Malware Analysis Report

2025-05-06 00:51

Sample ID 241109-y8tnksvjak
Target inbox.png
SHA256 27410bc7be14c47eb58679632c4f683dcd90814191ad030fd254e4ff96646523
Tags
discovery phishing
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

27410bc7be14c47eb58679632c4f683dcd90814191ad030fd254e4ff96646523

Threat Level: Shows suspicious behavior

The file inbox.png was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery phishing

A potential corporate email address has been identified in the URL: currency-file@1

Enumerates physical storage devices

Browser Information Discovery

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

Enumerates system info in registry

Checks processor information in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 20:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 20:27

Reported

2024-11-09 20:32

Platform

win11-20241007-en

Max time kernel

291s

Max time network

292s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\inbox.png

Signatures

A potential corporate email address has been identified in the URL: currency-file@1

phishing

Browser Information Discovery

discovery

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3180 wrote to memory of 3508 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3508 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 2424 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 2424 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3180 wrote to memory of 128 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\inbox.png

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe5a603cb8,0x7ffe5a603cc8,0x7ffe5a603cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,4420260366558852162,9525324407690946988,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1964 -parentBuildID 20240401114208 -prefsHandle 1892 -prefMapHandle 1860 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2e491c36-e4c4-4ef5-9709-f61b5a302e17} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2364 -parentBuildID 20240401114208 -prefsHandle 2356 -prefMapHandle 2344 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {40e774ae-7cef-426d-85c1-1eeee67022e2} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2928 -childID 1 -isForBrowser -prefsHandle 3288 -prefMapHandle 3156 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {66496fac-ff52-4f03-8834-b75348312103} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3544 -childID 2 -isForBrowser -prefsHandle 3596 -prefMapHandle 2908 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bd0a5862-0558-4fdf-853e-33d930a2e285} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4756 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4744 -prefMapHandle 4660 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e59a15cc-a564-4996-b348-d5038057a91e} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5488 -childID 3 -isForBrowser -prefsHandle 5544 -prefMapHandle 5528 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {06e70fc7-6b4f-4a3d-b037-5f94cbc603d6} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5628 -childID 4 -isForBrowser -prefsHandle 5668 -prefMapHandle 5672 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d70e31e0-0401-4b4a-b0ea-3bf9bc451974} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5836 -childID 5 -isForBrowser -prefsHandle 5844 -prefMapHandle 5848 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0df585f9-bfdb-4b92-bfcd-8c81dac92354} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2752 -childID 6 -isForBrowser -prefsHandle 5640 -prefMapHandle 1264 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {13b1e41a-ed07-4d61-8dd3-b94a89be1380} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6328 -childID 7 -isForBrowser -prefsHandle 4524 -prefMapHandle 1596 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {04117df2-72d7-4e7d-8152-04528b43c9dc} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6196 -childID 8 -isForBrowser -prefsHandle 6684 -prefMapHandle 6716 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b23c29b-eaf0-4186-9c2e-b5ddd274a26c} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6848 -parentBuildID 20240401114208 -prefsHandle 6920 -prefMapHandle 6196 -prefsLen 30908 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {72324168-2abc-4a0a-aa94-972b851c4d07} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6956 -childID 9 -isForBrowser -prefsHandle 7064 -prefMapHandle 7060 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba0ed708-7b85-4cf2-a283-3d39af85d4fe} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7264 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 6920 -prefMapHandle 7300 -prefsLen 30908 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {21b154a3-8da2-4e21-a5b7-62ad8b944029} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8036 -childID 10 -isForBrowser -prefsHandle 8048 -prefMapHandle 8080 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fdca2796-f391-4ec7-a736-906fdd4f0193} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8212 -childID 11 -isForBrowser -prefsHandle 8220 -prefMapHandle 8224 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c005687d-2ae5-4eb8-9b30-ea1e471d742d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8332 -childID 12 -isForBrowser -prefsHandle 8460 -prefMapHandle 7924 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {94ac1488-9aa6-4572-a47f-a8b467ff69f1} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8336 -childID 13 -isForBrowser -prefsHandle 8632 -prefMapHandle 8636 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9bdee9bd-508d-4ecc-a89a-1519ded4f956} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8888 -childID 14 -isForBrowser -prefsHandle 8808 -prefMapHandle 8812 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c120364-104a-4487-95cf-d4f8ea7f0002} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9160 -childID 15 -isForBrowser -prefsHandle 9152 -prefMapHandle 9148 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6694858-2f38-474d-a7f9-1e7b845076fe} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9292 -childID 16 -isForBrowser -prefsHandle 9256 -prefMapHandle 9252 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8ededcfe-8c9b-49ca-a21f-d3ee124b759d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9476 -childID 17 -isForBrowser -prefsHandle 9300 -prefMapHandle 6044 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8486d5df-4633-4d22-956c-3ff9733759d1} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9672 -childID 18 -isForBrowser -prefsHandle 9476 -prefMapHandle 9748 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {45d27208-2398-44fc-b638-ffb3e1599280} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9980 -childID 19 -isForBrowser -prefsHandle 9692 -prefMapHandle 8664 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7d840e19-4ce9-4cbf-9c3c-ca4f57f75f41} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8840 -childID 20 -isForBrowser -prefsHandle 8672 -prefMapHandle 9300 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3dd69f79-9707-4ef3-a1f1-8b2c6472d5ca} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10124 -childID 21 -isForBrowser -prefsHandle 10104 -prefMapHandle 10108 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c327fd7e-7869-4e10-8d9c-51c877bb4f0d} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9748 -childID 22 -isForBrowser -prefsHandle 10248 -prefMapHandle 10252 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53fad62d-599e-4dad-b68e-e9ee650bd1e7} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9884 -childID 23 -isForBrowser -prefsHandle 8476 -prefMapHandle 10040 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c60491b-cae5-42a8-b0b7-2609b59adfef} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6872 -childID 24 -isForBrowser -prefsHandle 9372 -prefMapHandle 9276 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28928e3f-defb-4b3a-9683-d5c593cb6eb6} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9408 -childID 25 -isForBrowser -prefsHandle 10292 -prefMapHandle 6040 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e4c0645a-8758-4736-a643-6df4971c9a81} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10124 -childID 26 -isForBrowser -prefsHandle 6556 -prefMapHandle 10244 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b98dd1c-c94c-4504-a47f-d49a99c89dc0} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4572 -childID 27 -isForBrowser -prefsHandle 10152 -prefMapHandle 9552 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4961dfa3-1699-425e-8144-0c61477297b0} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6332 -childID 28 -isForBrowser -prefsHandle 8288 -prefMapHandle 8544 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3c9c975-bfc4-4b00-80c0-748f75a90dc9} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8748 -childID 29 -isForBrowser -prefsHandle 10364 -prefMapHandle 10376 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a67ee5b-1ac8-4d91-9191-eb4862247780} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10348 -childID 30 -isForBrowser -prefsHandle 10316 -prefMapHandle 10340 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e59d8c5-d421-429c-8147-a143e8f882d7} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8620 -childID 31 -isForBrowser -prefsHandle 10400 -prefMapHandle 10140 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4ac16e3c-c730-4dd2-b294-9db9cc02c025} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10660 -childID 32 -isForBrowser -prefsHandle 10652 -prefMapHandle 10648 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3dec6dce-eca4-47f4-90cf-aebd2ca25fe9} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8468 -childID 33 -isForBrowser -prefsHandle 10796 -prefMapHandle 10792 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {26824474-c0c8-4812-8231-dff7b7266bc4} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9356 -childID 34 -isForBrowser -prefsHandle 9200 -prefMapHandle 9220 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {858e546f-e925-4d43-903b-a1a40d0bf76e} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10832 -childID 35 -isForBrowser -prefsHandle 10044 -prefMapHandle 8508 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {541e8266-00e1-468b-8f04-82a1a391d785} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8664 -childID 36 -isForBrowser -prefsHandle 9888 -prefMapHandle 10832 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {23350e7c-f09a-4ad9-9719-32ba94d36d36} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10964 -childID 37 -isForBrowser -prefsHandle 10952 -prefMapHandle 10944 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3b1a995-678f-4ea0-bbc0-08131ffae2ae} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6700 -childID 38 -isForBrowser -prefsHandle 11140 -prefMapHandle 11136 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f8791269-9436-481e-b12f-db8faabf01ae} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9176 -childID 39 -isForBrowser -prefsHandle 9232 -prefMapHandle 11060 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3bdc0d41-a4ab-4043-a32d-fd31e6a1b8bd} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6500 -childID 40 -isForBrowser -prefsHandle 10148 -prefMapHandle 10644 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b20c092d-d11e-4324-a139-8fa3f1cbf767} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9220 -childID 41 -isForBrowser -prefsHandle 8736 -prefMapHandle 8728 -prefsLen 28242 -prefMapSize 244658 -jsInitHandle 1304 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4eb07613-0817-412f-ba98-3de5e5380e6c} 1276 "\\.\pipe\gecko-crash-server-pipe.1276" tab

