Malware Analysis Report

2025-01-18 11:48

Sample ID 241219-em2braxjgs
Target aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410
SHA256 aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410
Tags
raccoon d5b70ffd1fb1321864a37f749464c61d discovery phishing stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410

Threat Level: Known bad

The file aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410 was found to be: Known bad.

Malicious Activity Summary

raccoon d5b70ffd1fb1321864a37f749464c61d discovery phishing stealer

Raccoon Stealer V2 payload

Raccoon family

Raccoon

A potential corporate email address has been identified in the URL: prebid-universal-creative@latest

A potential corporate email address has been identified in the URL: [email protected]

Suspicious use of SetThreadContext

Unsigned PE

System Location Discovery: System Language Discovery

Checks processor information in registry

Suspicious use of FindShellTrayWindow

Modifies registry class

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-12-19 04:04

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-19 04:04

Reported

2024-12-19 04:11

Platform

win10ltsc2021-20241211-en

Max time kernel

397s

Max time network

409s

Command Line

"C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe"

Signatures

Raccoon

stealer raccoon

Raccoon Stealer V2 payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Raccoon family

raccoon

A potential corporate email address has been identified in the URL: prebid-universal-creative@latest

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 2752 set thread context of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1006597246-3150276181-3318461161-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1006597246-3150276181-3318461161-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 2752 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1872 wrote to memory of 3212 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3212 wrote to memory of 1620 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe

"C:\Users\Admin\AppData\Local\Temp\aa2cae824c23fc15f2ef9fd64e369a78d49f1a068737a01c7697bae442971410.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1944 -parentBuildID 20240401114208 -prefsHandle 1872 -prefMapHandle 1864 -prefsLen 23839 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4011f298-11bd-46b9-a3f0-f3286acde9cc} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2360 -parentBuildID 20240401114208 -prefsHandle 2352 -prefMapHandle 2348 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9f26566-40c6-4e50-bbfd-14521d5e809a} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3048 -childID 1 -isForBrowser -prefsHandle 3036 -prefMapHandle 2964 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa88c954-307d-4ac4-ba9a-7dfbb36dbaad} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4032 -childID 2 -isForBrowser -prefsHandle 4076 -prefMapHandle 4028 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d66cc1da-77fa-43da-b092-a5eb4254492c} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4792 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4816 -prefMapHandle 4796 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {37872d62-c2eb-4cd9-b4c3-693cd0eea748} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5200 -childID 3 -isForBrowser -prefsHandle 5100 -prefMapHandle 5252 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b9541496-45a5-4e90-915e-dcfb8c363133} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5388 -childID 4 -isForBrowser -prefsHandle 5396 -prefMapHandle 5236 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {65db7de2-6014-4c11-b767-768a27334aa8} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5576 -childID 5 -isForBrowser -prefsHandle 5584 -prefMapHandle 5548 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8912d185-a7aa-4922-aea4-3d724721258f} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6032 -childID 6 -isForBrowser -prefsHandle 5112 -prefMapHandle 5108 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1272 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {00d07c60-9885-48e0-809b-90ba6ecaf2ce} 3212 "\\.\pipe\gecko-crash-server-pipe.3212" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1988 -parentBuildID 20240401114208 -prefsHandle 1916 -prefMapHandle 1908 -prefsLen 24531 -prefMapSize 244985 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e847d041-623f-413b-8aae-cca9e69a06c9} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2388 -parentBuildID 20240401114208 -prefsHandle 2380 -prefMapHandle 2376 -prefsLen 24567 -prefMapSize 244985 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {acc1b1b3-d8fc-4c82-ab44-a768b2775ad3} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3032 -childID 1 -isForBrowser -prefsHandle 2592 -prefMapHandle 2820 -prefsLen 24708 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2cba38b6-493b-43d7-8d94-3cd91c9ae543} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4208 -childID 2 -isForBrowser -prefsHandle 4200 -prefMapHandle 2868 -prefsLen 29941 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {24f90f6b-3901-498c-9ff0-ed5811b9adbf} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4768 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4764 -prefMapHandle 4812 -prefsLen 29941 -prefMapSize 244985 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b13cee65-805e-4dc0-8ed6-450dc4d57d9b} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5096 -childID 3 -isForBrowser -prefsHandle 5076 -prefMapHandle 5080 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6e15ba87-86f1-4030-86f0-cb4e8439819d} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5252 -childID 4 -isForBrowser -prefsHandle 5328 -prefMapHandle 5324 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ce0d5e09-29af-4146-8248-94e60ed1afa8} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5372 -childID 5 -isForBrowser -prefsHandle 5380 -prefMapHandle 5384 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8467d613-a529-4e7f-a8a2-c5a2efeae8c5} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6068 -childID 6 -isForBrowser -prefsHandle 6052 -prefMapHandle 6036 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1526650a-582b-4534-b0e5-ed3885992fc1} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6260 -childID 7 -isForBrowser -prefsHandle 3756 -prefMapHandle 3764 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0fbbd879-04c9-4776-9eae-d6c74775c413} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6700 -childID 8 -isForBrowser -prefsHandle 6692 -prefMapHandle 6688 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7ddc8104-c73f-4018-a457-556fedef83dc} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7068 -childID 9 -isForBrowser -prefsHandle 6624 -prefMapHandle 6336 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39f4e9b1-056f-4639-a131-e68e336bbfc4} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6336 -childID 10 -isForBrowser -prefsHandle 7412 -prefMapHandle 7420 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f5e2008-e7c5-47fb-9e05-87b9e7a6334d} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7556 -childID 11 -isForBrowser -prefsHandle 6804 -prefMapHandle 6924 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b8341c1e-0e63-4d6c-a599-5362388f43f7} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6768 -childID 12 -isForBrowser -prefsHandle 7672 -prefMapHandle 7676 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a6255a0-a733-4907-bdb8-4951932abb8a} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7800 -childID 13 -isForBrowser -prefsHandle 7724 -prefMapHandle 7812 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2103a4ce-5bc7-4335-9f9d-08574ccef32c} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8008 -childID 14 -isForBrowser -prefsHandle 7928 -prefMapHandle 7936 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e8eeba9d-9604-4124-b739-1ee0eb6b7ef4} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8120 -childID 15 -isForBrowser -prefsHandle 8128 -prefMapHandle 8132 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f24271a-86af-40c4-ac31-b4e2c3556163} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8360 -childID 16 -isForBrowser -prefsHandle 8364 -prefMapHandle 8348 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {14bc5bb1-9dc5-4630-bb35-026a2b46a46a} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7504 -childID 17 -isForBrowser -prefsHandle 6708 -prefMapHandle 7772 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c4d48bc-cd94-4738-ba9b-d075280df920} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7552 -childID 18 -isForBrowser -prefsHandle 7584 -prefMapHandle 9044 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ca796432-ba1f-4f15-8235-53d38a8254db} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9128 -childID 19 -isForBrowser -prefsHandle 9136 -prefMapHandle 9140 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {059abd3a-a3ea-4838-ae26-ea1a90e59b0a} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6476 -childID 20 -isForBrowser -prefsHandle 6472 -prefMapHandle 9364 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0034c7b9-63d0-4a76-84f9-44a2b9010bb0} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9624 -childID 21 -isForBrowser -prefsHandle 9620 -prefMapHandle 9616 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f874c49b-8d95-469f-b508-078994b469f8} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9804 -childID 22 -isForBrowser -prefsHandle 9408 -prefMapHandle 9412 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {576dac35-9eff-445b-b888-49e00388efd4} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9860 -childID 23 -isForBrowser -prefsHandle 9872 -prefMapHandle 9876 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {28cca90c-9a72-45c3-968f-fb5214e8059f} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10112 -childID 24 -isForBrowser -prefsHandle 10124 -prefMapHandle 10120 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fb3736a1-de29-4f76-843c-903cca86b193} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10184 -childID 25 -isForBrowser -prefsHandle 10192 -prefMapHandle 10196 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c83a9c4c-60d7-4140-89dd-f1ade6dd69ef} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10476 -childID 26 -isForBrowser -prefsHandle 10280 -prefMapHandle 10112 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {37a9f491-2dcb-440c-914e-43c0ce25a884} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10672 -childID 27 -isForBrowser -prefsHandle 10680 -prefMapHandle 10676 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0abc4f04-9fa5-460b-bff5-9cce2ab72587} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10784 -childID 28 -isForBrowser -prefsHandle 10796 -prefMapHandle 10740 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {11c655fe-1e95-4c96-9f4b-717bda703bbe} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10964 -childID 29 -isForBrowser -prefsHandle 10952 -prefMapHandle 10956 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {531d0447-5921-4e1b-a81e-fed2a18fb966} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11120 -childID 30 -isForBrowser -prefsHandle 10648 -prefMapHandle 11136 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c8ed8a1e-9c16-4a61-a8ee-ef09cc3bfe9e} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11480 -childID 31 -isForBrowser -prefsHandle 11400 -prefMapHandle 11404 -prefsLen 27513 -prefMapSize 244985 -jsInitHandle 1260 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0330654a-e277-4fd7-a646-36c79b3a24fd} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10988 -parentBuildID 20240401114208 -prefsHandle 6204 -prefMapHandle 7136 -prefsLen 30048 -prefMapSize 244985 -appDir "C:\Program Files\Mozilla Firefox\browser" - {06f1e293-0422-4b09-82cf-55a65d9f0f55} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10980 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 11024 -prefMapHandle 10996 -prefsLen 30048 -prefMapSize 244985 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {92af9311-3cfa-40d2-9732-57b8dd6839c3} 5684 "\\.\pipe\gecko-crash-server-pipe.5684" utility

