Analysis Overview
SHA256
27410bc7be14c47eb58679632c4f683dcd90814191ad030fd254e4ff96646523
Threat Level: Shows suspicious behavior
The file inbox.png was found to be: Shows suspicious behavior.
Malicious Activity Summary
A potential corporate email address has been identified in the URL: currency-file@1
Enumerates physical storage devices
Browser Information Discovery
Suspicious behavior: EnumeratesProcesses
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Modifies registry class
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Enumerates system info in registry
Checks processor information in registry
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-09 20:27
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-09 20:27
Reported
2024-11-09 20:32
Platform
win11-20241007-en
Max time kernel
291s
Max time network
292s
Command Line
Signatures
A potential corporate email address has been identified in the URL: currency-file@1
Browser Information Discovery
Enumerates physical storage devices
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Mozilla Firefox\firefox.exe | N/A |
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Processes
C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\inbox.png
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe5a603cb8,0x7ffe5a603cc8,0x7ffe5a603cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1964 -parentBuildID 20240401114208 -prefsHandle 1892 -prefMapHandle 1860 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2e491c36-e4c4-4ef5-9709-f61b5a302e17} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" gpu
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2364 -parentBuildID 20240401114208 -prefsHandle 2356 -prefMapHandle 2344 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {40e774ae-7cef-426d-85c1-1eeee67022e2} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" socket
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2928 -childID 1 -isForBrowser -prefsHandle 3288 -prefMapHandle 3156 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {66496fac-ff52-4f03-8834-b75348312103} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3544 -childID 2 -isForBrowser -prefsHandle 3596 -prefMapHandle 2908 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bd0a5862-0558-4fdf-853e-33d930a2e285} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4756 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4744 -prefMapHandle 4660 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e59a15cc-a564-4996-b348-d5038057a91e} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" utility
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5488 -childID 3 -isForBrowser -prefsHandle 5544 -prefMapHandle 5528 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {06e70fc7-6b4f-4a3d-b037-5f94cbc603d6} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5628 -childID 4 -isForBrowser -prefsHandle 5668 -prefMapHandle 5672 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d70e31e0-0401-4b4a-b0ea-3bf9bc451974} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5836 -childID 5 -isForBrowser -prefsHandle 5844 -prefMapHandle 5848 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0df585f9-bfdb-4b92-bfcd-8c81dac92354} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -childID 6 -isForBrowser -prefsHandle 5640 -prefMapHandle 1264 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {13b1e41a-ed07-4d61-8dd3-b94a89be1380} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6328 -childID 7 -isForBrowser -prefsHandle 4524 -prefMapHandle 1596 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {04117df2-72d7-4e7d-8152-04528b43c9dc} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6196 -childID 8 -isForBrowser -prefsHandle 6684 -prefMapHandle 6716 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b23c29b-eaf0-4186-9c2e-b5ddd274a26c} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6848 -parentBuildID 20240401114208 -prefsHandle 6920 -prefMapHandle 6196 -prefsLen 30908 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {72324168-2abc-4a0a-aa94-972b851c4d07} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" rdd
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6956 -childID 9 -isForBrowser -prefsHandle 7064 -prefMapHandle 7060 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba0ed708-7b85-4cf2-a283-3d39af85d4fe} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7264 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 6920 -prefMapHandle 7300 -prefsLen 30908 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {21b154a3-8da2-4e21-a5b7-62ad8b944029} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" utility
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8036 -childID 10 -isForBrowser -prefsHandle 8048 -prefMapHandle 8080 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fdca2796-f391-4ec7-a736-906fdd4f0193} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8212 -childID 11 -isForBrowser -prefsHandle 8220 -prefMapHandle 8224 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c005687d-2ae5-4eb8-9b30-ea1e471d742d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8332 -childID 12 -isForBrowser -prefsHandle 8460 -prefMapHandle 7924 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {94ac1488-9aa6-4572-a47f-a8b467ff69f1} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8336 -childID 13 -isForBrowser -prefsHandle 8632 -prefMapHandle 8636 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9bdee9bd-508d-4ecc-a89a-1519ded4f956} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8888 -childID 14 -isForBrowser -prefsHandle 8808 -prefMapHandle 8812 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c120364-104a-4487-95cf-d4f8ea7f0002} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9160 -childID 15 -isForBrowser -prefsHandle 9152 -prefMapHandle 9148 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6694858-2f38-474d-a7f9-1e7b845076fe} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9292 -childID 16 -isForBrowser -prefsHandle 9256 -prefMapHandle 9252 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8ededcfe-8c9b-49ca-a21f-d3ee124b759d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9476 -childID 17 -isForBrowser -prefsHandle 9300 -prefMapHandle 6044 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8486d5df-4633-4d22-956c-3ff9733759d1} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9672 -childID 18 -isForBrowser -prefsHandle 9476 -prefMapHandle 9748 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {45d27208-2398-44fc-b638-ffb3e1599280} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9980 -childID 19 -isForBrowser -prefsHandle 9692 -prefMapHandle 8664 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7d840e19-4ce9-4cbf-9c3c-ca4f57f75f41} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8840 -childID 20 -isForBrowser -prefsHandle 8672 -prefMapHandle 9300 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3dd69f79-9707-4ef3-a1f1-8b2c6472d5ca} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10124 -childID 21 -isForBrowser -prefsHandle 10104 -prefMapHandle 10108 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c327fd7e-7869-4e10-8d9c-51c877bb4f0d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9748 -childID 22 -isForBrowser -prefsHandle 10248 -prefMapHandle 10252 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53fad62d-599e-4dad-b68e-e9ee650bd1e7} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9884 -childID 23 -isForBrowser -prefsHandle 8476 -prefMapHandle 10040 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c60491b-cae5-42a8-b0b7-2609b59adfef} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6872 -childID 24 -isForBrowser -prefsHandle 9372 -prefMapHandle 9276 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28928e3f-defb-4b3a-9683-d5c593cb6eb6} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9408 -childID 25 -isForBrowser -prefsHandle 10292 -prefMapHandle 6040 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e4c0645a-8758-4736-a643-6df4971c9a81} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10124 -childID 26 -isForBrowser -prefsHandle 6556 -prefMapHandle 10244 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b98dd1c-c94c-4504-a47f-d49a99c89dc0} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4572 -childID 27 -isForBrowser -prefsHandle 10152 -prefMapHandle 9552 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4961dfa3-1699-425e-8144-0c61477297b0} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6332 -childID 28 -isForBrowser -prefsHandle 8288 -prefMapHandle 8544 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3c9c975-bfc4-4b00-80c0-748f75a90dc9} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8748 -childID 29 -isForBrowser -prefsHandle 10364 -prefMapHandle 10376 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a67ee5b-1ac8-4d91-9191-eb4862247780} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10348 -childID 30 -isForBrowser -prefsHandle 10316 -prefMapHandle 10340 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e59d8c5-d421-429c-8147-a143e8f882d7} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8620 -childID 31 -isForBrowser -prefsHandle 10400 -prefMapHandle 10140 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4ac16e3c-c730-4dd2-b294-9db9cc02c025} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10660 -childID 32 -isForBrowser -prefsHandle 10652 -prefMapHandle 10648 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3dec6dce-eca4-47f4-90cf-aebd2ca25fe9} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8468 -childID 33 -isForBrowser -prefsHandle 10796 -prefMapHandle 10792 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {26824474-c0c8-4812-8231-dff7b7266bc4} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9356 -childID 34 -isForBrowser -prefsHandle 9200 -prefMapHandle 9220 