Network

Country Destination Domain Proto
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
N/A 127.0.0.1:49895 tcp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 34.117.121.53:443 attachments.prod.remote-settings.prod.webservices.mozgcp.net tcp
N/A 127.0.0.1:49902 tcp
US 52.173.151.229:80 gamingfun.me tcp
US 172.67.68.246:443 grabify.link tcp
US 172.67.68.246:443 grabify.link tcp
US 172.67.68.246:443 grabify.link udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
DE 23.55.161.185:80 a19.dscg10.akamai.net tcp
GB 142.250.200.14:443 redirector.gvt1.com tcp
GB 142.250.200.14:443 redirector.gvt1.com udp
GB 173.194.183.71:443 r2.sn-aigl6ned.gvt1.com tcp
GB 173.194.183.71:443 r2.sn-aigl6ned.gvt1.com udp
US 52.173.151.229:80 gamingfun.me tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 52.173.151.229:80 gamingfun.me tcp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.204.81:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.204.74:443 ogads-pa.googleapis.com tcp
GB 216.58.204.74:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.204.81:443 csp.withgoogle.com udp
GB 216.58.204.74:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 81.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
GB 172.217.16.238:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com udp
US 172.67.68.246:443 grabify.link tcp
US 8.8.8.8:53 grabify.link udp
US 172.67.68.246:443 grabify.link tcp
US 172.67.68.246:443 grabify.link udp
US 8.8.8.8:53 cdn.fuseplatform.net udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.17.160.237:443 cdn.fuseplatform.net tcp
US 104.17.160.237:443 cdn.fuseplatform.net tcp
US 8.8.8.8:53 cdn.fuseplatform.net.cdn.cloudflare.net udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
GB 18.172.89.123:443 live.primis.tech tcp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 cdn.fuseplatform.net.cdn.cloudflare.net udp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
GB 18.172.89.123:443 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 embed.tawk.to udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
NL 18.239.36.97:443 cmp.inmobi.com tcp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 104.22.45.142:443 embed.tawk.to tcp
US 8.8.8.8:53 embed.tawk.to udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 237.160.17.104.in-addr.arpa udp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 123.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 97.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 embed.tawk.to udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 104.22.45.142:443 embed.tawk.to udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
NL 18.239.70.203:443 d1ykf07e75w7ss.cloudfront.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
NL 18.239.36.97:443 d23sp3kzv1t6m5.cloudfront.net tcp
US 151.101.193.229:443 jsdelivr.map.fastly.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
NL 18.239.70.203:443 d1ykf07e75w7ss.cloudfront.net tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
NL 18.238.243.122:443 config.aps.amazon-adsystem.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 142.45.22.104.in-addr.arpa udp
US 8.8.8.8:53 229.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 203.70.239.18.in-addr.arpa udp
US 8.8.8.8:53 btloader.com udp
US 104.22.75.216:443 btloader.com tcp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 122.243.238.18.in-addr.arpa udp
BE 66.102.1.155:443 stats.g.doubleclick.net tcp
BE 66.102.1.155:443 stats.g.doubleclick.net udp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 18.193.40.240:443 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com tcp
DE 18.193.40.240:443 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com tcp
US 8.8.8.8:53 choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 155.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 38.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 240.40.193.18.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com udp
US 104.22.45.142:443 va.tawk.to udp
US 104.22.44.142:443 va.tawk.to tcp
US 8.8.8.8:53 va.tawk.to udp
US 104.22.44.142:443 va.tawk.to tcp
US 104.22.44.142:443 va.tawk.to tcp
US 8.8.8.8:53 va.tawk.to udp
US 104.22.44.142:443 va.tawk.to udp
US 8.8.8.8:53 142.44.22.104.in-addr.arpa udp
US 8.8.8.8:53 vsa2.tawk.to udp
US 8.8.8.8:53 vsa2.tawk.to udp
US 104.22.45.142:443 vsa2.tawk.to tcp
US 8.8.8.8:53 vsa2.tawk.to udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 c129040bc4edb542106f333df598c7c1.safeframe.googlesyndication.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 bidder.criteo.com udp
GB 216.58.213.1:443 c129040bc4edb542106f333df598c7c1.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 104.22.45.142:443 vsa2.tawk.to tcp
US 8.8.8.8:53 ads.servenobid.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 a.teads.tv udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 prg-apac.smartadserver.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 in-ftd-65.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 ads.servenobid.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 hbopenbid-ams.pubmnet.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
US 8.8.8.8:53 amsrt.marphezis.com udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 ads.servenobid.com udp
NL 18.65.41.230:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
GB 216.58.213.1:443 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
NL 18.239.18.78:443 tags.crwdcntrl.net tcp
US 34.120.63.153:443 prebid.media.net tcp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 178.250.1.56:443 in-ftd-65.nl3.vip.prod.criteo.com tcp
NL 185.64.189.112:443 hbopenbid-ams.pubmnet.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
IE 34.255.154.106:443 g2.gumgum.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 api.intentiq.com udp
US 8.8.8.8:53 sync.intentiq.com udp
US 8.8.8.8:53 api.intentiq.com udp
US 104.22.45.142:443 vsa2.tawk.to udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
NL 18.239.50.17:443 api.intentiq.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 sync.intentiq.com udp
US 8.8.8.8:53 api.intentiq.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 172.67.8.174:443 i.connectad.io tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
IE 34.252.246.23:443 ap.lijit.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 8.8.8.8:53 sync.intentiq.com udp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
DE 3.124.64.248:443 eu-tlx.3lift.com tcp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
GB 2.23.205.112:443 e9957.b.akamaiedge.net tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 175.203.166.188.in-addr.arpa udp
US 8.8.8.8:53 230.41.65.18.in-addr.arpa udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 78.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 56.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 106.154.255.34.in-addr.arpa udp
US 8.8.8.8:53 178.34.18.104.in-addr.arpa udp
US 8.8.8.8:53 139.197.244.143.in-addr.arpa udp
US 8.8.8.8:53 174.8.67.172.in-addr.arpa udp
US 8.8.8.8:53 17.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
IE 54.74.74.210:443 bcp.crwdcntrl.net tcp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
FR 163.5.194.32:443 nld-prebid.a-mx.net tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
NL 18.239.50.17:443 api.intentiq.com udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 u.openx.net udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 mb9eo.publishers.tremorhub.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 global.px.quantserve.com udp
GB 142.250.180.4:443 www.google.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 172.67.8.174:443 i.connectad.io udp
NL 18.239.69.3:443 sync.intentiq.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
DE 91.228.74.166:443 global.px.quantserve.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 8.8.8.8:53 cs.media.net udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
GB 23.219.196.188:443 e6603.g.akamaiedge.net tcp
NL 35.214.251.162:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
DE 51.75.86.98:443 onetag-sys.com udp
US 34.98.64.218:443 u.openx.net tcp
US 8.8.8.8:53 sync.kueezrtb.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 sync.ingage.tech udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 partners-alb-1113315349.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 248.243.127.79.in-addr.arpa udp
US 8.8.8.8:53 32.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 210.74.74.54.in-addr.arpa udp
US 8.8.8.8:53 49.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 52.44.40.191:443 cs-server-s2s.yellowblue.io tcp
US 172.64.146.150:443 sync.ingage.tech tcp
US 8.8.8.8:53 dcs-ups.g03.yahoodns.net udp
US 8.8.8.8:53 hj5ozcalb.puzztake.com udp
GB 142.250.180.4:443 www.google.com udp
NL 18.239.69.3:443 sync.intentiq.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 hj5ozcalb.puzztake.com udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 34.98.64.218:443 u.openx.net udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