Network

Country Destination Domain Proto
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
NL 192.153.57.177:80 tcp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
N/A 127.0.0.1:49804 tcp
US 8.8.8.8:53 checkappexec.microsoft.com udp
GB 172.165.69.228:443 checkappexec.microsoft.com tcp
US 8.8.8.8:53 228.69.165.172.in-addr.arpa udp
US 8.8.8.8:53 www.mozilla.org udp
US 151.101.3.19:443 www.mozilla.org tcp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 151.101.3.19:443 www-mozilla.fastly-edge.com tcp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 19.3.101.151.in-addr.arpa udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 158.87.240.44.in-addr.arpa udp
US 8.8.8.8:53 200.163.202.172.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
N/A 127.0.0.1:49814 tcp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.164:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 164.20.217.172.in-addr.arpa udp
FR 172.217.20.164:443 www.google.com udp
US 8.8.8.8:53 195.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 163.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 88.221.134.209:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
FR 172.217.20.174:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
FR 172.217.20.174:443 redirector.gvt1.com udp
US 8.8.8.8:53 r4---sn-aigzrnsz.gvt1.com udp
GB 74.125.175.169:443 r4---sn-aigzrnsz.gvt1.com tcp
US 8.8.8.8:53 r4.sn-aigzrnsz.gvt1.com udp
US 8.8.8.8:53 r4.sn-aigzrnsz.gvt1.com udp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 169.175.125.74.in-addr.arpa udp
GB 74.125.175.169:443 r4.sn-aigzrnsz.gvt1.com udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
N/A 127.0.0.1:50539 tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www.mozilla.org udp
US 151.101.131.19:443 www.mozilla.org tcp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
N/A 127.0.0.1:50561 tcp
US 8.8.8.8:53 19.131.101.151.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.164:443 www.google.com udp
FR 172.217.20.164:443 www.google.com tcp
FR 172.217.20.164:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 18.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
FR 216.58.215.49:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
FR 216.58.215.42:443 ogads-pa.googleapis.com tcp
FR 216.58.215.42:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
FR 216.58.215.49:443 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
FR 216.58.215.42:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 162.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 49.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 42.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
FR 216.58.214.174:443 play.google.com tcp
FR 216.58.214.174:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
FR 216.58.214.174:443 play.google.com udp
US 8.8.8.8:53 174.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
FR 142.250.75.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
FR 142.250.75.238:443 consent.google.com udp
US 8.8.8.8:53 238.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.whatismyip.com udp
US 104.27.206.92:443 www.whatismyip.com tcp
US 8.8.8.8:53 www.whatismyip.com udp
US 104.27.206.92:443 www.whatismyip.com tcp
US 8.8.8.8:53 www.whatismyip.com udp
US 104.27.206.92:443 www.whatismyip.com udp
US 8.8.8.8:53 api.whatismyip.com udp
US 8.8.8.8:53 apiv6.whatismyip.com udp
US 8.8.8.8:53 a.pub.network udp
US 8.8.8.8:53 b.pub.network udp
US 8.8.8.8:53 c.pub.network udp
US 34.117.39.86:443 api.whatismyip.com tcp
US 8.8.8.8:53 api.whatismyip.com udp
US 34.160.152.31:443 c.pub.network tcp
US 8.8.8.8:53 c.pub.network udp
US 104.18.20.206:443 a.pub.network tcp
US 104.18.20.206:443 a.pub.network tcp
US 8.8.8.8:53 a.pub.network udp
US 8.8.8.8:53 api.whatismyip.com udp
US 8.8.8.8:53 c.pub.network udp
US 8.8.8.8:53 a.pub.network udp
US 104.18.20.206:443 a.pub.network udp
US 8.8.8.8:53 92.206.27.104.in-addr.arpa udp
US 8.8.8.8:53 86.39.117.34.in-addr.arpa udp
US 8.8.8.8:53 168.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 206.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 widget.sellwild.com udp
FR 52.222.169.46:443 widget.sellwild.com tcp
US 8.8.8.8:53 widget.sellwild.com udp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 widget.sellwild.com udp
US 34.117.39.86:443 api.whatismyip.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 104.17.249.203:443 unpkg.com tcp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 unpkg.com udp
US 34.160.152.31:443 d.pub.network udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 cache.sellwild.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 216.58.214.67:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.co.uk udp
FR 18.155.129.56:443 cache.sellwild.com tcp
US 8.8.8.8:53 cache.sellwild.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 cache.sellwild.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.214.67:443 www.google.co.uk udp
US 8.8.8.8:53 46.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 203.249.17.104.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 67.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 56.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 170.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 a.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
FR 18.245.199.25:443 cdn.privacy-mgmt.com tcp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
BE 74.125.133.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 amspbs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 18.117.0.6:443 amspbs.com tcp
US 18.117.0.6:443 amspbs.com tcp
US 8.8.8.8:53 amspbs.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 amspbs.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 euw2.smartadserver.com udp
BE 74.125.133.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 tagged-by.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 tag.1rx.io udp
US 8.8.8.8:53 25.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 154.133.125.74.in-addr.arpa udp
US 8.8.8.8:53 6.0.117.18.in-addr.arpa udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
FR 216.58.213.66:443 securepubads.g.doubleclick.net tcp
US 172.67.23.234:443 a.ad.gt.cdn.cloudflare.net tcp
FR 216.58.213.66:443 securepubads.g.doubleclick.net tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 51.89.9.254:443 onetag-sys.com tcp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
NL 69.173.156.139:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 69.173.156.139:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 69.173.156.139:443 tagged-by.rubiconproject.net.akadns.net tcp
NL 69.173.156.139:443 tagged-by.rubiconproject.net.akadns.net tcp
IE 52.31.190.219:443 ad.360yield.com tcp
NL 46.228.174.115:443 tag.1rx.io tcp
US 8.8.8.8:53 u.openx.net udp
IE 52.31.190.219:443 ad.360yield.com tcp
US 35.244.159.8:443 u.openx.net tcp
IE 52.31.190.219:443 ad.360yield.com tcp
US 8.8.8.8:53 u.openx.net udp
IE 52.31.190.219:443 ad.360yield.com tcp
FR 163.5.194.34:443 nld-prebid.a-mx.net tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
FR 178.32.197.49:443 euw2.smartadserver.com tcp
US 8.8.8.8:53 u.openx.net udp
FR 216.58.213.66:443 securepubads.g.doubleclick.net udp
NL 46.228.174.115:443 tag.1rx.io tcp
DE 51.89.9.254:443 onetag-sys.com udp
US 35.244.159.8:443 u.openx.net udp