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {858e546f-e925-4d43-903b-a1a40d0bf76e} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10832 -childID 35 -isForBrowser -prefsHandle 10044 -prefMapHandle 8508 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {541e8266-00e1-468b-8f04-82a1a391d785} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8664 -childID 36 -isForBrowser -prefsHandle 9888 -prefMapHandle 10832 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {23350e7c-f09a-4ad9-9719-32ba94d36d36} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10964 -childID 37 -isForBrowser -prefsHandle 10952 -prefMapHandle 10944 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3b1a995-678f-4ea0-bbc0-08131ffae2ae} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6700 -childID 38 -isForBrowser -prefsHandle 11140 -prefMapHandle 11136 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f8791269-9436-481e-b12f-db8faabf01ae} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9176 -childID 39 -isForBrowser -prefsHandle 9232 -prefMapHandle 11060 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3bdc0d41-a4ab-4043-a32d-fd31e6a1b8bd} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6500 -childID 40 -isForBrowser -prefsHandle 10148 -prefMapHandle 10644 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b20c092d-d11e-4324-a139-8fa3f1cbf767} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9220 -childID 41 -isForBrowser -prefsHandle 8736 -prefMapHandle 8728 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4eb07613-0817-412f-ba98-3de5e5380e6c} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| N/A | 127.0.0.1:49895 | tcp | |
| US | 34.149.97.1:443 | firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net | tcp |
| US | 8.8.8.8:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.149.97.1:443 | firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net | udp |
| US | 34.117.121.53:443 | attachments.prod.remote-settings.prod.webservices.mozgcp.net | tcp |
| N/A | 127.0.0.1:49902 | tcp | |
| US | 52.173.151.229:80 | gamingfun.me | tcp |
| US | 172.67.68.246:443 | grabify.link | tcp |
| US | 172.67.68.246:443 | grabify.link | tcp |
| US | 172.67.68.246:443 | grabify.link | udp |
| US | 35.190.72.216:443 | prod.classify-client.prod.webservices.mozgcp.net | tcp |
| US | 35.190.72.216:443 | prod.classify-client.prod.webservices.mozgcp.net | udp |
| DE | 23.55.161.185:80 | a19.dscg10.akamai.net | tcp |
| GB | 142.250.200.14:443 | redirector.gvt1.com | tcp |
| GB | 142.250.200.14:443 | redirector.gvt1.com | udp |
| GB | 173.194.183.71:443 | r2.sn-aigl6ned.gvt1.com | tcp |
| GB | 173.194.183.71:443 | r2.sn-aigl6ned.gvt1.com | udp |
| US | 52.173.151.229:80 | gamingfun.me | tcp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| GB | 142.250.180.4:443 | www.google.com | udp |
| US | 8.8.8.8:53 | 227.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.180.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.200.250.142.in-addr.arpa | udp |
| US | 52.173.151.229:80 | gamingfun.me | tcp |
| US | 8.8.8.8:53 | csp.withgoogle.com | udp |
| GB | 216.58.204.81:443 | csp.withgoogle.com | tcp |
| US | 8.8.8.8:53 | csp.withgoogle.com | udp |
| US | 8.8.8.8:53 | 66.169.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | csp.withgoogle.com | udp |
| US | 8.8.8.8:53 | ogads-pa.googleapis.com | udp |
| GB | 216.58.204.74:443 | ogads-pa.googleapis.com | tcp |
| GB | 216.58.204.74:443 | ogads-pa.googleapis.com | tcp |
| US | 8.8.8.8:53 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | ogads-pa.googleapis.com | udp |
| GB | 216.58.204.81:443 | csp.withgoogle.com | udp |
| GB | 216.58.204.74:443 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | 81.204.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 74.204.58.216.in-addr.arpa | udp |
| GB | 172.217.16.238:443 | play.google.com | tcp |
| US | 8.8.8.8:53 | play.google.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 172.217.16.238:443 | play.google.com | udp |
| US | 8.8.8.8:53 | 238.16.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| GB | 172.217.16.238:443 | consent.google.com | tcp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| US | 8.8.8.8:53 | consent.google.com | udp |
| GB | 172.217.16.238:443 | consent.google.com | udp |
| US | 172.67.68.246:443 | grabify.link | tcp |
| US | 8.8.8.8:53 | grabify.link | udp |
| US | 172.67.68.246:443 | grabify.link | tcp |
| US | 172.67.68.246:443 | grabify.link | udp |
| US | 8.8.8.8:53 | cdn.fuseplatform.net | udp |
| US | 8.8.8.8:53 | live.primis.tech | udp |
| US | 8.8.8.8:53 | static.cloudflareinsights.com | udp |
| US | 104.17.160.237:443 | cdn.fuseplatform.net | tcp |
| US | 104.17.160.237:443 | cdn.fuseplatform.net | tcp |
| US | 8.8.8.8:53 | cdn.fuseplatform.net.cdn.cloudflare.net | udp |
| US | 104.16.80.73:443 | static.cloudflareinsights.com | tcp |
| US | 8.8.8.8:53 | static.cloudflareinsights.com | udp |
| GB | 18.172.89.123:443 | live.primis.tech | tcp |
| US | 8.8.8.8:53 | d2wcz8sc48ztgm.cloudfront.net | udp |
| US | 8.8.8.8:53 | cdn.fuseplatform.net.cdn.cloudflare.net | udp |
| US | 8.8.8.8:53 | d2wcz8sc48ztgm.cloudfront.net | udp |
| GB | 18.172.89.123:443 | d2wcz8sc48ztgm.cloudfront.net | udp |
| US | 8.8.8.8:53 | cmp.inmobi.com | udp |
| US | 8.8.8.8:53 | c.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | embed.tawk.to | udp |
| US | 8.8.8.8:53 | d1ykf07e75w7ss.cloudfront.net | udp |
| NL | 18.239.36.97:443 | cmp.inmobi.com | tcp |
| US | 8.8.8.8:53 | d23sp3kzv1t6m5.cloudfront.net | udp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 104.22.45.142:443 | embed.tawk.to | tcp |
| US | 8.8.8.8:53 | embed.tawk.to | udp |
| US | 8.8.8.8:53 | d1ykf07e75w7ss.cloudfront.net | udp |
| US | 8.8.8.8:53 | d23sp3kzv1t6m5.cloudfront.net | udp |
| US | 8.8.8.8:53 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | 237.160.17.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.178.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.80.16.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 123.89.172.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.36.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | embed.tawk.to | udp |
| US | 8.8.8.8:53 | cdn.jsdelivr.net | udp |
| US | 151.101.193.229:443 | cdn.jsdelivr.net | tcp |
| US | 8.8.8.8:53 | jsdelivr.map.fastly.net | udp |
| US | 104.22.45.142:443 | embed.tawk.to | udp |
| US | 8.8.8.8:53 | jsdelivr.map.fastly.net | udp |
| NL | 18.239.70.203:443 | d1ykf07e75w7ss.cloudfront.net | tcp |
| GB | 142.250.200.34:443 | securepubads.g.doubleclick.net | tcp |
| NL | 18.239.36.97:443 | d23sp3kzv1t6m5.cloudfront.net | tcp |
| US | 151.101.193.229:443 | jsdelivr.map.fastly.net | udp |
| GB | 142.250.200.34:443 | securepubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| GB | 216.58.204.67:443 | www.google.co.uk | tcp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | tcp |
| US | 8.8.8.8:53 | region1.analytics.google.com | udp |
| NL | 18.239.70.203:443 | d1ykf07e75w7ss.cloudfront.net | tcp |
| US | 8.8.8.8:53 | config.aps.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | config.aps.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | config.aps.amazon-adsystem.com | udp |
| GB | 216.58.204.67:443 | www.google.co.uk | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | cdn.id5-sync.com | udp |
| NL | 18.238.243.122:443 | config.aps.amazon-adsystem.com | tcp |
| US | 172.67.38.106:443 | cdn.id5-sync.com | tcp |
| US | 8.8.8.8:53 | cdn.id5-sync.com | udp |
| US | 8.8.8.8:53 | cdn.id5-sync.com | udp |
| US | 8.8.8.8:53 | btloader.com | udp |
| US | 8.8.8.8:53 | 142.45.22.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 229.193.101.151.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 34.200.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 203.70.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | btloader.com | udp |
| US | 104.22.75.216:443 | btloader.com | tcp |
| US | 8.8.8.8:53 | 67.204.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.34.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 106.38.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 122.243.238.18.in-addr.arpa | udp |
| BE | 66.102.1.155:443 | stats.g.doubleclick.net | tcp |
| BE | 66.102.1.155:443 | stats.g.doubleclick.net | udp |
| US | 104.26.3.70:443 | ad-delivery.net | tcp |
| US | 104.26.3.70:443 | ad-delivery.net | tcp |
| US | 8.8.8.8:53 | api.cmp.inmobi.com | udp |
| DE | 18.193.40.240:443 | choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com | tcp |
| DE | 18.193.40.240:443 | choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com | tcp |
| US | 8.8.8.8:53 | choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | api.btloader.com | udp |
| US | 130.211.23.194:443 | api.btloader.com | tcp |
| US | 8.8.8.8:53 | api.btloader.com | udp |
| US | 8.8.8.8:53 | api.btloader.com | udp |
| US | 8.8.8.8:53 | 216.75.22.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.1.102.66.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 38.200.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 70.3.26.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.40.193.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.23.211.130.in-addr.arpa | udp |
| US | 130.211.23.194:443 | api.btloader.com | udp |
| US | 104.22.45.142:443 | va.tawk.to | udp |
| US | 104.22.44.142:443 | va.tawk.to | tcp |
| US | 8.8.8.8:53 | va.tawk.to | udp |
| US | 104.22.44.142:443 | va.tawk.to | tcp |
| US | 104.22.44.142:443 | va.tawk.to | tcp |
| US | 8.8.8.8:53 | va.tawk.to | udp |
| US | 104.22.44.142:443 | va.tawk.to | udp |
| US | 8.8.8.8:53 | 142.44.22.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | vsa2.tawk.to | udp |
| US | 8.8.8.8:53 | vsa2.tawk.to | udp |
| US | 104.22.45.142:443 | vsa2.tawk.to | tcp |
| US | 8.8.8.8:53 | vsa2.tawk.to | udp |
| US | 8.8.8.8:53 | tags.crwdcntrl.net | udp |
| US | 8.8.8.8:53 | c129040bc4edb542106f333df598c7c1.safeframe.googlesyndication.com | udp |