GB 142.250.200.34:443 pubads.g.doubleclick.net tcp
GB 142.250.200.34:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
DE 18.153.93.230:443 btlr-eu-central-1.sharethrough.com tcp
NL 13.227.219.118:443 d3p3gh8eed0xba.cloudfront.net tcp
US 8.8.8.8:53 d3p3gh8eed0xba.cloudfront.net udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 13.248.245.213:443 eu-eb2.3lift.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.net.akadns.net tcp
GB 87.248.114.12:443 dcs-ups.g03.yahoodns.net tcp
US 23.20.69.65:443 mb9eo.publishers.tremorhub.com tcp
GB 2.23.220.28:443 cs.media.net tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 81.17.55.109:443 ssbsync-euw1.smartadserver.com tcp
DK 37.157.6.232:443 track-eu.adformnet.akadns.net tcp
DE 18.195.234.25:443 match-eu-central-1-ecs.sharethrough.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 154.57.158.115:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
US 67.207.86.10:443 sync.kueezrtb.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 3.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 159.33.239.54.in-addr.arpa udp
US 8.8.8.8:53 137.131.71.35.in-addr.arpa udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 188.196.219.23.in-addr.arpa udp
US 8.8.8.8:53 162.251.214.35.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 150.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 230.93.153.18.in-addr.arpa udp
US 8.8.8.8:53 191.40.44.52.in-addr.arpa udp
US 8.8.8.8:53 118.219.227.13.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 28.220.23.2.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 109.55.17.81.in-addr.arpa udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 232.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 25.234.195.18.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 static.criteo.net udp
GB 172.217.16.230:443 s0.2mdn.net tcp
US 8.8.8.8:53 s0.2mdn.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 static.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 216.58.212.194:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 172.217.16.230:443 s0.2mdn.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 216.58.212.194:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 creativecdn.com udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
DE 162.19.138.117:443 id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
IE 52.30.238.153:443 id.crwdcntrl.net tcp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 34.120.133.55:443 api.rlcdn.com udp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 navvy.media.net udp
US 8.8.8.8:53 cdn-geuw1-xch.media.net udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
US 8.8.8.8:53 warp.media.net udp
US 8.8.8.8:53 c.gumgum.com udp
GB 2.23.220.28:443 warp.media.net tcp
GB 2.19.117.27:443 qsearch-a.akamaihd.net tcp
GB 2.19.117.27:443 qsearch-a.akamaihd.net tcp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 e607.dscd.akamaiedge.net udp
US 8.8.8.8:53 navvy.media.net udp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 c.gumgum.com udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 warp.media.net udp
US 8.8.8.8:53 e607.dscd.akamaiedge.net udp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 172.64.144.166:443 cdn.confiant-integrations.net tcp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 172.64.144.166:443 cdn.confiant-integrations.net udp
US 8.8.8.8:53 d.illuma-tech.com udp
US 8.8.8.8:53 ghent-gce-nl.bidswitch.net udp
IE 54.229.250.192:443 d.illuma-tech.com tcp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 153.238.30.52.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 117.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 27.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 d.illuma-tech.com udp
US 34.160.55.127:443 navvy.media.net tcp
US 8.8.8.8:53 pool-gce-nl.ghent.iponweb.net udp
NL 18.239.36.41:443 c.gumgum.com tcp
NL 35.214.230.116:443 pool-gce-nl.ghent.iponweb.net tcp
US 34.160.55.127:443 navvy.media.net udp
GB 2.23.220.28:443 hblg.media.net tcp
NL 18.239.36.92:443 d21t3ooy68jlh9.cloudfront.net tcp
IE 34.252.173.211:443 protected-by.clarium.io tcp
GB 142.250.187.226:443 googleads4.g.doubleclick.net tcp
GB 142.250.187.226:443 googleads4.g.doubleclick.net udp
US 172.64.149.180:443 js-sec.indexww.com tcp
NL 185.80.36.156:443 k8s1-am-ext-haproxy.lb.indexww.com tcp
NL 18.239.36.92:443 d21t3ooy68jlh9.cloudfront.net tcp
NL 18.239.36.92:443 d21t3ooy68jlh9.cloudfront.net tcp
GB 216.58.212.194:443 adx.g.doubleclick.net tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 216.58.212.194:443 adx.g.doubleclick.net udp
GB 172.217.16.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 127.55.160.34.in-addr.arpa udp
US 8.8.8.8:53 41.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 116.230.214.35.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 92.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 156.36.80.185.in-addr.arpa udp
NL 108.156.60.11:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
NL 108.156.60.11:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
GB 172.217.16.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 image8.pubmatic.com udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 18.239.83.32:443 js.gumgum.com tcp
US 8.8.8.8:53 js.gumgum.com udp
NL 82.145.213.8:443 outspot2-ams.adx.opera.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 8.8.8.8:53 pixel-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 js.gumgum.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 dorpat.geo.iponweb.net udp
NL 35.214.199.88:443 dorpat.geo.iponweb.net tcp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
GB 185.64.191.214:443 imagsync-lhrpairbc.pubmatic.com tcp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
NL 193.0.160.131:443 a-emea.rfihub.com.akadns.net tcp
GB 2.23.220.28:443 hblg.media.net tcp
US 8.8.8.8:53 a-emea.rfihub.com.akadns.net udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
DE 91.228.74.200:443 cms.quantserve.com tcp
NL 35.214.199.88:443 dorpat.geo.iponweb.net udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
ES 51.92.114.109:443 adsqtungstenntdservice-prod-b5647ca7634e5610.elb.eu-south-2.amazonaws.com tcp
ES 51.92.114.109:443 adsqtungstenntdservice-prod-b5647ca7634e5610.elb.eu-south-2.amazonaws.com tcp
IE 3.254.239.69:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 11.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 137.157.82.98.in-addr.arpa udp
US 8.8.8.8:53 sq-tungsten-ts-eu.amazon-adsystem.com udp
US 142.251.40.131:443 csi.gstatic.com tcp
NL 18.239.36.98:443 gumgum.com tcp
IE 176.34.255.223:443 rtb.gumgum.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 servedby.flashtalking.com udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
US 8.8.8.8:53 cdn.viantinc.com udp
DE 91.228.74.166:443 secure.quantserve.com tcp
NL 18.239.50.36:443 aba.gumgum.com tcp
IE 54.171.28.155:443 rtb.gumgum.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
DK 37.157.5.132:443 track.adformnet.akadns.net tcp
GB 13.224.81.116:443 dbd2rh6vdrttj.cloudfront.net tcp
US 54.166.171.205:443 pixel.adsafeprotected.com tcp
US 8.8.8.8:53 aba.gumgum.com udp
US 8.8.8.8:53 events-us-east-1.ipredictive.com udp
US 8.8.8.8:53 e4751.b.akamaiedge.net udp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 track.adformnet.akadns.net udp
US 142.251.40.131:443 csi.gstatic.com udp
US 8.8.8.8:53 dbd2rh6vdrttj.cloudfront.net udp
US 8.8.8.8:53 events-us-east-1.ipredictive.com udp
US 8.8.8.8:53 e4751.b.akamaiedge.net udp
US 8.8.8.8:53 rtb.gumgum.com udp
NL 18.239.50.110:443 d2fashanjl7d9f.cloudfront.net tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 131.40.251.142.in-addr.arpa udp
US 8.8.8.8:53 98.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 223.255.34.176.in-addr.arpa udp
US 8.8.8.8:53 36.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 116.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 155.28.171.54.in-addr.arpa udp
US 8.8.8.8:53 132.5.157.37.in-addr.arpa udp
US 8.8.8.8:53 205.171.166.54.in-addr.arpa udp
US 8.8.8.8:53 110.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 3.210.139.178:443 events-us-east-1.ipredictive.com tcp
GB 2.23.204.231:443 e4751.b.akamaiedge.net tcp
US 3.210.139.178:443 events-us-east-1.ipredictive.com tcp
US 3.210.139.178:443 events-us-east-1.ipredictive.com tcp
GB 18.172.89.36:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 54.198.63.197:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 36.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 231.204.23.2.in-addr.arpa udp
US 8.8.8.8:53 197.63.198.54.in-addr.arpa udp
US 8.8.8.8:53 onetag-sys.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 onetag-sys.com udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 172.67.68.246:443 grabify.link udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 a.teads.tv udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 69.166.1.8:443 iad-2-apex.go.sonobi.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