US 8.8.8.8:53 match.sharethrough.com udp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 hbx.media.net udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
FR 142.250.179.78:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 66.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 219.190.31.52.in-addr.arpa udp
US 8.8.8.8:53 254.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 123.172.252.37.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 34.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 49.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 25.234.195.18.in-addr.arpa udp
US 8.8.8.8:53 78.179.250.142.in-addr.arpa udp
US 23.192.24.32:443 hbx.media.net tcp
FR 142.250.179.78:443 www3.l.google.com udp
US 23.192.24.32:443 hbx.media.net udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 197.249.227.4.in-addr.arpa udp
US 8.8.8.8:53 32.24.192.23.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 c.clarity.ms udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c-msn-com-nsatc.trafficmanager.net udp
US 8.8.8.8:53 c-msn-com-nsatc.trafficmanager.net udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 204.79.197.237:443 dual-a-0034.a-msedge.net tcp
US 8.8.8.8:53 dual-a-0034.a-msedge.net udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 66.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 ids4.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 b9b2d97ccb77828f891eda8a097eae86.safeframe.googlesyndication.com udp
US 34.111.152.239:443 optimise.net tcp
US 34.111.152.239:443 optimise.net tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 ids4.ad.gt udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
FR 142.250.178.130:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 8.8.8.8:53 ids4.ad.gt udp
FR 216.58.214.65:443 pagead-googlehosted.l.google.com tcp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 iad-2-sync.go.sonobi.com udp
US 8.8.8.8:53 ids.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 p.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 pagead-googlehosted.l.google.com udp
US 34.111.152.239:443 optimise.net udp
FR 142.250.178.130:443 ep1.adtrafficquality.google udp
FR 216.58.214.65:443 pagead-googlehosted.l.google.com udp
US 104.22.53.173:443 cdn.hadronid.net tcp
US 35.155.132.249:443 ids4.ad.gt tcp
NL 185.89.210.244:443 secure.adnxs.com tcp
GB 185.64.191.210:443 pug-lhr-bc.pubmnet.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.net.akadns.net tcp
US 15.197.193.217:443 match.adsrvr.org tcp
FR 216.58.213.66:443 cm.g.doubleclick.net tcp
US 69.166.1.66:443 iad-2-sync.go.sonobi.com tcp
US 104.22.5.69:443 p.ad.gt.cdn.cloudflare.net tcp
NL 89.149.192.73:443 rtb-csync-euw1.smartadserver.com tcp
US 104.22.4.69:443 p.ad.gt.cdn.cloudflare.net tcp
FR 216.58.213.66:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
FR 142.250.178.129:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.adkernel.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 34.160.152.31:443 d.pub.network udp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 1.cpm.ak-is2.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 23.192.25.42:443 e6603.g.akamaiedge.net tcp
US 23.192.21.141:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 pixels.ad.gt udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 104.22.4.69:443 pixels.ad.gt tcp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
US 104.22.4.69:443 id.hadron.ad.gt.cdn.cloudflare.net tcp
US 8.8.8.8:53 1.cpm.ak-is2.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 id.hadron.ad.gt.cdn.cloudflare.net udp
FR 142.250.178.129:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 pixels.ad.gt.cdn.cloudflare.net udp
US 8.8.8.8:53 130.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 65.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 244.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 73.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 66.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 249.132.155.35.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 42.25.192.23.in-addr.arpa udp
US 8.8.8.8:53 141.21.192.23.in-addr.arpa udp
FR 172.217.20.164:443 www.google.com tcp
FR 172.217.20.164:443 www.google.com udp
US 104.18.43.90:443 cdn.confiant-integrations.net tcp
NL 103.67.200.72:443 1.cpm.ak-is2.net tcp
US 172.67.23.234:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.22.4.69:443 pixels.ad.gt.cdn.cloudflare.net tcp
US 104.18.43.90:443 cdn.confiant-integrations.net udp
US 8.8.8.8:53 ads.bidstreamserver.com udp
US 146.190.160.59:443 ads.bidstreamserver.com tcp
US 8.8.8.8:53 bidstream.advertserve.com udp
US 8.8.8.8:53 90.43.18.104.in-addr.arpa udp
US 8.8.8.8:53 72.200.67.103.in-addr.arpa udp
US 146.190.160.59:443 ads.bidstreamserver.com tcp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 pb-rtd.ccgateway.net udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 pb-ing.ccgateway.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 54.201.106.191:443 pb-ing.ccgateway.net tcp
US 34.120.111.33:443 cdn.edkt.io tcp
US 8.8.8.8:53 prebid-satellite-prod-01-alb-18308999.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 35.82.165.145:443 prebid-satellite-prod-01-alb-18308999.us-west-2.elb.amazonaws.com tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
FR 172.217.20.161:443 tpc.googlesyndication.com tcp
FR 172.217.20.161:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 prebid.cootlogix.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid-satellite-prod-01-alb-18308999.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 ex.ingage.tech udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 grid-bidder.criteo.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 35.82.165.145:443 prebid-satellite-prod-01-alb-18308999.us-west-2.elb.amazonaws.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 vidazoo-openrtb-prebid-p-us-nyc3-lb.vidazoo.services udp
US 8.8.8.8:53 rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 ex.ingage.tech udp
US 104.18.27.216:443 ex.ingage.tech tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ssp-bidder.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 vidazoo-openrtb-prebid-p-us-nyc3-lb.vidazoo.services udp
US 8.8.8.8:53 ex.ingage.tech udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 btlr-eu-central-1.sharethrough.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 34.120.111.33:443 cdn.edkt.io udp
US 8.8.8.8:53 ssp-bidder.nl3.vip.prod.criteo.com udp
US 34.107.140.113:443 s2s.t13.io udp
US 8.8.8.8:53 ap.lijit.com udp
US 151.101.65.229:443 jsdelivr.map.fastly.net udp
IE 52.51.134.92:443 ap.lijit.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 104.18.27.216:443 ex.ingage.tech tcp
US 8.8.8.8:53 api.edkt.io udp
US 8.8.8.8:53 ce.lijit.com udp
US 34.120.111.33:443 api.edkt.io tcp
US 34.120.111.33:443 api.edkt.io tcp
US 8.8.8.8:53 api.edkt.io udp
US 8.8.8.8:53 59.160.190.146.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 161.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 191.106.201.54.in-addr.arpa udp
US 8.8.8.8:53 216.27.18.104.in-addr.arpa udp
US 8.8.8.8:53 145.165.82.35.in-addr.arpa udp
US 8.8.8.8:53 92.134.51.52.in-addr.arpa udp
IE 54.77.68.100:443 ce.lijit.com tcp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