| US | 8.8.8.8:53 | prebid.media.net | udp |
| US | 8.8.8.8:53 | ib.adnxs.com | udp |
| US | 8.8.8.8:53 | tags.crwdcntrl.net | udp |
| US | 8.8.8.8:53 | bidder.criteo.com | udp |
| GB | 216.58.213.1:443 | c129040bc4edb542106f333df598c7c1.safeframe.googlesyndication.com | tcp |
| US | 8.8.8.8:53 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | hbopenbid.pubmatic.com | udp |
| US | 8.8.8.8:53 | g2.gumgum.com | udp |
| US | 104.22.45.142:443 | vsa2.tawk.to | tcp |
| US | 8.8.8.8:53 | ads.servenobid.com | udp |
| US | 8.8.8.8:53 | mp.4dex.io | udp |
| US | 8.8.8.8:53 | i.connectad.io | udp |
| US | 8.8.8.8:53 | ap.lijit.com | udp |
| US | 8.8.8.8:53 | ssc.33across.com | udp |
| US | 8.8.8.8:53 | prebid.media.net | udp |
| US | 8.8.8.8:53 | ib.anycast.adnxs.com | udp |
| US | 8.8.8.8:53 | tlx.3lift.com | udp |
| US | 8.8.8.8:53 | a.teads.tv | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 8.8.8.8:53 | prebid.a-mo.net | udp |
| US | 8.8.8.8:53 | hbopenbid-ams.pubmnet.com | udp |
| US | 8.8.8.8:53 | apex.go.sonobi.com | udp |
| US | 8.8.8.8:53 | prg-apac.smartadserver.com | udp |
| US | 8.8.8.8:53 | htlb.casalemedia.com | udp |
| US | 8.8.8.8:53 | brightcombid.marphezis.com | udp |
| US | 8.8.8.8:53 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | tags.crwdcntrl.net | udp |
| US | 8.8.8.8:53 | in-ftd-65.nl3.vip.prod.criteo.com | udp |
| US | 8.8.8.8:53 | g2.gumgum.com | udp |
| US | 8.8.8.8:53 | aax.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | ads.servenobid.com | udp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | i.connectad.io | udp |
| US | 8.8.8.8:53 | prebid.media.net | udp |
| US | 8.8.8.8:53 | ssc.33across.com | udp |
| US | 8.8.8.8:53 | mp.4dex.io | udp |
| US | 8.8.8.8:53 | ib.anycast.adnxs.com | udp |
| US | 8.8.8.8:53 | eu-tlx.3lift.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 8.8.8.8:53 | iad-2-apex.go.sonobi.com | udp |
| US | 8.8.8.8:53 | hbopenbid-ams.pubmnet.com | udp |
| US | 8.8.8.8:53 | euw2.smartadserver.com | udp |
| NL | 188.166.203.175:443 | brightcombid.marphezis.com | tcp |
| US | 8.8.8.8:53 | amsrt.marphezis.com | udp |
| US | 8.8.8.8:53 | nld-prebid.a-mx.net | udp |
| US | 8.8.8.8:53 | htlb.casalemedia.com | udp |
| US | 8.8.8.8:53 | g2.gumgum.com | udp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | ads.servenobid.com | udp |
| NL | 18.65.41.230:443 | aax.amazon-adsystem.com | tcp |
| US | 8.8.8.8:53 | d1jvc9b8z3vcjs.cloudfront.net | udp |
| US | 8.8.8.8:53 | i.connectad.io | udp |
| US | 8.8.8.8:53 | ssc.33across.com | udp |
| US | 8.8.8.8:53 | mp.4dex.io | udp |
| US | 8.8.8.8:53 | eu-tlx.3lift.com | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 8.8.8.8:53 | iad-2-apex.go.sonobi.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| GB | 216.58.213.1:443 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | tpc.googlesyndication.com | udp |
| NL | 18.239.18.78:443 | tags.crwdcntrl.net | tcp |
| US | 34.120.63.153:443 | prebid.media.net | tcp |
| DE | 37.252.171.52:443 | ib.anycast.adnxs.com | tcp |
| NL | 178.250.1.56:443 | in-ftd-65.nl3.vip.prod.criteo.com | tcp |
| NL | 185.64.189.112:443 | hbopenbid-ams.pubmnet.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| IE | 34.255.154.106:443 | g2.gumgum.com | tcp |
| GB | 172.217.169.33:443 | tpc.googlesyndication.com | tcp |
| US | 8.8.8.8:53 | api.intentiq.com | udp |
| US | 8.8.8.8:53 | sync.intentiq.com | udp |
| US | 8.8.8.8:53 | api.intentiq.com | udp |
| US | 104.22.45.142:443 | vsa2.tawk.to | udp |
| GB | 172.217.169.33:443 | tpc.googlesyndication.com | udp |
| NL | 18.239.50.17:443 | api.intentiq.com | tcp |
| US | 104.18.34.178:443 | mp.4dex.io | tcp |
| NL | 143.244.197.139:443 | ads.servenobid.com | tcp |
| US | 8.8.8.8:53 | bcp.crwdcntrl.net | udp |
| US | 8.8.8.8:53 | sync.intentiq.com | udp |
| US | 8.8.8.8:53 | api.intentiq.com | udp |
| US | 8.8.8.8:53 | bcp.crwdcntrl.net | udp |
| US | 172.67.8.174:443 | i.connectad.io | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| IE | 34.252.246.23:443 | ap.lijit.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| US | 8.8.8.8:53 | sync.intentiq.com | udp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| DE | 3.124.64.248:443 | eu-tlx.3lift.com | tcp |
| US | 34.120.63.153:443 | prebid.media.net | udp |
| US | 8.8.8.8:53 | bcp.crwdcntrl.net | udp |
| GB | 2.23.205.112:443 | e9957.b.akamaiedge.net | tcp |
| DE | 51.75.86.98:443 | onetag-sys.com | tcp |
| US | 8.8.8.8:53 | 1.213.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 175.203.166.188.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 230.41.65.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | 153.63.120.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 78.18.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.169.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 112.189.64.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.1.250.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 52.171.252.37.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 106.154.255.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 178.34.18.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 139.197.244.143.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 174.8.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.50.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 2.169.217.172.in-addr.arpa | udp |
| IE | 54.74.74.210:443 | bcp.crwdcntrl.net | tcp |
| US | 69.166.1.8:443 | iad-2-apex.go.sonobi.com | tcp |
| FR | 163.5.194.32:443 | nld-prebid.a-mx.net | tcp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| NL | 18.239.50.17:443 | api.intentiq.com | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| US | 8.8.8.8:53 | x.bidswitch.net | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | ads.pubmatic.com | udp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | csync.loopme.me | udp |
| US | 8.8.8.8:53 | ssum-sec.casalemedia.com | udp |
| US | 8.8.8.8:53 | eb2.3lift.com | udp |
| US | 8.8.8.8:53 | pixel.rubiconproject.com | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| US | 8.8.8.8:53 | ups.analytics.yahoo.com | udp |
| US | 8.8.8.8:53 | u.openx.net | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| US | 8.8.8.8:53 | mb9eo.publishers.tremorhub.com | udp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| US | 8.8.8.8:53 | ads.stickyadstv.com | udp |
| US | 8.8.8.8:53 | cs.admanmedia.com | udp |
| US | 8.8.8.8:53 | ssbsync-global.smartadserver.com | udp |
| US | 8.8.8.8:53 | cm.adform.net | udp |
| US | 8.8.8.8:53 | sync.1rx.io | udp |
| US | 8.8.8.8:53 | eu-eb2.3lift.com | udp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | e6603.g.akamaiedge.net | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | global.px.quantserve.com | udp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | tcp |
| US | 172.67.8.174:443 | i.connectad.io | udp |
| NL | 18.239.69.3:443 | sync.intentiq.com | tcp |
| IE | 54.239.33.159:443 | aax-eu.amazon-adsystem.com | tcp |
| DE | 91.228.74.166:443 | global.px.quantserve.com | tcp |
| US | 35.71.131.137:443 | match.adsrvr.org | tcp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| NL | 35.214.136.108:443 | user-data-eu.bidswitch.net | tcp |
| GB | 23.219.196.188:443 | e6603.g.akamaiedge.net | tcp |
| NL | 35.214.251.162:443 | envoy-hl.envoy-csync.core-002-ew4.ov1o.com | tcp |
| DE | 51.75.86.98:443 | onetag-sys.com | udp |
| US | 34.98.64.218:443 | u.openx.net | tcp |
| US | 8.8.8.8:53 | sync.kueezrtb.com | udp |
| US | 8.8.8.8:53 | pixel.rubiconproject.net.akadns.net | udp |
| US | 8.8.8.8:53 | sync.ingage.tech | udp |
| US | 8.8.8.8:53 | global.px.quantserve.com | udp |
| US | 8.8.8.8:53 | envoy-hl.envoy-csync.core-002-ew4.ov1o.com | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | user-data-eu.bidswitch.net | udp |
| US | 8.8.8.8:53 | partners-alb-1113315349.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | ssum-sec.casalemedia.com | udp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| US | 8.8.8.8:53 | eu-west-dual.ads.stickyadstv.com.akadns.net | udp |
| US | 8.8.8.8:53 | sync.1rx.io | udp |
| US | 8.8.8.8:53 | track-eu.adformnet.akadns.net | udp |
| US | 8.8.8.8:53 | match-eu-central-1-ecs.sharethrough.com | udp |
| US | 8.8.8.8:53 | 248.243.127.79.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 32.194.5.163.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.86.75.51.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 210.74.74.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 49.197.32.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.1.166.69.in-addr.arpa | udp |
| US | 8.8.8.8:53 | u.openx.net | udp |
| US | 8.8.8.8:53 | ssbsync-euw1.smartadserver.com | udp |
| US | 8.8.8.8:53 | 101.151.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | cs-server-s2s.yellowblue.io | udp |
| US | 52.44.40.191:443 | cs-server-s2s.yellowblue.io | tcp |
| US | 172.64.146.150:443 | sync.ingage.tech | tcp |
| US | 8.8.8.8:53 | dcs-ups.g03.yahoodns.net | udp |
| US | 8.8.8.8:53 | hj5ozcalb.puzztake.com | udp |
| GB | 142.250.180.4:443 | www.google.com | udp |
| NL | 18.239.69.3:443 | sync.intentiq.com | udp |
| US | 8.8.8.8:53 | sync.1rx.io | udp |
| US | 8.8.8.8:53 | ssbsync-euw1.smartadserver.com | udp |
| US | 8.8.8.8:53 | cs-server-s2s.yellowblue.io | udp |
| US | 8.8.8.8:53 | eu-west-dual.ads.stickyadstv.com.akadns.net | udp |
| US | 8.8.8.8:53 | hj5ozcalb.puzztake.com | udp |
| NL | 35.214.136.108:443 | user-data-eu.bidswitch.net | udp |
| US | 8.8.8.8:53 | pubads.g.doubleclick.net | udp |
| US | 34.98.64.218:443 | u.openx.net | udp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | udp |
| GB | 142.250.200.34:443 | pubads.g.doubleclick.net | tcp |
| GB | 142.250.200.34:443 | pubads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | btlr.sharethrough.com | udp |
| US | 8.8.8.8:53 | pubads.g.doubleclick.net | udp |
| DE | 18.153.93.230:443 | btlr-eu-central-1.sharethrough.com | tcp |
