Malware Analysis Report

2024-12-07 02:59

Sample ID 241110-l1nfdaxpcr
Target 2024-11-10_4821592196d7f5466902107a156c7541_wannacry
SHA256 fe1858ea442d8f264ae1616507184e95f433e723f8f5ea7e7c8ba740cfca8fb1
Tags
wannacry discovery ransomware worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

fe1858ea442d8f264ae1616507184e95f433e723f8f5ea7e7c8ba740cfca8fb1

Threat Level: Known bad

The file 2024-11-10_4821592196d7f5466902107a156c7541_wannacry was found to be: Known bad.

Malicious Activity Summary

wannacry discovery ransomware worm

Wannacry family

Wannacry

Contacts a large (1934) amount of remote hosts

Drops file in System32 directory

Drops file in Windows directory

System Location Discovery: System Language Discovery

Unsigned PE

Suspicious use of SendNotifyMessage

Checks processor information in registry

Suspicious behavior: AddClipboardFormatListener

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Enumerates system info in registry

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-10 10:00

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-10 10:00

Reported

2024-11-10 10:02

Platform

win10ltsc2021-20241023-en

Max time kernel

99s

Max time network

101s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe"

Signatures

Wannacry

ransomware worm wannacry

Wannacry family

wannacry

Contacts a large (1934) amount of remote hosts

discovery

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5 C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\WINDOWS\tasksche.exe C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4368 wrote to memory of 3092 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 2292 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3092 wrote to memory of 3476 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe

"C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe"

C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2024-11-10_4821592196d7f5466902107a156c7541_wannacry.exe -m security

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE

"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\Desktop\MoveDebug.xlsx"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1972 -parentBuildID 20240401114208 -prefsHandle 1900 -prefMapHandle 1892 -prefsLen 23681 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4cd03062-a88e-4703-a209-ac35f48628f2} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2380 -parentBuildID 20240401114208 -prefsHandle 2372 -prefMapHandle 2308 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7110c2b-51ea-4605-9571-71bf9e524afc} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3108 -childID 1 -isForBrowser -prefsHandle 3112 -prefMapHandle 3216 -prefsLen 23858 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f9759da7-142b-409c-b21e-f6fc784a7fed} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4040 -childID 2 -isForBrowser -prefsHandle 4032 -prefMapHandle 4028 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {93765733-f78e-4b5b-9efc-8fe0d4dee122} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4884 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4912 -prefMapHandle 4908 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {727d5997-9528-4658-ac08-29c5db7fd9bd} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5408 -childID 3 -isForBrowser -prefsHandle 5332 -prefMapHandle 5308 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {14e7bcfb-9199-4b92-964e-67a38c9e5c34} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5440 -childID 4 -isForBrowser -prefsHandle 5580 -prefMapHandle 5584 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f236038-a617-4554-87ab-28e3539fc950} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5760 -childID 5 -isForBrowser -prefsHandle 5768 -prefMapHandle 5776 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7d95395a-7c4d-4ebb-b631-f36b644a7319} 3092 "\\.\pipe\gecko-crash-server-pipe.3092" tab

C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE

"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" /n "C:\Users\Admin\Documents\ConvertDisable.potx"

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Documents\AssertMount.rtf" /o ""

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE

"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\Documents\DenyMount.xlsx"

C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE

"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\Documents\ExitRegister.ppt" /ou ""

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE

"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\Documents\MoveClear.xlsx"

