7b505a3644b35c8d70b9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\27596

MD5 7e0a266c3b3e31a50e01fd645f3287ea
SHA1 6e3853e08b8dbeef0f5230f4e52f3538f21a8634
SHA256 ecedfac007580eb43e1f243ccb180abcce6790122d2c95a4a57b4757ef79ea28
SHA512 e817b5363cac7ea92ee54e1cb1d1d1639b6ee71f8463cc0a322196c90d144df9875ef970067c86341d409499cf67e43f46505c0608ef37115d4e0d133fc410d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\28729

MD5 82cd289afe5e3d0fa14bdda4acfc4c2c
SHA1 b4ba91a553167db8059a23ba5af5ec195181bbeb
SHA256 effaa2e4052cf47998787961b78b882880e45aabbe9368a6f9b688a337ab2ae1
SHA512 efd6b4b0e50bff31b4687338a63e35803540252cd3dc3a8732bf0929ee1d18235f1f0b8d9765f27ab9a83a76851ef1a7638f17b0d779d3c9d1d0ccb61b60ed20

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\5421

MD5 562a8661e67c30ea751a8ec87513a060
SHA1 560938d162ea25b48b9a68243c6a6015c783c15a
SHA256 6fa86fe1be0979b06a85e3db8e390945e4b9569ea1cabc568933181ba9e39606
SHA512 d509fa537e782fd049f202df04bea48262aad8445314286ead0e362970b2ee81cd7eca9e09270987e5e26c3ed8811988040656f628ccd05c9316ca8c140b24c2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\6779

MD5 d3c851ad02d588b2cb29b81c55427ec8
SHA1 f02962d5470f2ff49f77f44e6e99bf80c16ac366
SHA256 5267339b93c670f7576eb98df82c2e95e07b0470093d865e8951adc88df079ee
SHA512 f04b77ff76e044a65ec155bc51d04c1a9b2b1b5061b0fae456a4c609ca6e7af179794182fac8bf06a466a50461f8c7ec8b44078130ecc3c5c826a8d9f08f06ec

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\26361

MD5 c64901b44573501e5efefd624cccf91c
SHA1 257dfed093a00ae25682afd2efc2202ed700f418
SHA256 294fccc9ff199b7b92a2e230ef7831acba4a27eed17d0e811247994bc6b27783
SHA512 fa537d4fbb12e400fe370bca7552c15ad935c920e949a42ae81900c4274097a20d2f256d6c7897960ebc3c854268921ab72a0a3d7b0a5c0db38938349a20d3aa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\31001

MD5 5f675da80899ad25ad73647e31d37a29
SHA1 f6a2b69f51b8c875c1ca2569e81b9ca8a65c412e
SHA256 22b9e90a76ab63c3c8a0aa13932f5618525965c170eafe54bfcec5b4d01eea8a
SHA512 788a83eec5424f3ffbb054c4deb587c73c75c2c19360aadcbeadbb77cfda25c37e0bb4774f34cb6c654e824303f9498dde29234dd24d477c3de4e9b821556cec

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\21064

MD5 6ed8ab0ba2a35a848ed0b23a3f094ab6
SHA1 37e7fe5e76e31c5b998cdcd932652155ddcbe1b2
SHA256 34ed6337c4b28b433f16f6785eb673cde4c6ed75ace86eba104af23158478fd1
SHA512 daad809870266d9727f4ce0f83e4228d2f09053557c8f6e8132f00a7220c2cd28349a7a971ebc182f0261bf00fafe05d6e238900e806fb6ac306ec5e25e2f08b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\19876

MD5 20273e18345964626b326b204ec65f9e
SHA1 401be643092892f5558a4ae459d196d114195689
SHA256 3aef738abc42cf5c1f35c3227423582ff1629da5bfa41ed538252dfa8edfa8e6
SHA512 19564a5d790793788704a606df2c36c97961fe725f6b55fb5a3ee5ef38a4d8ba1a5454801bf715d4018e5ed8a6682a328824e3b3f17740b3193491099e9afb22

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\13480

MD5 3ef3e6e32edd1a3bae6990274d493d39
SHA1 8ff82a9a0c510038ca6002709d790fda4895e3c5
SHA256 8d2ed35f33e644821ae0f7dab9835dcc4f4e4502e94e969049deeb9e5725011b
SHA512 691857231f09de8624898f140733065fc2d22f421226c632e9af9c70629294a184dec86bfc2138de615e1fa1a38b688409c79bbd5a21575ce586eb1c54bc55d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\14413

MD5 503e235f3e151cebaea325f436b129ca
SHA1 505cd46e7497a756a03a0951998636123a698988
SHA256 88ef4b0dd80d9620e2ff16d18c14b45c1db7eaed261cd5ad350f44c06309735f
SHA512 7b7e6dc4dd4316e72f837ad08ad439ed74ecd6adb2a9f62452653a2dbbc59ffc44ae3d6074ae8bd8103066d827a8b1d19afa932d09971131cf028a05ab1b4333

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\8679

MD5 c680a6f4995e34ce92ae06d734f5a567
SHA1 ae93edf600c634079a5605a904e2c366cf22b7c9
SHA256 8d38f3e623f8ecf87c2e0afd08bb5215fa9cdd9013683f0c207abb99c22feeeb
SHA512 2b549a1241a1ad67576779eec7629a4d622102286de8322a1bcb71213656f19f304ffdce0b30d853dbcb6097a932a2e98aaa36f2bdb44892bb1da37ed9be7541