| NL | 13.227.219.118:443 | d3p3gh8eed0xba.cloudfront.net | tcp |
| US | 8.8.8.8:53 | d3p3gh8eed0xba.cloudfront.net | udp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | tcp |
| US | 13.248.245.213:443 | eu-eb2.3lift.com | tcp |
| NL | 69.173.156.148:443 | pixel.rubiconproject.net.akadns.net | tcp |
| GB | 87.248.114.12:443 | dcs-ups.g03.yahoodns.net | tcp |
| US | 23.20.69.65:443 | mb9eo.publishers.tremorhub.com | tcp |
| GB | 2.23.220.28:443 | cs.media.net | tcp |
| US | 80.77.87.166:443 | cs.admanmedia.com | tcp |
| NL | 81.17.55.109:443 | ssbsync-euw1.smartadserver.com | tcp |
| DK | 37.157.6.232:443 | track-eu.adformnet.akadns.net | tcp |
| DE | 18.195.234.25:443 | match-eu-central-1-ecs.sharethrough.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| NL | 154.57.158.115:443 | eu-west-dual.ads.stickyadstv.com.akadns.net | tcp |
| US | 67.207.86.10:443 | sync.kueezrtb.com | tcp |
| US | 8.8.8.8:53 | imasdk.googleapis.com | udp |
| US | 8.8.8.8:53 | imasdk.googleapis.com | udp |
| US | 8.8.8.8:53 | 3.69.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.74.228.91.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 159.33.239.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 137.131.71.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 108.136.214.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 188.196.219.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 162.251.214.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 218.64.98.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 150.146.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 230.93.153.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 191.40.44.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 118.219.227.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.114.248.87.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.220.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 148.156.173.69.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 109.55.17.81.in-addr.arpa | udp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | udp |
| US | 8.8.8.8:53 | 232.6.157.37.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.234.195.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 213.245.248.13.in-addr.arpa | udp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| US | 8.8.8.8:53 | static.criteo.net | udp |
| GB | 172.217.16.230:443 | s0.2mdn.net | tcp |
| US | 8.8.8.8:53 | s0.2mdn.net | udp |
| GB | 142.250.187.194:443 | googleads.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| GB | 142.250.187.194:443 | googleads.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | ep1.adtrafficquality.google | udp |
| NL | 178.250.1.3:443 | static.criteo.net | tcp |
| US | 8.8.8.8:53 | static.nl3.vip.prod.criteo.net | udp |
| US | 8.8.8.8:53 | static.nl3.vip.prod.criteo.net | udp |
| US | 8.8.8.8:53 | ep1.adtrafficquality.google | udp |
| GB | 216.58.212.194:443 | ep1.adtrafficquality.google | tcp |
| US | 8.8.8.8:53 | ep1.adtrafficquality.google | udp |
| GB | 172.217.16.230:443 | s0.2mdn.net | udp |
| GB | 142.250.187.194:443 | googleads.g.doubleclick.net | udp |
| GB | 216.58.212.194:443 | ep1.adtrafficquality.google | udp |
| US | 8.8.8.8:53 | ep2.adtrafficquality.google | udp |
| GB | 142.250.179.225:443 | ep2.adtrafficquality.google | tcp |
| US | 8.8.8.8:53 | ep2.adtrafficquality.google | udp |
| US | 8.8.8.8:53 | ep2.adtrafficquality.google | udp |
| GB | 142.250.179.225:443 | ep2.adtrafficquality.google | udp |
| US | 8.8.8.8:53 | id5-sync.com | udp |
| US | 8.8.8.8:53 | api.rlcdn.com | udp |
| US | 8.8.8.8:53 | id.crwdcntrl.net | udp |
| US | 8.8.8.8:53 | secure.adnxs.com | udp |
| US | 8.8.8.8:53 | creativecdn.com | udp |
| US | 34.120.133.55:443 | api.rlcdn.com | tcp |
| US | 8.8.8.8:53 | api.rlcdn.com | udp |
| DE | 162.19.138.117:443 | id5-sync.com | tcp |
| US | 8.8.8.8:53 | id5-sync.com | udp |
| US | 8.8.8.8:53 | id.crwdcntrl.net | udp |
| IE | 52.30.238.153:443 | id.crwdcntrl.net | tcp |
| US | 8.8.8.8:53 | 194.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.1.250.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.212.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 225.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 55.133.120.34.in-addr.arpa | udp |
| US | 34.120.133.55:443 | api.rlcdn.com | udp |
| DE | 37.252.171.53:443 | secure.adnxs.com | tcp |
| NL | 185.184.8.90:443 | creativecdn.com | tcp |
| DE | 162.19.138.83:443 | lb.eu-1-id5-sync.com | tcp |
| DE | 162.19.138.117:443 | lb.eu-1-id5-sync.com | tcp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | navvy.media.net | udp |
| US | 8.8.8.8:53 | cdn-geuw1-xch.media.net | udp |
| US | 8.8.8.8:53 | qsearch-a.akamaihd.net | udp |
| US | 8.8.8.8:53 | warp.media.net | udp |
| US | 8.8.8.8:53 | c.gumgum.com | udp |
| GB | 2.23.220.28:443 | warp.media.net | tcp |
| GB | 2.19.117.27:443 | qsearch-a.akamaihd.net | tcp |
| GB | 2.19.117.27:443 | qsearch-a.akamaihd.net | tcp |
| US | 8.8.8.8:53 | a267.g.akamai.net | udp |
| US | 8.8.8.8:53 | e607.dscd.akamaiedge.net | udp |
| US | 8.8.8.8:53 | navvy.media.net | udp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | c.gumgum.com | udp |
| US | 8.8.8.8:53 | a267.g.akamai.net | udp |
| US | 8.8.8.8:53 | warp.media.net | udp |
| US | 8.8.8.8:53 | e607.dscd.akamaiedge.net | udp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | cdn.confiant-integrations.net | udp |
| US | 172.64.144.166:443 | cdn.confiant-integrations.net | tcp |
| US | 8.8.8.8:53 | cdn.confiant-integrations.net | udp |
| US | 172.64.144.166:443 | cdn.confiant-integrations.net | udp |
| US | 8.8.8.8:53 | d.illuma-tech.com | udp |
| US | 8.8.8.8:53 | ghent-gce-nl.bidswitch.net | udp |
| IE | 54.229.250.192:443 | d.illuma-tech.com | tcp |
| US | 8.8.8.8:53 | 117.174.228.46.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 153.238.30.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 53.171.252.37.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.8.184.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 117.138.19.162.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.138.19.162.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.144.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | d.illuma-tech.com | udp |
| US | 34.160.55.127:443 | navvy.media.net | tcp |
| US | 8.8.8.8:53 | pool-gce-nl.ghent.iponweb.net | udp |
| NL | 18.239.36.41:443 | c.gumgum.com | tcp |
| NL | 35.214.230.116:443 | pool-gce-nl.ghent.iponweb.net | tcp |
| US | 34.160.55.127:443 | navvy.media.net | udp |
| GB | 2.23.220.28:443 | hblg.media.net | tcp |
| NL | 18.239.36.92:443 | d21t3ooy68jlh9.cloudfront.net | tcp |
| IE | 34.252.173.211:443 | protected-by.clarium.io | tcp |
| GB | 142.250.187.226:443 | googleads4.g.doubleclick.net | tcp |
| GB | 142.250.187.226:443 | googleads4.g.doubleclick.net | udp |
| US | 172.64.149.180:443 | js-sec.indexww.com | tcp |
| NL | 185.80.36.156:443 | k8s1-am-ext-haproxy.lb.indexww.com | tcp |
| NL | 18.239.36.92:443 | d21t3ooy68jlh9.cloudfront.net | tcp |
| NL | 18.239.36.92:443 | d21t3ooy68jlh9.cloudfront.net | tcp |
| GB | 216.58.212.194:443 | adx.g.doubleclick.net | tcp |
| GB | 172.217.169.33:443 | tpc.googlesyndication.com | tcp |
| GB | 172.217.169.33:443 | tpc.googlesyndication.com | tcp |
| GB | 216.58.212.194:443 | adx.g.doubleclick.net | udp |
| GB | 172.217.16.226:443 | cm.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | 127.55.160.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 41.36.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 116.230.214.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 226.187.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 92.36.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 180.149.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 156.36.80.185.in-addr.arpa | udp |
| NL | 108.156.60.11:443 | tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev | tcp |
| NL | 108.156.60.11:443 | tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev | tcp |
| GB | 172.217.16.226:443 | cm.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | image8.pubmatic.com | udp |
| NL | 69.173.156.148:443 | pixel-eu.rubiconproject.com | tcp |
| NL | 18.239.83.32:443 | js.gumgum.com | tcp |
| US | 8.8.8.8:53 | js.gumgum.com | udp |
| NL | 82.145.213.8:443 | outspot2-ams.adx.opera.com | tcp |
| NL | 69.173.156.149:443 | pixel-eu.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | pixel-eu.rubiconproject.net.akadns.net | udp |
| US | 8.8.8.8:53 | p.rfihub.com | udp |
| US | 8.8.8.8:53 | js.gumgum.com | udp |
| US | 8.8.8.8:53 | s.amazon-adsystem.com | udp |
| NL | 35.214.199.88:443 | rtb.mfadsrvr.com | tcp |
| US | 8.8.8.8:53 | dorpat.geo.iponweb.net | udp |
| NL | 35.214.199.88:443 | dorpat.geo.iponweb.net | tcp |
| US | 8.8.8.8:53 | imagsync-lhrpairbc.pubmatic.com | udp |
| GB | 185.64.191.214:443 | imagsync-lhrpairbc.pubmatic.com | tcp |
| US | 98.82.157.137:443 | s.amazon-adsystem.com | tcp |
| NL | 178.250.1.11:443 | gum.nl3.vip.prod.criteo.com | tcp |
| NL | 193.0.160.131:443 | a-emea.rfihub.com.akadns.net | tcp |
| GB | 2.23.220.28:443 | hblg.media.net | tcp |
| US | 8.8.8.8:53 | a-emea.rfihub.com.akadns.net | udp |
| US | 8.8.8.8:53 | gum.nl3.vip.prod.criteo.com | udp |
| DE | 91.228.74.200:443 | cms.quantserve.com | tcp |
| NL | 35.214.199.88:443 | dorpat.geo.iponweb.net | udp |
| NL | 178.250.1.11:443 | gum.nl3.vip.prod.criteo.com | tcp |
| ES | 51.92.114.109:443 | adsqtungstenntdservice-prod-b5647ca7634e5610.elb.eu-south-2.amazonaws.com | tcp |
| ES | 51.92.114.109:443 | adsqtungstenntdservice-prod-b5647ca7634e5610.elb.eu-south-2.amazonaws.com | tcp |
| IE | 3.254.239.69:443 | sq-tungsten-ts-eu.amazon-adsystem.com | tcp |