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com udp
US 103.224.212.215:80 www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com tcp
US 8.8.8.8:53 ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com udp
US 199.59.243.227:80 ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com tcp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 215.212.224.103.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 103.224.212.215:80 www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com tcp
US 199.59.243.227:80 ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com tcp
HK 38.173.228.68:445 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.1.1:445 tcp
N/A 10.127.2.1:445 tcp
N/A 10.127.3.1:445 tcp
N/A 10.127.4.1:445 tcp
N/A 10.127.5.1:445 tcp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 227.243.59.199.in-addr.arpa udp
N/A 10.127.6.1:445 tcp
N/A 10.127.7.1:445 tcp
N/A 10.127.8.1:445 tcp
N/A 10.127.9.1:445 tcp
N/A 10.127.10.1:445 tcp
N/A 10.127.11.1:445 tcp
JP 126.241.11.186:445 tcp
N/A 10.127.12.1:445 tcp
N/A 10.127.13.1:445 tcp
N/A 10.127.14.1:445 tcp
N/A 10.127.15.1:445 tcp
N/A 10.127.17.1:445 tcp
N/A 10.127.21.1:445 tcp
N/A 10.127.16.1:445 tcp
IN 115.108.5.80:445 tcp
N/A 10.127.19.1:445 tcp
N/A 10.127.22.1:445 tcp
N/A 10.127.23.1:445 tcp
N/A 10.127.18.1:445 tcp
JP 221.46.163.135:445 tcp
N/A 10.127.25.1:445 tcp
N/A 10.127.20.1:445 tcp
N/A 10.127.24.1:445 tcp
N/A 10.127.26.1:445 tcp
N/A 10.127.27.1:445 tcp
N/A 10.127.28.1:445 tcp
N/A 10.127.29.1:445 tcp
N/A 10.127.30.1:445 tcp
N/A 10.127.31.1:445 tcp
KE 154.122.109.184:445 tcp
N/A 10.127.33.1:445 tcp
IN 181.214.75.68:445 tcp
N/A 10.127.36.1:445 tcp
N/A 10.127.35.1:445 tcp
N/A 10.127.32.1:445 tcp
N/A 10.127.37.1:445 tcp
N/A 10.127.34.1:445 tcp
N/A 10.127.39.1:445 tcp
N/A 10.127.38.1:445 tcp
IT 79.9.20.218:445 tcp
N/A 10.127.42.1:445 tcp
US 17.175.56.225:445 tcp
N/A 10.127.43.1:445 tcp
N/A 10.127.40.1:445 tcp
N/A 10.127.41.1:445 tcp
N/A 10.127.44.1:445 tcp
N/A 10.127.45.1:445 tcp
N/A 10.127.46.1:445 tcp
N/A 10.127.47.1:445 tcp
CN 183.253.149.95:445 tcp
N/A 10.127.48.1:445 tcp
N/A 10.127.49.1:445 tcp
N/A 10.127.50.1:445 tcp
N/A 10.127.51.1:445 tcp
N/A 10.127.53.1:445 tcp
RU 176.192.52.31:445 tcp
N/A 10.127.56.1:445 tcp
TW 203.187.94.129:445 tcp
N/A 10.127.52.1:445 tcp
N/A 10.127.55.1:445 tcp
N/A 10.127.54.1:445 tcp
BR 177.59.157.45:445 tcp
N/A 10.127.59.1:445 tcp
N/A 10.127.58.1:445 tcp
PL 195.187.131.27:445 tcp
N/A 10.127.63.1:445 tcp
N/A 10.127.64.1:445 tcp
N/A 10.127.60.1:445 tcp
N/A 10.127.61.1:445 tcp
N/A 10.127.57.1:445 tcp
NL 80.113.14.199:445 tcp
N/A 10.127.65.1:445 tcp
N/A 10.127.62.1:445 tcp
N/A 10.127.66.1:445 tcp
N/A 10.127.67.1:445 tcp
US 167.229.211.227:445 tcp
N/A 10.127.68.1:445 tcp
N/A 10.127.69.1:445 tcp
N/A 10.127.70.1:445 tcp
KR 123.34.223.173:445 tcp
CA 99.213.161.123:445 tcp
N/A 10.127.71.1:445 tcp
KR 175.126.93.211:445 tcp
N/A 10.127.76.1:445 tcp
NL 145.78.96.111:445 tcp
N/A 10.127.72.1:445 tcp
N/A 10.127.79.1:445 tcp
N/A 10.127.74.1:445 tcp
N/A 10.127.75.1:445 tcp
N/A 10.127.73.1:445 tcp
US 29.7.192.141:445 tcp
N/A 10.127.77.1:445 tcp
JP 172.122.128.122:445 tcp
N/A 10.127.84.1:445 tcp
US 192.230.214.224:445 tcp
N/A 10.127.78.1:445 tcp
N/A 10.127.80.1:445 tcp
N/A 10.127.81.1:445 tcp
N/A 10.127.82.1:445 tcp
N/A 10.127.83.1:445 tcp
N/A 10.127.85.1:445 tcp
N/A 10.127.86.1:445 tcp
N/A 10.127.87.1:445 tcp
N/A 10.127.88.1:445 tcp
ES 213.149.243.75:445 tcp
N/A 10.127.89.1:445 tcp
NL 169.45.45.14:445 tcp
N/A 10.127.90.1:445 tcp
N/A 10.127.91.1:445 tcp
AR 181.85.206.80:445 tcp
N/A 10.127.92.1:445 tcp
CA 208.181.132.0:445 tcp
SE 45.138.169.155:445 tcp
N/A 10.127.96.1:445 tcp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
N/A 10.127.99.1:445 tcp
N/A 10.127.93.1:445 tcp
IT 2.238.26.42:445 tcp
N/A 10.127.94.1:445 tcp
US 75.8.174.253:445 tcp
N/A 10.127.97.1:445 tcp
N/A 10.127.102.1:445 tcp
N/A 10.127.95.1:445 tcp
N/A 10.127.100.1:445 tcp
N/A 10.127.101.1:445 tcp
US 206.159.114.30:445 tcp
MA 197.131.49.214:445 tcp
N/A 10.127.103.1:445 tcp
N/A 10.127.98.1:445 tcp
US 153.53.45.61:445 tcp
N/A 10.127.104.1:445 tcp
N/A 10.127.105.1:445 tcp
N/A 10.127.106.1:445 tcp
N/A 10.127.107.1:445 tcp
N/A 10.127.108.1:445 tcp
N/A 10.127.109.1:445 tcp
PL 46.238.244.172:445 tcp
N/A 10.127.110.1:445 tcp
N/A 10.127.111.1:445 tcp
PE 190.236.142.163:445 tcp
US 50.178.90.83:445 tcp
GB 101.61.57.176:445 tcp
US 76.50.171.140:445 tcp
US 8.8.8.8:53 checkappexec.microsoft.com udp
N/A 10.127.113.1:445 tcp
N/A 10.127.112.1:445 tcp
GB 13.87.96.169:443 checkappexec.microsoft.com tcp
N/A 10.127.114.1:445 tcp
N/A 10.127.115.1:445 tcp
US 8.8.8.8:53 46.28.109.52.in-addr.arpa udp
ZA 197.110.6.139:445 tcp
CN 183.204.88.127:445 tcp
US 167.122.130.6:445 tcp
N/A 10.127.117.1:445 tcp
N/A 10.127.116.1:445 tcp
US 153.115.109.68:445 tcp
US 22.213.169.125:445 tcp
US 8.8.8.8:53 roaming.officeapps.live.com udp
N/A 10.127.118.1:445 tcp
IE 52.109.76.243:443 roaming.officeapps.live.com tcp
N/A 10.127.122.1:445 tcp
US 131.79.41.65:445 tcp
JP 122.217.162.251:445 tcp
N/A 10.127.123.1:445 tcp
N/A 10.127.126.1:445 tcp
N/A 10.127.120.1:445 tcp
N/A 10.127.119.1:445 tcp
N/A 10.127.127.1:445 tcp
US 8.8.8.8:53 243.76.109.52.in-addr.arpa udp
N/A 10.127.124.1:445 tcp
N/A 10.127.121.1:445 tcp
US 44.144.177.237:445 tcp
BR 186.212.112.145:445 tcp
CN 115.191.222.104:445 tcp
US 17.150.110.230:445 tcp
N/A 10.127.125.1:445 tcp
CA 67.68.127.32:445 tcp
N/A 10.127.128.1:445 tcp
CO 181.243.169.69:445 tcp
CA 15.235.96.115:445 tcp
N/A 10.127.130.1:445 tcp
N/A 10.127.129.1:445 tcp
N/A 10.127.134.1:445 tcp
N/A 10.127.133.1:445 tcp
N/A 10.127.136.1:445 tcp
N/A 10.127.135.1:445 tcp
N/A 10.127.131.1:445 tcp
N/A 10.127.132.1:445 tcp
N/A 10.127.139.1:445 tcp
N/A 10.127.138.1:445 tcp
N/A 10.127.137.1:445 tcp
DE 46.101.138.4:445 tcp
US 214.71.148.54:445 tcp
US 146.163.246.195:445 tcp
US 24.32.219.108:445 tcp
US 96.28.153.121:445 tcp
CA 142.64.194.50:445 tcp
SG 117.105.48.158:445 tcp
US 146.74.48.56:445 tcp
N/A 10.127.140.1:445 tcp
N/A 10.127.146.1:445 tcp
N/A 10.127.145.1:445 tcp
N/A 10.127.143.1:445 tcp
N/A 10.127.142.1:445 tcp
N/A 10.127.144.1:445 tcp
N/A 10.127.141.1:445 tcp
N/A 10.127.147.1:445 tcp
N/A 10.127.149.1:445 tcp
N/A 10.127.148.1:445 tcp
US 159.82.29.197:445 tcp
SG 43.61.42.214:445 tcp
ZA 164.150.212.124:445 tcp
CN 111.20.206.245:445 tcp
N/A 10.127.151.1:445 tcp
SD 41.67.30.172:445 tcp
N/A 10.127.152.1:445 tcp
DE 93.229.106.9:445 tcp
N/A 10.127.150.1:445 tcp
ID 120.183.201.165:445 tcp
US 107.250.28.235:445 tcp
N/A 10.127.157.1:445 tcp
N/A 10.127.153.1:445 tcp
N/A 10.127.154.1:445 tcp
N/A 10.127.160.1:445 tcp
N/A 10.127.155.1:445 tcp
CN 120.30.194.59:445 tcp
N/A 10.127.158.1:445 tcp
N/A 10.127.162.1:445 tcp
N/A 10.127.156.1:445 tcp
N/A 10.127.161.1:445 tcp
N/A 10.127.159.1:445 tcp
IN 137.97.31.12:445 tcp
US 215.221.66.127:445 tcp
MG 102.18.213.221:445 tcp
JP 163.56.9.196:445 tcp
N/A 10.127.164.1:445 tcp
BR 201.72.35.88:445 tcp
N/A 10.127.165.1:445 tcp
US 198.49.188.194:445 tcp
N/A 10.127.166.1:445 tcp
N/A 10.127.163.1:445 tcp
N/A 10.127.167.1:445 tcp
N/A 10.127.168.1:445 tcp
N/A 10.127.169.1:445 tcp
IN 52.172.22.210:445 tcp
GB 151.230.2.14:445 tcp
N/A 10.127.170.1:445 tcp
N/A 10.127.171.1:445 tcp
N/A 10.127.172.1:445 tcp
US 76.96.97.227:445 tcp
CN 58.23.162.239:445 tcp
US 214.16.234.210:445 tcp
DE 149.250.251.228:445 tcp
US 170.27.89.225:445 tcp
N/A 10.127.175.1:445 tcp
N/A 10.127.176.1:445 tcp
JP 153.239.159.88:445 tcp
CA 74.59.135.133:445 tcp
N/A 10.127.177.1:445 tcp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 9.173.189.20.in-addr.arpa udp
US 38.140.248.5:445 tcp
US 21.108.224.194:445 tcp
N/A 10.127.174.1:445 tcp
N/A 10.127.181.1:445 tcp
N/A 10.127.178.1:445 tcp
N/A 10.127.173.1:445 tcp
JP 14.193.35.19:445 tcp
N/A 10.127.180.1:445 tcp
MX 187.157.251.71:445 tcp
N/A 10.127.183.1:445 tcp
N/A 10.127.179.1:445 tcp
N/A 10.127.184.1:445 tcp
US 108.122.80.68:445 tcp
MX 148.243.40.230:445 tcp
US 154.205.31.216:445 tcp
US 108.205.86.30:445 tcp
N/A 10.127.182.1:445 tcp
N/A 10.127.185.1:445 tcp
N/A 10.127.186.1:445 tcp
N/A 10.127.187.1:445 tcp
N/A 10.127.188.1:445 tcp
N/A 10.127.189.1:445 tcp
N/A 10.127.190.1:445 tcp
US 74.191.188.186:445 tcp
BG 85.14.48.80:445 tcp
IN 47.31.115.185:445 tcp
KE 154.76.172.89:445 tcp
N/A 10.127.191.1:445 tcp
US 55.92.235.25:445 tcp
N/A 10.127.194.1:445 tcp
N/A 10.127.192.1:445 tcp
N/A 10.127.195.1:445 tcp
US 9.174.146.230:445 tcp
DK 80.160.86.5:445 tcp
HK 94.45.169.6:445 tcp
IN 45.65.37.82:445 tcp
US 18.152.152.244:445 tcp
N/A 10.127.193.1:445 tcp
N/A 10.127.196.1:445 tcp
N/A 10.127.199.1:445 tcp
RU 5.19.132.81:445 tcp
US 65.227.254.92:445 tcp
US 40.37.99.117:445 tcp
FR 109.215.46.99:445 tcp
N/A 10.127.201.1:445 tcp
US 26.251.252.126:445 tcp
N/A 10.127.197.1:445 tcp
N/A 10.127.200.1:445 tcp
N/A 10.127.198.1:445 tcp
DE 161.42.32.153:445 tcp
N/A 10.127.203.1:445 tcp
N/A 10.127.202.1:445 tcp
JP 133.151.29.196:445 tcp
N/A 10.127.204.1:445 tcp
N/A 10.127.207.1:445 tcp
N/A 10.127.205.1:445 tcp
N/A 10.127.206.1:445 tcp
N/A 10.127.208.1:445 tcp
DE 93.218.238.105:445 tcp
JP 202.135.239.57:445 tcp
US 8.28.52.7:445 tcp
GB 81.140.107.121:445 tcp
N/A 10.127.209.1:445 tcp
US 198.5.191.187:445 tcp
MX 200.64.75.241:445 tcp
N/A 10.127.210.1:445 tcp
US 148.162.101.97:445 tcp
US 50.41.158.148:445 tcp
N/A 10.127.211.1:445 tcp
MU 41.136.83.8:445 tcp
N/A 10.127.213.1:445 tcp
SA 100.253.145.209:445 tcp
N/A 10.127.215.1:445 tcp
N/A 10.127.216.1:445 tcp
N/A 10.127.212.1:445 tcp
N/A 10.127.214.1:445 tcp
CO 179.13.135.208:445 tcp
N/A 10.127.219.1:445 tcp
N/A 10.127.217.1:445 tcp
CN 183.133.96.31:445 tcp
US 97.6.207.216:445 tcp
US 6.138.200.163:445 tcp
CO 191.77.159.155:445 tcp
N/A 10.127.220.1:445 tcp
US 198.159.188.148:445 tcp
KR 175.229.10.27:445 tcp
KR 116.34.200.137:445 tcp
N/A 10.127.225.1:445 tcp
US 38.170.78.68:445 tcp
CA 142.64.19.50:445 tcp
N/A 10.127.218.1:445 tcp
ES 176.83.155.182:445 tcp
N/A 10.127.221.1:445 tcp
N/A 10.127.223.1:445 tcp
DE 53.28.251.25:445 tcp
N/A 10.127.224.1:445 tcp
N/A 10.127.226.1:445 tcp
N/A 10.127.229.1:445 tcp
N/A 10.127.222.1:445 tcp
N/A 10.127.227.1:445 tcp
N/A 10.127.228.1:445 tcp
US 19.41.162.115:445 tcp
N/A 10.127.230.1:445 tcp
CA 142.233.174.179:445 tcp
US 138.55.45.197:445 tcp
BG 84.43.207.179:445 tcp
US 44.163.95.85:445 tcp
N/A 10.127.233.1:445 tcp
US 104.57.61.45:445 tcp
N/A 10.127.235.1:445 tcp
FR 93.27.224.209:445 tcp
ES 81.43.248.55:445 tcp
N/A 10.127.238.1:445 tcp
US 55.174.125.102:445 tcp
BR 200.207.94.105:445 tcp
US 169.18.187.180:445 tcp
N/A 10.127.234.1:445 tcp
US 128.251.173.28:445 tcp
N/A 10.127.236.1:445 tcp
N/A 10.127.231.1:445 tcp
N/A 10.127.232.1:445 tcp
N/A 10.127.237.1:445 tcp
N/A 10.127.239.1:445 tcp
N/A 10.127.240.1:445 tcp
N/A 10.127.241.1:445 tcp
N/A 10.127.242.1:445 tcp
CN 219.134.140.4:445 tcp
N/A 10.127.243.1:445 tcp
N/A 10.127.244.1:445 tcp
N/A 127.0.0.1:50219 tcp
N/A 10.127.245.1:445 tcp
US 156.42.151.69:445 tcp
US 69.35.145.77:445 tcp
US 28.232.47.123:445 tcp
MA 102.53.73.8:445 tcp
DE 87.158.123.179:445 tcp
N/A 10.127.246.1:445 tcp
N/A 10.127.247.1:445 tcp
US 33.151.199.124:445 tcp
N/A 10.127.248.1:445 tcp
PT 84.91.58.85:445 tcp
IT 151.46.101.206:445 tcp
N/A 10.127.249.1:445 tcp
US 44.160.57.48:445 tcp
IT 83.225.236.203:445 tcp
AU 132.174.175.105:445 tcp
US 26.81.48.157:445 tcp
N/A 10.127.251.1:445 tcp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
N/A 10.127.253.1:445 tcp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
HK 147.8.208.39:445 tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
N/A 10.127.252.1:445 tcp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
MX 187.142.54.80:445 tcp
JP 116.223.214.59:445 tcp
IN 27.58.184.195:445 tcp
CN 106.81.109.227:445 tcp
N/A 10.127.255.1:445 tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 6.138.157.145:445 tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 10.127.250.1:445 tcp
N/A 10.127.0.2:445 tcp
JP 126.190.131.103:445 tcp
N/A 10.127.254.1:445 tcp
FI 91.230.5.37:445 tcp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 44.250.53.168:445 tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
JP 210.139.205.11:445 tcp
ID 180.243.188.125:445 tcp
LY 57.83.199.8:445 tcp
N/A 127.0.0.1:50241 tcp
N/A 10.127.1.2:445 tcp
N/A 10.127.2.2:445 tcp
N/A 10.127.3.2:445 tcp
N/A 10.127.4.2:445 tcp
N/A 10.127.5.2:445 tcp
N/A 10.127.6.2:445 tcp
US 8.8.8.8:53 115.230.163.35.in-addr.arpa udp
US 8.8.8.8:53 53.121.117.34.in-addr.arpa udp
US 170.127.165.228:445 tcp
N/A 10.127.7.2:445 tcp
N/A 10.127.8.2:445 tcp
US 97.247.214.138:445 tcp
US 165.30.182.39:445 tcp
N/A 10.127.10.2:445 tcp
US 51.237.85.77:445 tcp
CA 64.228.96.215:445 tcp
GB 165.225.82.63:445 tcp
US 20.83.92.203:445 tcp
US 150.238.195.200:445 tcp
AR 181.4.78.126:445 tcp