FR 172.217.20.161:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 api.edkt.io udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 crcdn01.adnxs-simple.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 8.8.8.8:53 cdn.adnxs.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 34.120.133.55:443 api.rlcdn.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
IE 108.128.75.152:443 id.crwdcntrl.net tcp
IE 108.128.75.152:443 id.crwdcntrl.net tcp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 151.101.129.108:443 cdn.adnxs.com tcp
US 151.101.65.108:443 cdn.adnxs.com tcp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 172.67.74.207:443 freestar-io.videoplayerhub.com tcp
FR 18.245.202.34:443 d1ykf07e75w7ss.cloudfront.net tcp
DE 91.228.74.200:443 global.px.quantserve.com tcp
FR 52.222.201.14:443 d2wcz8sc48ztgm.cloudfront.net tcp
US 174.138.117.240:443 vidazoo-openrtb-prebid-p-us-nyc3-lb.vidazoo.services tcp
IE 34.243.123.252:443 rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com tcp
IE 34.243.104.137:443 g2.gumgum.com tcp
IE 34.243.104.137:443 g2.gumgum.com tcp
IE 34.243.104.137:443 g2.gumgum.com tcp
IE 34.243.104.137:443 g2.gumgum.com tcp
FR 52.222.169.72:443 hb.yellowblue.io tcp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
US 151.101.65.108:443 cdn.adnxs.com tcp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
US 35.244.193.51:443 lexicon.33across.com udp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
NL 178.250.1.4:443 ssp-bidder.nl3.vip.prod.criteo.com tcp
DE 3.126.92.214:443 btlr-eu-central-1.sharethrough.com tcp
US 104.18.27.193:443 htlb.casalemedia.com tcp
FR 52.222.201.14:443 d2wcz8sc48ztgm.cloudfront.net udp
US 8.8.8.8:53 100.68.77.54.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 152.75.128.108.in-addr.arpa udp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
US 104.18.27.193:443 htlb.casalemedia.com udp
US 8.8.8.8:53 t.pubmatic.com udp
US 8.8.8.8:53 108.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 207.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 34.202.245.18.in-addr.arpa udp
US 8.8.8.8:53 14.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 137.104.243.34.in-addr.arpa udp
US 8.8.8.8:53 252.123.243.34.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 72.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 214.92.126.3.in-addr.arpa udp
US 8.8.8.8:53 240.117.138.174.in-addr.arpa udp
US 8.8.8.8:53 4.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid.bidstreamserver.com udp
GB 185.64.190.92:443 t.pubmatic.com tcp
US 8.8.8.8:53 t-canary-lhr.pubmatic.com udp
US 8.8.8.8:53 193.27.18.104.in-addr.arpa udp
US 157.245.223.249:443 prebid.bidstreamserver.com tcp
US 157.245.223.249:443 prebid.bidstreamserver.com tcp
US 8.8.8.8:53 prebid.advertserve.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 t-canary-lhr.pubmatic.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid.advertserve.com udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
NL 178.250.1.11:443 dnacdn.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 iad-2-apex.go.sonobi.com udp
US 8.8.8.8:53 dnacdn.net udp
FR 18.245.178.101:443 aax.amazon-adsystem.com tcp
FR 18.245.178.101:443 aax.amazon-adsystem.com tcp
FR 18.245.178.101:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 prebid.bidstreamserver.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 69.166.1.9:443 iad-2-apex.go.sonobi.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 165.227.116.104:443 prebid.bidstreamserver.com tcp
US 165.227.116.104:443 prebid.bidstreamserver.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 d2fashanjl7d9f.cloudfront.net udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 e4536.g.akamaiedge.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 104.26.9.169:443 script.4dex.io tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 t.adx.opera.com udp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
FR 52.84.174.75:443 config.aps.amazon-adsystem.com tcp
FR 18.244.28.120:443 d2fashanjl7d9f.cloudfront.net tcp
GB 23.49.161.153:443 e4536.g.akamaiedge.net tcp
FR 18.155.129.34:443 tags.crwdcntrl.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 8.8.8.8:53 sync.cootlogix.com udp
US 8.8.8.8:53 92.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 249.223.245.157.in-addr.arpa udp
US 8.8.8.8:53 9.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 101.178.245.18.in-addr.arpa udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 153.161.49.23.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 75.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 120.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 34.129.155.18.in-addr.arpa udp
FR 216.58.213.66:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 cs.ingage.tech udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 134.122.116.7:443 sync.cootlogix.com tcp
US 8.8.8.8:53 hj5ozcalb.puzztake.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 usersync.gumgum.com udp
US 104.18.24.18:443 js-sec.indexww.com tcp
US 8.8.8.8:53 hj5ozcalb.puzztake.com udp
US 8.8.8.8:53 btloader.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 104.18.26.216:443 cs.ingage.tech tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
FR 185.235.86.70:443 gem.gbc.criteo.com tcp
NL 185.235.87.129:443 ag.gbc.criteo.com tcp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 cs.ingage.tech udp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 cs.ingage.tech udp
US 8.8.8.8:53 usersync.gumgum.com udp
US 8.8.8.8:53 gbc2.fr3.eu.criteo.com udp
US 8.8.8.8:53 gbc4.nl3.eu.criteo.com udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 h2.shared.global.fastly.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 gbc4.nl3.eu.criteo.com udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 h2.shared.global.fastly.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 usersync.gumgum.com udp
US 8.8.8.8:53 gbc2.fr3.eu.criteo.com udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 18.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 7.116.122.134.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 216.26.18.104.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 49.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 70.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 196.205.247.34.in-addr.arpa udp
US 8.8.8.8:53 129.87.235.185.in-addr.arpa udp
DE 57.129.18.113:443 wt.rqtrk.eu tcp
US 8.8.8.8:53 api-gdpr.intentiq.com udp
US 8.8.8.8:53 sync-gdpr.intentiq.com udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 tbd4rmdvjk.execute-api.us-east-1.amazonaws.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
IE 52.95.122.74:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
FR 13.249.9.37:443 api-gdpr.intentiq.com tcp
US 8.8.8.8:53 d3hc7pq0lcy5wf.cloudfront.net udp
US 104.18.27.193:443 ssum-sec.casalemedia.com tcp
FR 18.245.199.82:443 tbd4rmdvjk.execute-api.us-east-1.amazonaws.com tcp
US 8.8.8.8:53 tbd4rmdvjk.execute-api.us-east-1.amazonaws.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 d3p3gh8eed0xba.cloudfront.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 tbd4rmdvjk.execute-api.us-east-1.amazonaws.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 104.18.27.193:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 d3p3gh8eed0xba.cloudfront.net udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 mb9eo.publishers.tremorhub.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 cm.adform.net udp