| US | 8.8.8.8:53 | 226.16.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.60.156.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.213.145.82.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.156.173.69.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 214.191.64.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.199.214.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.1.250.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 131.160.0.193.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.74.228.91.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 137.157.82.98.in-addr.arpa | udp |
| US | 8.8.8.8:53 | sq-tungsten-ts-eu.amazon-adsystem.com | udp |
| US | 142.251.40.131:443 | csi.gstatic.com | tcp |
| NL | 18.239.36.98:443 | gumgum.com | tcp |
| IE | 176.34.255.223:443 | rtb.gumgum.com | tcp |
| NL | 178.250.1.11:443 | dnacdn.net | tcp |
| US | 8.8.8.8:53 | servedby.flashtalking.com | udp |
| US | 8.8.8.8:53 | pixel.adsafeprotected.com | udp |
| US | 8.8.8.8:53 | cdn.viantinc.com | udp |
| DE | 91.228.74.166:443 | secure.quantserve.com | tcp |
| NL | 18.239.50.36:443 | aba.gumgum.com | tcp |
| IE | 54.171.28.155:443 | rtb.gumgum.com | tcp |
| US | 8.8.8.8:53 | rtb.gumgum.com | udp |
| US | 8.8.8.8:53 | id.rlcdn.com | udp |
| US | 35.244.174.68:443 | id.rlcdn.com | tcp |
| DK | 37.157.5.132:443 | track.adformnet.akadns.net | tcp |
| GB | 13.224.81.116:443 | dbd2rh6vdrttj.cloudfront.net | tcp |
| US | 54.166.171.205:443 | pixel.adsafeprotected.com | tcp |
| US | 8.8.8.8:53 | aba.gumgum.com | udp |
| US | 8.8.8.8:53 | events-us-east-1.ipredictive.com | udp |
| US | 8.8.8.8:53 | e4751.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | rules.quantcount.com | udp |
| US | 8.8.8.8:53 | id.rlcdn.com | udp |
| US | 8.8.8.8:53 | track.adformnet.akadns.net | udp |
| US | 142.251.40.131:443 | csi.gstatic.com | udp |
| US | 8.8.8.8:53 | dbd2rh6vdrttj.cloudfront.net | udp |
| US | 8.8.8.8:53 | events-us-east-1.ipredictive.com | udp |
| US | 8.8.8.8:53 | e4751.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | rtb.gumgum.com | udp |
| NL | 18.239.50.110:443 | d2fashanjl7d9f.cloudfront.net | tcp |
| US | 35.244.174.68:443 | id.rlcdn.com | udp |
| US | 8.8.8.8:53 | 131.40.251.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.36.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 223.255.34.176.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.50.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.174.244.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 116.81.224.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.28.171.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 132.5.157.37.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.171.166.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 110.50.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | static.adsafeprotected.com | udp |
| US | 3.210.139.178:443 | events-us-east-1.ipredictive.com | tcp |
| GB | 2.23.204.231:443 | e4751.b.akamaiedge.net | tcp |
| US | 3.210.139.178:443 | events-us-east-1.ipredictive.com | tcp |
| US | 3.210.139.178:443 | events-us-east-1.ipredictive.com | tcp |
| GB | 18.172.89.36:443 | static.adsafeprotected.com | tcp |
| US | 8.8.8.8:53 | dt.adsafeprotected.com | udp |
| US | 54.198.63.197:443 | dt.adsafeprotected.com | tcp |
| US | 8.8.8.8:53 | dt-external-217593033.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | 36.89.172.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 231.204.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 197.63.198.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| NL | 178.250.1.3:443 | static.nl3.vip.prod.criteo.net | tcp |
| US | 8.8.8.8:53 | btlr-eu-central-1.sharethrough.com | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 172.67.68.246:443 | grabify.link | udp |
| US | 8.8.8.8:53 | btlr-eu-central-1.sharethrough.com | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | a.teads.tv | udp |
| US | 8.8.8.8:53 | iad-2-apex.go.sonobi.com | udp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| DE | 37.252.171.52:443 | secure.adnxs.com | tcp |
| US | 69.166.1.8:443 | iad-2-apex.go.sonobi.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| NL | 178.250.1.56:443 | in-ftd-65.nl3.vip.prod.criteo.com | tcp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 8.8.8.8:53 | eu-tlx.3lift.com | udp |
| US | 8.8.8.8:53 | a1876.casalemedia.com | udp |
| US | 8.8.8.8:53 | jsdelivr.map.fastly.net | udp |
| US | 8.8.8.8:53 | a1876.casalemedia.com | udp |
| US | 8.8.8.8:53 | a1876.casalemedia.com | udp |
| US | 8.8.8.8:53 | cdn.doubleverify.com | udp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | udp |
| CA | 85.91.47.147:443 | a1876.casalemedia.com | tcp |
| GB | 2.23.210.97:443 | cdn.doubleverify.com | tcp |
| US | 8.8.8.8:53 | a1241.dsct.akamai.net | udp |
| US | 8.8.8.8:53 | code.createjs.com | udp |
| GB | 2.19.117.69:443 | code.createjs.com | tcp |
| US | 8.8.8.8:53 | a1806.dscd.akamai.net | udp |
| US | 8.8.8.8:53 | a1806.dscd.akamai.net | udp |
| US | 8.8.8.8:53 | rtb0.doubleverify.com | udp |
| US | 130.211.44.5:443 | rtb0.doubleverify.com | tcp |
| US | 8.8.8.8:53 | rtbc-ew1.doubleverify.com | udp |
| US | 8.8.8.8:53 | www.googletagservices.com | udp |
| GB | 142.250.200.2:443 | www.googletagservices.com | tcp |
| US | 8.8.8.8:53 | www.googletagservices.com | udp |
| US | 8.8.8.8:53 | 97.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.47.91.85.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 69.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 5.44.211.130.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 2.200.250.142.in-addr.arpa | udp |
| GB | 142.250.200.2:443 | adclick.g.doubleclick.net | udp |
| US | 151.101.193.229:443 | jsdelivr.map.fastly.net | udp |
| CA | 85.91.47.147:443 | a1876.casalemedia.com | tcp |
| DE | 51.75.86.98:443 | onetag-sys.com | tcp |
| GB | 216.58.213.1:443 | pagead-googlehosted.l.google.com | udp |
| DE | 51.75.86.98:443 | onetag-sys.com | tcp |
| US | 8.8.8.8:53 | eus.rubiconproject.com | udp |
| GB | 2.23.205.70:443 | eus.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | e8960.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e8960.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | token.rubiconproject.com | udp |
| US | 8.8.8.8:53 | 70.205.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 226.179.250.142.in-addr.arpa | udp |
| NL | 69.173.156.148:443 | token.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | pixel.rubiconproject.net.akadns.net | udp |
| US | 130.211.44.5:443 | rtbc-ew1.doubleverify.com | tcp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| GB | 216.58.201.98:443 | ade.googlesyndication.com | tcp |
| US | 8.8.8.8:53 | ade.googlesyndication.com | udp |
| GB | 216.58.201.98:443 | ade.googlesyndication.com | udp |
| US | 8.8.8.8:53 | 98.201.58.216.in-addr.arpa | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | iad-2-apex.go.sonobi.com | udp |
| US | 8.8.8.8:53 | apex.go.sonobi.com | udp |
| US | 69.166.1.8:443 | apex.go.sonobi.com | tcp |
| US | 8.8.8.8:53 | ap.lijit.com | udp |
| DE | 37.252.171.52:443 | secure.adnxs.com | tcp |
| NL | 178.250.1.56:443 | in-ftd-65.nl3.vip.prod.criteo.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| US | 8.8.8.8:53 | a.teads.tv | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | live.primis.tech | udp |
| US | 8.8.8.8:53 | d2wcz8sc48ztgm.cloudfront.net | udp |
| US | 8.8.8.8:53 | d2wcz8sc48ztgm.cloudfront.net | udp |
| US | 8.8.8.8:53 | btlr-eu-central-1.sharethrough.com | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | eus.rubiconproject.com | udp |
| US | 8.8.8.8:53 | e8960.b.akamaiedge.net | udp |
| NL | 69.173.156.148:443 | token.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | btlr.sharethrough.com | udp |
| DE | 18.153.93.230:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | btlr-eu-central-1.sharethrough.com | udp |
| US | 8.8.8.8:53 | d1jvc9b8z3vcjs.cloudfront.net | udp |
| US | 8.8.8.8:53 | d1jvc9b8z3vcjs.cloudfront.net | udp |
| US | 172.67.68.246:443 | grabify.link | tcp |
| US | 104.17.160.237:443 | cdn.fuseplatform.net.cdn.cloudflare.net | tcp |
| GB | 18.172.89.42:443 | d2wcz8sc48ztgm.cloudfront.net | tcp |
| US | 172.67.68.246:443 | grabify.link | udp |
| GB | 142.250.200.34:443 | ep1.adtrafficquality.google | tcp |
| NL | 18.239.70.203:443 | c.amazon-adsystem.com | tcp |
| US | 8.8.8.8:53 | d1ykf07e75w7ss.cloudfront.net | udp |
| US | 8.8.8.8:53 | d1ykf07e75w7ss.cloudfront.net | udp |
| US | 104.22.44.142:443 | vsa48.tawk.to | udp |
| US | 8.8.8.8:53 | vsa48.tawk.to | udp |
| US | 172.67.15.14:443 | vsa48.tawk.to | tcp |
| US | 8.8.8.8:53 | vsa48.tawk.to | udp |
| US | 8.8.8.8:53 | 42.89.172.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.15.67.172.in-addr.arpa | udp |
| US | 172.67.15.14:443 | vsa48.tawk.to | tcp |
| US | 172.67.15.14:443 | vsa48.tawk.to | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | udp |
| GB | 216.58.204.67:443 | www.google.co.uk | udp |
| US | 8.8.8.8:53 | rtb.primis.tech | udp |
| US | 8.8.8.8:53 | prebid-server.rubiconproject.com | udp |
| US | 8.8.8.8:53 | ib.adnxs-simple.com | udp |
| GB | 18.172.89.90:443 | rtb.primis.tech | tcp |
| NL | 69.173.156.150:443 | prebid-server.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | prebid-server-perf-eu.rubiconproject.net.akadns.net | udp |
| US | 8.8.8.8:53 | ams3-ib.adnxs.com | udp |
| NL | 185.89.210.244:443 | ams3-ib.adnxs.com | tcp |
| US | 8.8.8.8:53 | prebid-server-perf-eu.rubiconproject.net.akadns.net | udp |
| GB | 18.172.89.90:443 | rtb.primis.tech | udp |
| US | 104.22.45.142:443 | vsa48.tawk.to | udp |
| US | 8.8.8.8:53 | grabify.link | udp |
| US | 104.22.44.142:443 | vsa48.tawk.to | udp |
| US | 8.8.8.8:53 | 90.89.172.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 150.156.173.69.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 244.210.89.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | cdn.jsdelivr.net | udp |
| US | 151.101.193.229:443 | cdn.jsdelivr.net | udp |
| US | 8.8.8.8:53 | vsa60.tawk.to | udp |
| US | 104.22.45.142:443 | vsa60.tawk.to | tcp |