GB 84.70.251.205:445 tcp
CN 59.203.141.194:445 tcp
N/A 10.127.9.2:445 tcp
N/A 10.127.17.2:445 tcp
US 30.225.214.39:445 tcp
CN 110.180.251.193:445 tcp
US 160.37.80.228:445 tcp
N/A 10.127.12.2:445 tcp
US 199.146.217.37:445 tcp
N/A 10.127.22.2:445 tcp
IN 115.245.151.23:445 tcp
RS 178.223.62.226:445 tcp
N/A 10.127.11.2:445 tcp
N/A 10.127.21.2:445 tcp
US 11.152.104.196:445 tcp
US 70.98.1.16:445 tcp
US 150.215.213.139:445 tcp
CN 112.21.233.210:445 tcp
US 8.110.66.129:445 tcp
N/A 10.127.19.2:445 tcp
N/A 10.127.20.2:445 tcp
N/A 10.127.15.2:445 tcp
N/A 10.127.23.2:445 tcp
JP 133.128.22.23:445 tcp
TZ 41.59.116.92:445 tcp
AU 131.172.136.134:445 tcp
N/A 10.127.14.2:445 tcp
N/A 10.127.18.2:445 tcp
N/A 10.127.13.2:445 tcp
N/A 10.127.16.2:445 tcp
N/A 10.127.24.2:445 tcp
N/A 10.127.25.2:445 tcp
N/A 10.127.26.2:445 tcp
N/A 10.127.27.2:445 tcp
N/A 10.127.28.2:445 tcp
US 71.46.206.234:445 tcp
GB 5.10.126.89:445 tcp
BR 179.131.139.147:445 tcp
N/A 10.127.29.2:445 tcp
N/A 10.127.30.2:445 tcp
N/A 10.127.31.2:445 tcp
US 208.96.52.165:445 tcp
US 155.225.216.21:445 tcp
N/A 10.127.32.2:445 tcp
N/A 10.127.33.2:445 tcp
US 65.225.159.154:445 tcp
VE 190.76.239.107:445 tcp
N/A 10.127.34.2:445 tcp
JP 220.54.29.228:445 tcp
US 71.48.43.95:445 tcp
US 76.245.152.16:445 tcp
CN 183.214.76.5:445 tcp
N/A 10.127.35.2:445 tcp
CR 181.195.252.243:445 tcp
N/A 10.127.36.2:445 tcp
N/A 10.127.37.2:445 tcp
US 8.8.8.8:53 fd.api.iris.microsoft.com udp
N/A 10.127.38.2:445 tcp
US 65.168.133.126:445 tcp
FR 20.199.58.43:443 fd.api.iris.microsoft.com tcp
CA 70.28.68.65:445 tcp
US 215.188.208.196:445 tcp
N/A 10.127.39.2:445 tcp
US 8.8.8.8:53 200.163.202.172.in-addr.arpa udp
DE 31.19.140.127:445 tcp
BY 82.209.222.134:445 tcp
MX 148.247.159.3:445 tcp
N/A 10.127.40.2:445 tcp
CN 106.93.156.198:445 tcp
US 73.124.128.52:445 tcp
N/A 10.127.42.2:445 tcp
US 149.248.41.149:445 tcp
N/A 10.127.44.2:445 tcp
N/A 10.127.41.2:445 tcp
US 12.122.144.172:445 tcp
N/A 10.127.43.2:445 tcp
VN 27.72.15.134:445 tcp
AR 181.99.21.79:445 tcp
MA 196.120.218.2:445 tcp
US 108.185.154.4:445 tcp
US 16.86.77.90:445 tcp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
N/A 10.127.45.2:445 tcp
N/A 10.127.47.2:445 tcp
US 147.218.65.86:445 tcp
DE 146.185.121.124:445 tcp
US 3.174.140.18:445 tcp
N/A 10.127.46.2:445 tcp
N/A 10.127.48.2:445 tcp
N/A 10.127.49.2:445 tcp
N/A 10.127.50.2:445 tcp
KR 210.120.46.203:445 tcp
NO 149.209.36.190:445 tcp
N/A 10.127.51.2:445 tcp
US 45.52.15.157:445 tcp
DE 176.5.90.205:445 tcp
N/A 10.127.52.2:445 tcp
N/A 10.127.53.2:445 tcp
N/A 10.127.54.2:445 tcp
N/A 10.127.55.2:445 tcp
CN 221.172.103.202:445 tcp
US 44.162.206.116:445 tcp
N/A 10.127.56.2:445 tcp
US 64.8.52.24:445 tcp
US 153.16.27.75:445 tcp
N/A 10.127.57.2:445 tcp
N/A 10.127.58.2:445 tcp
UA 46.185.63.247:445 tcp
MU 102.117.143.161:445 tcp
US 130.3.32.248:445 tcp
JP 113.148.234.200:445 tcp
CN 175.94.234.203:445 tcp
DE 217.88.245.13:445 tcp
US 66.94.44.52:445 tcp
TW 103.153.176.147:445 tcp
US 30.128.180.76:445 tcp
BR 179.237.10.117:445 tcp
GB 82.219.26.40:445 tcp
BR 177.31.234.61:445 tcp
N/A 10.127.59.2:445 tcp
N/A 10.127.61.2:445 tcp
AR 201.213.18.64:445 tcp
PE 186.160.250.141:445 tcp
N/A 10.127.63.2:445 tcp
N/A 10.127.60.2:445 tcp
US 20.157.110.79:445 tcp
N/A 10.127.62.2:445 tcp
US 12.197.168.138:445 tcp
N/A 10.127.67.2:445 tcp
N/A 10.127.64.2:445 tcp
US 204.88.79.253:445 tcp
JP 1.0.24.164:445 tcp
US 167.19.25.17:445 tcp
BG 91.207.191.96:445 tcp
N/A 10.127.65.2:445 tcp
MY 118.101.177.1:445 tcp
N/A 10.127.66.2:445 tcp
N/A 10.127.68.2:445 tcp
N/A 10.127.69.2:445 tcp
N/A 10.127.70.2:445 tcp
N/A 10.127.71.2:445 tcp
N/A 10.127.72.2:445 tcp
US 28.131.150.157:445 tcp
US 54.113.226.228:445 tcp
US 170.85.204.242:445 tcp
US 161.213.243.179:445 tcp
N/A 10.127.73.2:445 tcp
N/A 10.127.74.2:445 tcp
JP 126.106.21.102:445 tcp
US 216.35.153.57:445 tcp
N/A 10.127.75.2:445 tcp
CN 61.138.214.226:445 tcp
DZ 197.115.61.224:445 tcp
N/A 10.127.76.2:445 tcp
N/A 10.127.77.2:445 tcp
US 71.47.11.42:445 tcp
DE 84.167.213.75:445 tcp
N/A 10.127.78.2:445 tcp
BR 200.245.40.252:445 tcp
US 166.53.110.87:445 tcp
N/A 10.127.81.2:445 tcp
US 68.55.11.21:445 tcp
CA 15.223.169.21:445 tcp
N/A 10.127.79.2:445 tcp
US 76.80.173.208:445 tcp
DE 78.50.60.246:445 tcp
US 172.101.145.159:445 tcp
N/A 10.127.83.2:445 tcp
GB 80.3.6.232:445 tcp
KR 104.74.152.34:445 tcp
GB 176.248.206.38:445 tcp
N/A 10.92.171.123:445 tcp
N/A 10.127.82.2:445 tcp
US 8.52.175.63:445 tcp
DE 53.99.27.174:445 tcp
US 108.16.140.22:445 tcp
NO 195.159.215.50:445 tcp
N/A 10.127.80.2:445 tcp
CN 111.176.199.102:445 tcp
CN 123.164.48.18:445 tcp
N/A 10.127.89.2:445 tcp
N/A 10.127.86.2:445 tcp
US 48.199.190.104:445 tcp
N/A 10.127.85.2:445 tcp
N/A 172.24.232.105:445 tcp
N/A 10.127.90.2:445 tcp
N/A 10.127.84.2:445 tcp
N/A 10.127.87.2:445 tcp
N/A 10.127.88.2:445 tcp
N/A 10.127.91.2:445 tcp
N/A 10.127.92.2:445 tcp
N/A 10.127.93.2:445 tcp
CN 122.85.22.83:445 tcp
US 99.108.163.126:445 tcp
US 108.197.236.200:445 tcp
IE 89.125.15.174:445 tcp
US 63.139.59.221:445 tcp
N/A 10.127.94.2:445 tcp
US 198.183.38.29:445 tcp
KR 118.57.66.214:445 tcp
US 164.226.197.129:445 tcp
N/A 10.127.95.2:445 tcp
US 144.5.57.149:445 tcp
AU 202.59.107.33:445 tcp
N/A 10.127.96.2:445 tcp
N/A 10.127.97.2:445 tcp
N/A 10.127.98.2:445 tcp
GB 32.112.129.59:445 tcp
CN 119.167.118.76:445 tcp
N/A 10.127.99.2:445 tcp
KR 192.29.25.33:445 tcp
GB 109.75.168.204:445 tcp
N/A 10.127.100.2:445 tcp
NL 145.135.0.180:445 tcp
DK 194.182.142.99:445 tcp
KR 122.38.13.182:445 tcp
US 168.122.252.175:445 tcp
US 8.93.29.205:445 tcp
US 215.198.206.176:445 tcp
US 35.23.155.224:445 tcp
BR 189.16.57.141:445 tcp
N/A 10.127.104.2:445 tcp
US 141.188.228.96:445 tcp
US 134.4.195.39:445 tcp
N/A 10.127.105.2:445 tcp
US 104.8.194.144:445 tcp
BR 201.4.237.44:445 tcp
N/A 10.127.102.2:445 tcp
JP 219.176.190.88:445 tcp
JP 210.164.67.188:445 tcp
N/A 10.127.106.2:445 tcp
N/A 10.127.108.2:445 tcp
N/A 10.127.103.2:445 tcp
JP 60.70.71.132:445 tcp
DE 51.214.224.3:445 tcp
US 45.78.129.115:445 tcp
JP 218.135.237.94:445 tcp
N/A 10.127.101.2:445 tcp
N/A 10.127.107.2:445 tcp
KR 110.71.188.183:445 tcp
CN 124.16.206.10:445 tcp
N/A 10.127.109.2:445 tcp
N/A 10.127.110.2:445 tcp
N/A 10.127.111.2:445 tcp
US 6.210.74.66:445 tcp
N/A 10.127.112.2:445 tcp
N/A 10.127.113.2:445 tcp
SE 161.54.25.24:445 tcp
TN 41.229.102.239:445 tcp
N/A 10.127.114.2:445 tcp
N/A 10.127.115.2:445 tcp
N/A 10.127.116.2:445 tcp
DE 80.158.10.214:445 tcp
US 76.218.214.52:445 tcp
US 199.191.205.241:445 tcp
US 138.115.254.194:445 tcp
IE 20.107.194.62:445 tcp
CN 175.85.48.96:445 tcp
N/A 10.127.117.2:445 tcp
US 97.120.213.114:445 tcp
US 150.179.129.183:445 tcp
US 199.174.186.55:445 tcp
N/A 10.127.118.2:445 tcp
JP 163.219.141.247:445 tcp
N/A 10.127.119.2:445 tcp
N/A 10.127.120.2:445 tcp
N/A 10.127.121.2:445 tcp
US 146.149.77.130:445 tcp
SG 43.23.158.62:445 tcp
US 20.51.69.51:445 tcp
CH 155.228.7.184:445 tcp
HK 14.192.189.27:445 tcp
RS 87.116.186.214:445 tcp
US 162.16.181.89:445 tcp
N/A 10.127.122.2:445 tcp
N/A 10.127.124.2:445 tcp
KR 42.46.36.77:445 tcp
US 192.53.155.47:445 tcp
IN 117.196.118.212:445 tcp
US 163.249.249.213:445 tcp
US 68.99.0.145:445 tcp
IT 109.118.20.219:445 tcp
US 162.183.202.85:445 tcp
US 198.145.58.17:445 tcp
N/A 10.127.127.2:445 tcp
US 40.51.40.126:445 tcp
US 3.191.208.222:445 tcp
US 136.58.49.144:445 tcp
N/A 10.127.125.2:445 tcp
RO 85.186.237.77:445 tcp
N/A 10.127.123.2:445 tcp
N/A 10.127.129.2:445 tcp
N/A 10.127.126.2:445 tcp
JP 60.100.249.212:445 tcp
PL 185.70.183.127:445 tcp
KR 123.36.26.146:445 tcp
US 18.151.78.19:445 tcp
N/A 10.127.130.2:445 tcp
N/A 10.127.132.2:445 tcp
N/A 10.127.128.2:445 tcp
N/A 10.127.131.2:445 tcp
N/A 10.127.133.2:445 tcp
CN 110.90.29.189:445 tcp
BE 178.145.3.191:445 tcp
DE 53.129.125.253:445 tcp
N/A 10.127.134.2:445 tcp
US 160.139.160.96:445 tcp
N/A 10.127.135.2:445 tcp
ZA 105.0.25.28:445 tcp
N/A 10.127.136.2:445 tcp
US 152.36.65.207:445 tcp
N/A 10.127.137.2:445 tcp
N/A 10.127.138.2:445 tcp
ID 39.214.67.171:445 tcp
US 103.114.160.202:445 tcp
AL 46.99.110.148:445 tcp
JP 219.10.30.64:445 tcp
BR 179.160.215.92:445 tcp
SE 217.213.98.10:445 tcp
N/A 10.127.139.2:445 tcp
N/A 10.127.140.2:445 tcp
N/A 10.127.141.2:445 tcp
LB 185.182.113.9:445 tcp
DE 53.15.78.33:445 tcp
GB 5.148.15.147:445 tcp
GB 93.95.11.52:445 tcp
N/A 10.127.142.2:445 tcp
US 173.134.50.228:445 tcp
SA 143.92.152.205:445 tcp
N/A 10.127.144.2:445 tcp
CN 114.228.154.254:445 tcp
US 138.109.46.42:445 tcp
US 72.6.128.184:445 tcp
US 135.151.161.248:445 tcp
CN 36.19.194.210:445 tcp
IT 93.150.60.35:445 tcp
US 146.18.95.69:445 tcp
KR 222.109.251.97:445 tcp
N/A 10.127.148.2:445 tcp
N/A 10.127.143.2:445 tcp
US 22.236.30.78:445 tcp
EG 197.60.237.241:445 tcp
US 174.104.187.109:445 tcp
KR 112.165.42.83:445 tcp
US 16.40.96.29:445 tcp
US 55.168.200.69:445 tcp
N/A 10.127.146.2:445 tcp
IS 160.210.163.197:445 tcp
AT 93.82.25.136:445 tcp
JP 203.211.233.168:445 tcp
US 140.107.99.83:445 tcp
N/A 10.127.145.2:445 tcp
N/A 10.127.147.2:445 tcp
N/A 10.127.149.2:445 tcp
N/A 10.127.150.2:445 tcp
N/A 10.127.151.2:445 tcp
N/A 10.127.152.2:445 tcp
N/A 10.127.153.2:445 tcp
N/A 10.127.154.2:445 tcp
N/A 10.127.155.2:445 tcp
US 74.133.101.225:445 tcp
US 30.185.15.76:445 tcp
CN 218.27.149.21:445 tcp
US 159.53.213.245:445 tcp
US 143.236.32.36:445 tcp
KR 141.223.171.228:445 tcp
N/A 10.127.156.2:445 tcp
NL 145.164.160.74:445 tcp
US 99.110.103.245:445 tcp
N/A 10.127.157.2:445 tcp
N/A 10.127.158.2:445 tcp
US 76.174.75.114:445 tcp
N/A 10.127.159.2:445 tcp
CA 142.211.100.169:445 tcp
N/A 10.127.160.2:445 tcp
RU 78.24.79.155:445 tcp
US 165.172.163.166:445 tcp
US 66.200.186.123:445 tcp
IT 94.87.159.103:445 tcp
US 32.230.24.1:445 tcp
N/A 10.127.161.2:445 tcp
AU 162.146.84.36:445 tcp
US 215.202.251.90:445 tcp
N/A 10.127.163.2:445 tcp
US 70.104.87.97:445 tcp
AU 203.102.0.41:445 tcp
US 141.11.70.204:445 tcp
CN 1.95.223.153:445 tcp
N/A 10.127.166.2:445 tcp
KR 124.58.187.116:445 tcp
UA 195.138.71.201:445 tcp
US 153.50.138.141:445 tcp
AR 181.105.8.129:445 tcp
ZA 105.246.161.249:445 tcp
N/A 10.127.162.2:445 tcp
N/A 10.127.165.2:445 tcp
US 96.41.171.44:445 tcp
IE 87.38.143.181:445 tcp
US 15.68.178.63:445 tcp
US 68.18.196.88:445 tcp
N/A 10.127.164.2:445 tcp
US 40.102.58.143:445 tcp
N/A 10.127.167.2:445 tcp
TR 212.68.42.39:445 tcp
US 156.145.132.20:445 tcp
US 130.27.144.89:445 tcp
CN 124.229.113.156:445 tcp
US 6.141.203.87:445 tcp
CN 183.185.172.180:445 tcp
US 215.12.98.105:445 tcp
N/A 10.127.168.2:445 tcp
CN 111.75.181.205:445 tcp
KR 121.178.81.62:445 tcp
US 6.115.130.148:445 tcp
N/A 10.127.169.2:445 tcp
N/A 10.127.170.2:445 tcp
N/A 10.127.171.2:445 tcp
N/A 10.127.172.2:445 tcp
N/A 10.127.173.2:445 tcp
N/A 10.127.174.2:445 tcp
N/A 10.127.175.2:445 tcp
N/A 10.127.176.2:445 tcp
US 19.168.192.3:445 tcp
TW 60.198.238.66:445 tcp
N/A 10.127.177.2:445 tcp
US 19.41.34.12:445 tcp
DZ 41.200.101.165:445 tcp
FR 82.120.53.220:445 tcp
US 206.181.40.55:445 tcp
US 32.180.200.87:445 tcp
N/A 10.127.178.2:445 tcp
N/A 10.127.179.2:445 tcp
US 65.22.64.186:445 tcp
IR 151.233.8.184:445 tcp
IT 87.4.106.14:445 tcp
N/A 10.127.180.2:445 tcp
N/A 10.127.181.2:445 tcp
US 164.181.247.131:445 tcp
CN 42.203.144.33:445 tcp
US 17.186.160.113:445 tcp
N/A 10.127.182.2:445 tcp
US 26.54.0.211:445 tcp
JP 143.125.59.23:445 tcp
CN 60.214.212.15:445 tcp
US 140.176.112.210:445 tcp
CN 123.128.154.16:445 tcp
US 29.172.145.91:445 tcp
N/A 137.35.52.228:445 tcp
CN 180.201.122.241:445 tcp
US 52.136.114.205:445 tcp
CA 128.144.127.80:445 tcp
JP 126.45.143.247:445 tcp
N/A 10.127.183.2:445 tcp
N/A 10.127.186.2:445 tcp
N/A 10.127.188.2:445 tcp
JP 223.223.53.153:445 tcp
US 22.113.188.140:445 tcp
PY 181.127.229.165:445 tcp
US 97.16.40.124:445 tcp
EG 154.187.249.204:445 tcp
N/A 10.127.190.2:445 tcp
N/A 10.29.114.219:445 tcp
CA 142.139.17.145:445 tcp
US 23.219.171.161:445 tcp
N/A 10.127.184.2:445 tcp
N/A 10.127.187.2:445 tcp
N/A 10.127.185.2:445 tcp
JP 111.239.141.16:445 tcp
US 96.151.117.174:445 tcp
CN 221.201.16.214:445 tcp
N/A 10.127.195.2:445 tcp
N/A 10.127.196.2:445 tcp
DZ 197.200.9.46:445 tcp
US 154.43.249.192:445 tcp
US 16.199.106.63:445 tcp
RU 95.137.91.87:445 tcp
US 206.54.148.114:445 tcp
US 76.210.85.34:445 tcp
N/A 10.127.189.2:445 tcp
DE 141.55.198.13:445 tcp
N/A 10.127.191.2:445 tcp
N/A 10.127.192.2:445 tcp
N/A 10.127.193.2:445 tcp
N/A 10.127.194.2:445 tcp
N/A 10.127.197.2:445 tcp
N/A 10.127.198.2:445 tcp
US 140.47.47.80:445 tcp
US 135.107.244.142:445 tcp
DE 95.113.85.20:445 tcp
N/A 10.127.199.2:445 tcp
RU 91.77.212.68:445 tcp
US 166.146.177.66:445 tcp
CN 202.193.201.44:445 tcp
DE 77.4.189.89:445 tcp
US 47.220.220.186:445 tcp
GB 51.234.94.79:445 tcp
CN 36.221.162.36:445 tcp
N/A 10.127.200.2:445 tcp
IN 203.192.216.116:445 tcp
US 199.111.52.183:445 tcp
US 108.245.94.20:445 tcp
N/A 10.127.201.2:445 tcp