NL 178.250.1.56:443 in-ftd-65.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 eu-tlx.3lift.com udp
US 8.8.8.8:53 a1876.casalemedia.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 a1876.casalemedia.com udp
US 8.8.8.8:53 a1876.casalemedia.com udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
CA 85.91.47.147:443 a1876.casalemedia.com tcp
GB 2.23.210.97:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 a1241.dsct.akamai.net udp
US 8.8.8.8:53 code.createjs.com udp
GB 2.19.117.69:443 code.createjs.com tcp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
US 8.8.8.8:53 rtbc-ew1.doubleverify.com udp
US 8.8.8.8:53 www.googletagservices.com udp
GB 142.250.200.2:443 www.googletagservices.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 97.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 147.47.91.85.in-addr.arpa udp
US 8.8.8.8:53 69.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
GB 142.250.200.2:443 adclick.g.doubleclick.net udp
US 151.101.193.229:443 jsdelivr.map.fastly.net udp
CA 85.91.47.147:443 a1876.casalemedia.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
GB 216.58.213.1:443 pagead-googlehosted.l.google.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
GB 2.23.205.70:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 70.205.23.2.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 ade.googlesyndication.com udp
GB 216.58.201.98:443 ade.googlesyndication.com udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ap.lijit.com udp
DE 37.252.171.52:443 secure.adnxs.com tcp
NL 178.250.1.56:443 in-ftd-65.nl3.vip.prod.criteo.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 8.8.8.8:53 a.teads.tv udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 172.67.68.246:443 grabify.link tcp
US 104.17.160.237:443 cdn.fuseplatform.net.cdn.cloudflare.net tcp
GB 18.172.89.42:443 d2wcz8sc48ztgm.cloudfront.net tcp
US 172.67.68.246:443 grabify.link udp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 104.22.44.142:443 vsa48.tawk.to udp
US 8.8.8.8:53 vsa48.tawk.to udp
US 172.67.15.14:443 vsa48.tawk.to tcp
US 8.8.8.8:53 vsa48.tawk.to udp
US 8.8.8.8:53 42.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 14.15.67.172.in-addr.arpa udp
US 172.67.15.14:443 vsa48.tawk.to tcp
US 172.67.15.14:443 vsa48.tawk.to udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 rtb.primis.tech udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 ib.adnxs-simple.com udp
GB 18.172.89.90:443 rtb.primis.tech tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.210.244:443 ams3-ib.adnxs.com tcp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
GB 18.172.89.90:443 rtb.primis.tech udp
US 104.22.45.142:443 vsa48.tawk.to udp
US 8.8.8.8:53 grabify.link udp
US 104.22.44.142:443 vsa48.tawk.to udp
US 8.8.8.8:53 90.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 244.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 vsa60.tawk.to udp
US 104.22.45.142:443 vsa60.tawk.to tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 vsa60.tawk.to udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 104.22.45.142:443 vsa60.tawk.to udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
US 8.8.8.8:53 c.gumgum.com udp
US 8.8.8.8:53 ie-g2.gumgum.com udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 104.22.45.142:443 vsa60.tawk.to tcp
US 151.101.193.229:443 jsdelivr.map.fastly.net tcp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 k8s1-event-tracker-am.lb.indexww.com udp
US 8.8.8.8:53 a1876.casalemedia.com udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 ie-g2.gumgum.com udp
US 8.8.8.8:53 d23sp3kzv1t6m5.cloudfront.net udp
US 8.8.8.8:53 ie-g2.gumgum.com udp
US 8.8.8.8:53 dt-external-217593033.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 151.101.193.229:443 jsdelivr.map.fastly.net udp
US 130.211.23.194:443 api.btloader.com udp
GB 216.58.213.1:443 pagead-googlehosted.l.google.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 e9957.b.akamaiedge.net udp
GB 216.58.213.1:443 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 vsa31.tawk.to udp
US 8.8.8.8:53 vsa31.tawk.to udp
US 104.22.44.142:443 vsa31.tawk.to tcp
US 8.8.8.8:53 vsa31.tawk.to udp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
NL 178.250.1.56:443 in-ftd-65.nl3.vip.prod.criteo.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 104.22.44.142:443 vsa31.tawk.to tcp
US 8.8.8.8:53 ads.pubmatic.com udp
NL 35.214.251.162:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 mb9eo.publishers.tremorhub.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 global.px.quantserve.com udp
DE 91.228.74.200:443 global.px.quantserve.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 dcs-ups.g03.yahoodns.net udp
US 8.8.8.8:53 u.openx.net udp
US 34.98.64.218:443 u.openx.net udp
US 8.8.8.8:53 cs.media.net udp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 partners-alb-1113315349.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 dcs-ups.g03.yahoodns.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 cs.media.net udp
US 34.98.64.218:443 u.openx.net tcp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 partners-alb-1113315349.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.228.201:443 aax-eu.amazon-adsystem.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 sync-gdpr.intentiq.com udp
US 8.8.8.8:53 d3p3gh8eed0xba.cloudfront.net udp
US 8.8.8.8:53 d3p3gh8eed0xba.cloudfront.net udp
US 104.22.44.142:443 vsa31.tawk.to udp
US 8.8.8.8:53 d.illuma-tech.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 81.17.55.109:443 ssbsync-euw1.smartadserver.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 154.57.158.115:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
US 67.207.86.10:443 sync.kueezrtb.com tcp
US 8.8.8.8:53 d.illuma-tech.com udp
US 8.8.8.8:53 d.illuma-tech.com udp
US 8.8.8.8:53 201.228.220.67.in-addr.arpa udp
US 8.8.8.8:53 232.220.199.18.in-addr.arpa udp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 onetag-sys.com udp
NL 35.214.230.116:443 pool-gce-nl.ghent.iponweb.net tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 tr.blismedia.com udp
GB 216.58.212.194:443 ade.googlesyndication.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 34.96.105.8:443 tr.blismedia.com tcp
US 8.8.8.8:53 tr.blismedia.com udp
NL 178.250.1.3:443 static.nl3.vip.prod.criteo.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 34.96.105.8:443 tr.blismedia.com udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 ib.3lift.com udp
NL 18.238.243.80:443 ib.3lift.com tcp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ib.3lift.com udp
NL 18.238.243.80:443 ib.3lift.com udp
US 8.8.8.8:53 80.243.238.18.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 eu.onetag-sys.com udp
US 8.8.8.8:53 eu.onetag-sys.com udp
DE 51.89.9.251:443 eu.onetag-sys.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 eu.onetag-sys.com udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
DE 51.89.9.251:443 eu.onetag-sys.com udp
US 8.8.8.8:53 251.9.89.51.in-addr.arpa udp
US 142.251.40.131:443 csi.gstatic.com udp
US 142.251.40.131:443 csi.gstatic.com tcp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 cdn-geuw1-xch.media.net udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 warp.media.net udp
US 8.8.8.8:53 e607.dscd.akamaiedge.net udp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 warp.media.net udp
US 8.8.8.8:53 e607.dscd.akamaiedge.net udp
US 8.8.8.8:53 hblg.media.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 34.160.55.127:443 navvy.media.net udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DE 51.75.86.98:443 eu.onetag-sys.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 104.18.38.76:443 cdn.indexww.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
GB 216.58.212.194:443 ade.googlesyndication.com udp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 8.8.8.8:53 a1241.dsct.akamai.net udp
US 8.8.8.8:53 a1241.dsct.akamai.net udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
GB 18.172.89.90:443 rtb.primis.tech udp
GB 142.250.200.2:443 ade.googlesyndication.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
GB 216.58.212.194:443 ade.googlesyndication.com udp
GB 18.172.89.90:443 rtb.primis.tech udp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
US 8.8.8.8:53 onetag-sys.com udp
GB 216.58.201.98:443 ade.googlesyndication.com udp
GB 18.172.89.90:443 rtb.primis.tech udp
DE 18.199.220.232:443 btlr.sharethrough.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 46e6ad711a84b5dc7b30b75297d64875
SHA1 8ca343bfab1e2c04e67b9b16b8e06ba463b4f485
SHA256 77b51492a40a511e57e7a7ecf76715a2fd46533c0f0d0d5a758f0224e201c77f
SHA512 8472710b638b0aeee4678f41ed2dff72b39b929b2802716c0c9f96db24c63096b94c9969575e4698f16e412f82668b5c9b5cb747e8a2219429dbb476a31d297e