| US | 8.8.8.8:53 | jsdelivr.map.fastly.net | udp |
| US | 8.8.8.8:53 | vsa60.tawk.to | udp |
| US | 8.8.8.8:53 | jsdelivr.map.fastly.net | udp |
| US | 104.22.45.142:443 | vsa60.tawk.to | udp |
| US | 8.8.8.8:53 | cmp.inmobi.com | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| US | 8.8.8.8:53 | pixel.rubiconproject.com | udp |
| US | 8.8.8.8:53 | config.aps.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | qsearch-a.akamaihd.net | udp |
| US | 8.8.8.8:53 | c.gumgum.com | udp |
| US | 8.8.8.8:53 | ie-g2.gumgum.com | udp |
| US | 8.8.8.8:53 | dt.adsafeprotected.com | udp |
| US | 104.22.45.142:443 | vsa60.tawk.to | tcp |
| US | 151.101.193.229:443 | jsdelivr.map.fastly.net | tcp |
| US | 8.8.8.8:53 | user-data-eu.bidswitch.net | udp |
| US | 8.8.8.8:53 | d1ykf07e75w7ss.cloudfront.net | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | k8s1-event-tracker-am.lb.indexww.com | udp |
| US | 8.8.8.8:53 | a1876.casalemedia.com | udp |
| US | 8.8.8.8:53 | ade.googlesyndication.com | udp |
| US | 8.8.8.8:53 | dt-external-217593033.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | d23sp3kzv1t6m5.cloudfront.net | udp |
| US | 8.8.8.8:53 | pixel.rubiconproject.net.akadns.net | udp |
| US | 8.8.8.8:53 | ie-g2.gumgum.com | udp |
| US | 8.8.8.8:53 | d23sp3kzv1t6m5.cloudfront.net | udp |
| US | 8.8.8.8:53 | ie-g2.gumgum.com | udp |
| US | 8.8.8.8:53 | dt-external-217593033.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | a267.g.akamai.net | udp |
| US | 151.101.193.229:443 | jsdelivr.map.fastly.net | udp |
| US | 130.211.23.194:443 | api.btloader.com | udp |
| GB | 216.58.213.1:443 | pagead-googlehosted.l.google.com | tcp |
| US | 8.8.8.8:53 | blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | g2.gumgum.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| US | 8.8.8.8:53 | nld-prebid.a-mx.net | udp |
| US | 8.8.8.8:53 | g2.gumgum.com | udp |
| US | 8.8.8.8:53 | e9957.b.akamaiedge.net | udp |
| GB | 216.58.213.1:443 | pagead-googlehosted.l.google.com | udp |
| US | 8.8.8.8:53 | vsa31.tawk.to | udp |
| US | 8.8.8.8:53 | vsa31.tawk.to | udp |
| US | 104.22.44.142:443 | vsa31.tawk.to | tcp |
| US | 8.8.8.8:53 | vsa31.tawk.to | udp |
| FR | 178.32.197.49:443 | euw2.smartadserver.com | tcp |
| US | 79.127.243.248:443 | ssc.33across.com | tcp |
| NL | 178.250.1.56:443 | in-ftd-65.nl3.vip.prod.criteo.com | tcp |
| DE | 37.252.171.52:443 | secure.adnxs.com | tcp |
| US | 69.166.1.8:443 | apex.go.sonobi.com | tcp |
| US | 104.22.44.142:443 | vsa31.tawk.to | tcp |
| US | 8.8.8.8:53 | ads.pubmatic.com | udp |
| NL | 35.214.251.162:443 | envoy-hl.envoy-csync.core-002-ew4.ov1o.com | tcp |
| US | 8.8.8.8:53 | ups.analytics.yahoo.com | udp |
| US | 8.8.8.8:53 | u.openx.net | udp |
| US | 8.8.8.8:53 | mb9eo.publishers.tremorhub.com | udp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| US | 8.8.8.8:53 | match.sharethrough.com | udp |
| US | 8.8.8.8:53 | global.px.quantserve.com | udp |
| DE | 91.228.74.200:443 | global.px.quantserve.com | tcp |
| US | 8.8.8.8:53 | e6603.g.akamaiedge.net | udp |
| US | 8.8.8.8:53 | cs-server-s2s.yellowblue.io | udp |
| US | 8.8.8.8:53 | dcs-ups.g03.yahoodns.net | udp |
| US | 8.8.8.8:53 | u.openx.net | udp |
| US | 34.98.64.218:443 | u.openx.net | udp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| GB | 142.250.200.34:443 | ep1.adtrafficquality.google | udp |
| US | 8.8.8.8:53 | global.px.quantserve.com | udp |
| US | 8.8.8.8:53 | partners-alb-1113315349.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | e6603.g.akamaiedge.net | udp |
| US | 8.8.8.8:53 | match-eu-central-1-ecs.sharethrough.com | udp |
| US | 8.8.8.8:53 | cs-server-s2s.yellowblue.io | udp |
| US | 8.8.8.8:53 | dcs-ups.g03.yahoodns.net | udp |
| US | 8.8.8.8:53 | u.openx.net | udp |
| US | 8.8.8.8:53 | cs.media.net | udp |
| US | 34.98.64.218:443 | u.openx.net | tcp |
| US | 8.8.8.8:53 | match-eu-central-1-ecs.sharethrough.com | udp |
| US | 8.8.8.8:53 | partners-alb-1113315349.us-east-1.elb.amazonaws.com | udp |
| US | 8.8.8.8:53 | cs-server-s2s.yellowblue.io | udp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | btlr.sharethrough.com | udp |
| US | 8.8.8.8:53 | btlr-eu-central-1.sharethrough.com | udp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| IE | 67.220.228.201:443 | aax-eu.amazon-adsystem.com | tcp |
| DE | 18.199.220.232:443 | btlr.sharethrough.com | tcp |
| US | 8.8.8.8:53 | aax-eu.amazon-adsystem.com | udp |
| US | 8.8.8.8:53 | sync-gdpr.intentiq.com | udp |
| US | 8.8.8.8:53 | d3p3gh8eed0xba.cloudfront.net | udp |
| US | 8.8.8.8:53 | d3p3gh8eed0xba.cloudfront.net | udp |
| US | 104.22.44.142:443 | vsa31.tawk.to | udp |
| US | 8.8.8.8:53 | d.illuma-tech.com | udp |
| US | 172.64.151.101:443 | ssum-sec.casalemedia.com | udp |
| NL | 69.173.156.148:443 | pixel.rubiconproject.com | tcp |
| US | 80.77.87.166:443 | cs.admanmedia.com | tcp |
| NL | 81.17.55.109:443 | ssbsync-euw1.smartadserver.com | tcp |
| DE | 18.184.119.72:443 | match.sharethrough.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| NL | 154.57.158.115:443 | eu-west-dual.ads.stickyadstv.com.akadns.net | tcp |
| US | 67.207.86.10:443 | sync.kueezrtb.com | tcp |
| US | 8.8.8.8:53 | d.illuma-tech.com | udp |
| US | 8.8.8.8:53 | d.illuma-tech.com | udp |
| US | 8.8.8.8:53 | 201.228.220.67.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 232.220.199.18.in-addr.arpa | udp |
| DE | 18.184.119.72:443 | match.sharethrough.com | tcp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| NL | 35.214.230.116:443 | pool-gce-nl.ghent.iponweb.net | tcp |
| US | 8.8.8.8:53 | js-sec.indexww.com | udp |
| US | 8.8.8.8:53 | pixel-sync.sitescout.com | udp |
| US | 8.8.8.8:53 | tr.blismedia.com | udp |
| GB | 216.58.212.194:443 | ade.googlesyndication.com | udp |
| US | 34.36.216.150:443 | pixel-sync.sitescout.com | tcp |
| US | 8.8.8.8:53 | js-sec.indexww.com | udp |
| US | 34.96.105.8:443 | tr.blismedia.com | tcp |
| US | 8.8.8.8:53 | tr.blismedia.com | udp |
| NL | 178.250.1.3:443 | static.nl3.vip.prod.criteo.net | tcp |
| US | 34.36.216.150:443 | pixel-sync.sitescout.com | udp |
| US | 34.96.105.8:443 | tr.blismedia.com | udp |
| US | 8.8.8.8:53 | 150.216.36.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.105.96.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ib.3lift.com | udp |
| NL | 18.238.243.80:443 | ib.3lift.com | tcp |
| US | 8.8.8.8:53 | ib.3lift.com | udp |
| US | 8.8.8.8:53 | ib.3lift.com | udp |
| NL | 18.238.243.80:443 | ib.3lift.com | udp |
| US | 8.8.8.8:53 | 80.243.238.18.in-addr.arpa | udp |
| US | 69.166.1.8:443 | apex.go.sonobi.com | tcp |
| US | 8.8.8.8:53 | eu.onetag-sys.com | udp |
| US | 8.8.8.8:53 | eu.onetag-sys.com | udp |
| DE | 51.89.9.251:443 | eu.onetag-sys.com | tcp |
| US | 8.8.8.8:53 | eus.rubiconproject.com | udp |
| US | 8.8.8.8:53 | eu.onetag-sys.com | udp |
| US | 8.8.8.8:53 | e8960.b.akamaiedge.net | udp |
| DE | 51.89.9.251:443 | eu.onetag-sys.com | udp |
| US | 8.8.8.8:53 | 251.9.89.51.in-addr.arpa | udp |
| US | 142.251.40.131:443 | csi.gstatic.com | udp |
| US | 142.251.40.131:443 | csi.gstatic.com | tcp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | cdn-geuw1-xch.media.net | udp |
| US | 8.8.8.8:53 | a267.g.akamai.net | udp |
| US | 8.8.8.8:53 | warp.media.net | udp |
| US | 8.8.8.8:53 | e607.dscd.akamaiedge.net | udp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | warp.media.net | udp |
| US | 8.8.8.8:53 | e607.dscd.akamaiedge.net | udp |
| US | 8.8.8.8:53 | hblg.media.net | udp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| US | 34.160.55.127:443 | navvy.media.net | udp |
| NL | 69.173.156.148:443 | pixel.rubiconproject.com | tcp |
| DE | 51.75.86.98:443 | eu.onetag-sys.com | tcp |
| US | 8.8.8.8:53 | cdn.indexww.com | udp |
| US | 104.18.38.76:443 | cdn.indexww.com | tcp |
| US | 8.8.8.8:53 | cdn.indexww.com | udp |
| US | 8.8.8.8:53 | cdn.indexww.com | udp |
| US | 8.8.8.8:53 | 76.38.18.104.in-addr.arpa | udp |
| GB | 216.58.212.194:443 | ade.googlesyndication.com | udp |
| GB | 142.250.179.225:443 | ep2.adtrafficquality.google | udp |
| US | 8.8.8.8:53 | cdn.doubleverify.com | udp |
| US | 8.8.8.8:53 | a1241.dsct.akamai.net | udp |
| US | 8.8.8.8:53 | a1241.dsct.akamai.net | udp |
| US | 130.211.44.5:443 | rtbc-ew1.doubleverify.com | tcp |
| GB | 18.172.89.90:443 | rtb.primis.tech | udp |
| GB | 142.250.200.2:443 | ade.googlesyndication.com | udp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | tcp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.24.14:443 | cdnjs.cloudflare.com | udp |
| US | 8.8.8.8:53 | 14.24.17.104.in-addr.arpa | udp |
| GB | 216.58.212.194:443 | ade.googlesyndication.com | udp |
| GB | 18.172.89.90:443 | rtb.primis.tech | udp |
| DE | 18.199.220.232:443 | btlr.sharethrough.com | tcp |
| US | 130.211.44.5:443 | rtbc-ew1.doubleverify.com | tcp |
| US | 8.8.8.8:53 | onetag-sys.com | udp |
| GB | 216.58.201.98:443 | ade.googlesyndication.com | udp |
| GB | 18.172.89.90:443 | rtb.primis.tech | udp |
| DE | 18.199.220.232:443 | btlr.sharethrough.com | tcp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 46e6ad711a84b5dc7b30b75297d64875 |
| SHA1 | 8ca343bfab1e2c04e67b9b16b8e06ba463b4f485 |
| SHA256 | 77b51492a40a511e57e7a7ecf76715a2fd46533c0f0d0d5a758f0224e201c77f |
| SHA512 | 8472710b638b0aeee4678f41ed2dff72b39b929b2802716c0c9f96db24c63096b94c9969575e4698f16e412f82668b5c9b5cb747e8a2219429dbb476a31d297e |
\??\pipe\LOCAL\crashpad_3180_WMADNEZKVDIWMEKO
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | fdee96b970080ef7f5bfa5964075575e |
| SHA1 | 2c821998dc2674d291bfa83a4df46814f0c29ab4 |
| SHA256 | a241023f360b300e56b2b0e1205b651e1244b222e1f55245ca2d06d3162a62f0 |
| SHA512 | 20875c3002323f5a9b1b71917d6bd4e4c718c9ca325c90335bd475ddcb25eac94cb3f29795fa6476d6d6e757622b8b0577f008eec2c739c2eec71d2e8b372cff |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 9d4cf88b4a1af88cc84e5b44e8b19a84 |
| SHA1 | 5d2bce5cd4f3b94aacd739eb4493d82a80efc864 |