N/A 10.127.202.2:445 tcp
JP 210.239.50.167:445 tcp
US 20.1.161.133:445 tcp
MX 187.233.23.181:445 tcp
US 198.95.37.217:445 tcp
AU 120.18.164.77:445 tcp
IR 193.134.100.78:445 tcp
CA 198.34.5.50:445 tcp
GB 25.59.253.241:445 tcp
CN 171.15.189.183:445 tcp
US 44.156.20.253:445 tcp
N/A 10.127.206.2:445 tcp
N/A 10.127.204.2:445 tcp
N/A 10.127.205.2:445 tcp
US 8.225.227.184:445 tcp
BR 170.79.248.182:445 tcp
US 135.72.13.22:445 tcp
US 15.230.235.18:445 tcp
N/A 10.127.203.2:445 tcp
JP 119.161.104.246:445 tcp
US 70.220.30.201:445 tcp
N/A 10.127.209.2:445 tcp
CL 181.202.31.124:445 tcp
N/A 10.127.207.2:445 tcp
US 38.164.198.51:445 tcp
DE 141.53.101.84:445 tcp
N/A 10.127.212.2:445 tcp
N/A 10.127.210.2:445 tcp
TR 94.235.223.110:445 tcp
US 7.110.40.97:445 tcp
CN 101.106.214.233:445 tcp
N/A 10.127.208.2:445 tcp
CN 180.171.204.140:445 tcp
N/A 10.127.214.2:445 tcp
US 13.191.76.159:445 tcp
N/A 10.127.215.2:445 tcp
BR 177.159.208.243:445 tcp
N/A 10.127.216.2:445 tcp
US 11.237.133.243:445 tcp
N/A 10.127.211.2:445 tcp
N/A 10.127.213.2:445 tcp
N/A 10.127.217.2:445 tcp
N/A 10.127.218.2:445 tcp
N/A 10.127.219.2:445 tcp
US 28.127.6.237:445 tcp
JP 153.150.121.37:445 tcp
US 20.184.249.140:445 tcp
CN 106.86.157.213:445 tcp
US 17.240.176.81:445 tcp
KR 203.236.247.101:445 tcp
CA 138.10.63.213:445 tcp
N/A 10.127.220.2:445 tcp
N/A 10.127.221.2:445 tcp
US 66.26.112.91:445 tcp
US 134.16.73.128:445 tcp
US 21.148.56.78:445 tcp
RU 188.0.15.158:445 tcp
US 166.50.236.53:445 tcp
US 198.32.30.94:445 tcp
KE 185.188.62.2:445 tcp
DE 164.19.171.128:445 tcp
CN 1.12.186.58:445 tcp
GB 136.148.142.73:445 tcp
US 97.32.162.53:445 tcp
CN 61.181.249.17:445 tcp
US 216.112.245.138:445 tcp
N/A 10.127.226.2:445 tcp
TR 88.238.204.145:445 tcp
N/A 10.127.223.2:445 tcp
N/A 10.127.225.2:445 tcp
DE 87.139.169.133:445 tcp
IT 79.4.4.125:445 tcp
CA 198.167.54.71:445 tcp
US 132.163.28.68:445 tcp
KR 115.17.80.128:445 tcp
US 11.150.238.238:445 tcp
JP 126.129.150.22:445 tcp
JP 153.247.190.104:445 tcp
US 96.42.178.226:445 tcp
US 28.244.12.43:445 tcp
N/A 10.127.227.2:445 tcp
N/A 10.127.222.2:445 tcp
N/A 10.127.231.2:445 tcp
NO 4.235.249.142:445 tcp
US 70.164.124.250:445 tcp
CN 202.60.141.203:445 tcp
N/A 10.127.224.2:445 tcp
US 157.62.240.217:445 tcp
GR 147.102.25.224:445 tcp
N/A 10.127.228.2:445 tcp
N/A 10.127.230.2:445 tcp
US 199.12.124.47:445 tcp
US 204.215.228.0:445 tcp
N/A 10.127.229.2:445 tcp
FR 90.27.62.196:445 tcp
US 155.115.94.109:445 tcp
US 66.190.227.159:445 tcp
CN 115.27.198.147:445 tcp
US 9.104.112.119:445 tcp
KR 1.100.212.11:445 tcp
IL 132.69.233.221:445 tcp
N/A 10.127.236.2:445 tcp
N/A 10.127.237.2:445 tcp
CN 45.254.201.92:445 tcp
N/A 10.127.232.2:445 tcp
N/A 10.127.233.2:445 tcp
N/A 10.127.234.2:445 tcp
N/A 10.127.235.2:445 tcp
N/A 10.127.238.2:445 tcp
N/A 10.127.239.2:445 tcp
N/A 10.127.240.2:445 tcp
AU 202.80.176.211:445 tcp
US 184.35.114.17:445 tcp
US 172.250.74.36:445 tcp
N/A 10.127.241.2:445 tcp
N/A 10.127.242.2:445 tcp
US 64.64.47.64:445 tcp
SE 134.25.72.222:445 tcp
CH 85.4.14.83:445 tcp
BR 43.157.158.146:445 tcp
KR 222.117.198.144:445 tcp
CN 219.217.28.106:445 tcp
US 144.99.157.148:445 tcp
N/A 10.127.243.2:445 tcp
IR 188.210.188.125:445 tcp
NL 145.65.128.93:445 tcp
US 99.19.48.198:445 tcp
AT 93.83.40.156:445 tcp
BR 201.53.185.233:445 tcp
N/A 10.127.244.2:445 tcp
N/A 10.127.245.2:445 tcp
US 28.168.242.233:445 tcp
GB 143.159.155.40:445 tcp
CN 117.72.130.13:445 tcp
US 140.24.42.192:445 tcp
US 73.159.114.20:445 tcp
KR 152.99.248.226:445 tcp
KR 165.244.22.52:445 tcp
CN 8.130.46.118:445 tcp
NZ 180.189.193.205:445 tcp
IT 217.58.97.141:445 tcp
N/A 10.127.247.2:445 tcp
US 34.28.85.43:445 tcp
CH 57.12.181.248:445 tcp
PK 39.36.81.196:445 tcp
N/A 10.127.248.2:445 tcp
NZ 14.137.14.25:445 tcp
TZ 196.41.39.161:445 tcp
PL 88.199.92.19:445 tcp
CH 193.8.142.7:445 tcp
US 146.75.156.203:445 tcp
CA 70.76.22.202:445 tcp
SG 115.42.225.46:445 tcp
N/A 10.127.246.2:445 tcp
N/A 10.127.249.2:445 tcp
N/A 10.127.253.2:445 tcp
N/A 10.127.251.2:445 tcp
N/A 10.127.250.2:445 tcp
N/A 10.127.252.2:445 tcp
US 11.96.160.39:445 tcp
CH 192.37.129.19:445 tcp
NL 141.105.145.61:445 tcp
DK 95.166.189.35:445 tcp
US 73.29.225.126:445 tcp
US 6.97.120.2:445 tcp
US 47.136.223.37:445 tcp
GB 157.125.192.198:445 tcp
US 174.32.168.156:445 tcp
US 173.207.223.172:445 tcp
GB 86.185.138.55:445 tcp
N/A 10.127.254.2:445 tcp
N/A 10.127.255.2:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.1.3:445 tcp
N/A 10.127.2.3:445 tcp
N/A 10.127.3.3:445 tcp
CN 218.60.226.116:445 tcp
US 74.29.63.113:445 tcp
GB 25.202.64.84:445 tcp
US 28.53.125.192:445 tcp
N/A 10.127.4.3:445 tcp
N/A 10.127.5.3:445 tcp
CA 216.223.99.185:445 tcp
N/A 10.127.6.3:445 tcp
N/A 10.127.7.3:445 tcp
US 21.125.186.151:445 tcp
US 71.183.226.61:445 tcp
N/A 10.127.8.3:445 tcp
SG 169.138.160.187:445 tcp
CN 122.242.65.175:445 tcp
RU 62.118.25.90:445 tcp
CN 122.72.14.64:445 tcp
DK 109.56.175.59:445 tcp
CO 181.131.217.86:445 tcp
NL 46.129.233.3:445 tcp
US 38.79.221.51:445 tcp
JP 153.169.87.67:445 tcp
CN 60.252.167.224:445 tcp
AU 210.11.108.251:445 tcp
US 32.18.177.10:445 tcp
N/A 10.127.10.3:445 tcp
N/A 10.127.12.3:445 tcp
KR 14.46.158.195:445 tcp
JP 171.3.45.236:445 tcp
N/A 10.127.11.3:445 tcp
CN 123.157.7.160:445 tcp
KR 58.232.137.86:445 tcp
US 65.246.95.91:445 tcp
CO 190.71.142.101:445 tcp
N/A 10.127.9.3:445 tcp
CN 220.242.44.57:445 tcp
US 30.88.78.18:445 tcp
GB 188.223.99.83:445 tcp
US 30.246.23.5:445 tcp
CN 112.7.115.87:445 tcp
US 198.79.128.45:445 tcp
GB 95.147.152.44:445 tcp
N/A 10.127.14.3:445 tcp
N/A 10.127.19.3:445 tcp
BR 179.211.180.198:445 tcp
N/A 10.127.13.3:445 tcp
N/A 10.127.16.3:445 tcp
US 138.144.106.98:445 tcp
US 70.86.190.148:445 tcp
DE 94.222.194.232:445 tcp
US 214.139.212.86:445 tcp
GB 90.244.85.236:445 tcp
US 32.230.127.153:445 tcp
N/A 10.127.17.3:445 tcp
FR 77.196.9.58:445 tcp
US 21.59.105.197:445 tcp
US 209.3.134.196:445 tcp
RU 195.184.203.45:445 tcp
CN 175.7.121.159:445 tcp
US 54.139.79.104:445 tcp
CN 113.105.165.194:445 tcp
N/A 10.127.15.3:445 tcp
N/A 10.127.18.3:445 tcp
UA 46.185.96.84:445 tcp
JP 133.181.39.238:445 tcp
AU 175.158.104.153:445 tcp
US 135.206.249.113:445 tcp
US 73.44.227.30:445 tcp
CN 59.254.203.29:445 tcp
N/A 10.127.20.3:445 tcp
N/A 10.127.24.3:445 tcp
N/A 10.127.22.3:445 tcp
FR 87.90.231.124:445 tcp
US 138.138.184.134:445 tcp
US 33.254.171.196:445 tcp
DE 212.101.57.151:445 tcp
N/A 10.127.21.3:445 tcp
US 4.109.14.128:445 tcp
N/A 10.127.23.3:445 tcp
N/A 10.127.27.3:445 tcp
US 17.13.144.195:445 tcp
US 216.248.227.60:445 tcp
US 63.147.243.145:445 tcp
N/A 10.127.30.3:445 tcp
N/A 10.127.26.3:445 tcp
GB 25.78.133.135:445 tcp
DE 78.42.211.254:445 tcp
MX 187.235.120.24:445 tcp
KR 211.242.112.180:445 tcp
DE 53.22.114.244:445 tcp
US 35.196.114.209:445 tcp
N/A 10.127.28.3:445 tcp
N/A 10.127.29.3:445 tcp
CA 174.6.103.51:445 tcp
N/A 10.127.25.3:445 tcp
CN 122.137.141.121:445 tcp
CA 38.180.126.78:445 tcp
MX 201.133.15.94:445 tcp
VN 14.245.215.61:445 tcp
TW 139.175.184.119:445 tcp
DE 217.187.36.238:445 tcp
CN 218.88.167.159:445 tcp
FR 157.136.66.135:445 tcp
CA 173.179.91.163:445 tcp
US 20.10.84.166:445 tcp
PT 85.240.219.5:445 tcp
ZA 197.92.40.122:445 tcp
N/A 10.127.32.3:445 tcp
N/A 10.127.37.3:445 tcp
N/A 10.127.31.3:445 tcp
US 132.29.216.130:445 tcp
IN 120.61.209.42:445 tcp
CA 134.41.215.210:445 tcp
US 144.249.13.61:445 tcp
N/A 10.127.33.3:445 tcp
BR 187.38.203.117:445 tcp
N/A 10.127.35.3:445 tcp
N/A 10.127.38.3:445 tcp
JP 182.248.25.185:445 tcp
US 50.75.130.183:445 tcp
CA 216.209.7.237:445 tcp
N/A 10.127.36.3:445 tcp
N/A 10.127.34.3:445 tcp
JP 182.22.125.25:445 tcp
CL 186.10.85.28:445 tcp
RU 176.110.196.92:445 tcp
ES 34.164.241.163:445 tcp
IL 132.66.171.129:445 tcp
US 199.242.174.215:445 tcp
CN 116.69.104.203:445 tcp
N/A 10.127.41.3:445 tcp
US 155.191.83.16:445 tcp
N/A 10.127.39.3:445 tcp
N/A 10.127.43.3:445 tcp
CN 27.189.49.5:445 tcp
BR 152.242.220.201:445 tcp
EG 45.97.15.176:445 tcp
N/A 10.127.40.3:445 tcp
N/A 10.127.42.3:445 tcp
N/A 10.127.44.3:445 tcp
N/A 10.127.45.3:445 tcp
LT 88.119.89.111:445 tcp
KR 1.208.141.140:445 tcp
CN 125.110.141.92:445 tcp
N/A 10.127.46.3:445 tcp
N/A 10.127.47.3:445 tcp
N/A 10.127.48.3:445 tcp
US 214.41.61.96:445 tcp
US 65.131.154.57:445 tcp
IN 117.204.196.30:445 tcp
GB 90.193.33.161:445 tcp
N/A 10.127.49.3:445 tcp
CN 111.166.16.32:445 tcp
ES 47.63.7.134:445 tcp
N/A 10.127.50.3:445 tcp
N/A 10.127.51.3:445 tcp
US 207.231.223.30:445 tcp
CN 42.156.37.40:445 tcp
US 100.161.226.37:445 tcp
IT 151.37.200.59:445 tcp
N/A 10.127.52.3:445 tcp
AE 40.174.76.22:445 tcp
BR 201.80.208.68:445 tcp
US 8.8.8.8:53 location.services.mozilla.com udp
GB 77.98.237.223:445 tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 76.194.100.254:445 tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
CN 220.188.0.169:445 tcp
US 63.248.66.45:445 tcp
DE 212.53.248.74:445 tcp
CA 155.10.198.37:445 tcp
US 161.177.111.146:445 tcp
US 28.107.156.251:445 tcp
US 17.235.119.191:445 tcp
N/A 10.204.47.76:445 tcp
N/A 10.127.55.3:445 tcp
US 8.8.8.8:53 ciscobinary.openh264.org udp
KR 118.47.103.108:445 tcp
US 30.182.129.40:445 tcp
MG 41.242.105.180:445 tcp
US 8.8.8.8:53 redirector.gvt1.com udp
IN 117.253.105.252:445 tcp
DE 23.55.161.185:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
CN 183.192.77.83:445 tcp
TW 60.245.84.188:445 tcp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
N/A 10.127.53.3:445 tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 19.48.61.22:445 tcp
US 131.149.214.160:445 tcp
GB 194.72.168.69:445 tcp
US 8.16.204.18:445 tcp
GB 142.250.200.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r5---sn-aigzrn7l.gvt1.com udp
N/A 10.127.58.3:445 tcp
GB 173.194.5.234:443 r5---sn-aigzrn7l.gvt1.com tcp
US 8.8.8.8:53 r5.sn-aigzrn7l.gvt1.com udp
BE 217.136.78.34:445 tcp
KR 106.97.58.60:445 tcp
US 8.8.8.8:53 r5.sn-aigzrn7l.gvt1.com udp
N/A 10.127.56.3:445 tcp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 185.161.55.23.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.5.194.173.in-addr.arpa udp
HK 154.95.107.254:445 tcp
BR 186.245.157.57:445 tcp
US 135.71.41.195:445 tcp
JP 211.126.121.19:445 tcp
N/A 10.127.54.3:445 tcp
GB 173.194.5.234:443 r5.sn-aigzrn7l.gvt1.com udp
CN 113.230.149.93:445 tcp
N/A 10.127.57.3:445 tcp
N/A 10.127.62.3:445 tcp
EG 102.40.109.55:445 tcp
US 65.137.181.83:445 tcp
JP 216.8.16.77:445 tcp
N/A 10.127.63.3:445 tcp
HK 20.239.60.209:445 tcp
N/A 10.127.59.3:445 tcp
N/A 10.127.61.3:445 tcp
N/A 10.127.60.3:445 tcp
US 143.35.131.99:445 tcp
CA 142.7.153.28:445 tcp
VN 113.164.86.110:445 tcp
US 165.139.212.224:445 tcp
BR 187.15.229.17:445 tcp
VE 186.167.214.109:445 tcp
DE 93.252.86.176:445 tcp
US 108.0.242.6:445 tcp
N/A 10.127.64.3:445 tcp
N/A 10.127.65.3:445 tcp
N/A 10.127.66.3:445 tcp
N/A 10.127.67.3:445 tcp
BR 189.51.248.21:445 tcp
CN 119.51.64.135:445 tcp
DE 79.197.63.195:445 tcp
N/A 10.127.68.3:445 tcp
US 64.171.160.45:445 tcp
KR 211.238.119.85:445 tcp
US 71.244.179.200:445 tcp
N/A 10.127.69.3:445 tcp
US 199.33.31.204:445 tcp
DE 164.19.232.7:445 tcp
US 150.159.43.61:445 tcp
US 38.150.148.39:445 tcp
TN 197.28.11.14:445 tcp
TR 149.0.60.202:445 tcp
N/A 10.127.72.3:445 tcp
CH 185.156.223.38:445 tcp
US 214.135.39.173:445 tcp
JP 183.79.46.53:445 tcp
US 144.231.225.96:445 tcp
N/A 10.127.70.3:445 tcp
US 144.146.129.194:445 tcp
DE 87.182.114.27:445 tcp
NO 148.118.47.132:445 tcp
JP 106.157.13.48:445 tcp
N/A 10.127.71.3:445 tcp
JP 150.253.250.183:445 tcp
DE 84.153.247.43:445 tcp
CN 222.89.201.245:445 tcp
DO 152.0.122.26:445 tcp
IE 62.223.151.216:445 tcp
US 209.190.218.25:445 tcp
US 64.66.174.156:445 tcp
US 76.211.39.228:445 tcp
N/A 10.127.77.3:445 tcp
N/A 10.127.73.3:445 tcp
US 169.63.136.1:445 tcp
N/A 10.127.74.3:445 tcp
N/A 10.127.78.3:445 tcp
CN 183.219.248.206:445 tcp
PK 182.177.242.106:445 tcp
US 18.34.92.209:445 tcp
NL 145.38.165.46:445 tcp
CN 171.222.231.113:445 tcp
US 8.8.8.8:53 88.65.42.20.in-addr.arpa udp
PL 31.61.234.71:445 tcp
US 12.189.135.146:445 tcp
KR 119.218.150.182:445 tcp
US 146.31.217.23:445 tcp
ID 39.202.119.113:445 tcp
DE 141.68.27.140:445 tcp
CN 113.122.28.76:445 tcp
AR 190.138.206.62:445 tcp
CN 180.115.203.220:445 tcp
US 137.203.7.57:445 tcp
US 173.152.87.83:445 tcp
KR 49.56.108.103:445 tcp
N/A 10.127.83.3:445 tcp
N/A 10.127.75.3:445 tcp
US 169.125.44.251:445 tcp
CA 24.79.18.231:445 tcp
US 18.121.196.18:445 tcp
N/A 10.127.81.3:445 tcp
N/A 10.127.84.3:445 tcp
US 9.27.116.25:445 tcp
N/A 10.127.82.3:445 tcp
US 16.17.4.202:445 tcp
US 9.179.99.190:445 tcp
CZ 90.182.11.110:445 tcp
US 184.44.209.24:445 tcp
US 96.2.159.214:445 tcp
AR 140.191.103.94:445 tcp
US 209.159.44.225:445 tcp
US 131.51.65.211:445 tcp
N/A 10.127.88.3:445 tcp
N/A 10.127.76.3:445 tcp
N/A 10.127.79.3:445 tcp
N/A 10.127.80.3:445 tcp
N/A 10.127.85.3:445 tcp
N/A 10.127.86.3:445 tcp
N/A 10.127.87.3:445 tcp