\??\pipe\LOCAL\crashpad_3180_WMADNEZKVDIWMEKO

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 fdee96b970080ef7f5bfa5964075575e
SHA1 2c821998dc2674d291bfa83a4df46814f0c29ab4
SHA256 a241023f360b300e56b2b0e1205b651e1244b222e1f55245ca2d06d3162a62f0
SHA512 20875c3002323f5a9b1b71917d6bd4e4c718c9ca325c90335bd475ddcb25eac94cb3f29795fa6476d6d6e757622b8b0577f008eec2c739c2eec71d2e8b372cff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9d4cf88b4a1af88cc84e5b44e8b19a84
SHA1 5d2bce5cd4f3b94aacd739eb4493d82a80efc864
SHA256 1b9ed77407ca2e758567e18e75dae838d4911b6d6347ec32a5d940083ee14fa8
SHA512 322dcadfa661d11191566317b31c38e2a6829a6e177051f66e3e030ed0eabc25552a180e1d05ec87569d5d97ea1917a05ab4b047ddc69d98d1d467312166717c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c6d1ffd83319eb4a2d93c1fa4b989b5b
SHA1 88bc1b5e8e32ad0baf0b2cef7bed3fd8e22d529d
SHA256 4e8f901fcedf817794fa4281b38621334208b79d1b307dee60d004eb4ffb1220
SHA512 0ec12d14ab240fc1f1d435496f55f6a16de998f66eac1b48e4bb69053d91cc475c44fbaa423b3ad8468b66ad742d141ca724c8c1e3721e1d208e4ef4b2ad8563

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bfc707efb75842f76ad2f9fae9162225
SHA1 6f75bf7c4e187dfb0cd6f1b383e6131a3ae42a51
SHA256 e02c8317d4dc55c9ce734d3326b17abaa538546d358135a0bae65c61552a4f8c
SHA512 e62bd056dde5e1fee4860a036b181e5dc1cf356dbae8ae818bf2b65c20fff3d4610ac845ba332a088c860d0b21ec547d44310f5b0d8ffa4660f60bafe137ba19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\901d800a-7850-44a6-a7e7-e0a5b9bc024a

MD5 5d95260a7b6bcf1083605e5f3bb3a2f4
SHA1 e42c3d5691dedefc09b1b32e91018b160ca72d30
SHA256 20b25e20a6a9897f4b940abe1f71ff1444e6ac8f15d4a13b2bdb8e1894755164
SHA512 b49673cc89951e603125c04fed97bbca84e82f336e40d1030fd24072279ad357a5c2ddb6d9d8285f60754e4762a5cf20485644353f05576cabe677a20420b106

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp

MD5 e63c759a89ec905b7bb0cb9b216997ff
SHA1 c82f3d82bcd38ef3211a92042535f1d844ab027f
SHA256 8a49dbbf78b6a285a7b3dafd8ceb43254b8db1b4d767d34ded499369ee0742a1
SHA512 f8a27a99378db91405f29d60febfc3ea13307146d7dbd1476c3b43aa9622d79f4dd0b2144cf6b8feb1e4ab9126b7119f62f5d0e93d77029ce8f0da2bd5b46f40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\7a05b5b8-a47d-42fc-b231-2f360f32fdea