| SHA256 | 1b9ed77407ca2e758567e18e75dae838d4911b6d6347ec32a5d940083ee14fa8 |
| SHA512 | 322dcadfa661d11191566317b31c38e2a6829a6e177051f66e3e030ed0eabc25552a180e1d05ec87569d5d97ea1917a05ab4b047ddc69d98d1d467312166717c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | c6d1ffd83319eb4a2d93c1fa4b989b5b |
| SHA1 | 88bc1b5e8e32ad0baf0b2cef7bed3fd8e22d529d |
| SHA256 | 4e8f901fcedf817794fa4281b38621334208b79d1b307dee60d004eb4ffb1220 |
| SHA512 | 0ec12d14ab240fc1f1d435496f55f6a16de998f66eac1b48e4bb69053d91cc475c44fbaa423b3ad8468b66ad742d141ca724c8c1e3721e1d208e4ef4b2ad8563 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | bfc707efb75842f76ad2f9fae9162225 |
| SHA1 | 6f75bf7c4e187dfb0cd6f1b383e6131a3ae42a51 |
| SHA256 | e02c8317d4dc55c9ce734d3326b17abaa538546d358135a0bae65c61552a4f8c |
| SHA512 | e62bd056dde5e1fee4860a036b181e5dc1cf356dbae8ae818bf2b65c20fff3d4610ac845ba332a088c860d0b21ec547d44310f5b0d8ffa4660f60bafe137ba19 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1
| MD5 | f50f89a0a91564d0b8a211f8921aa7de |
| SHA1 | 112403a17dd69d5b9018b8cede023cb3b54eab7d |
| SHA256 | b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec |
| SHA512 | bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\901d800a-7850-44a6-a7e7-e0a5b9bc024a
| MD5 | 5d95260a7b6bcf1083605e5f3bb3a2f4 |
| SHA1 | e42c3d5691dedefc09b1b32e91018b160ca72d30 |
| SHA256 | 20b25e20a6a9897f4b940abe1f71ff1444e6ac8f15d4a13b2bdb8e1894755164 |
| SHA512 | b49673cc89951e603125c04fed97bbca84e82f336e40d1030fd24072279ad357a5c2ddb6d9d8285f60754e4762a5cf20485644353f05576cabe677a20420b106 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp
| MD5 | e63c759a89ec905b7bb0cb9b216997ff |
| SHA1 | c82f3d82bcd38ef3211a92042535f1d844ab027f |
| SHA256 | 8a49dbbf78b6a285a7b3dafd8ceb43254b8db1b4d767d34ded499369ee0742a1 |
| SHA512 | f8a27a99378db91405f29d60febfc3ea13307146d7dbd1476c3b43aa9622d79f4dd0b2144cf6b8feb1e4ab9126b7119f62f5d0e93d77029ce8f0da2bd5b46f40 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\7a05b5b8-a47d-42fc-b231-2f360f32fdea
| MD5 | a38f6b4aba3573b1f9b1c51813c6deec |
| SHA1 | d3a5ab2bd1506d442c506a49b5053be61884c04e |
| SHA256 | 0d1bfd79a34b7920fb0d7d9b213e91e7b2d7239d677db1904388af48df11928c |
| SHA512 | d843ec50acf1f4664a51600148bff76ec5c76060c14368f16de6ca3dfc085a96e33c1a4a870c571af8852f5b010f5a0dbe6952fabb02925e6a6d20ae2800805f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\6f9f90eb-15d5-4e60-a871-ddaf9e6a2092
| MD5 | bef49679336c85871d49316a81681120 |
| SHA1 | 6185d7c74a361c927d2a3928a62c06ef33ce472b |
| SHA256 | dc3b5ddc53beffcb2a5dc60a12afae456982ed5fbb9f605c73a35ae0840f085d |
| SHA512 | e06e50b0aab99100ebfc76a560458e8d870d17475e8e7d8bdc01c2af7db85eea8c48d16415196c6ce257c3424c4c32d228e2e7e875ffe3a63eb57657dad9086f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp
| MD5 | 1cfddb7a71aefd92e60268e3d94ed6b2 |
| SHA1 | 3459ee4165405271003414de43a9f685cc3dec6b |
| SHA256 | c177f2df717e05973d31d370ab98d2674fd6c6467905954b5ac6ae8f55794784 |
| SHA512 | 10b5e237156f3f12daebbc57d1fdbec60f58598822373e3efb6a1fd95c173da78b6f1e42a0adc694da95dfa907e2e17fa30f7ec245dbd102f10e336a28a4ee3a |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\activity-stream.discovery_stream.json
| MD5 | 5d065f963c7f8c5313644fa6b063c6cb |
| SHA1 | 8e6d6d81a24a3d3c0c567cc5182aa747acfec616 |
| SHA256 | 19fd673bfe10c8530db8de20a7abe80128ce92ea856bc28981a7def15f91ac84 |
| SHA512 | 2b2e5029d4cc6db75958b64a33390bb552dcde3e36880c3e9f65b6b79d010c67f441725bd3e76cf4a9316216376a5c81bbcc2b4b3aebae5e2842b909a548a328 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs.js
| MD5 | 22af45e7518d0e00badeaaf17e1ad492 |
| SHA1 | 195c0db7c9052ff4392466085c2fa2c398c92a4c |
| SHA256 | 41e3a0345ce8f5dfe27896646faed1877483d400b363fd77285779a4534b48b1 |
| SHA512 | c00dc7446a1bfb77a61a5c18f254d065d3f6680b1cc823a18c5ff90c619b490ad8b579dfef3c5e96594989d163b37e0cf215a592f2e0ec6958bb87bb148045fd |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.bin
| MD5 | d706d8f59100408069bf4491abd0ed3e |
| SHA1 | 74140476295db8fd12dd34fd664f288fd4514a4e |
| SHA256 | 33ae039bb0b3554bf8a3db092c25899120574e80d8ed704b77278c08de22507e |
| SHA512 | 5b87626619f25d26a22b971b29a515346460e4ee0919f8b5252e3cc1b10da1594dfa0f833c5cc374c6cf5d2412be988d10181bae294545ab6ad0c36c61443d6e |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs-1.js
| MD5 | bd5f419ce5560adeb8f91f03333d5afc |
| SHA1 | 93cb7488d47921b432356b0189bc796c470bf62a |
| SHA256 | ccd40814f8d238684e714684d3d75e88c5a6524ab5480fbffad499e0c0ed154c |
| SHA512 | afd480e320f1ae9c32d9984b2466a72e98fb64d6550d212e0255e1244ae6ccefd95c567798765dc7e43c878e6bf24297c5ca993d1dd6ab317fdd63ed8087cb8a |
C:\Users\Admin\AppData\Local\Temp\tmpaddon
| MD5 | 09372174e83dbbf696ee732fd2e875bb |
| SHA1 | ba360186ba650a769f9303f48b7200fb5eaccee1 |
| SHA256 | c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f |
| SHA512 | b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info
| MD5 | 2a461e9eb87fd1955cea740a3444ee7a |
| SHA1 | b10755914c713f5a4677494dbe8a686ed458c3c5 |
| SHA256 | 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc |
| SHA512 | 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll
| MD5 | 842039753bf41fa5e11b3a1383061a87 |
| SHA1 | 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153 |
| SHA256 | d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c |
| SHA512 | d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\AlternateServices.bin
| MD5 | 793ff8e93fea4b046cf8c2e97aeb06e0 |
| SHA1 | 55aed6e402bd0a301419dcdc885355a6755158af |
| SHA256 | 612683d1b9165ac0fcf3f973c2574e32b3f2591eb1aa559d9d70754e0fedc6f1 |
| SHA512 | a9e4af789c06525f567e22ae574767940726c4ae2bef0bb88019d51e1321bfb0ee46c2731fa104ca84de9b1f7e81e5c500c7372e13b354fe866b23fd5016f31a |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | c9163229f9df2030cd8b41f7441d7577 |
| SHA1 | 185c4230f39916104df76170d53d61ece3065673 |
| SHA256 | fcff957d24467b2d753af0357aef9d00645690b649881d5e894d995ef6f67d41 |
| SHA512 | 2be455fb8977332096e47f2e2a2b2d47f7d26737ff578d09bd2e192e3d612decb7e2210d6831b5519cdc95d4badfad9f8a9ad9bae3c6e40cd136c7aaef2eef66 |
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
| MD5 | 0a8747a2ac9ac08ae9508f36c6d75692 |
| SHA1 | b287a96fd6cc12433adb42193dfe06111c38eaf0 |
| SHA256 | 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03 |
| SHA512 | 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll
| MD5 | daf7ef3acccab478aaa7d6dc1c60f865 |
| SHA1 | f8246162b97ce4a945feced27b6ea114366ff2ad |
| SHA256 | bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e |
| SHA512 | 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json
| MD5 | bf957ad58b55f64219ab3f793e374316 |
| SHA1 | a11adc9d7f2c28e04d9b35e23b7616d0527118a1 |
| SHA256 | bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda |
| SHA512 | 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | ec897e15e1fe2258b9fcac401eb86213 |
| SHA1 | ddd43fa119c7600c23a6e49f3da79299cfe01009 |
| SHA256 | f0f21f52300bae9a3a9ad269a1348a7d81577c33ec4ea4de03058c9ae19b22a8 |
| SHA512 | 933ac39e7856fd9dd2a6d4bfaafe470f3ef7172a5a9ad448ab77481d5cfb41c577bcdb8808a5c8c67e38e6465cbfb8d0958d0f2f6d86cda29778faa6c235417d |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs-1.js
| MD5 | 8e1eec385c5576ccb0284fd861902dd3 |
| SHA1 | c7373767c2e117c77b0b01f7145d402dddf804fa |
| SHA256 | c754b6926fe9c86e0c46f758502a8b05b633d6621370ce8a1c31651a8dc45388 |
| SHA512 | c9886942ec3d4bd5463ab1c918fa1bba4db31cbb79c0f9f1a67f091e75e13dca5e5ed71d4d1fd6f464df761214226d9b2e77d1a05b6d3e716938c12865082773 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp
| MD5 | 3b089785f80a4f3a97c19d2ab7aea086 |
| SHA1 | c3dd019481dd20dd66485de3064b6693a9db8b61 |
| SHA256 | e3a813b5fb7b5a4aa0e829eeb81dae99c82f41c04af7deeaa9a3bf6f71fc09e7 |
| SHA512 | b9d7c126769ca5cfea1109548ca5bd1ac87c8930ec8297a8ae9cab0840ef9f0856618cf178f94bdaa5e6dea1979e7cb0f4ccec7ff036dd455920907a8af906ea |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | 00ff1db39ce7458377f21f4d64a42103 |
| SHA1 | 945a8efb50639c1ea355e007bdd030c5b4f8bcf5 |
| SHA256 | 3ae367d8b845d761f14f268a3b0c37d1f3a5c2ee0b9648cb050e320becf33ce1 |
| SHA512 | f2c3393f6d8778e54ebf529354b61426c366f33c6129b081fb1f0ea9bfc0b1b1e98945f7f17450d8b096407b592f9d08ffd9577a4308fcd27aa9ad2afe446b1e |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | 677c05a54721fdca5d6ecfa89fe4a676 |
| SHA1 | 82fba41ce0228f1d0ee8360689420cb23de47da1 |
| SHA256 | 101cb70025457a54641be4d1a22c7f55dc8bdf5a970d3412635024784a2fe7ef |
| SHA512 | 7d344ac3a61d955d560242e83a3996b297586026672545a7e92117b2fd3e503de67c4a49c7f01c8386f92fd701eec79000fb7ab74418198b6cf7164d6f9dc1a4 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | 297eae83142a5bb9360daecda8e8e5c1 |
| SHA1 | bb1c62f1315d376b43eef8ea99d977334df86e5c |
| SHA256 | bb64bb25c03ceb14bb6666c9025eb3e60970c52b27a6c576461795cdb31d8d98 |
| SHA512 | fd3bc089b6f4e2ac2c6a7452c8de80a11dd6e05cb5ed1ae31dd6b3b8d5b1e54496f124ee542d266baec8f4bf76c7bcd2132a6046a50bc29f992bd6cce392b20a |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\5EFA2113674088EEE5FD1DAB800B1336DE4A84C7
| MD5 | c869966fd309464ee7e2d2d95b61f2ed |
| SHA1 | 5350749899c8bb6cf569016d907ef11ea3559e36 |
| SHA256 | 36227f022533882b8b875c1ef1d2440b697e792c83212708e86887dfc969975f |
| SHA512 | feb6417661f22b38c15ca852df7262362ea56f7a2a15bcec7429071ba89045243d426e51fa5696ba8c3604b8ed0fe5cd2c7c081a1503fac6b659fe3c2298d390 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\CE996EFBBD6312D79AB8D762F29B640310AD5F13
| MD5 | 43d826273afd683a1a5958529001ea9d |
| SHA1 | 75e7a08446105548f6c34341be5fab5695265433 |
| SHA256 | b3e479811a3f6cb5639a4bea89f8869007057d3d767dc31ae1c013095eb76a6a |
| SHA512 | 01de3ca02ef3d98f8766397b9a0fdc39300295e850c2122b47a934e8c79c3298500c754eb18d2b3f3c4fedfb02db0721c8d1abbbc9facce11f2917f81a6abf2a |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\7887657DB349BC8A5DACB9712406734503B4B894