N/A 10.127.89.3:445 tcp
N/A 10.127.90.3:445 tcp
TW 120.123.41.146:445 tcp
US 170.109.8.85:445 tcp
CN 223.14.43.64:445 tcp
KR 112.191.99.81:445 tcp
CN 110.231.227.27:445 tcp
GB 51.195.143.148:445 tcp
N/A 10.127.94.3:445 tcp
IT 5.180.71.8:445 tcp
US 15.8.170.181:445 tcp
US 152.14.212.100:445 tcp
US 160.151.109.183:445 tcp
N/A 10.127.91.3:445 tcp
US 11.218.52.74:445 tcp
US 108.69.81.211:445 tcp
N/A 10.127.96.3:445 tcp
N/A 10.127.92.3:445 tcp
UA 78.31.180.5:445 tcp
IT 2.41.82.254:445 tcp
DE 37.91.226.170:445 tcp
US 34.106.13.206:445 tcp
PG 124.240.194.248:445 tcp
SE 95.206.204.87:445 tcp
N/A 10.127.93.3:445 tcp
BR 179.63.79.176:445 tcp
AR 181.5.166.99:445 tcp
US 44.178.192.115:445 tcp
JP 126.143.48.115:445 tcp
N/A 10.127.95.3:445 tcp
N/A 10.127.97.3:445 tcp
N/A 10.127.98.3:445 tcp
N/A 10.127.99.3:445 tcp
UG 154.228.86.90:445 tcp
AT 85.126.45.105:445 tcp
US 138.147.216.239:445 tcp
US 48.25.12.177:445 tcp
CN 112.87.1.98:445 tcp
US 64.186.159.144:445 tcp
US 108.124.26.140:445 tcp
US 9.163.11.181:445 tcp
N/A 10.127.100.3:445 tcp
N/A 10.127.101.3:445 tcp
N/A 10.127.102.3:445 tcp
DE 93.214.68.166:445 tcp
US 174.148.211.102:445 tcp
US 76.0.196.90:445 tcp
N/A 10.127.103.3:445 tcp
US 100.55.73.34:445 tcp
US 138.76.12.216:445 tcp
KR 14.79.52.253:445 tcp
N/A 10.127.104.3:445 tcp
N/A 10.127.105.3:445 tcp
N/A 10.127.106.3:445 tcp
CN 101.231.30.1:445 tcp
N/A 10.127.107.3:445 tcp
US 29.145.227.137:445 tcp
US 131.60.22.32:445 tcp
GB 45.10.100.192:445 tcp
MX 148.211.131.91:445 tcp
US 98.83.50.53:445 tcp
DE 87.146.31.136:445 tcp
N/A 10.127.108.3:445 tcp
US 22.238.122.129:445 tcp
SG 111.65.76.119:445 tcp
GB 87.80.235.106:445 tcp
CH 81.6.0.59:445 tcp
IR 37.114.248.108:445 tcp
US 4.5.225.239:445 tcp
JP 27.95.34.185:445 tcp
US 108.186.234.196:445 tcp
US 157.149.122.213:445 tcp
CA 142.230.9.208:445 tcp
CN 171.91.5.96:445 tcp
US 29.118.202.124:445 tcp
JP 133.240.48.150:445 tcp
DK 188.177.147.198:445 tcp
UY 179.30.157.137:445 tcp
CN 14.114.104.133:445 tcp
CN 218.73.203.93:445 tcp
GB 78.40.63.33:445 tcp
N/A 198.19.13.213:445 tcp
JP 210.130.94.170:445 tcp
US 24.88.158.118:445 tcp
N/A 10.127.115.3:445 tcp
GB 138.40.60.184:445 tcp
CN 124.23.249.24:445 tcp
NL 95.142.53.161:445 tcp
N/A 10.127.113.3:445 tcp
N/A 10.127.112.3:445 tcp
N/A 10.127.114.3:445 tcp
N/A 10.127.109.3:445 tcp
N/A 10.127.116.3:445 tcp
N/A 10.127.118.3:445 tcp
IT 212.177.98.138:445 tcp
N/A 10.127.111.3:445 tcp
US 98.240.204.42:445 tcp
DE 89.245.118.132:445 tcp
SE 159.190.123.136:445 tcp
US 141.162.247.160:445 tcp
JP 60.36.109.226:445 tcp
US 56.140.131.184:445 tcp
N/A 10.127.110.3:445 tcp
US 76.16.242.236:445 tcp
US 215.176.180.169:445 tcp
US 157.230.159.187:445 tcp
CN 223.209.188.133:445 tcp
US 20.133.44.187:445 tcp
US 174.199.139.120:445 tcp
CN 110.188.1.1:445 tcp
IR 86.104.81.237:445 tcp
US 107.62.214.193:445 tcp
N/A 10.127.120.3:445 tcp
IN 157.37.65.238:445 tcp
N/A 10.127.119.3:445 tcp
N/A 10.127.117.3:445 tcp
PL 145.237.60.44:445 tcp
NL 86.81.181.150:445 tcp
US 80.73.109.166:445 tcp
US 143.71.193.243:445 tcp
TW 163.25.64.124:445 tcp
US 209.185.250.119:445 tcp
CO 191.111.14.73:445 tcp
CN 36.163.184.103:445 tcp
N/A 10.127.121.3:445 tcp
IT 157.28.36.97:445 tcp
ID 118.136.14.236:445 tcp
PL 89.66.16.210:445 tcp
TW 163.28.120.144:445 tcp
US 205.0.63.144:445 tcp
US 12.150.177.251:445 tcp
N/A 10.127.125.3:445 tcp
US 184.226.69.141:445 tcp
N/A 10.127.126.3:445 tcp
N/A 10.127.124.3:445 tcp
US 72.91.159.43:445 tcp
JP 153.185.187.9:445 tcp
FR 176.137.146.91:445 tcp
N/A 10.127.122.3:445 tcp
US 146.78.70.243:445 tcp
US 161.177.233.65:445 tcp
AT 141.244.29.40:445 tcp
ES 79.145.88.6:445 tcp
N/A 10.127.123.3:445 tcp
N/A 10.127.130.3:445 tcp
US 17.240.214.50:445 tcp
CA 149.99.18.17:445 tcp
US 104.89.128.165:445 tcp
CN 162.105.165.141:445 tcp
US 29.8.204.170:445 tcp
DK 195.192.232.54:445 tcp
N/A 10.127.127.3:445 tcp
NI 186.1.53.109:445 tcp
KR 175.243.32.192:445 tcp
CN 42.209.34.254:445 tcp
MX 189.170.4.189:445 tcp
N/A 10.127.128.3:445 tcp
N/A 10.127.129.3:445 tcp
CN 101.233.34.250:445 tcp
BR 200.139.146.228:445 tcp
N/A 172.23.175.199:445 tcp
CN 112.0.213.195:445 tcp
US 67.161.26.194:445 tcp
US 65.169.150.170:445 tcp
US 64.129.99.197:445 tcp
CN 171.220.234.233:445 tcp
N/A 10.127.135.3:445 tcp
N/A 10.127.133.3:445 tcp
N/A 10.127.136.3:445 tcp
N/A 10.127.131.3:445 tcp
US 168.54.12.99:445 tcp
AU 218.37.144.205:445 tcp
US 151.203.82.110:445 tcp
KZ 2.72.146.14:445 tcp
US 172.95.27.232:445 tcp
KR 49.174.44.137:445 tcp
N/A 10.127.134.3:445 tcp
N/A 10.127.132.3:445 tcp
EG 45.244.227.49:445 tcp
DE 217.89.66.35:445 tcp
FR 193.51.164.149:445 tcp
PE 132.191.144.49:445 tcp
EG 41.233.60.192:445 tcp
US 184.12.115.25:445 tcp
CN 175.24.22.49:445 tcp
N/A 10.127.141.3:445 tcp
N/A 10.127.140.3:445 tcp
N/A 10.127.139.3:445 tcp
US 215.96.23.186:445 tcp
N/A 10.127.137.3:445 tcp
N/A 10.127.138.3:445 tcp
N/A 10.127.142.3:445 tcp
US 12.188.253.104:445 tcp
CN 118.213.154.172:445 tcp
US 99.119.239.13:445 tcp
DE 78.51.57.142:445 tcp
IT 194.244.226.118:445 tcp
US 149.165.82.31:445 tcp
LV 89.201.21.227:445 tcp
US 135.59.18.92:445 tcp
US 73.214.233.79:445 tcp
CN 123.77.124.214:445 tcp
US 205.154.157.199:445 tcp
CA 199.243.6.52:445 tcp
IN 4.186.21.105:445 tcp
US 23.15.52.31:445 tcp
KR 158.180.90.239:445 tcp
CA 142.170.107.38:445 tcp
US 28.153.249.143:445 tcp
N/A 10.127.144.3:445 tcp
N/A 10.127.147.3:445 tcp
N/A 10.127.145.3:445 tcp
CN 124.17.12.152:445 tcp
US 15.193.227.166:445 tcp
AU 120.18.225.138:445 tcp
RU 5.44.52.168:445 tcp
AR 190.183.163.156:445 tcp
JP 163.59.131.229:445 tcp
US 164.76.234.125:445 tcp
N/A 10.127.146.3:445 tcp
N/A 10.127.151.3:445 tcp
N/A 10.127.143.3:445 tcp
US 200.81.60.132:445 tcp
PT 128.65.239.172:445 tcp
US 57.157.142.14:445 tcp
ID 114.15.140.60:445 tcp
DK 87.56.204.99:445 tcp
IL 81.5.15.204:445 tcp
JP 157.72.102.59:445 tcp
N/A 10.127.148.3:445 tcp
CN 120.38.165.28:445 tcp
US 33.4.145.28:445 tcp
US 104.79.76.222:445 tcp
US 35.132.182.56:445 tcp
US 73.191.148.128:445 tcp
US 73.21.15.166:445 tcp
N/A 10.127.150.3:445 tcp
N/A 10.127.149.3:445 tcp
N/A 10.127.152.3:445 tcp
AU 121.211.167.229:445 tcp
CN 101.81.217.46:445 tcp
CN 39.91.142.95:445 tcp
SE 85.24.134.20:445 tcp
N/A 10.127.155.3:445 tcp
CN 115.85.238.223:445 tcp
JP 157.192.99.192:445 tcp
SE 95.101.168.212:445 tcp
US 209.80.73.162:445 tcp
HK 121.54.168.80:445 tcp
KR 223.131.162.20:445 tcp
JP 60.121.233.53:445 tcp
GB 171.75.6.37:445 tcp
N/A 10.127.159.3:445 tcp
N/A 10.127.160.3:445 tcp
N/A 10.127.157.3:445 tcp
N/A 10.127.153.3:445 tcp
N/A 10.127.154.3:445 tcp
SE 217.210.187.27:445 tcp
BR 130.41.189.85:445 tcp
US 166.234.230.252:445 tcp
AO 105.168.192.233:445 tcp
JP 126.114.130.30:445 tcp
US 38.154.145.30:445 tcp
RU 128.70.129.151:445 tcp
N/A 10.127.156.3:445 tcp
N/A 10.127.162.3:445 tcp
N/A 10.127.163.3:445 tcp
ID 39.229.105.17:445 tcp
TR 176.42.134.205:445 tcp
US 192.243.217.164:445 tcp
N/A 100.86.95.36:445 tcp
PA 190.219.250.56:445 tcp
N/A 10.127.158.3:445 tcp
N/A 10.127.161.3:445 tcp
N/A 10.127.164.3:445 tcp
TH 58.147.66.49:445 tcp
CN 183.235.244.250:445 tcp
N/A 10.127.165.3:445 tcp
CN 27.159.112.155:445 tcp
RU 82.112.48.83:445 tcp
US 34.203.25.174:445 tcp
SG 171.207.10.244:445 tcp
N/A 10.127.166.3:445 tcp
US 140.217.176.114:445 tcp
N/A 10.127.167.3:445 tcp
N/A 10.127.168.3:445 tcp
N/A 10.127.169.3:445 tcp
GB 82.33.244.177:445 tcp
JP 164.71.193.174:445 tcp
AU 153.107.158.226:445 tcp
DE 78.34.208.132:445 tcp
N/A 10.127.170.3:445 tcp
N/A 10.127.171.3:445 tcp
US 66.49.45.196:445 tcp
CN 203.90.189.78:445 tcp
UY 167.58.3.165:445 tcp
AT 188.64.213.100:445 tcp
US 146.41.145.33:445 tcp
KR 180.227.57.191:445 tcp
US 209.174.88.218:445 tcp
BR 187.102.199.194:445 tcp
N/A 10.127.172.3:445 tcp
N/A 10.127.173.3:445 tcp
TW 210.202.61.200:445 tcp
DK 93.162.60.146:445 tcp
US 98.254.117.162:445 tcp
JP 61.208.50.117:445 tcp
US 128.135.14.39:445 tcp
CO 186.81.147.108:445 tcp
ES 92.190.83.101:445 tcp
N/A 10.127.174.3:445 tcp
FI 62.71.175.188:445 tcp
AT 88.117.185.189:445 tcp
CN 183.92.87.15:445 tcp
RU 94.181.209.192:445 tcp
US 209.154.44.107:445 tcp
MT 77.25.163.102:445 tcp
IT 37.34.47.38:445 tcp
CN 42.226.33.0:445 tcp
N/A 10.127.175.3:445 tcp
US 99.173.32.30:445 tcp
US 147.203.84.194:445 tcp
GB 62.6.57.234:445 tcp
US 135.68.9.170:445 tcp
US 7.167.145.198:445 tcp
N/A 10.127.177.3:445 tcp
N/A 10.127.179.3:445 tcp
NL 86.87.223.231:445 tcp
CA 206.116.150.58:445 tcp
CN 110.237.95.5:445 tcp
US 65.159.54.174:445 tcp
US 169.88.23.124:445 tcp
US 97.16.37.114:445 tcp
DE 149.172.197.218:445 tcp
TW 123.241.27.205:445 tcp
US 204.47.60.212:445 tcp
US 54.198.107.246:445 tcp
US 128.186.199.26:445 tcp
CA 96.49.101.213:445 tcp
N/A 10.127.176.3:445 tcp
N/A 10.127.183.3:445 tcp
CH 193.246.220.137:445 tcp
ID 38.47.82.44:445 tcp
CN 42.195.187.118:445 tcp
FR 89.156.205.54:445 tcp
FR 163.101.65.16:445 tcp
US 4.98.254.180:445 tcp
JP 221.76.123.126:445 tcp
N/A 10.127.182.3:445 tcp
N/A 10.127.178.3:445 tcp
N/A 10.127.180.3:445 tcp
N/A 10.127.181.3:445 tcp
N/A 10.127.184.3:445 tcp
N/A 10.127.185.3:445 tcp
N/A 10.127.186.3:445 tcp
US 48.173.239.97:445 tcp
US 136.64.39.178:445 tcp
US 16.87.136.61:445 tcp
PK 39.36.93.138:445 tcp
DK 193.88.206.204:445 tcp
US 44.102.141.198:445 tcp
GB 143.52.37.204:445 tcp
US 131.35.60.102:445 tcp
IR 194.225.203.173:445 tcp
CO 191.68.186.247:445 tcp
TW 125.230.97.247:445 tcp
US 22.65.52.222:445 tcp
US 26.8.191.231:445 tcp
N/A 10.127.187.3:445 tcp
CN 139.129.94.36:445 tcp
ZA 41.246.214.192:445 tcp
US 30.236.240.92:445 tcp
US 135.32.11.184:445 tcp
N/A 10.127.191.3:445 tcp
US 143.223.96.152:445 tcp
N/A 10.127.188.3:445 tcp
AU 119.252.13.153:445 tcp
US 152.43.133.238:445 tcp
LV 5.45.44.104:445 tcp
CA 24.230.253.81:445 tcp
ID 36.81.223.173:445 tcp
CN 111.8.167.254:445 tcp
DE 92.194.226.61:445 tcp
N/A 10.127.189.3:445 tcp
IR 2.190.36.27:445 tcp
US 208.232.241.15:445 tcp
US 21.184.233.245:445 tcp
US 9.53.104.33:445 tcp
TG 196.168.203.226:445 tcp
CN 211.163.124.125:445 tcp
US 173.59.234.150:445 tcp
N/A 10.127.192.3:445 tcp
N/A 10.127.190.3:445 tcp
N/A 10.127.193.3:445 tcp
CA 142.120.132.140:445 tcp
SA 100.149.193.136:445 tcp
ID 39.246.75.246:445 tcp
US 205.75.31.13:445 tcp
BR 168.80.83.48:445 tcp
US 174.106.176.35:445 tcp
JP 203.212.42.59:445 tcp
US 153.50.31.76:445 tcp
GB 80.43.174.181:445 tcp
CH 212.254.101.109:445 tcp
IN 106.219.13.25:445 tcp
PL 212.109.131.225:445 tcp
CN 220.164.79.102:445 tcp
N/A 10.127.197.3:445 tcp
N/A 10.127.194.3:445 tcp
N/A 10.127.195.3:445 tcp
N/A 10.127.196.3:445 tcp
JP 122.145.8.191:445 tcp
US 173.90.211.190:445 tcp
US 18.44.96.54:445 tcp
CN 112.82.102.24:445 tcp
N/A 10.127.199.3:445 tcp
N/A 10.127.198.3:445 tcp
SG 43.108.238.50:445 tcp
CA 209.5.40.66:445 tcp
IT 18.102.164.27:445 tcp
BG 213.191.176.173:445 tcp
US 67.169.219.36:445 tcp
MA 105.75.242.178:445 tcp
US 131.47.0.239:445 tcp
N/A 10.127.201.3:445 tcp
N/A 10.127.200.3:445 tcp
TH 147.50.206.189:445 tcp
GB 109.144.87.44:445 tcp
US 11.130.249.178:445 tcp
US 162.1.251.107:445 tcp
DE 53.4.126.71:445 tcp
ES 83.41.108.67:445 tcp
KR 112.218.49.229:445 tcp
N/A 10.127.205.3:445 tcp
N/A 10.127.202.3:445 tcp
N/A 10.127.204.3:445 tcp
N/A 10.127.203.3:445 tcp
BE 94.225.122.179:445 tcp
HK 221.127.254.158:445 tcp
ZA 165.25.70.241:445 tcp
NL 20.86.161.123:445 tcp
IN 171.77.108.28:445 tcp
US 98.36.205.106:445 tcp
DE 194.9.156.115:445 tcp
N/A 10.127.208.3:445 tcp
US 206.184.118.42:445 tcp
AU 152.69.162.197:445 tcp
N/A 10.127.206.3:445 tcp
PL 194.92.233.46:445 tcp
US 34.113.215.53:445 tcp
CL 200.104.214.91:445 tcp
JP 130.54.146.119:445 tcp
N/A 10.127.207.3:445 tcp
N/A 10.127.210.3:445 tcp
CN 101.146.226.3:445 tcp
US 208.123.53.87:445 tcp
US 45.196.45.182:445 tcp
US 9.96.248.188:445 tcp
N/A 10.127.211.3:445 tcp
N/A 10.127.209.3:445 tcp
N/A 10.127.212.3:445 tcp
N/A 10.127.216.3:445 tcp
US 15.96.104.42:445 tcp
JP 210.20.160.97:445 tcp
ES 83.35.43.110:445 tcp
MD 109.185.60.115:445 tcp
US 17.26.3.78:445 tcp
JP 153.201.25.147:445 tcp
BR 131.100.99.175:445 tcp
US 171.188.57.17:445 tcp
N/A 10.127.217.3:445 tcp
N/A 10.127.213.3:445 tcp
GB 5.151.55.144:445 tcp
US 7.166.32.45:445 tcp
US 216.152.155.202:445 tcp
JP 60.71.202.109:445 tcp
GB 164.136.110.214:445 tcp
US 129.133.143.221:445 tcp
RS 178.148.121.73:445 tcp
N/A 10.127.214.3:445 tcp
N/A 10.127.221.3:445 tcp
US 75.197.35.210:445 tcp
DE 212.122.159.19:445 tcp
GB 213.121.128.193:445 tcp
US 184.174.23.90:445 tcp
AU 143.216.130.143:445 tcp
BR 187.25.145.58:445 tcp
US 150.148.147.254:445 tcp
N/A 10.127.219.3:445 tcp
N/A 10.127.215.3:445 tcp
N/A 10.127.222.3:445 tcp
JP 118.6.226.242:445 tcp
N/A 10.127.218.3:445 tcp
N/A 10.127.220.3:445 tcp
US 161.172.163.218:445 tcp
BR 177.121.170.183:445 tcp
CN 222.43.117.189:445 tcp
US 52.10.224.10:445 tcp
US 198.4.252.193:445 tcp
KZ 92.47.238.252:445 tcp
US 160.135.53.60:445 tcp