NL 35.214.138.30:443 csync.loopme.me tcp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 dcs-ups.g03.yahoodns.net udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 partners-alb-1113315349.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 dcs-ups.g03.yahoodns.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 sync.kueezrtb.com udp
US 8.8.8.8:53 sync.ingage.tech udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ssbsync-euw1.smartadserver.com udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 track-eu.adformnet.akadns.net udp
US 8.8.8.8:53 partners-alb-1113315349.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 eu-west-dual.ads.stickyadstv.com.akadns.net udp
US 8.8.8.8:53 113.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 74.122.95.52.in-addr.arpa udp
US 8.8.8.8:53 37.9.249.13.in-addr.arpa udp
US 8.8.8.8:53 82.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 30.138.214.35.in-addr.arpa udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 3.220.14.17:443 cs-server-s2s.yellowblue.io tcp
US 104.18.27.216:443 sync.ingage.tech tcp
US 8.8.8.8:53 sync.ingage.tech udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
US 104.22.74.216:443 btloader.com tcp
DE 91.228.74.159:443 pixel.quantserve.com tcp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 sync.ingage.tech udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 freestar-d.openx.net udp
US 34.98.64.218:443 freestar-d.openx.net tcp
US 8.8.8.8:53 freestar-d.openx.net udp
US 8.8.8.8:53 direct.adsrvr.org udp
US 8.8.8.8:53 ib.adnxs-simple.com udp
US 8.8.8.8:53 rtb.primis.tech udp
US 35.71.170.66:443 direct.adsrvr.org tcp
US 8.8.8.8:53 euwdirect.adsrvr.org udp
DE 37.252.171.85:443 ib.adnxs-simple.com tcp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
FR 52.222.201.106:443 rtb.primis.tech tcp
US 8.8.8.8:53 euwdirect.adsrvr.org udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 ad-delivery.net udp
US 34.98.64.218:443 freestar-d.openx.net udp
FR 3.165.136.123:443 d3p3gh8eed0xba.cloudfront.net tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 bt.dns-finder.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.18.24.18:443 cdn.indexww.com tcp
US 8.8.8.8:53 bt.dns-finder.com udp
US 8.8.8.8:53 17.14.220.3.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 159.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 66.170.71.35.in-addr.arpa udp
US 8.8.8.8:53 85.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 106.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 bt.dns-finder.com udp
FR 52.222.201.106:443 rtb.primis.tech udp
US 8.8.8.8:53 cdn.ampproject.org udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
GB 87.248.114.12:443 dcs-ups.g03.yahoodns.net tcp
US 3.210.80.159:443 partners-alb-1113315349.us-east-1.elb.amazonaws.com tcp
US 23.192.24.32:443 cs.media.net tcp
NL 154.57.158.115:443 eu-west-dual.ads.stickyadstv.com.akadns.net tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
NL 89.149.192.75:443 ssbsync-euw1.smartadserver.com tcp
DK 37.157.6.237:443 cm.adform.net tcp
US 198.199.89.209:443 sync.kueezrtb.com tcp
FR 142.250.179.97:443 cdn.ampproject.org tcp
FR 142.250.179.97:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
FR 142.250.179.97:443 cdn-content.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
FR 142.250.179.97:443 cdn-content.ampproject.org tcp
FR 142.250.179.97:443 cdn-content.ampproject.org tcp
US 8.8.8.8:53 cdn.browsiprod.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 cdn.browsiprod.com udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
FR 142.250.179.97:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 cdn.browsiprod.com udp
GB 2.22.101.110:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
IE 54.194.2.39:443 cs.yellowblue.io tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.22.74.216:443 btloader.com tcp
US 104.21.25.186:443 bt.dns-finder.com tcp
FR 18.155.129.10:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 104.18.27.193:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 123.136.165.3.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 75.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 159.80.210.3.in-addr.arpa udp
US 8.8.8.8:53 209.89.199.198.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 110.101.22.2.in-addr.arpa udp
US 104.21.25.186:443 bt.dns-finder.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
FR 142.250.178.138:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 44.239.189.129:443 events.browsiprod.com tcp
US 8.8.8.8:53 events.browsiprod.com udp
FR 3.162.38.127:443 yield-manager.browsiprod.com tcp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
FR 142.250.178.138:443 imasdk.googleapis.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 39.2.194.54.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 186.25.21.104.in-addr.arpa udp
US 8.8.8.8:53 166.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 10.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 138.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 127.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 129.189.239.44.in-addr.arpa udp
FR 142.250.201.166:443 s0.2mdn.net tcp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 130.211.23.194:443 api.btloader.com udp
FR 142.250.201.166:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 18.155.129.10:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 ai.browsiprod.com udp
US 8.8.8.8:53 166.201.250.142.in-addr.arpa udp
FR 52.222.201.40:443 ai.browsiprod.com tcp
US 8.8.8.8:53 ai.browsiprod.com udp
US 8.8.8.8:53 ai.browsiprod.com udp
US 8.8.8.8:53 40.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
FR 52.222.201.106:443 rtb.primis.tech udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
CL 142.251.128.163:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 euw2.smartadserver.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 prebid-server-perf-eu.rubiconproject.net.akadns.net udp
CL 142.251.128.163:443 csi.gstatic.com tcp
CL 142.251.128.163:443 csi.gstatic.com udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 163.128.251.142.in-addr.arpa udp
US 8.8.8.8:53 id5-sync.com udp
DE 162.19.138.82:443 id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 35.214.138.30:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 pxl.iqm.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 34.193.171.116:443 pxl.iqm.com tcp
US 8.8.8.8:53 pxl.iqm.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 pxl.iqm.com udp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 nydc1.outbrain.org udp
NL 103.67.200.72:443 1.cpm.ak-is2.net tcp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
US 64.202.112.191:443 b1sync.zemanta.com tcp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
IE 34.249.232.93:443 dpm.demdex.net tcp
US 8.8.8.8:53 dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com udp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com udp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 b1sync.outbrain.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
FR 178.32.197.57:443 rtb-csync-euw2.smartadserver.com tcp
US 64.202.112.191:443 b1sync.outbrain.com tcp
US 8.8.8.8:53 116.171.193.34.in-addr.arpa udp
US 8.8.8.8:53 191.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 93.232.249.34.in-addr.arpa udp
US 8.8.8.8:53 events.browsiprod.com udp