MD5 a38f6b4aba3573b1f9b1c51813c6deec
SHA1 d3a5ab2bd1506d442c506a49b5053be61884c04e
SHA256 0d1bfd79a34b7920fb0d7d9b213e91e7b2d7239d677db1904388af48df11928c
SHA512 d843ec50acf1f4664a51600148bff76ec5c76060c14368f16de6ca3dfc085a96e33c1a4a870c571af8852f5b010f5a0dbe6952fabb02925e6a6d20ae2800805f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\pending_pings\6f9f90eb-15d5-4e60-a871-ddaf9e6a2092

MD5 bef49679336c85871d49316a81681120
SHA1 6185d7c74a361c927d2a3928a62c06ef33ce472b
SHA256 dc3b5ddc53beffcb2a5dc60a12afae456982ed5fbb9f605c73a35ae0840f085d
SHA512 e06e50b0aab99100ebfc76a560458e8d870d17475e8e7d8bdc01c2af7db85eea8c48d16415196c6ce257c3424c4c32d228e2e7e875ffe3a63eb57657dad9086f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp

MD5 1cfddb7a71aefd92e60268e3d94ed6b2
SHA1 3459ee4165405271003414de43a9f685cc3dec6b
SHA256 c177f2df717e05973d31d370ab98d2674fd6c6467905954b5ac6ae8f55794784
SHA512 10b5e237156f3f12daebbc57d1fdbec60f58598822373e3efb6a1fd95c173da78b6f1e42a0adc694da95dfa907e2e17fa30f7ec245dbd102f10e336a28a4ee3a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\activity-stream.discovery_stream.json

MD5 5d065f963c7f8c5313644fa6b063c6cb
SHA1 8e6d6d81a24a3d3c0c567cc5182aa747acfec616
SHA256 19fd673bfe10c8530db8de20a7abe80128ce92ea856bc28981a7def15f91ac84
SHA512 2b2e5029d4cc6db75958b64a33390bb552dcde3e36880c3e9f65b6b79d010c67f441725bd3e76cf4a9316216376a5c81bbcc2b4b3aebae5e2842b909a548a328

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs.js

MD5 22af45e7518d0e00badeaaf17e1ad492
SHA1 195c0db7c9052ff4392466085c2fa2c398c92a4c
SHA256 41e3a0345ce8f5dfe27896646faed1877483d400b363fd77285779a4534b48b1
SHA512 c00dc7446a1bfb77a61a5c18f254d065d3f6680b1cc823a18c5ff90c619b490ad8b579dfef3c5e96594989d163b37e0cf215a592f2e0ec6958bb87bb148045fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.bin

MD5 d706d8f59100408069bf4491abd0ed3e
SHA1 74140476295db8fd12dd34fd664f288fd4514a4e
SHA256 33ae039bb0b3554bf8a3db092c25899120574e80d8ed704b77278c08de22507e
SHA512 5b87626619f25d26a22b971b29a515346460e4ee0919f8b5252e3cc1b10da1594dfa0f833c5cc374c6cf5d2412be988d10181bae294545ab6ad0c36c61443d6e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs-1.js

MD5 bd5f419ce5560adeb8f91f03333d5afc
SHA1 93cb7488d47921b432356b0189bc796c470bf62a
SHA256 ccd40814f8d238684e714684d3d75e88c5a6524ab5480fbffad499e0c0ed154c
SHA512 afd480e320f1ae9c32d9984b2466a72e98fb64d6550d212e0255e1244ae6ccefd95c567798765dc7e43c878e6bf24297c5ca993d1dd6ab317fdd63ed8087cb8a

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\AlternateServices.bin

MD5 793ff8e93fea4b046cf8c2e97aeb06e0
SHA1 55aed6e402bd0a301419dcdc885355a6755158af
SHA256 612683d1b9165ac0fcf3f973c2574e32b3f2591eb1aa559d9d70754e0fedc6f1
SHA512 a9e4af789c06525f567e22ae574767940726c4ae2bef0bb88019d51e1321bfb0ee46c2731fa104ca84de9b1f7e81e5c500c7372e13b354fe866b23fd5016f31a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 c9163229f9df2030cd8b41f7441d7577
SHA1 185c4230f39916104df76170d53d61ece3065673
SHA256 fcff957d24467b2d753af0357aef9d00645690b649881d5e894d995ef6f67d41
SHA512 2be455fb8977332096e47f2e2a2b2d47f7d26737ff578d09bd2e192e3d612decb7e2210d6831b5519cdc95d4badfad9f8a9ad9bae3c6e40cd136c7aaef2eef66

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 ec897e15e1fe2258b9fcac401eb86213
SHA1 ddd43fa119c7600c23a6e49f3da79299cfe01009
SHA256 f0f21f52300bae9a3a9ad269a1348a7d81577c33ec4ea4de03058c9ae19b22a8
SHA512 933ac39e7856fd9dd2a6d4bfaafe470f3ef7172a5a9ad448ab77481d5cfb41c577bcdb8808a5c8c67e38e6465cbfb8d0958d0f2f6d86cda29778faa6c235417d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\prefs-1.js

MD5 8e1eec385c5576ccb0284fd861902dd3
SHA1 c7373767c2e117c77b0b01f7145d402dddf804fa
SHA256 c754b6926fe9c86e0c46f758502a8b05b633d6621370ce8a1c31651a8dc45388
SHA512 c9886942ec3d4bd5463ab1c918fa1bba4db31cbb79c0f9f1a67f091e75e13dca5e5ed71d4d1fd6f464df761214226d9b2e77d1a05b6d3e716938c12865082773

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\datareporting\glean\db\data.safe.tmp

MD5 3b089785f80a4f3a97c19d2ab7aea086
SHA1 c3dd019481dd20dd66485de3064b6693a9db8b61
SHA256 e3a813b5fb7b5a4aa0e829eeb81dae99c82f41c04af7deeaa9a3bf6f71fc09e7
SHA512 b9d7c126769ca5cfea1109548ca5bd1ac87c8930ec8297a8ae9cab0840ef9f0856618cf178f94bdaa5e6dea1979e7cb0f4ccec7ff036dd455920907a8af906ea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 00ff1db39ce7458377f21f4d64a42103
SHA1 945a8efb50639c1ea355e007bdd030c5b4f8bcf5
SHA256 3ae367d8b845d761f14f268a3b0c37d1f3a5c2ee0b9648cb050e320becf33ce1
SHA512 f2c3393f6d8778e54ebf529354b61426c366f33c6129b081fb1f0ea9bfc0b1b1e98945f7f17450d8b096407b592f9d08ffd9577a4308fcd27aa9ad2afe446b1e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 677c05a54721fdca5d6ecfa89fe4a676
SHA1 82fba41ce0228f1d0ee8360689420cb23de47da1
SHA256 101cb70025457a54641be4d1a22c7f55dc8bdf5a970d3412635024784a2fe7ef
SHA512 7d344ac3a61d955d560242e83a3996b297586026672545a7e92117b2fd3e503de67c4a49c7f01c8386f92fd701eec79000fb7ab74418198b6cf7164d6f9dc1a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 297eae83142a5bb9360daecda8e8e5c1
SHA1 bb1c62f1315d376b43eef8ea99d977334df86e5c
SHA256 bb64bb25c03ceb14bb6666c9025eb3e60970c52b27a6c576461795cdb31d8d98
SHA512 fd3bc089b6f4e2ac2c6a7452c8de80a11dd6e05cb5ed1ae31dd6b3b8d5b1e54496f124ee542d266baec8f4bf76c7bcd2132a6046a50bc29f992bd6cce392b20a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\5EFA2113674088EEE5FD1DAB800B1336DE4A84C7