MX 148.209.175.110:445 tcp
ID 120.191.165.107:445 tcp
N/A 10.127.223.3:445 tcp
N/A 10.127.224.3:445 tcp
N/A 10.127.225.3:445 tcp
N/A 10.127.226.3:445 tcp
N/A 10.127.227.3:445 tcp
US 167.143.20.84:445 tcp
US 8.8.8.8:53 2.173.189.20.in-addr.arpa udp
US 96.97.201.81:445 tcp
US 47.147.110.156:445 tcp
FR 163.173.233.214:445 tcp
FR 86.201.19.104:445 tcp
BR 187.91.189.66:445 tcp
US 214.93.73.168:445 tcp
SA 2.88.217.166:445 tcp
N/A 10.127.228.3:445 tcp
N/A 10.127.229.3:445 tcp
US 8.84.101.159:445 tcp
KR 61.75.156.18:445 tcp
US 151.144.76.43:445 tcp
US 11.131.36.25:445 tcp
TW 114.36.98.69:445 tcp
CN 116.79.190.1:445 tcp
JP 210.138.208.152:445 tcp
N/A 10.127.230.3:445 tcp
N/A 10.127.231.3:445 tcp
N/A 10.127.232.3:445 tcp
N/A 10.127.233.3:445 tcp
NL 37.218.243.169:445 tcp
GB 178.100.0.95:445 tcp
US 35.15.139.23:445 tcp
ES 80.59.182.92:445 tcp
ZA 196.15.205.62:445 tcp
CZ 89.239.0.118:445 tcp
US 33.25.25.85:445 tcp
N/A 10.127.234.3:445 tcp
N/A 10.127.235.3:445 tcp
IE 57.221.116.226:445 tcp
HK 8.217.212.189:445 tcp
US 8.45.135.166:445 tcp
US 97.216.13.67:445 tcp
US 64.84.224.90:445 tcp
SE 164.4.87.168:445 tcp
N/A 10.127.236.3:445 tcp
N/A 10.127.237.3:445 tcp
US 29.187.243.120:445 tcp
US 29.31.223.161:445 tcp
DE 53.101.156.126:445 tcp
US 8.235.198.171:445 tcp
CN 1.204.145.222:445 tcp
DE 93.224.143.105:445 tcp
ES 83.36.97.198:445 tcp
FI 85.77.130.221:445 tcp
KR 110.5.145.36:445 tcp
JP 42.127.99.74:445 tcp
MX 189.164.54.188:445 tcp
CN 211.82.131.211:445 tcp
US 38.158.35.104:445 tcp
US 8.74.47.229:445 tcp
GB 90.196.91.159:445 tcp
BE 85.234.201.229:445 tcp
CN 42.95.228.200:445 tcp
US 17.8.196.16:445 tcp
N/A 10.127.238.3:445 tcp
ID 39.219.76.241:445 tcp
N/A 10.127.240.3:445 tcp
N/A 10.127.239.3:445 tcp
NO 213.172.195.100:445 tcp
KR 139.150.241.99:445 tcp
US 135.213.95.226:445 tcp
US 56.253.215.92:445 tcp
US 138.31.83.48:445 tcp
AT 84.112.15.169:445 tcp
US 192.76.218.138:445 tcp
N/A 10.127.244.3:445 tcp
N/A 10.127.243.3:445 tcp
US 139.246.156.66:445 tcp
N/A 10.127.242.3:445 tcp
US 170.168.179.234:445 tcp
N/A 10.127.245.3:445 tcp
KR 49.59.241.138:445 tcp
US 128.208.189.1:445 tcp
TW 124.12.221.192:445 tcp
CN 114.225.227.146:445 tcp
N/A 10.127.241.3:445 tcp
N/A 10.127.246.3:445 tcp
N/A 10.127.247.3:445 tcp
N/A 10.127.248.3:445 tcp
N/A 10.127.249.3:445 tcp
CN 116.249.115.25:445 tcp
BR 187.100.79.210:445 tcp
CN 220.101.201.162:445 tcp
AM 212.34.239.220:445 tcp
IT 79.44.15.130:445 tcp
US 18.15.132.91:445 tcp
KR 222.122.230.144:445 tcp
PA 181.197.127.177:445 tcp
CA 76.11.22.108:445 tcp
BR 187.18.30.15:445 tcp
DE 91.17.45.115:445 tcp
GB 81.102.51.15:445 tcp
MX 187.226.124.160:445 tcp
US 173.232.130.50:445 tcp
DE 84.171.189.154:445 tcp
PL 37.190.234.139:445 tcp
US 76.177.177.18:445 tcp
US 52.55.173.4:445 tcp
US 171.129.53.50:445 tcp
N/A 10.127.250.3:445 tcp
TH 202.94.248.94:445 tcp
AE 137.115.112.71:445 tcp
US 156.12.163.59:445 tcp
US 152.129.179.153:445 tcp
N/A 10.127.252.3:445 tcp
JP 119.229.76.222:445 tcp
RU 176.196.250.90:445 tcp
CN 42.84.99.220:445 tcp
N/A 10.127.254.3:445 tcp
US 68.130.154.117:445 tcp
N/A 10.127.253.3:445 tcp
US 6.35.207.233:445 tcp
BR 179.67.229.124:445 tcp
US 75.62.193.16:445 tcp
PK 59.103.248.97:445 tcp
CN 117.67.4.203:445 tcp
N/A 10.127.251.3:445 tcp
N/A 10.127.255.3:445 tcp
JP 133.43.80.114:445 tcp
US 166.22.31.243:445 tcp
US 100.143.148.45:445 tcp
KR 175.112.224.207:445 tcp
N/A 10.127.3.4:445 tcp
DE 2.246.95.238:445 tcp
CH 57.37.141.77:445 tcp
US 30.102.75.22:445 tcp
SE 93.92.1.103:445 tcp
US 33.203.134.151:445 tcp
US 35.107.213.244:445 tcp
US 104.243.11.188:445 tcp
US 207.208.60.130:445 tcp
N/A 10.127.5.4:445 tcp
N/A 10.127.1.4:445 tcp
CN 183.39.193.115:445 tcp
US 156.84.242.180:445 tcp
US 162.22.38.192:445 tcp
US 161.114.251.220:445 tcp
NO 194.143.126.215:445 tcp
VE 38.252.185.120:445 tcp
US 21.59.130.179:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.7.4:445 tcp
US 104.30.180.58:445 tcp
US 155.47.107.119:445 tcp
AU 14.200.238.105:445 tcp
US 52.173.127.14:445 tcp
JP 219.117.94.43:445 tcp
US 93.75.202.57:445 tcp
JP 150.11.69.18:445 tcp
N/A 10.127.8.4:445 tcp
NZ 130.217.105.63:445 tcp
N/A 10.127.2.4:445 tcp
N/A 10.127.4.4:445 tcp
N/A 10.127.6.4:445 tcp
N/A 10.127.9.4:445 tcp
N/A 10.127.10.4:445 tcp
N/A 10.127.11.4:445 tcp
N/A 10.127.12.4:445 tcp
N/A 10.127.13.4:445 tcp
ES 81.46.195.162:445 tcp
N/A 10.127.14.4:445 tcp
DE 176.2.93.208:445 tcp
N/A 10.127.15.4:445 tcp
FR 92.164.227.10:445 tcp
FR 163.73.46.247:445 tcp
SE 95.209.35.102:445 tcp
HU 185.244.71.124:445 tcp
TW 220.139.197.110:445 tcp
US 52.118.202.199:445 tcp
US 32.155.154.123:445 tcp
N/A 10.127.16.4:445 tcp
N/A 10.127.17.4:445 tcp
ID 8.215.34.59:445 tcp
N/A 10.127.18.4:445 tcp
KZ 95.57.231.167:445 tcp
JP 222.4.75.119:445 tcp
BR 152.239.172.244:445 tcp
US 29.182.34.8:445 tcp
AU 124.182.128.184:445 tcp
US 153.71.253.177:445 tcp
US 172.209.208.120:445 tcp
N/A 10.127.19.4:445 tcp
N/A 10.127.20.4:445 tcp
JP 221.34.225.85:445 tcp
N/A 10.127.21.4:445 tcp
NL 194.13.167.198:445 tcp
CN 119.185.119.46:445 tcp
CA 50.69.25.164:445 tcp
TW 42.69.44.173:445 tcp
GB 31.77.176.127:445 tcp
AU 14.2.60.11:445 tcp
N/A 10.127.22.4:445 tcp
N/A 10.127.23.4:445 tcp
N/A 10.127.24.4:445 tcp
CN 27.24.46.188:445 tcp
GB 25.233.121.180:445 tcp
DE 79.246.82.221:445 tcp
CN 114.235.63.111:445 tcp
PA 201.226.99.236:445 tcp
AU 120.157.17.65:445 tcp
GB 51.41.254.64:445 tcp
JP 163.48.10.187:445 tcp
KR 210.218.77.136:445 tcp
US 108.29.36.193:445 tcp
DK 5.249.232.102:445 tcp
FI 85.23.70.75:445 tcp
US 136.74.53.246:445 tcp
N/A 10.127.25.4:445 tcp
US 144.229.72.51:445 tcp
US 47.157.185.144:445 tcp
US 153.68.45.111:445 tcp
KR 203.244.108.113:445 tcp
N/A 10.127.28.4:445 tcp
N/A 10.127.26.4:445 tcp
JP 106.186.147.68:445 tcp
N/A 10.127.27.4:445 tcp
HK 219.78.69.106:445 tcp
US 17.128.42.141:445 tcp
US 21.221.175.210:445 tcp
US 137.167.50.239:445 tcp
CN 36.162.155.75:445 tcp
GB 62.252.210.138:445 tcp
US 199.171.142.230:445 tcp
GB 20.77.161.190:445 tcp
NL 37.97.213.83:445 tcp
ID 39.219.73.238:445 tcp
US 47.19.45.13:445 tcp
IE 57.87.226.90:445 tcp
CN 221.200.215.120:445 tcp
TW 111.241.157.201:445 tcp
N/A 10.127.29.4:445 tcp
N/A 10.127.30.4:445 tcp
N/A 10.127.31.4:445 tcp
N/A 10.127.32.4:445 tcp
N/A 10.127.33.4:445 tcp
N/A 10.127.34.4:445 tcp
N/A 10.127.35.4:445 tcp
DE 195.145.247.203:445 tcp
CN 111.35.198.248:445 tcp
KR 202.31.175.137:445 tcp
BR 179.106.216.213:445 tcp
US 132.100.50.184:445 tcp
US 104.235.10.92:445 tcp
N/A 10.127.36.4:445 tcp
N/A 10.127.37.4:445 tcp
TR 212.109.243.93:445 tcp
BR 179.221.193.230:445 tcp
US 96.145.236.202:445 tcp
JO 5.45.143.73:445 tcp
AU 162.146.62.74:445 tcp
CA 67.69.39.75:445 tcp
N/A 10.127.38.4:445 tcp
N/A 10.127.39.4:445 tcp
US 23.31.135.65:445 tcp
GB 82.2.103.248:445 tcp
BR 200.15.9.175:445 tcp
CN 49.54.51.30:445 tcp
DE 53.132.58.243:445 tcp
UA 77.121.76.142:445 tcp
N/A 10.127.40.4:445 tcp
CN 218.30.116.73:445 tcp
EG 45.246.96.207:445 tcp
TR 161.9.87.53:445 tcp
JP 126.100.27.244:445 tcp
US 99.40.150.63:445 tcp
GR 195.251.145.136:445 tcp
NG 105.126.85.125:445 tcp
EG 41.128.149.175:445 tcp
JP 124.18.229.222:445 tcp
SA 212.71.42.232:445 tcp
US 149.101.34.85:445 tcp
ZA 154.81.168.10:445 tcp
US 161.254.215.19:445 tcp
N/A 10.127.43.4:445 tcp
US 65.55.78.254:445 tcp
US 99.51.196.29:445 tcp
MX 187.186.81.157:445 tcp
US 173.246.37.172:445 tcp
RU 90.188.41.131:445 tcp
IR 2.146.211.138:445 tcp
KR 221.138.90.214:445 tcp
US 165.68.177.161:445 tcp
N/A 10.127.46.4:445 tcp
IT 188.217.139.143:445 tcp
N/A 10.127.42.4:445 tcp
N/A 10.127.41.4:445 tcp
JP 60.142.196.86:445 tcp
US 216.36.250.192:445 tcp
US 135.21.57.146:445 tcp
NO 84.213.179.116:445 tcp
N/A 10.127.47.4:445 tcp
N/A 10.127.48.4:445 tcp
N/A 10.127.45.4:445 tcp
N/A 10.127.44.4:445 tcp
AR 181.102.80.145:445 tcp
US 131.11.55.76:445 tcp
US 206.44.19.16:445 tcp
BE 81.169.48.51:445 tcp
US 100.144.25.185:445 tcp
N/A 10.127.53.4:445 tcp
DE 195.81.156.173:445 tcp
JP 60.132.112.2:445 tcp
GB 3.10.226.14:445 tcp
US 35.148.239.167:445 tcp
JP 140.227.14.127:445 tcp
JP 125.100.190.254:445 tcp
CN 106.94.200.4:445 tcp
N/A 10.127.54.4:445 tcp
CN 112.25.155.190:445 tcp
GB 86.14.217.186:445 tcp
US 75.0.237.164:445 tcp
US 128.122.127.205:445 tcp
BR 186.201.76.149:445 tcp
JP 42.146.0.181:445 tcp
US 69.245.244.148:445 tcp
US 8.8.8.8:53 28.173.189.20.in-addr.arpa udp
N/A 10.127.49.4:445 tcp
N/A 10.127.50.4:445 tcp
N/A 10.127.51.4:445 tcp
N/A 10.127.52.4:445 tcp
N/A 10.127.55.4:445 tcp
N/A 10.127.56.4:445 tcp
N/A 10.127.57.4:445 tcp
US 75.56.139.51:445 tcp
US 19.46.24.202:445 tcp
US 9.66.88.203:445 tcp
N/A 10.127.58.4:445 tcp
US 161.186.107.121:445 tcp
US 135.2.61.21:445 tcp
KR 154.10.227.247:445 tcp
FR 20.216.140.148:445 tcp
N/A 10.127.59.4:445 tcp
RU 31.129.20.73:445 tcp
US 209.199.174.121:445 tcp
CN 221.179.65.0:445 tcp
US 104.100.248.56:445 tcp
JP 58.89.221.221:445 tcp
CN 218.203.78.37:445 tcp
N/A 10.127.60.4:445 tcp
DE 53.137.60.96:445 tcp
CO 186.168.83.46:445 tcp
US 19.189.159.55:445 tcp
US 68.171.195.169:445 tcp
US 100.222.184.96:445 tcp
CN 61.243.20.232:445 tcp
GB 31.111.48.72:445 tcp
N/A 10.127.61.4:445 tcp
FR 155.132.32.164:445 tcp
MX 189.222.183.164:445 tcp
US 19.152.58.249:445 tcp
EG 217.52.245.243:445 tcp
US 4.78.100.17:445 tcp
N/A 10.127.64.4:445 tcp
US 198.214.116.148:445 tcp
TW 120.126.162.93:445 tcp
BE 193.74.202.64:445 tcp
GB 82.69.89.251:445 tcp
US 65.115.120.82:445 tcp
CN 123.179.97.244:445 tcp
US 30.182.136.94:445 tcp
N/A 10.127.63.4:445 tcp
N/A 10.127.65.4:445 tcp
N/A 10.127.62.4:445 tcp
N/A 10.127.67.4:445 tcp
N/A 10.127.66.4:445 tcp
TW 222.250.148.18:445 tcp
CA 167.32.142.206:445 tcp
CA 131.202.129.151:445 tcp
KR 59.20.226.63:445 tcp
US 150.159.172.172:445 tcp
US 152.30.5.236:445 tcp
KR 110.15.95.21:445 tcp
N/A 10.127.68.4:445 tcp
CN 123.135.211.98:445 tcp
US 214.160.73.112:445 tcp
US 48.121.146.199:445 tcp
N/A 10.127.69.4:445 tcp
IN 120.61.42.6:445 tcp
US 207.175.98.196:445 tcp
ID 39.208.245.133:445 tcp
N/A 10.127.70.4:445 tcp
US 7.10.99.48:445 tcp
FR 88.138.223.154:445 tcp
VE 181.183.154.225:445 tcp
US 54.205.109.116:445 tcp
CN 119.183.79.76:445 tcp
CN 114.68.241.209:445 tcp
FR 193.252.27.45:445 tcp
US 214.61.60.56:445 tcp
DE 80.154.122.236:445 tcp
ZA 155.237.190.33:445 tcp
JP 122.209.13.130:445 tcp
CA 16.55.1.220:445 tcp
FR 193.252.27.1:445 tcp
N/A 10.127.71.4:445 tcp
N/A 10.127.72.4:445 tcp
N/A 10.127.73.4:445 tcp
N/A 10.127.74.4:445 tcp
N/A 10.127.75.4:445 tcp
N/A 10.127.76.4:445 tcp
N/A 10.127.77.4:445 tcp
N/A 10.127.78.4:445 tcp
HK 103.47.201.249:445 tcp
N/A 10.127.79.4:445 tcp
BR 181.220.171.27:445 tcp
US 40.218.152.229:445 tcp
US 205.209.46.23:445 tcp
CI 41.206.246.86:445 tcp
US 72.48.158.225:445 tcp
ES 80.25.41.177:445 tcp
N/A 10.127.80.4:445 tcp
US 172.158.144.182:445 tcp
US 65.90.202.75:445 tcp
AR 191.83.12.202:445 tcp
N/A 10.127.81.4:445 tcp
US 70.116.178.75:445 tcp
JP 157.7.200.106:445 tcp
PL 31.175.218.120:445 tcp
UA 176.36.201.57:445 tcp
US 20.122.209.142:445 tcp
US 216.170.229.135:445 tcp
BR 189.61.71.144:445 tcp
CA 142.41.247.208:445 tcp
JP 133.75.4.148:445 tcp
US 153.113.154.220:445 tcp
N/A 10.127.82.4:445 tcp
N/A 10.127.83.4:445 tcp
N/A 10.127.85.4:445 tcp
SG 43.11.90.253:445 tcp
US 64.203.159.254:445 tcp
FR 91.121.176.177:445 tcp
US 71.49.188.42:445 tcp
US 8.8.8.8:53 45.27.252.193.in-addr.arpa udp
US 163.37.67.81:445 tcp
N/A 10.127.87.4:445 tcp
CN 182.116.168.154:445 tcp
FR 193.252.27.2:445 tcp
DE 84.177.107.18:445 tcp
FR 78.235.67.190:445 tcp
IE 109.76.88.170:445 tcp
US 173.112.143.8:445 tcp
KE 105.166.194.239:445 tcp
N/A 10.127.89.4:445 tcp
KR 210.122.174.230:445 tcp
N/A 10.127.86.4:445 tcp
US 137.75.39.112:445 tcp
CN 114.226.67.40:445 tcp
US 173.175.17.197:445 tcp
CN 119.184.132.36:445 tcp
BR 179.137.183.4:445 tcp
US 21.101.146.245:445 tcp
N/A 10.127.84.4:445 tcp
N/A 10.127.91.4:445 tcp
N/A 10.127.88.4:445 tcp
US 174.187.197.251:445 tcp
US 70.217.229.199:445 tcp
MA 105.143.60.94:445 tcp
CA 70.67.40.77:445 tcp
IL 132.73.34.71:445 tcp
US 166.231.235.218:445 tcp
JP 210.154.155.201:445 tcp
FR 90.22.238.140:445 tcp
US 30.139.1.64:445 tcp
N/A 10.224.212.1:445 tcp
N/A 10.127.92.4:445 tcp
IT 151.33.0.127:445 tcp
US 65.70.20.18:445 tcp
CN 219.237.246.25:445 tcp
N/A 10.127.90.4:445 tcp
TW 192.192.235.246:445 tcp
CN 221.227.57.130:445 tcp
US 209.247.115.217:445 tcp
GB 82.5.74.87:445 tcp
N/A 10.127.94.4:445 tcp
US 7.99.37.216:445 tcp
N/A 10.127.93.4:445 tcp
N/A 10.127.95.4:445 tcp
N/A 10.127.96.4:445 tcp
N/A 10.127.97.4:445 tcp
N/A 10.127.98.4:445 tcp
FR 193.252.27.3:445 tcp
N/A 10.127.99.4:445 tcp
US 131.70.42.185:445 tcp
US 68.132.145.152:445 tcp
CA 99.213.134.5:445 tcp
US 67.200.209.44:445 tcp
N/A 10.127.100.4:445 tcp
IT 2.34.45.215:445 tcp
FR 83.155.182.100:445 tcp
N/A 10.127.101.4:445 tcp
ID 36.76.164.33:445 tcp
CN 36.135.31.125:445 tcp
US 38.83.106.117:445 tcp
DE 188.40.0.237:445 tcp