Files

memory/2752-0-0x0000000074FFE000-0x0000000074FFF000-memory.dmp

memory/2752-1-0x00000000007F0000-0x0000000000992000-memory.dmp

memory/2752-2-0x00000000053C0000-0x000000000545C000-memory.dmp

memory/2752-3-0x0000000005640000-0x0000000005724000-memory.dmp

memory/2752-4-0x0000000005350000-0x0000000005372000-memory.dmp

memory/1160-5-0x0000000000400000-0x0000000000416000-memory.dmp

memory/1160-7-0x0000000000400000-0x0000000000416000-memory.dmp

memory/1160-9-0x0000000000400000-0x0000000000416000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\5a609c1b-09b2-497d-a70b-1d4fe48a2869

MD5 db77634443f2094c9d2623d59d61d9c7
SHA1 6838a2a6df7eeb9ae61c67bc8c672e7051a36140
SHA256 26dabf410a5aa348c97c9cf1e5eaee5e1ef127ba74b2ee7f6debbf48b82da252
SHA512 76e21316d1acdea0728c4f07a51abed752abf40db55b5abc9893ffb022eb5038b842e3add0e14dce57d344679fb7fe289ae15f01a78125a18ec81720b416115d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\104d7550-5787-4e52-8d97-f2176e9c2083

MD5 116d0140f4b063508e479539b0722042
SHA1 f93636122651bd89a2e98ee44416417128f17f70
SHA256 73bdbeb69cf4e169cb7693ab9a92145dd0cee0f7561794987522fa54866d36ca
SHA512 498783b55b299f7caa9b17abea6ef373bde3d213b69a1b07138fc919cceb5962002649914bd18d80a297885aad2e46c17141b71224f80ba0330379ec9a0a7b2b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\030b2be9-a76b-475e-98da-6173bee448a1

MD5 e8ef5d293235e51dc28523cb4e511cd9
SHA1 0be8ac3c6b029e16504ea04eb7c5abb2d40af193
SHA256 ea2b928731c89925d7d108fc6ce3efc0b16da7dc4218f67ca975e9c194b88ce0
SHA512 ecfe440dab042566196e8ef838df656bd99b78078bc7da879b9194fe5ca5be3081ef29a83a50c25e14e117133179f7fa92b065eb3bd848cdf750e0493ad0c13b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.tmp

MD5 ff3f10a9bed46464f471e3d5870ec960
SHA1 018ccfabe4da3e7bfbd685bf9ade81535205567d
SHA256 e1e4461eb92f5c7259545b5988ecae0270a2de7f176041d832dfdb0c33ef567b
SHA512 88006dc7e28506b280cfb728421278a6501ed31a65b6c1b820f9710e74a48fa4bc13e87dec139d1b31ef65ff1b38a35122a5db59dec1bd5fa06298760b65f676

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.tmp

MD5 96da6d3bb39737809a4c82bcc1e19aa7
SHA1 0bdfffacf69a29af0b497f56d859dd17665cdf44
SHA256 0488e56a378ae4ca448a1ebf57801eb86a4990e817cd994c680b93c71b00fd87
SHA512 b6f69a5b73e5793519072741fc3b5921cc6fcf48e0bbf0476ccf8eac40e9bf42911b47e6dc25a5cda988f2500e7189172a3d0bcf7005e84ce115d01b3095636c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\prefs.js

MD5 72c0e9e9cc25131d5c5312ed9f2730d6
SHA1 e443363b42b168abc3cea5eaa37e989bef937a86
SHA256 10f799f7f31cbb82c8a078c97eea03bdb9751a354cde4b7e74ec9909cb9906e5
SHA512 61ee4442e7c8b2fb40a421dc7fd8055bfb859d58690fa2e2ccf43c0d0b28941f0a2e8921038a49c386334367ca46fb55a0b1c87bd154edee76fc3bb23244fff2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\prefs-1.js

MD5 ddbe6ce65fcd8060f3f5a51c6d4d493e
SHA1 bbc141c61a8e4793e466daf860f1c6d33d626b1c
SHA256 a39f9370042b62ae8f928903ed344aa44edcb88b5ab760b65c5ba351e854ac6c
SHA512 17e4df5d09a25a5ba6e3631bc27628afe741f630aad7d39fcd33658e12867c75d2d013672531915480d70b2dd35bf7759e73df6d7b3b0a9bc0f081220ca086f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\AlternateServices.bin