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\29967

MD5 0f8361d354a7a560ffd2ccab0fecfc4b
SHA1 22acf85784ba6e127f40e499da339414ac74031b
SHA256 847249a311b1eea8efb3d61f9dc5df0f18b87933a256e591a286dd240e241dba
SHA512 009232f7e1aa3588935414bd5f2b7b673e2a25c0cc07bd175f46db14c61abb8f0bd9528ff780693346de60dcbc814da013f0930294d7ea880171ef7e3124f45c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\948

MD5 7519645fac857fe282c8b6cac14498ac
SHA1 2143d2c5b7a0edf7e6cda768554b78a16ebc342d
SHA256 18efcefe4bdc4fa7c03a18d34748e1d5bf8aeff2731d73335b38c8775b6aff6d
SHA512 9505ac0c42068302d869c632cb8e4f9f58db4406f39cafe9ce2d3a10deb0e21342e1a9a977eba563b4675187b9f6b54e00b1dd4d24178516f8a66489eea88bac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\13225

MD5 df6b129f054a095d2261d1adfe272932
SHA1 44c36130a14ab41e31d1ed9b07b02100d6e5fe22
SHA256 6850ad0d2a9c9e4846ec8174429f32911d3d001d1b0d15d66c145da7ab669ce9
SHA512 4097471b799b7cbfe3c1361bf3d627d4a4d49d1e98f7ae56d00d7c4070d142edd8cafe246da2b1c858dbd7174420381ba4b4d68b822f4fc84ddfbfb7d5962b11

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\22023

MD5 f31ae89c26153251994f8a4dc35b55dd
SHA1 cf30edeaacc15a9a9ac515a6d84fe1739cd8dfda
SHA256 058dd2e999be88415c6810ed1c7b0503ce088bca4fcbee7d176c80a8ec26019c
SHA512 6c72002454800b33b5968d67d9a4e0af9e578ca8b0b404c67a85fc856054d8a8ac7fac0f658fde63da7e9d63a4c16536144d8b78ed8636fddb53a33039e45723

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\doomed\16548

MD5 aca7b5713dd0b14e818e838b83903b43
SHA1 ddd7795f54b0e93abf69abe8a31f303481dde291
SHA256 a15f621ee1057f98144c3e68c2356cd673e0891db8d62772e4c7b67bf6e6c7c9
SHA512 6598be9d87bb1555a140b5f1ae0170d50be2c6d3f237d0c50726987dd828c5a6a57c78469b4123f1bfe1940d8c09cf78da234c066d6beb16366f6630e3a81d73

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c4b733cffce0a333cdc86cdb307f17d0
SHA1 be313f84fd280c78e81acf4cb0ae6979b2fe508e
SHA256 b20312b38ea51d5d11601e10e575a1c374f1858cf6aa6cfd407620b6e00f64d7
SHA512 83559658d542fea54194213442ce5f7a579ccda411ea2910342f396b9c7fb1d68a01f29a6be266b95b0e7accf9938267f7260ba4851867475c6dc4b9ce385d44

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\je1358xf.default-release\cache2\entries\E7977F6E10AFB3B4A8B829A51A5BF2749364C136

MD5 2ddbe0a8c687b6fc4f63001ac5f4d683
SHA1 a213a604930583a6559ae4a1eaf3c4f284de8c12
SHA256 4869521e9185d0c14fd1f22d0352bebf7257367cc6ccbf76f990b86ba9b2c726
SHA512 6c542ce08563572b94347219021fa7888058f5a11078fe16e66f37a1e9f35c488536dd06785e4c41516e23fa3a2ac7be62063039c6229b2cb3188eac006da186

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 11c386ca010b69bb51e1b39b0baf0148
SHA1 a6eebe4ac252242087f4f3d6c56df732f33f52c5
SHA256 9b213d774ab0aa80fff3a8168e571c0ecd741f540ff1b936592811d2345f3d12
SHA512 3412e9737d322f353c29ca7be1c6c2f4fb77d4fd722227a1811e6b20e3c38f8417d5814e1f5ec268835bbe34b059766fbd37395c0648de11bfd4735ee7737b3a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\default\https+++www.file.io\ls\usage

MD5 3518399c37d3c73ed76b5b7d0d776cbf
SHA1 0fd541b9ce8c1eed763a19e83ef6358d92a6192b
SHA256 4590e63b4cf0033a858a90a2772c98a5b21ef528ae4cde4a4f94da2365bf8c46
SHA512 832594c186d51ae8b1a5a5bbb7b2aca3a9bef0953bcd5a825cf629d4dfaf48a02e1dc2b1060675e841f542491e1a20de932e2b0029294484e8ab06307939a592

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8bdc8ae57b20e18e3048df568225b253
SHA1 8853cb701ead609de3a6d8a7ba08c805ddd2b1fd
SHA256 9cfb791266ddeb64c8020debc9ada08d79711cc627d2369dc7f17109494e7555
SHA512 a8503da32fbce39b2683d29c4c67d461083fc0132394e0dc8931c8d520931eacac3b291c9c40a1fc50ae3fc440fd0b595cb809e4b2dc08bc2040ced33f07ccc2