US 149.21.151.116:445 tcp
GB 128.86.68.226:445 tcp
FR 158.190.23.243:445 tcp
N/A 10.127.102.4:445 tcp
GB 31.110.96.200:445 tcp
NL 188.205.245.75:445 tcp
US 199.33.187.224:445 tcp
US 63.56.237.154:445 tcp
US 12.201.4.189:445 tcp
NL 145.152.199.8:445 tcp
US 140.9.169.193:445 tcp
PL 83.12.34.145:445 tcp
CN 39.152.84.72:445 tcp
US 70.169.13.17:445 tcp
JP 133.233.123.112:445 tcp
JP 220.222.36.84:445 tcp
CN 222.95.46.20:445 tcp
DE 53.200.193.45:445 tcp
US 52.71.85.241:445 tcp
FR 86.203.218.191:445 tcp
US 30.34.74.177:445 tcp
N/A 10.127.103.4:445 tcp
FR 193.252.27.4:445 tcp
US 131.187.20.90:445 tcp
US 136.152.124.109:445 tcp
US 108.182.97.37:445 tcp
FR 176.168.253.9:445 tcp
US 64.61.100.117:445 tcp
US 166.135.158.60:445 tcp
HK 113.212.228.34:445 tcp
US 157.57.89.116:445 tcp
N/A 10.127.107.4:445 tcp
N/A 10.127.105.4:445 tcp
US 216.37.161.254:445 tcp
BR 179.147.72.40:445 tcp
PT 146.193.38.9:445 tcp
US 7.97.101.248:445 tcp
PL 188.128.216.144:445 tcp
US 161.60.45.32:445 tcp
N/A 10.127.109.4:445 tcp
N/A 10.127.110.4:445 tcp
N/A 10.127.104.4:445 tcp
N/A 10.127.108.4:445 tcp
N/A 10.127.112.4:445 tcp
US 32.111.195.241:445 tcp
US 54.70.93.158:445 tcp
N/A 10.127.106.4:445 tcp
US 4.8.124.144:445 tcp
US 38.64.69.109:445 tcp
EG 41.43.75.191:445 tcp
HK 222.166.129.203:445 tcp
JP 111.87.72.184:445 tcp
N/A 10.127.111.4:445 tcp
CN 218.70.229.120:445 tcp
N/A 10.127.114.4:445 tcp
JP 153.155.200.120:445 tcp
JP 133.248.216.164:445 tcp
N/A 10.127.113.4:445 tcp
US 73.20.136.151:445 tcp
CH 57.42.125.81:445 tcp
US 198.181.142.200:445 tcp
N/A 10.127.117.4:445 tcp
US 56.170.176.252:445 tcp
US 159.233.119.183:445 tcp
US 172.133.90.147:445 tcp
CZ 147.228.192.96:445 tcp
FR 193.252.27.5:445 tcp
VN 14.233.49.77:445 tcp
US 169.189.241.98:445 tcp
CA 207.34.50.232:445 tcp
JP 114.155.151.234:445 tcp
CN 115.226.222.22:445 tcp
BR 189.27.136.97:445 tcp
US 156.138.45.33:445 tcp
US 148.190.20.112:445 tcp
US 32.50.117.214:445 tcp
US 8.87.153.154:445 tcp
US 16.70.158.115:445 tcp
TR 176.239.193.252:445 tcp
US 170.146.146.53:445 tcp
US 205.48.196.177:445 tcp
N/A 10.127.119.4:445 tcp
N/A 10.127.116.4:445 tcp
N/A 10.127.118.4:445 tcp
SE 77.53.231.97:445 tcp
CN 119.166.28.26:445 tcp
US 139.56.40.204:445 tcp
BR 177.147.157.64:445 tcp
US 207.114.248.73:445 tcp
KR 14.95.121.142:445 tcp
ES 2.136.34.194:445 tcp
IT 3.160.215.153:445 tcp
US 68.34.0.39:445 tcp
CN 61.189.53.63:445 tcp
N/A 10.127.125.4:445 tcp
US 33.17.72.232:445 tcp
US 44.230.130.234:445 tcp
AU 130.56.78.13:445 tcp
N/A 10.127.123.4:445 tcp
N/A 10.127.121.4:445 tcp
N/A 10.127.124.4:445 tcp
N/A 10.127.129.4:445 tcp
US 74.186.160.197:445 tcp
US 173.93.215.205:445 tcp
BG 213.91.201.78:445 tcp
CN 14.157.49.135:445 tcp
FR 193.252.27.6:445 tcp
N/A 10.127.115.4:445 tcp
NO 146.2.97.23:445 tcp
N/A 10.127.126.4:445 tcp
NG 129.56.210.171:445 tcp
PL 194.183.61.246:445 tcp
SG 43.74.97.188:445 tcp
N/A 10.127.127.4:445 tcp
US 72.116.90.54:445 tcp
DE 217.81.48.37:445 tcp
IN 47.15.188.251:445 tcp
US 163.41.41.12:445 tcp
N/A 10.127.128.4:445 tcp
N/A 10.127.132.4:445 tcp
US 3.88.58.212:445 tcp
MX 187.243.190.165:445 tcp
US 11.141.153.89:445 tcp
UY 152.156.166.38:445 tcp
DE 185.188.32.128:445 tcp
N/A 10.127.122.4:445 tcp
N/A 10.127.130.4:445 tcp
N/A 10.127.133.4:445 tcp
N/A 10.127.120.4:445 tcp
N/A 10.127.131.4:445 tcp
N/A 10.127.134.4:445 tcp
N/A 10.127.135.4:445 tcp
AR 186.182.132.134:445 tcp
US 137.180.230.103:445 tcp
US 148.159.8.101:445 tcp
US 28.118.68.6:445 tcp
FR 90.70.231.104:445 tcp
DE 63.184.64.87:445 tcp
IT 79.59.87.78:445 tcp
US 174.85.173.172:445 tcp
US 128.118.192.160:445 tcp
US 173.11.175.45:445 tcp
N/A 10.127.136.4:445 tcp
N/A 10.127.137.4:445 tcp
N/A 10.127.138.4:445 tcp
N/A 10.127.139.4:445 tcp
N/A 10.127.140.4:445 tcp
KR 27.125.9.142:445 tcp
DE 132.231.83.240:445 tcp
US 68.42.54.132:445 tcp
N/A 10.127.141.4:445 tcp
FR 193.252.27.7:445 tcp
US 47.162.162.62:445 tcp
CN 106.48.185.169:445 tcp
GB 178.104.18.133:445 tcp
NO 195.139.226.0:445 tcp
N/A 10.127.142.4:445 tcp
N/A 10.127.143.4:445 tcp
US 48.43.251.179:445 tcp
N/A 10.127.144.4:445 tcp
CO 186.113.150.126:445 tcp
N/A 10.127.145.4:445 tcp
AR 190.175.52.45:445 tcp
IN 115.110.195.210:445 tcp
GR 85.73.106.96:445 tcp
ID 39.215.218.24:445 tcp
CA 129.153.53.59:445 tcp
N/A 10.127.146.4:445 tcp
JP 60.101.214.21:445 tcp
IT 41.78.60.133:445 tcp
BR 191.175.17.41:445 tcp
US 54.134.113.201:445 tcp
MA 41.249.226.243:445 tcp
SG 43.12.4.236:445 tcp
SA 95.185.119.190:445 tcp
N/A 10.127.147.4:445 tcp
N/A 10.127.148.4:445 tcp
US 139.31.94.100:445 tcp
CN 59.229.222.114:445 tcp
BR 177.100.132.250:445 tcp
TW 59.125.193.211:445 tcp
US 141.165.136.49:445 tcp
CZ 89.24.226.208:445 tcp
MY 185.93.166.81:445 tcp
US 69.234.127.167:445 tcp
US 64.19.74.19:445 tcp
NL 145.41.146.124:445 tcp
N/A 10.127.150.4:445 tcp
US 150.155.153.119:445 tcp
HK 61.92.114.18:445 tcp
US 17.37.222.3:445 tcp
N/A 10.127.149.4:445 tcp
FR 193.252.27.8:445 tcp
US 132.115.97.234:445 tcp
FR 93.22.71.45:445 tcp
DE 176.7.229.66:445 tcp
US 45.117.54.241:445 tcp
N/A 10.127.151.4:445 tcp
US 19.164.121.6:445 tcp
IT 35.152.41.219:445 tcp
US 215.119.12.152:445 tcp
KR 61.104.182.112:445 tcp
N/A 10.127.154.4:445 tcp
US 108.20.222.103:445 tcp
HU 188.157.173.165:445 tcp
FR 152.77.178.183:445 tcp
GB 194.168.252.80:445 tcp
N/A 10.127.155.4:445 tcp
N/A 10.127.156.4:445 tcp
N/A 10.127.152.4:445 tcp
JP 219.161.83.149:445 tcp
CN 106.35.44.183:445 tcp
GB 4.159.224.224:445 tcp
ID 140.213.170.185:445 tcp
GB 81.149.68.60:445 tcp
N/A 10.127.153.4:445 tcp
N/A 10.127.157.4:445 tcp
N/A 10.127.158.4:445 tcp
N/A 10.127.159.4:445 tcp
N/A 10.127.160.4:445 tcp
FR 77.193.30.149:445 tcp
N/A 10.127.161.4:445 tcp
US 169.25.110.202:445 tcp
US 75.180.223.85:445 tcp
DE 53.54.136.64:445 tcp
US 11.57.96.135:445 tcp
US 108.76.31.232:445 tcp
US 73.195.50.41:445 tcp
N/A 10.127.162.4:445 tcp
US 131.68.230.233:445 tcp
N/A 10.127.163.4:445 tcp
KR 183.106.253.2:445 tcp
NL 31.137.240.148:445 tcp
CN 171.124.181.43:445 tcp
US 6.186.153.2:445 tcp
US 21.35.252.102:445 tcp
N/A 10.127.164.4:445 tcp
FR 193.252.27.9:445 tcp
US 63.49.70.39:445 tcp
US 141.159.46.37:445 tcp
US 3.22.2.95:445 tcp
US 134.68.63.125:445 tcp
CN 120.24.198.24:445 tcp
N/A 10.127.166.4:445 tcp
US 137.234.26.23:445 tcp
FR 93.26.17.85:445 tcp
US 8.124.163.72:445 tcp
DE 93.232.79.200:445 tcp
SA 89.5.14.202:445 tcp
US 148.39.98.112:445 tcp
GB 31.88.13.63:445 tcp
KR 211.249.86.132:445 tcp
BR 187.53.131.153:445 tcp
IN 124.253.125.59:445 tcp
US 162.183.254.154:445 tcp
US 65.31.151.209:445 tcp
N/A 10.127.165.4:445 tcp
US 184.157.215.85:445 tcp
N/A 10.127.168.4:445 tcp
CA 146.103.58.91:445 tcp
US 184.173.242.82:445 tcp
CN 223.8.196.168:445 tcp
US 11.101.150.231:445 tcp
BR 189.127.242.214:445 tcp
RU 79.105.151.125:445 tcp
SA 85.129.166.95:445 tcp
N/A 10.127.170.4:445 tcp
US 96.123.10.139:445 tcp
US 209.221.198.192:445 tcp
MA 197.144.79.243:445 tcp
N/A 10.127.171.4:445 tcp
N/A 10.127.169.4:445 tcp
N/A 10.127.167.4:445 tcp
FR 193.252.27.10:445 tcp
US 204.24.138.104:445 tcp
US 15.217.63.222:445 tcp
NL 145.165.83.116:445 tcp
N/A 10.127.172.4:445 tcp
N/A 10.127.174.4:445 tcp
BR 179.205.219.41:445 tcp
KR 222.100.208.71:445 tcp
CN 175.22.170.196:445 tcp
US 130.36.126.38:445 tcp
JP 193.114.249.144:445 tcp
US 16.20.115.155:445 tcp
ZA 196.9.91.229:445 tcp
FR 92.171.97.22:445 tcp
CN 182.123.187.115:445 tcp
N/A 10.127.176.4:445 tcp
JP 222.151.188.250:445 tcp
EG 105.203.173.54:445 tcp
CN 139.219.103.165:445 tcp
N/A 10.127.173.4:445 tcp
US 63.60.127.127:445 tcp
US 11.10.185.83:445 tcp
ZA 165.90.192.219:445 tcp
CN 221.228.159.133:445 tcp
US 38.84.107.144:445 tcp
CA 70.66.5.246:445 tcp
N/A 10.127.180.4:445 tcp
N/A 10.127.175.4:445 tcp
N/A 10.127.177.4:445 tcp
N/A 10.127.178.4:445 tcp
N/A 10.127.179.4:445 tcp
N/A 10.127.181.4:445 tcp
N/A 10.127.182.4:445 tcp
N/A 10.127.183.4:445 tcp
US 40.252.13.31:445 tcp
AR 191.85.138.194:445 tcp
US 45.20.138.213:445 tcp
N/A 10.127.184.4:445 tcp
US 135.208.203.95:445 tcp
N/A 10.127.185.4:445 tcp
CN 103.49.21.225:445 tcp
US 34.134.3.107:445 tcp
US 155.79.209.27:445 tcp
US 134.62.157.44:445 tcp
IN 106.219.229.173:445 tcp
FR 193.252.27.11:445 tcp
US 136.24.7.115:445 tcp
DE 143.99.91.21:445 tcp
KR 211.41.178.5:445 tcp
N/A 10.127.186.4:445 tcp
US 9.171.188.90:445 tcp
CN 158.60.73.63:445 tcp
US 20.186.26.85:445 tcp
US 40.201.235.232:445 tcp
AT 193.83.223.75:445 tcp
US 6.89.204.233:445 tcp
US 205.75.224.95:445 tcp
N/A 10.127.188.4:445 tcp
US 72.97.185.209:445 tcp
US 98.63.121.94:445 tcp
CA 96.21.94.162:445 tcp
US 131.250.83.104:445 tcp
NL 145.20.46.101:445 tcp
N/A 10.127.190.4:445 tcp
GB 213.121.90.50:445 tcp
SE 92.32.174.189:445 tcp
CL 190.101.72.222:445 tcp
AU 103.190.129.94:445 tcp
US 161.130.215.181:445 tcp
KR 125.189.223.177:445 tcp
N/A 10.127.189.4:445 tcp
N/A 10.127.187.4:445 tcp
IT 151.90.7.247:445 tcp
NO 148.140.61.178:445 tcp
KR 217.142.158.143:445 tcp
N/A 10.127.193.4:445 tcp
N/A 10.127.192.4:445 tcp
JP 160.21.143.254:445 tcp
US 54.10.244.13:445 tcp
CN 124.76.113.169:445 tcp
ZA 196.23.222.39:445 tcp
FR 159.84.70.134:445 tcp
N/A 10.127.196.4:445 tcp
BR 200.159.222.210:445 tcp
US 56.208.25.82:445 tcp
FR 193.252.27.12:445 tcp
CN 49.232.145.123:445 tcp
NL 193.27.226.206:445 tcp
MX 187.194.99.147:445 tcp
US 196.51.101.253:445 tcp
NO 139.114.196.112:445 tcp
CN 120.214.18.207:445 tcp
NL 94.169.68.115:445 tcp
FR 176.169.249.83:445 tcp
ES 185.151.219.240:445 tcp
BR 200.151.197.136:445 tcp
IN 103.119.209.65:445 tcp
N/A 10.127.194.4:445 tcp
RU 94.50.22.215:445 tcp
US 174.66.35.38:445 tcp
EE 37.157.113.16:445 tcp
US 99.163.197.151:445 tcp
N/A 10.127.191.4:445 tcp
N/A 10.127.195.4:445 tcp
N/A 10.127.197.4:445 tcp
N/A 10.127.198.4:445 tcp
N/A 10.127.199.4:445 tcp
N/A 10.127.200.4:445 tcp
N/A 10.127.201.4:445 tcp
N/A 10.127.202.4:445 tcp
N/A 10.127.203.4:445 tcp
N/A 10.127.204.4:445 tcp
US 157.154.119.236:445 tcp
US 54.24.198.197:445 tcp
PH 119.95.210.51:445 tcp
US 26.12.99.150:445 tcp
US 166.90.119.174:445 tcp
US 24.167.194.69:445 tcp
N/A 10.127.205.4:445 tcp
US 16.91.151.110:445 tcp
GB 25.108.15.127:445 tcp
US 165.208.38.1:445 tcp
CN 203.86.39.63:445 tcp
US 51.109.191.137:445 tcp
DE 53.205.74.223:445 tcp
CN 115.46.10.52:445 tcp
US 140.229.80.26:445 tcp
FR 193.252.27.13:445 tcp
N/A 100.69.250.187:445 tcp
US 50.147.139.10:445 tcp
N/A 10.127.206.4:445 tcp
US 21.128.84.14:445 tcp
CN 125.40.236.126:445 tcp
US 162.181.150.108:445 tcp
US 50.149.200.146:445 tcp
PL 83.5.13.24:445 tcp
MU 196.161.119.150:445 tcp
CN 116.175.239.196:445 tcp
DE 129.13.190.59:445 tcp
N/A 10.127.207.4:445 tcp
N/A 10.127.213.4:445 tcp
NL 145.206.204.57:445 tcp
BE 193.58.6.158:445 tcp
US 132.197.99.166:445 tcp
CA 74.216.251.10:445 tcp
US 63.43.227.65:445 tcp
US 38.175.248.115:445 tcp
CA 104.152.166.68:445 tcp
JP 1.112.35.73:445 tcp
CA 142.142.142.4:445 tcp
N/A 10.127.208.4:445 tcp
US 16.1.133.159:445 tcp
ZA 102.37.214.20:445 tcp
N/A 10.127.212.4:445 tcp
US 128.33.194.253:445 tcp
CH 46.14.77.31:445 tcp
N/A 10.127.209.4:445 tcp
N/A 10.127.210.4:445 tcp
N/A 10.127.214.4:445 tcp
N/A 10.127.216.4:445 tcp
DE 51.152.103.193:445 tcp
JP 153.232.99.14:445 tcp
N/A 10.127.211.4:445 tcp
JP 119.242.240.185:445 tcp
FR 193.252.27.14:445 tcp
N/A 10.127.218.4:445 tcp
SE 159.194.238.145:445 tcp
VN 3.162.56.244:445 tcp
FR 90.78.13.124:445 tcp
CN 175.165.17.162:445 tcp
BR 177.24.51.138:445 tcp
N/A 10.127.217.4:445 tcp
US 149.180.94.179:445 tcp
IR 37.148.102.241:445 tcp
N/A 10.127.215.4:445 tcp
ES 81.41.114.129:445 tcp
IT 77.43.106.11:445 tcp
DE 51.5.29.56:445 tcp
N/A 10.127.220.4:445 tcp
US 151.167.120.50:445 tcp
GH 196.174.186.245:445 tcp
US 75.1.52.23:445 tcp
US 16.44.206.18:445 tcp
CA 142.3.157.47:445 tcp
N/A 10.127.219.4:445 tcp
N/A 10.127.221.4:445 tcp
N/A 10.127.222.4:445 tcp
N/A 10.127.223.4:445 tcp
N/A 10.127.224.4:445 tcp
US 13.96.8.33:445 tcp
CN 175.24.111.100:445 tcp
TW 106.104.70.144:445 tcp
FI 188.238.237.250:445 tcp
US 215.104.39.203:445 tcp
US 74.124.230.211:445 tcp
JP 172.122.109.64:445 tcp
N/A 10.127.225.4:445 tcp
NL 20.8.155.194:445 tcp
US 66.4.61.137:445 tcp
US 34.202.149.224:445 tcp
AU 152.67.104.164:445 tcp
US 209.43.243.69:445 tcp
ES 84.124.219.39:445 tcp
N/A 10.127.226.4:445 tcp
NL 213.124.244.6:445 tcp
AU 202.45.114.249:445 tcp
FR 193.252.27.15:445 tcp
US 48.250.91.243:445 tcp
JP 60.92.85.65:445 tcp
US 207.65.36.64:445 tcp
JP 221.105.39.206:445 tcp
US 97.231.142.173:445 tcp
DE 169.50.60.212:445 tcp
N/A 10.127.229.4:445 tcp
CN 60.235.83.27:445 tcp
CN 125.86.231.242:445 tcp
JP 221.40.118.245:445 tcp
N/A 10.127.227.4:445 tcp
US 129.144.162.253:445 tcp
US 69.246.235.175:445 tcp
N/A 10.127.228.4:445 tcp
DE 141.9.149.65:445 tcp
RU 46.47.60.68:445 tcp
IN 35.154.147.224:445 tcp
N/A 10.127.230.4:445 tcp
N/A 10.127.231.4:445 tcp
N/A 10.127.232.4:445 tcp
N/A 10.127.233.4:445 tcp
N/A 10.127.234.4:445 tcp