MD5 eed6c5056aa5954e6f4ef2ebdf6a9c2a
SHA1 02bf34903a95715e8ec6bf587319912b8b3ee703
SHA256 6e5281ebaf0f0a66efe7f514fd0e74d67639091041316f74777a081a219f5369
SHA512 258f85456fc801f98f634ee6c0edf979a46d0808acbccf1120adc90b67674a9a310f52b55bee2ebc8d20f4cf17db1dc9e6953b94d6dd603b8ae278de9ba7a20c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0496E33B07BB9340090B6FF9A653DA5443DBD403

MD5 627805f80d0cb26f82cbc2c9aaa34b40
SHA1 400ae0084a8b13da932e394ab138ce373169f129
SHA256 446fcb038ec57e89abfe8628ce0152b244c9fee6d2fcbf0ddcea25ae3bd2449b
SHA512 f30cff61edc876e67162fcc376d3cac7bd642f6d61ad1578ce5c557d0725f9c54b93fcce0868a3f6fe0e3726137c7e3544e032f5817c057c4f63a1e32809a385

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 6892a9b12aeef0e8ca138e3871b04973
SHA1 f58f018e0d224a81eedced91dca14bf5951602dc
SHA256 82993148d465880ec22b24e6dd1ca10c9d5b1c982aca2ba3808e3aa7e17c96e4
SHA512 6e56a131cd931c16ceeb200876a9d7cc37ca20bc1f81ec55016a97d8a5179b3f20200bc2057109eeba1edbb2b100f2c0d246b8dcac17b7c05543979cd1ea69f3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.tmp

MD5 d06d5468f5dcdf36407598ace63d5019
SHA1 3c4770ff2c310b0d0175c9018bd0754c0e0f916b
SHA256 569c9b97b7935ea4caffbe8fe57dbdb79cc55677225e24f8940744bdde0bdae2
SHA512 16328b8bea7841cd8cd13dbae21e1781492c5e21c4e218cf529e22c3d0c2c5a63992c9ea45c74749cfd4dd89f8a97edd57c81c4c0c358c288f66730d79d3cb02

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\prefs-1.js

MD5 bbaf8bfba68331f3d6dc7639d358c168
SHA1 bbf1cb60295e019547a8779880f95184099baef2
SHA256 7309c22a89a9f7378dda734e1a7b0ca06542859bcd674b1466310ec1034eeb25
SHA512 1bf5010d78ee6135086a8f9fd40700c4255f0d2930ca03cd5a0f0c27533fbf02171088c982c4f3305e75b401e5f3cc8dde8b9c9e194a8f6adb57ded709af60f5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\AlternateServices.bin

MD5 768bd106de85f191892f3739a4c1c9a3
SHA1 d19b19cbd754ab20e4762abb0dce4fdd8fb7b23b
SHA256 5e3b0c11eb4d6588186c818435b78d2b18882941cd1207ec219029a390bff20f
SHA512 128a60659781fec02918bf633625f2fdbea00c6e3aa81d76ddb8e5b03e8d9ef83b9ab3ef8107771d936048464601e71d5e83a9f18182d619c301902ed721fbca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 b699325568264e87203c36f5137585ea
SHA1 9492a76205a052e23e2d63ddc6413019ddf7915f
SHA256 3ea58ac4d821cf6acc244f0dfe8ab20bc659b9228603e7b5c464456b41b3b0ba
SHA512 43780298f58fb4a84843e4a8a8bc47603da8fd5b130ce99bafec7da57d89e922b23958b5c9e23fd6f4fc345d2582e61c2fde9440af53ad3c65c007f5993745f8

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 2561eb3280d02fc48285bffa79ad0832
SHA1 af1c47664f6d4d6b04367064de257ac2f257918a
SHA256 4b1026c86854c1c3231092c3aa5bb27960b14d3fc5a1490d2dc65b1a9f4d676e
SHA512 24cc377605d9fbbabc1defb910892f827001ffac0dacb265ca6c23ecdfde700f928fb680bd48c66c7bc21b07cd99f55f0afff4e6edbbe756b9979009b57c01a9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\586D25A03895848B0609C1B0C9097200E0CF65C6

MD5 d955e62b15af76b822623c0b4f96e44c
SHA1 9a2bb035edde59f960ef0c08b970939059681d1c
SHA256 7c6aa02eb0197a588198d4f3f2aa47c6bb3bea5eb3ef50c67a35802be7fd020d
SHA512 e5c97d52c6fc4f94765ad1e2fa58b566cb86ae5dfc9e939ed9ef009206610dfc1930900edacf8d707c6927e1efd968a7a452e98a3627bf79238e15c8c9fa3e25

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 3619ec3dbe22e6ca5874f47278160281
SHA1 ce55764793bb703c274fd439d8c5ff5f7db88081
SHA256 b3a6bc47ae9a9824a94068b8eac59caad6644d9461772056de7c4b434ec7cfe4
SHA512 90d72050797fce34a87b22bc7dee8d7ecea460bc5168d893d532654dcedd84e4bf94f1513cdf4f3826e8b5587ed9f3c944e20dc8870cac29f896ca050662f9d7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.tmp

MD5 b7ab2189f6c57bdfa22c22387985abae
SHA1 a405d7025860b43b4bfe62e8303c1b8ffe194418
SHA256 6e8d36727635613c38210b8663e5be8ff8e35e129cfd6bb0cce68d0fe360759f
SHA512 9f10db0eb996b6306deb13a4db96cf0c1070d375745e4af4a715bb0222bf24819dc01df2a315de05ba8a09e160190fc669a0ee9fa78cf1defb4f64596ff88ff1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\b0e0448f-858a-412f-882f-db436666e396

MD5 415f73433f7729df4f6e363ca17c54d5
SHA1 9bfd3e75a4274bf4338803993b54f0b6656e0f0b
SHA256 1b046dffd58fa89a39fa6f6a5b484980f0fae1aa51a292ef13a63fd95fbcddfc
SHA512 395f705d0ac7133910c1ec4eec920f6feb2fa77f3f24702c9fc4bc45210da04b5af2e01a149af9c97965129e64563c030b40e2d9091608a5d6a9fda99e9f0283

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\startupCache\urlCache.bin

MD5 0fecedfa814289c3eaed0c967a13c996
SHA1 8c572815bc77085cd2c2df27775eeb6f7a992abc
SHA256 bb26974abd32e664c8fd24a84d4c92bd1c48fdc4db463a31db005567388a071d
SHA512 4d6dded318b71a8694a06bfac13c6f180ab4b213d2a735216cb4df5aaaec76e2557698ce1342d6840f945a222d73d3a2001571fcb348ee4e085bc1b5a03555cf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\startupCache\scriptCache.bin

MD5 29d23c66b9a584e1e697121bb02f68bb
SHA1 f42123753d3798ec0f84786028ae6ee3538c9121
SHA256 dc18d462c90430fb3e01279ad3516b13e4b7f31012c57dff798771adc19c90bd
SHA512 7757ff7b3c7dfa01a8af43533d529ca6f1340feae664872dce4ce94aa5ad79c90e65901b60a330176939a1f1abf2ea6fe6ec60cb3c9167c8ac305297e157fbe2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\addonStartup.json.lz4