| MD5 | c015825432ed45ed8b9b821a956635e7 |
| SHA1 | 83dc4da574ff65a0bab8809fa8876fdc39f680e8 |
| SHA256 | 40eb51e086290c4661bea40c2090b8c4cf9eaf2b225794a03b59902667b457a4 |
| SHA512 | 798e26e650d8713682c2112d831a2863594abdf9f90d3f19d4062498b70a71d50c12e34b4f63cc8c1533b68f9da652bc2d33cac225f4b6a780425159e28b5dd6 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\C6E623770F15F5CADD4B67B4F8D2CDEB555FC6AD
| MD5 | eec9ba741bc0834e70fcdc333cad0648 |
| SHA1 | 788f596d8dde31e25a4e19b280e88c9466d0e0f6 |
| SHA256 | 9580f691b3c0c3416f4c74c6fedaccbaa4f63ffa2579f4c08fe694fcbfc00318 |
| SHA512 | 64b7cc479184c111a9486bdb25c20590e369306c60a1ea4e516ee3724a9a0b03dc270a23c9c2d47dc62481ece08af9c811bb6472dd7ad849d4b101376ecea6da |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\355EF5692EA762B9ADF2437667097D4BE306B084
| MD5 | 7e3d5ccaf97f1d6a5a014bd467ef2bc5 |
| SHA1 | 6b14f602101fe69c1d2b41baf90d3875758855fc |
| SHA256 | e5d59047daff5784608e624a92ab190a3d7e8e54eb6045b028e70d575e7141f4 |
| SHA512 | 31139182f2ecbfb43fc3f6edc232a40e08d040842001325ef9423dc6bbebcaf9d62b5f1127e11df0f7752c5986dcc12c2446a3dd7a564b8f1a03e4c55390600f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | 3ca15602a38760841133adcd8a491d5f |
| SHA1 | 12130b93fbe901def368c759ad229decfcbd9467 |
| SHA256 | cd470bdd15bd7e17e25d63743161516cd07997398d3338650db652f3cb49f694 |
| SHA512 | 66310430d13cf2311627d8b08d2a741c7808d52f9b16f84d64933e6121aaeb286d839f6622cd82c343ec57ea10dd68174d4ce7c866ee105028f4fb2d33fcf497 |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | 1cbbf9a4eb5f02faff7045bb1f574b82 |
| SHA1 | e430ffc0c976bb3f64ef7b37f1203952e2060ede |
| SHA256 | cdca86aca066081e9e9af9d9972089fe9d81a8cf9f3366a3f903c1ec5dea07dd |
| SHA512 | 9e8728a8e0e1d7e282e8ca10d6119793a8b9d14707bb080996731ef154d0df9684873ee032718f94e0ddd76f279d6f6cc69adac8096100b0efe38d260bb2f2ff |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\C7527522BC9BA36820C3E298221D34935CA70F2D
| MD5 | 600862e1548d1a4159b51a874bd62896 |
| SHA1 | 8b42c82474ef5693a7e777accc7034a46312ff8e |
| SHA256 | 2d601cfb3c8fe658fc4a23e5013624ea30c7d8a93e2c7c483ae97b21a80e6243 |
| SHA512 | d28511a62468ccabc785c3b0e59e7f3cfb1379ca8e365e3c593223bd723d2c0755ea75c742afc4316654c1f01853fc9b2a4d9f1015ccf9c983dd55130e9bf8d0 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\AB5C3A60EFCC801FCCE60E65B1B7E11A4DC3C83E
| MD5 | a879be05583c3620876e37d5cb283e14 |
| SHA1 | 9e93f7667f59701b4ed492b9bd4cd3966851eae4 |
| SHA256 | c26921a8d61df9b319affaf16e6bae5169cc5f540fe7b532f83dad2a31b80832 |
| SHA512 | 4097c627a41e12cdead52ec2182ad0d25645bd515b03f83006ee5fbdcf6c045d789f540e3db74590adc6dbf053a2be38173360ecae91f9d3071fc396d2671098 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\4A6B7A02A7398C91D71C07891815E76A87C2A692
| MD5 | ffdbd51cb05b4c68770ad3ae8cb7e40e |
| SHA1 | b4ac10591f38b76dd5ba24af1ba5fd03b6d12405 |
| SHA256 | dffc0ea500a578f0354762dcc64a952fada488c14a246d12dc6b7c2a39e2863c |
| SHA512 | 9751ddfeac354b0d69054e6280da7be33ea229433167eddd9c31d5eb6187d841767040e740e11c1094436f3a0d15aed5014d369fa2a0d4f95be83e4762ee11f6 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\6AADC8623038FA06EA40CD376F742C14B8A6DC69
| MD5 | 597deb95a1736b2cf1ac63795f4c4474 |
| SHA1 | d03da7cb032a3b2c62ae460acf21e8fc22c5cfcb |
| SHA256 | d6adfa94fdbbd1bf2c04fdb8e6166ae2d6623380003fdaa09fd9adb8171f45a8 |
| SHA512 | 6bbb6ba75e713031681b7cadcbdd3c2eaf46cbf8422127634b4510abdbee258ae023ad4111c9a502d8d6e073276a98656566462465f64ad567ce3ced7d5c5fd7 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\D153AFDA7C77FEE17181B26FCB5A87A59DB9F052
| MD5 | 2efc247752eadeef675c3b34d14fdd8a |
| SHA1 | 871155d998ba41d3eaa60b65eb4832d69d119a32 |
| SHA256 | b005c8d53a99952a188dde1bc3b946154c5e3db9fa6423880ac7403c5fc0ee7a |
| SHA512 | afb0a019173b81426e0a489868ac6d86302f04710665bc7e3f8a963200a82f5ab8b442717cf7d7ceefc0596dd81024b3c5ec08628ac37cf80aea758a91f112a4 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\646BA5C7BE250B3E4EEDBB9C39007084FA455092
| MD5 | e2fd9a8eea41b8ee9c78d1a2c336fe79 |
| SHA1 | a6fdf4d28635cb46f9a135f37b4fe556142c3f5b |
| SHA256 | 67666d8e30dc5dfa3a700318844963decf38f31b8cbe8921725a34ca4cf10082 |
| SHA512 | 9c367adbf9742a7ae78760380650b1fcc33596c0b9e708d1ef65e53ac26ea2d3c04a9932a5aeb477d3b21a87ed89ee4155ba9882143be6e8c7b3068ca6290097 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\59D798C9522D50B266D8CE3FBF197071C1494518
| MD5 | 563b3e3d50e6504d9ccdeb6345a266c7 |
| SHA1 | c4f2712c94380fb4faec6c1c23c3bfccbaa7b452 |
| SHA256 | 3d5a170d7498aab6e8eb7aae959d5fc7bdade369b3b7b81c2c2c3f03449107b5 |
| SHA512 | a8a2ccd3766ef8fcffb964e2e6ea34ff9660ffe9a21c4be21f24be932ff8630e07c4ce28d58603448fe662bf6809baee8377eaf33a63a1ccf1c67ec66f8779ea |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | aedb8709022704895a2c9ca9e88ebace |
| SHA1 | 59846686749a773969420d50bba20f006812ebad |
| SHA256 | 9ab8037d2013b2443fe4a21fcd4f2e541e828f20605cdf19ff5bab8af11c49d0 |
| SHA512 | 923bed148efc8e80831653101d616369073cea64ca2eaabba13c9d71a078881b10dea5c52946ca3dc9c4f0bf92f6c889f2176205c241297a374584a4fadc73d5 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\79A57EFA2DD5094F54E2E09008AA7BADDA51688C
| MD5 | 54103a47652b5ee9fa32dc552d9a276f |
| SHA1 | 6f24d36278336d425d3a8be3b80c63d4b61b455b |
| SHA256 | c6cefeb2231dd57735b103e7d89aeaad987d28ee3b321c95dcc71677dc96be2f |
| SHA512 | 304074806639bacc4a2640a71c3d679a8b011aa91aef618bc358aceedbb728bfd0465aa70d4757d1b3d8663a80b51186abc2a0d81c97086f50e0e49ec48949cc |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\storage\default\https+++grabify.link\ls\usage
| MD5 | 233bfb8f77cc9e61a058968b71420f6b |
| SHA1 | 6afac2648ce5c413e8e7ae5a5115ae74870fc2ac |
| SHA256 | c496480ab87461133871a28bbf46c92319a102f2e04c8b0346cc4654e532888b |
| SHA512 | cb4cf06884a48324630dd81567da4a474659bcede95b03f9cd64b519a5f2d549792ba1c11e8c45f8808ed64b759ae7ffe5b618cff112daaf649bcf1cf9de3e32 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\19E42C0243FF09225562ECC56B2A9900C487519F
| MD5 | f63354ef658466dd20776475b0fea12f |
| SHA1 | 4706743741e7a73125b07cd142276f5cb9821c41 |
| SHA256 | eae2c22ddc7c4e14cdf5e4f36a79203b30f8a41e8b7a0bc87293df52c225aa36 |
| SHA512 | e5966e1e1ffaf7ff8e694402b7d9875785a98d971cf8a5e8da1862c8a385508cc95f68fb6e0035f5566d173ff28f58206065ec98474f152ff17550f7599e85ba |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\13F4C6C947C95C95E4258FEBCC8B2FD8D060A2B0
| MD5 | 980802b059c2e0b920d75621670f7295 |
| SHA1 | d98d8a920ee80d41063cb6387cea312f8f5f99f1 |
| SHA256 | e0602153badb5ba8bf33a1fedaab57ae3dfc27937d9b785c981ee1c32c2b4b0f |
| SHA512 | 11b96bfd93215925c79053554328ee26723d676c9eaa9c4c66c8eea32e8863403728aad15caca6f8ec61ef2b6e7ddfaf7d477c4dd91c15f827c8d260a142a7c3 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\252099662A61B43907F202F82C508F06E2AC8B24
| MD5 | d004927a15beedef3675bf28f51f1306 |
| SHA1 | 7591a5fbaab295586e073d6323c568a1bebd71f3 |
| SHA256 | 29d81997018cfaf53711d67b9617d12c3394f08dafd097f714e55595403f37d6 |
| SHA512 | 0cdbe0753672647ac18a9df9e1f967dff39d2c0c197ca63a54f7835a39318814360e92a046020885229ce6e66064b516587c15f62d4760a43233ada81d5e9f27 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\85B4F8372458F938F917AE8C86AD4A6A05B7F7F9
| MD5 | 1948e496ca717b4dd410159ad90b7f42 |
| SHA1 | 865ee1948fba2408f4b36e1c8b89c162e93eb9b8 |
| SHA256 | 6a2203c4a067c6796ebadde3a3b5f2460c378ff5c53131f5e57504dcd0b79ef1 |
| SHA512 | 439871a78de2775219d3be7bf8fc2b0faf3b83dd08d026878b61c6ab4e2655d6620ab8d9308227159e2ad67c47691bf9fceaeb77c36ab19b738c15eaf34cede4 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\4A4C45BD889A5224BBA5AF1318166D2449F8A005
| MD5 | 001736be7079fa87e0705f31b0e7a946 |
| SHA1 | e3651e63cecbb7aab1cfa01e87c3772960e8b837 |
| SHA256 | ce083e606d73d104fc2d638a2dd1dea81957d4ef5323f8daeb7052f0d0d2865c |
| SHA512 | 9d9d3f903ecf0d7b5429f1d900af9c515d68c9a2c4ec8bb0789c9ef32c884141f64ebef04ee34aa90cefce19bcacb2c18c9119b5ab9f4d719233964907834609 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\26F72AEB07772EA9AA9643585F871E828C257806
| MD5 | cde06cd55fbb52772b5e8d786e4f8c5a |
| SHA1 | 7f7a0fe9f54edd3397bf12106b68295f56f64bb6 |
| SHA256 | e5d3a315a087b65cbd5a1487134ad5b25090681fddeb598bacec5f407c9c7bf5 |
| SHA512 | 1e91207ea804e4085692f3daeea075df66b96a3d495333f16976f4e2d249ade6ade7115aa8af7ec2f1b984536ded6bcdd1126538c68b0a7295efc6ee365cc4e9 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\3DBE97E5FB7075378676C30F03CAAD44FF875938
| MD5 | b6228f191411538b902d2725c5c7daeb |
| SHA1 | 3797951f79f818e70f4ce302cb095600074b2470 |
| SHA256 | 24d040d950e734ebecf13d452dbb7896cc4831d8c7deb335974e596bf29495b5 |
| SHA512 | a6d9285fef7db67a4f4ac7d5cd038070009cc2c49b8ae5697d95adaa004361324ce998219f4fd5e2095a79bf4eddb68abc2c8df069646a71b697275c03e49ee5 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\F7052049886ED25018F02BD626F4523EA8A90707
| MD5 | 7000adfa560346c66cfe741ecf00b50e |
| SHA1 | de09f6f43691deb290b53afdfe546bb0ac61a4fa |
| SHA256 | e0c836dfa263aa01eb7ba7a1bbc26e2aac038e2635fd86deb7a7adc078ad1051 |
| SHA512 | afa9187c48e8b1f46992abe10f16348499e9d4260c02ee1634c6641c3798b14b57030d2dba740ee52cb175f521bd55a76ea814216f1104bf266c543d61070cc1 |
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\64B7CEF5F07F00A23BD1F00D5783F17910EDCC73
| MD5 | 93dd5643381e41ed9a6b9599e4ee9821 |
| SHA1 | c096f417f541c6b776acb23ec01aefd02f4b1772 |
| SHA256 | 01a8cccded8e23e5b90230b4697c51c3dd4fd9efd62728c1f308587656c16020 |
| SHA512 | 7c56371451ae59c5d486439da07bfa6ebddac31022049e28b2f0bb9e218439b4db3b4da352fcda43ac5c639fa636b232a776bd573cc264df6bc1e0e9579b616f |
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4
| MD5 | fe136a13d76f3937acc2cb5489b2e30e |
| SHA1 | fac7cbb19d9400f40ae2195e97608b381723910f |
| SHA256 | a274a5e7793531376ba9c385950e2260aacab6a57f8d41cc7aa74ae505bcde0a |
| SHA512 | 322a94b1b6ddb308aac2c8fc38ab20c2f51a48a8738b8a1f31420b7b0e5d7749e9d4efc679a40aa50e201d8e143c260d2e3ab22e460838ec6459866a4de17fd5 |