MD5 c869966fd309464ee7e2d2d95b61f2ed
SHA1 5350749899c8bb6cf569016d907ef11ea3559e36
SHA256 36227f022533882b8b875c1ef1d2440b697e792c83212708e86887dfc969975f
SHA512 feb6417661f22b38c15ca852df7262362ea56f7a2a15bcec7429071ba89045243d426e51fa5696ba8c3604b8ed0fe5cd2c7c081a1503fac6b659fe3c2298d390

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\CE996EFBBD6312D79AB8D762F29B640310AD5F13

MD5 43d826273afd683a1a5958529001ea9d
SHA1 75e7a08446105548f6c34341be5fab5695265433
SHA256 b3e479811a3f6cb5639a4bea89f8869007057d3d767dc31ae1c013095eb76a6a
SHA512 01de3ca02ef3d98f8766397b9a0fdc39300295e850c2122b47a934e8c79c3298500c754eb18d2b3f3c4fedfb02db0721c8d1abbbc9facce11f2917f81a6abf2a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\7887657DB349BC8A5DACB9712406734503B4B894

MD5 c015825432ed45ed8b9b821a956635e7
SHA1 83dc4da574ff65a0bab8809fa8876fdc39f680e8
SHA256 40eb51e086290c4661bea40c2090b8c4cf9eaf2b225794a03b59902667b457a4
SHA512 798e26e650d8713682c2112d831a2863594abdf9f90d3f19d4062498b70a71d50c12e34b4f63cc8c1533b68f9da652bc2d33cac225f4b6a780425159e28b5dd6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\C6E623770F15F5CADD4B67B4F8D2CDEB555FC6AD

MD5 eec9ba741bc0834e70fcdc333cad0648
SHA1 788f596d8dde31e25a4e19b280e88c9466d0e0f6
SHA256 9580f691b3c0c3416f4c74c6fedaccbaa4f63ffa2579f4c08fe694fcbfc00318
SHA512 64b7cc479184c111a9486bdb25c20590e369306c60a1ea4e516ee3724a9a0b03dc270a23c9c2d47dc62481ece08af9c811bb6472dd7ad849d4b101376ecea6da

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\355EF5692EA762B9ADF2437667097D4BE306B084

MD5 7e3d5ccaf97f1d6a5a014bd467ef2bc5
SHA1 6b14f602101fe69c1d2b41baf90d3875758855fc
SHA256 e5d59047daff5784608e624a92ab190a3d7e8e54eb6045b028e70d575e7141f4
SHA512 31139182f2ecbfb43fc3f6edc232a40e08d040842001325ef9423dc6bbebcaf9d62b5f1127e11df0f7752c5986dcc12c2446a3dd7a564b8f1a03e4c55390600f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 3ca15602a38760841133adcd8a491d5f
SHA1 12130b93fbe901def368c759ad229decfcbd9467
SHA256 cd470bdd15bd7e17e25d63743161516cd07997398d3338650db652f3cb49f694
SHA512 66310430d13cf2311627d8b08d2a741c7808d52f9b16f84d64933e6121aaeb286d839f6622cd82c343ec57ea10dd68174d4ce7c866ee105028f4fb2d33fcf497

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 1cbbf9a4eb5f02faff7045bb1f574b82
SHA1 e430ffc0c976bb3f64ef7b37f1203952e2060ede
SHA256 cdca86aca066081e9e9af9d9972089fe9d81a8cf9f3366a3f903c1ec5dea07dd
SHA512 9e8728a8e0e1d7e282e8ca10d6119793a8b9d14707bb080996731ef154d0df9684873ee032718f94e0ddd76f279d6f6cc69adac8096100b0efe38d260bb2f2ff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\C7527522BC9BA36820C3E298221D34935CA70F2D

MD5 600862e1548d1a4159b51a874bd62896
SHA1 8b42c82474ef5693a7e777accc7034a46312ff8e
SHA256 2d601cfb3c8fe658fc4a23e5013624ea30c7d8a93e2c7c483ae97b21a80e6243
SHA512 d28511a62468ccabc785c3b0e59e7f3cfb1379ca8e365e3c593223bd723d2c0755ea75c742afc4316654c1f01853fc9b2a4d9f1015ccf9c983dd55130e9bf8d0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\AB5C3A60EFCC801FCCE60E65B1B7E11A4DC3C83E

MD5 a879be05583c3620876e37d5cb283e14
SHA1 9e93f7667f59701b4ed492b9bd4cd3966851eae4
SHA256 c26921a8d61df9b319affaf16e6bae5169cc5f540fe7b532f83dad2a31b80832
SHA512 4097c627a41e12cdead52ec2182ad0d25645bd515b03f83006ee5fbdcf6c045d789f540e3db74590adc6dbf053a2be38173360ecae91f9d3071fc396d2671098

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\4A6B7A02A7398C91D71C07891815E76A87C2A692

MD5 ffdbd51cb05b4c68770ad3ae8cb7e40e
SHA1 b4ac10591f38b76dd5ba24af1ba5fd03b6d12405
SHA256 dffc0ea500a578f0354762dcc64a952fada488c14a246d12dc6b7c2a39e2863c
SHA512 9751ddfeac354b0d69054e6280da7be33ea229433167eddd9c31d5eb6187d841767040e740e11c1094436f3a0d15aed5014d369fa2a0d4f95be83e4762ee11f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\6AADC8623038FA06EA40CD376F742C14B8A6DC69

MD5 597deb95a1736b2cf1ac63795f4c4474
SHA1 d03da7cb032a3b2c62ae460acf21e8fc22c5cfcb
SHA256 d6adfa94fdbbd1bf2c04fdb8e6166ae2d6623380003fdaa09fd9adb8171f45a8
SHA512 6bbb6ba75e713031681b7cadcbdd3c2eaf46cbf8422127634b4510abdbee258ae023ad4111c9a502d8d6e073276a98656566462465f64ad567ce3ced7d5c5fd7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\D153AFDA7C77FEE17181B26FCB5A87A59DB9F052

MD5 2efc247752eadeef675c3b34d14fdd8a
SHA1 871155d998ba41d3eaa60b65eb4832d69d119a32
SHA256 b005c8d53a99952a188dde1bc3b946154c5e3db9fa6423880ac7403c5fc0ee7a
SHA512 afb0a019173b81426e0a489868ac6d86302f04710665bc7e3f8a963200a82f5ab8b442717cf7d7ceefc0596dd81024b3c5ec08628ac37cf80aea758a91f112a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\646BA5C7BE250B3E4EEDBB9C39007084FA455092

MD5 e2fd9a8eea41b8ee9c78d1a2c336fe79
SHA1 a6fdf4d28635cb46f9a135f37b4fe556142c3f5b
SHA256 67666d8e30dc5dfa3a700318844963decf38f31b8cbe8921725a34ca4cf10082
SHA512 9c367adbf9742a7ae78760380650b1fcc33596c0b9e708d1ef65e53ac26ea2d3c04a9932a5aeb477d3b21a87ed89ee4155ba9882143be6e8c7b3068ca6290097

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\59D798C9522D50B266D8CE3FBF197071C1494518