Files

memory/3696-2-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-1-0x00007FFFE29CD000-0x00007FFFE29CE000-memory.dmp

memory/3696-4-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-5-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-6-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-0-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-3-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-7-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-8-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-11-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-10-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-9-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-12-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-13-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

memory/3696-15-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-16-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-14-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-19-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-21-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-20-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-18-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

memory/3696-17-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 c733a6b1eb5c61cfd197c1ada123d040
SHA1 9ec5c1a9672b1ebfd13c0aed2c74863d4726358f
SHA256 f7ed903ec02a0065187336db74aa0bb751591dffaa061be0d6ac41bbfc16286f
SHA512 5465c8832031ae146101e1dec00826662a29143f3009ecc768a4b1e47b28b5cdf582edd2d56a8bf7048e18b44b84653b77c989a60392d0ddd53ce1a8cdbfc07e

memory/3696-60-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-59-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-58-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-61-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/3696-62-0x00007FFFE2930000-0x00007FFFE2B28000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\datareporting\glean\pending_pings\df42bbd9-aaee-4f95-a929-30835a471da5

MD5 eefc7cf441e55d5e8958033a00b4de70
SHA1 47db33542574dc05dc4f6ef73bfc6ebb67f043c2
SHA256 3f32a133094d56f1db151d34b5a2e897c936ca5e1dbabbf76b3a43826ff1090a
SHA512 13a9db65568accdc7fbab44d963b7b1b23fdec755d1f27b03353d4fc5fc032fb0af69d08076262c5228fd492c6b2151c64814003097b812326d7ba85da279cac

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\datareporting\glean\pending_pings\bb169fbd-823f-4296-81ee-25196ae2ac3a

MD5 100b239ddd93f95c63842b9736fc131e
SHA1 e59b7dd73614f4822e46444ed8eba1cd9d5c3016
SHA256 cd25adbcfecbfb10693e5c19264e10ddb40587e3c66ebb8ad8413ecd42508ede
SHA512 b82feb25a9a07cb8ee385860748e8748b3342e22461fdedf83cd2c57e73147e6fcca4a2773d198eec0481b2333f9f2c8acdb7a1049bc82a59d8f53a3973a0333

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\datareporting\glean\pending_pings\1963527f-8004-4e0e-bc91-8a00aa3470d7

MD5 5c2c9dd5abcf982eaca8c31bfe248baa
SHA1 b176e86b0581c7779726fbf69a2116efbfb2b907
SHA256 2bbadef687a3b19a8087b7472d6bb57a8dd8422c8f59913fb3eea36af6a289d3
SHA512 866ed075c8ed4795db46b2e566930643b81ee7ae50bb2372628185afbbf79216ced0f39ef5ff50f1a6d0052b5de6b83c4fc749e3f2716ce363d42e3bf29f9776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\datareporting\glean\db\data.safe.tmp

MD5 ed09788e3d81eb3746205c16ec6fd361
SHA1 3f9ec1095439f454811f23dccf9f482feed3d1ed
SHA256 08b4e71e15b68c58329fb9c0879a0a08d86dadae4a809b7091780997cb5c0528
SHA512 f0a9c4252affe82912f04036c8bcfd67ca7cf1f5a4b89ef5528b2acf442f498c2a257c79f6a82f539c3a666593f6cbb1b3d1d6b35d8f5780657dab10afb919da

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\datareporting\glean\db\data.safe.tmp

MD5 4d4eec28604a924c6cef654c18e7035c
SHA1 5201aa3cab911a161f631caf23c95a81962eb03d
SHA256 757bce9660e900c0c79901eb121b658b7c8d89ccf6caf2fb6afb08698cc4eab3
SHA512 5d2d8c25b873df62f93ec916992eaa3dbd6df5bad3c8e7822dacefe06e1cca44c656cbf773c1e812f8c8344ea61c57ee7d4302ed47ffc276138438413070f326

memory/5908-363-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-362-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-361-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-364-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-360-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-365-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

memory/5908-366-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

MD5 7439046746f29ccd9ec91cf9ee11aaaa
SHA1 9ab7168aeab65c741c38f262900fb911c483619c
SHA256 6d8a5bf9d70635ecfd9e07af952616bf67e52d461c16cba37bb548201ed13385
SHA512 ce00d570b28a007cda1516d6844e9737ba7c55a4e4564b5cf2b276385e32775b71a2fcfc95ab840288a57ac9d9a05ab73d7bb8663c91d72445a440cb29027893

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\49dbe2955480c7f6ef8cec9c4320c9868d9293fd.tbres

MD5 d907ff30b2a44ee7035c05be940084c3
SHA1 07a1faec958300a6b7fd4204afffc8b2b40c46d6
SHA256 93a4b5f74e2122cfc66ea2a880ce95dde9535e78ed360229f3f4a048a05cf2a8
SHA512 831715b886d9f25e97c01a08b920382a79f5e8e796393c85ff25f29a158e08c5ca7cf73d3117856edd6be6d53ea577886b8e69ae1e86b45df031c6705d4f3888

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\prefs.js

MD5 1d4f6c5f1d4207f97915febf7d4c9dd0
SHA1 aa571d020544fbb92ca8d2ce7ec62e17b8964a4f
SHA256 c47ede672c42e7877d9c30b86bbcfce25aef776f6ec2f391e579e35c17eb75f1
SHA512 9085bdb6dea276d3f517dbf6d342d73574f0e329c91c8ab537041b3793553c5e395c397dbfdf8d2882c92fee533861d2babe03125e5d3e1fcdabf79f2697ae49

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\AlternateServices.bin

MD5 b050b7f1da40c2110786c62ecb69a698
SHA1 686b525098f1ff8655d691e1615952dfb21c5466
SHA256 7450eb74460c645230df0b403ba5df3d7895190b735cc04dbaf2cf1e47113e68
SHA512 3db2534642d25f1a3fab3bee3ccca4e860ea2a467cbd6627801e8069342170298a2aa3e1ff2919a05b5177aa10568be52b3f268d4129b60bad10f6744753ab1d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\prefs-1.js

MD5 ec8a7b986fe2068e9a7b50f6ef269189
SHA1 a0dba733c7a1af4e6d89a2bd6632735a40d585cf
SHA256 96fe8f6b948d75a0393482f53cb956459c1918cf0fa30c1d7e35818f95ea73a8
SHA512 56109c1d51b3e85f628dcc8823fe9ed2748e4000d7dd38312404a5c34b85c4e8d281d18fc049a618f43fdae97a5ba94fbf271dfcbd203f02ddc01d936126527c

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hohja4eo.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

memory/5908-474-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-473-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-472-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5908-471-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5184-481-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\EC12D480-9A3A-4198-880C-AF86829599F5

MD5 4809bb18114a4ec003fafa409eaf9e39
SHA1 6441bd7929bf679ae2ab981894b60dfb2dbefba9
SHA256 dcc8ed1c405f5b01a1a51a48813e278754f558a49dae0b8f6563f8cb457c0146
SHA512 d6fc7a3756d80fd82adbc619b2b3be976dfe55fc682b9ce98dc9992283962bb72719265b1b8b57c720dc0166fd903e19006c5c38bd783819bcba7e2d4328067d

memory/5184-482-0x00007FFFA0430000-0x00007FFFA0440000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 e5e0846a862f69d141354ac74d33e43b
SHA1 9f4c13eafa9f76d368d2daa1885db47c7704d469
SHA256 03ce680b1456edb5f320eda12d3e68943d89f2bb8654c73748d376bf2e5000f4
SHA512 f58c8f5bab70b9b5ba8352d1e0025f7f8377826da48df1873b8e76252ec5b683cb72a3fc4e35a9d5cf256039e1da6a85523893df5a932b97c3943dc1215c6af6

C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog

MD5 8e02778519b92ffd60eab3d073bb84cc
SHA1 db70000b974d0d56650aaf69d0dad8f79837b859
SHA256 30de5ef4fbe3c31fdbb47f6310f0aba44704683ba37f9a46f737acf97ad50f94
SHA512 c318e729aad824e63dbb78abbecb7041d698439ee03e7b1f045d1931b4166acfcbddaae5176831cd0a18355c11c85179c679aa6ade41852d5421ce26ab814d5d

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml

MD5 d356e2cd5f911b7f0eae0e36b1ca5169
SHA1 5da8e4450b716defce43e473b3c9d8f7d45c0ace
SHA256 bbc44b490dffb69bb837f401b06413104ee084bceef80483dbe414a9b59be275
SHA512 31b8e195fed86e2e1cb2000ca54500e6d7304d88bbf3f05a928ae8e1234c911723257a637d1ec087951d6fb2753eb57ec91f3bb1a912ff43455521c890e52220

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.SurveyEventActivityStats.json

MD5 6ca4960355e4951c72aa5f6364e459d5
SHA1 2fd90b4ec32804dff7a41b6e63c8b0a40b592113
SHA256 88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3
SHA512 8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.CampaignStates.json

MD5 f1b59332b953b3c99b3c95a44249c0d2
SHA1 1b16a2ca32bf8481e18ff8b7365229b598908991
SHA256 138e49660d259061d8152137abd8829acdfb78b69179890beb489fe3ffe23e0c
SHA512 3c1f99ecc394df3741be875fbe8d95e249d1d9ac220805794a22caf81620d5fdd3cce19260d94c0829b3160b28a2b4042e46b56398e60f72134e49254e9679a4

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.GovernedChannelStates.json

MD5 c56ff60fbd601e84edd5a0ff1010d584
SHA1 342abb130dabeacde1d8ced806d67a3aef00a749
SHA256 200e8cc8dd12e22c9720be73092eafb620435d4569dbdcdba9404ace2aa4343c
SHA512 acd2054fddb33b55b58b870edd4eb6a3cdd3131dfe6139cb3d27054ac2b2a460694c9be9c2a1da0f85606e95e7f393cf16868b6c654e78a664799bc3418da86e

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.Settings.json

MD5 e4e83f8123e9740b8aa3c3dfa77c1c04
SHA1 5281eae96efde7b0e16a1d977f005f0d3bd7aad0
SHA256 6034f27b0823b2a6a76fe296e851939fd05324d0af9d55f249c79af118b0eb31
SHA512 bd6b33fd2bbce4a46991bc0d877695d16f7e60b1959a0defc79b627e569e5c6cac7b4ad4e3e1d8389a08584602a51cf84d44cf247f03beb95f7d307fbba12bb9

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 e7a8d8d1c7e761b2c1676c572b1ef364
SHA1 affc0a7f681e195ed60c59e61d10b4737f1ea220
SHA256 0067984a49240648fc2abb02589b23a8b987cea16da742e83bb7d35eddefcdf8
SHA512 fc5d45efdbe1771232ea75b608dbbbf67279270ba004b2b0dfac8043a3123d9bd27dde80c58aeaf5fd8027fcf916ad4b3e828b773aa857b1818ce11da8e617c7

C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db

MD5 085ebd119f5fc6b8f63720fac1166ff5
SHA1 af066018aadec31b8e70a124a158736aca897306
SHA256 b8411fe8ec499074fca9047f6983d920279e84ddf3b02b2dd5c08cf07ec44687
SHA512 adb0522830db26123347cb485c43b156f5c888510e52091ba0fafc22b650ad29630c027746c920321905c28259dce7ff63dded93a79efddd5567c68312117875

C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog

MD5 9ba4fcb2ffba4fc375086d4c55a3f931
SHA1 9125f425b8eeccdf7e17ffc9c157bb2f2a02491d
SHA256 49e6279d2491811b4cab5746a26ba6fd7986f20e13140090dd68657d2164fc9f
SHA512 a1db6c5b124740a5466de8f76440b223bb51fd200244849d8c192585378844ea204787bb97bfec6d50e85a7dab996ff3cfcb4fe380daa3aee2c39bcb5a0d05b9

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 11653bc135563ea466daff1882772382
SHA1 51317ff25023c9f49c7b9196f19dceba366e3595
SHA256 a014d201f4df2deb0a710bf9aa5ebcfe1bef9b900b185fbe12af15c8c044a757
SHA512 af2b67dd9dd714e505239c29187ce8cd59c9575937ab6526618196cac5773b01000eebf6a12b3b62afb4264ccdaaceb01595eb433ba0c94b0148addc6a5d764c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 ea001cde4e556d5a9d0dc411067f9bf6
SHA1 f10de8c70049b9483bf6009ca6c6dbd8b62ae1ca
SHA256 99b223d60ab81d3d42db20312170a33df1be99ee75c9dc70664dc7f872bf629d
SHA512 f8440c7b42a70a9fbda5fff3140b8cc2a31a7f38c07f8de4c658337c6473fa0fc0722ad34b940d97ca7848d0dea607ab883def7e4d792b7ecc0e766219311602

memory/5092-569-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-570-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-568-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-571-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-572-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\powerpnt.exe_Rules.xml

MD5 8c6ce878c9ce65fa10ecce1128a45a25
SHA1 7cfd67175b4e97c997f2bae6408acbf4da61e42d
SHA256 6a8c47b97a90e1bbed71f878b06d35012b0b59cc8427c28d30d9d60f4f4ee897
SHA512 13e81c87e8712471cc9f75096f6644a34db82fc36d53e9981c940b9677f8ba935b8e5ec2b773d53501aed97a8957eed5d67d969bf2f5d3ccbca2bcfac1677131

C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\powerpnt.exe.db

MD5 a6064fc9ce640751e063d9af443990da
SHA1 367a3a7d57bfb3e9a6ec356dfc411a5f14dfde2a
SHA256 5f72c11fd2fa88d8b8bfae1214551f8d5ee07b8895df824fa717ebbcec118a6c
SHA512 0e42dd8e341e2334eda1e19e1a344475ed3a0539a21c70ba2247f480c706ab8e2ff6dbeb790614cbde9fb547699b24e69c85c54e99ed77a08fe7e1d1b4b488d0

memory/5092-588-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-590-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-589-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

memory/5092-587-0x00007FFFA29B0000-0x00007FFFA29C0000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 ba62d139be374f41f6d02bf70ef2d203
SHA1 6d97c55b2c14b74422041e8381d05728899ef04e
SHA256 a89b6f0db621c7d9eda7671c3fc6a7fff851bd308e5b5f23a959620a44539f13
SHA512 bc8c66cd1b9bc832704a4910fb495d343f3a9030a0c0e4d5f0b0f42d8f1577e0f8fb7c3731697f11a8930b9bfa836579026d500fb959209f3e420726dc182181

C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog

MD5 d003ecc7484c45bae83c09e3d397322f
SHA1 ba1a4493a01daf2b4b46a911e03dca1d9033444f
SHA256 74a8bd2293a4deb1ce62e3dc35366bdce2075c77a4003e4bf5297bcb131f100f
SHA512 d4e4eebc739bf2476b20a9f0371a19fbc74984cfa7a6128da6c19aec0bd437d90f37238f0e05c0c175480f9e889de572bb8f93c8b8003aea796ecb9d8b5b2c5a

C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db

MD5 33eea2792b9fa42f418d9d609f692007
SHA1 48c3916a14ef2d9609ec4d2887a337b973cf8753
SHA256 8f7807c324626abc2d3504638958c148e2e3f3e212261f078940cf4c5f0c4fbb
SHA512 b2dbfcdf2599c38c966c5ebce714a5cd50e2f8b411555acf9f02b31b9c29b8ab53a9afa9d32bab87a06e08f8b2c7818d600773f659a058c8af81c50be7f09b95