MD5 563b3e3d50e6504d9ccdeb6345a266c7
SHA1 c4f2712c94380fb4faec6c1c23c3bfccbaa7b452
SHA256 3d5a170d7498aab6e8eb7aae959d5fc7bdade369b3b7b81c2c2c3f03449107b5
SHA512 a8a2ccd3766ef8fcffb964e2e6ea34ff9660ffe9a21c4be21f24be932ff8630e07c4ce28d58603448fe662bf6809baee8377eaf33a63a1ccf1c67ec66f8779ea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 aedb8709022704895a2c9ca9e88ebace
SHA1 59846686749a773969420d50bba20f006812ebad
SHA256 9ab8037d2013b2443fe4a21fcd4f2e541e828f20605cdf19ff5bab8af11c49d0
SHA512 923bed148efc8e80831653101d616369073cea64ca2eaabba13c9d71a078881b10dea5c52946ca3dc9c4f0bf92f6c889f2176205c241297a374584a4fadc73d5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\79A57EFA2DD5094F54E2E09008AA7BADDA51688C

MD5 54103a47652b5ee9fa32dc552d9a276f
SHA1 6f24d36278336d425d3a8be3b80c63d4b61b455b
SHA256 c6cefeb2231dd57735b103e7d89aeaad987d28ee3b321c95dcc71677dc96be2f
SHA512 304074806639bacc4a2640a71c3d679a8b011aa91aef618bc358aceedbb728bfd0465aa70d4757d1b3d8663a80b51186abc2a0d81c97086f50e0e49ec48949cc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\storage\default\https+++grabify.link\ls\usage

MD5 233bfb8f77cc9e61a058968b71420f6b
SHA1 6afac2648ce5c413e8e7ae5a5115ae74870fc2ac
SHA256 c496480ab87461133871a28bbf46c92319a102f2e04c8b0346cc4654e532888b
SHA512 cb4cf06884a48324630dd81567da4a474659bcede95b03f9cd64b519a5f2d549792ba1c11e8c45f8808ed64b759ae7ffe5b618cff112daaf649bcf1cf9de3e32

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\19E42C0243FF09225562ECC56B2A9900C487519F

MD5 f63354ef658466dd20776475b0fea12f
SHA1 4706743741e7a73125b07cd142276f5cb9821c41
SHA256 eae2c22ddc7c4e14cdf5e4f36a79203b30f8a41e8b7a0bc87293df52c225aa36
SHA512 e5966e1e1ffaf7ff8e694402b7d9875785a98d971cf8a5e8da1862c8a385508cc95f68fb6e0035f5566d173ff28f58206065ec98474f152ff17550f7599e85ba

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\13F4C6C947C95C95E4258FEBCC8B2FD8D060A2B0

MD5 980802b059c2e0b920d75621670f7295
SHA1 d98d8a920ee80d41063cb6387cea312f8f5f99f1
SHA256 e0602153badb5ba8bf33a1fedaab57ae3dfc27937d9b785c981ee1c32c2b4b0f
SHA512 11b96bfd93215925c79053554328ee26723d676c9eaa9c4c66c8eea32e8863403728aad15caca6f8ec61ef2b6e7ddfaf7d477c4dd91c15f827c8d260a142a7c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\252099662A61B43907F202F82C508F06E2AC8B24

MD5 d004927a15beedef3675bf28f51f1306
SHA1 7591a5fbaab295586e073d6323c568a1bebd71f3
SHA256 29d81997018cfaf53711d67b9617d12c3394f08dafd097f714e55595403f37d6
SHA512 0cdbe0753672647ac18a9df9e1f967dff39d2c0c197ca63a54f7835a39318814360e92a046020885229ce6e66064b516587c15f62d4760a43233ada81d5e9f27

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\85B4F8372458F938F917AE8C86AD4A6A05B7F7F9

MD5 1948e496ca717b4dd410159ad90b7f42
SHA1 865ee1948fba2408f4b36e1c8b89c162e93eb9b8
SHA256 6a2203c4a067c6796ebadde3a3b5f2460c378ff5c53131f5e57504dcd0b79ef1
SHA512 439871a78de2775219d3be7bf8fc2b0faf3b83dd08d026878b61c6ab4e2655d6620ab8d9308227159e2ad67c47691bf9fceaeb77c36ab19b738c15eaf34cede4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\4A4C45BD889A5224BBA5AF1318166D2449F8A005

MD5 001736be7079fa87e0705f31b0e7a946
SHA1 e3651e63cecbb7aab1cfa01e87c3772960e8b837
SHA256 ce083e606d73d104fc2d638a2dd1dea81957d4ef5323f8daeb7052f0d0d2865c
SHA512 9d9d3f903ecf0d7b5429f1d900af9c515d68c9a2c4ec8bb0789c9ef32c884141f64ebef04ee34aa90cefce19bcacb2c18c9119b5ab9f4d719233964907834609

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\26F72AEB07772EA9AA9643585F871E828C257806

MD5 cde06cd55fbb52772b5e8d786e4f8c5a
SHA1 7f7a0fe9f54edd3397bf12106b68295f56f64bb6
SHA256 e5d3a315a087b65cbd5a1487134ad5b25090681fddeb598bacec5f407c9c7bf5
SHA512 1e91207ea804e4085692f3daeea075df66b96a3d495333f16976f4e2d249ade6ade7115aa8af7ec2f1b984536ded6bcdd1126538c68b0a7295efc6ee365cc4e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\3DBE97E5FB7075378676C30F03CAAD44FF875938

MD5 b6228f191411538b902d2725c5c7daeb
SHA1 3797951f79f818e70f4ce302cb095600074b2470
SHA256 24d040d950e734ebecf13d452dbb7896cc4831d8c7deb335974e596bf29495b5
SHA512 a6d9285fef7db67a4f4ac7d5cd038070009cc2c49b8ae5697d95adaa004361324ce998219f4fd5e2095a79bf4eddb68abc2c8df069646a71b697275c03e49ee5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\F7052049886ED25018F02BD626F4523EA8A90707

MD5 7000adfa560346c66cfe741ecf00b50e
SHA1 de09f6f43691deb290b53afdfe546bb0ac61a4fa
SHA256 e0c836dfa263aa01eb7ba7a1bbc26e2aac038e2635fd86deb7a7adc078ad1051
SHA512 afa9187c48e8b1f46992abe10f16348499e9d4260c02ee1634c6641c3798b14b57030d2dba740ee52cb175f521bd55a76ea814216f1104bf266c543d61070cc1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\dfn8djy7.default-release\cache2\entries\64B7CEF5F07F00A23BD1F00D5783F17910EDCC73

MD5 93dd5643381e41ed9a6b9599e4ee9821
SHA1 c096f417f541c6b776acb23ec01aefd02f4b1772
SHA256 01a8cccded8e23e5b90230b4697c51c3dd4fd9efd62728c1f308587656c16020
SHA512 7c56371451ae59c5d486439da07bfa6ebddac31022049e28b2f0bb9e218439b4db3b4da352fcda43ac5c639fa636b232a776bd573cc264df6bc1e0e9579b616f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dfn8djy7.default-release\sessionstore-backups\recovery.baklz4

MD5 fe136a13d76f3937acc2cb5489b2e30e
SHA1 fac7cbb19d9400f40ae2195e97608b381723910f
SHA256 a274a5e7793531376ba9c385950e2260aacab6a57f8d41cc7aa74ae505bcde0a
SHA512 322a94b1b6ddb308aac2c8fc38ab20c2f51a48a8738b8a1f31420b7b0e5d7749e9d4efc679a40aa50e201d8e143c260d2e3ab22e460838ec6459866a4de17fd5