MD5 27edd1b56aa0f3ab9985c85ca39345bf
SHA1 cd08d996a03dfd672e46583cca80d659c36d1097
SHA256 6d4efbddfc47641893ed5ff9863767521e72f4ef30e470ae49ebbec8914d59a7
SHA512 2442f3c02c29b68cb5511963826406b2482b0249646bf594537f23c11dfdd05762647871e707ac9a3e164e0e09a57fd65a30404dc8d51f93ff4a9329a9dea14b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\xulstore.json

MD5 8d689c06cb844185099c0398a280537e
SHA1 57073c7526ec37e94bb9db44fedc6d50276f7a6b
SHA256 96729e9b38f216605ff10715f96f364be32f02e2de23ede7e74b78244605124d
SHA512 3c7df326c695143915df1068cb2c0f58e93e4881b2c4d94b33948b80e954fbd4cf944ae53b4d15002b79fcdb8e88f8e9cf4c89ca50f56b7cfd8a13ea7dd6fff8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\startupCache\scriptCache-child.bin

MD5 15405b40b11396456243a08ab4c1f30d
SHA1 eda1aaf4281a3f6ac05af57ae91e37f6faf3048f
SHA256 2aa3c813af62320d33d79d971fe48ef775ff66a716658e428b043e2425e721b1
SHA512 e7aadce7de8ac6ca2243cfba8ab242ee6b7e7590445c4d8bee16d39cbfc2b74f0095230ba2bf70db70eede4a3cf1be98372bf79c3bb0db2826608a5da4520618

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\prefs.js

MD5 4f7e7fb683c699c76ea3bbc90aec6e27
SHA1 efb7c5df3ae14240f60fbcb8ab9d5451826fc424
SHA256 b6941f663d7043866e36a6c9878261116db7da2c18ea7c4486b63f47e016b42d
SHA512 e8d10ad7c06bbffb5b63a364f7abe308b999cbba856f0c776abdb9661c322f6b57365d77dde38ab46363abef6925d72cc71f550bf92ac6877b83d530dd194d1c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cookies.sqlite-wal

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cookies.sqlite

MD5 efaed4d7a7513ad981a44db13f25cd33
SHA1 03185e76ae6031c2067d78e6bfcadb816837d0a9
SHA256 f18b9c75f563dbea37b9beae4c7e5ecd40b70e436c9b16452d36c705ec08bcd1
SHA512 0aad2b7bfa97cb2aa6f6aec467199283fc79b7d813efe67808862b0f2224812423b5e150b53df7745995940d0b32fc6d7447755c0e36ceae421c1682c4cfccfa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\startupCache\webext.sc.lz4

MD5 9a529b9d38938f17026f94b94a39f848
SHA1 3aba404c13edda44098459565ba6836dd44c5721
SHA256 e384fa5419af785a35bbd26c5b75e70576e7d028c139b2ccccfa1da69b7bd2a3
SHA512 148624d6c45a0e5b0c8397d41a48925bdf2f4b6bdae02f688b5a8e0cebde20dd7a5ce0044d0e21f0ee6cfc1c1f6c6c0549d2f8358c69b1f1f8dcd13f7a37fe67

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionCheckpoints.json

MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore.jsonlz4

MD5 1ca55f5f10ab90e83f8aafd252e2df3c
SHA1 4d4d7e2adae9e14f55db9b6627007fd0da74a7e0
SHA256 b4ec0ac023724bf77d7fd4c37cd390137de5cf62c9979e88f4ac62a85cc3ae31
SHA512 5fae1c1d7de9545b66e9f8a1647a383a2784c15e1258d03a6b757b3c5b627b0a398ee064793348bb8ab0f9808c14c4bd64ed8a2e971e21976b0305503653256f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionCheckpoints.json

MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\permissions.sqlite

MD5 3ee680dc64b8a682ecadde56f7f7832c
SHA1 c1431c5516f08955a31015a5b7c2e0161ba81c48
SHA256 e9943870264c6bbd31b63f75d81ed3603219efad8e9fd84cfd059a34cb4e1b30
SHA512 7adf352b1b15747b3e70c4c7f1032fc1bb2d1c4112b957505f66bf711b233a9353ee7b6b527bf8786869a216e8d42b151b96c8f9075c511ae89ae9d12ec3015e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 bfb6668889cf0097a13089d0589de697
SHA1 aa2a2494c08465bd11978e0df2500663c40a6494
SHA256 968296cd5f803b7d82cc037e98a9e29c480a3052d16a7dbc84de5b084b45deca
SHA512 6e8b232164d6d3e3703685018c14f89e3ce73e0d3e0623b876d4736f3ca8cb53c53581ce8532deae2f97c069f1eeeaaae580b11ae313f81da83dd20799a56d34

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage.sqlite

MD5 514b1e12ec71a25e40c2845f1b6ff5c7
SHA1 785d1c6b34312b83bc09e8e9d145aa5461aeffc8
SHA256 01060032566bb10926992b7f606cf436c5dd8e819d3281a45709ad64e1b4ca66
SHA512 eae8811f606631630c93e6d3a6d452cfba8b2f1322ecfb59f0d06d062aaef3d91d81cb495d41a21cbb90ecb09596dad78f0375aa191dd24797dc54e381946690

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\extensions.json

MD5 45e0c5c1585e801295e2ad37c62d5c84
SHA1 98964a7f77bdec22ed0e05998c85afa96e191127
SHA256 48e93314a7caffa8bb9ee7aa845c720dc8cf9bb2fb12be653b960be6e3245194
SHA512 806d0201162b0f2673a14987cac897f90f17b4bffa4cb3acf44a5d542ab8407c57d7650ab749b6276b2b7b9ed4407eb1c7e8f1cee61c2cc60ac19f34c39aebd6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\favicons.sqlite

MD5 2ef00d8bddc058cf2034cdd077a6b372
SHA1 05502cb2a6aa4945f4c483e9ab235dbd0407efc1
SHA256 0a2e2999ff6d2ccae774437ae2bf63219af9f7d2463a30464e723d80126082ee
SHA512 6d65804850761d3b3ded207769340512c3c837390cf842740de16c6d85f78e53fecb3f003e0d017fd4d9a61478cef41c282de18b9975ef93b20b9cdabd9e5528

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\content-prefs.sqlite

MD5 b5acd9cf58ba89e643e7b2e839e0707e
SHA1 82c2b9cbea4acb50b446b786818287be7b0b8b61
SHA256 4d4fd87f1cdccc9f826ab7de2b3980db6fe4ed328f079ceb24f680557da9667e
SHA512 1fdaf5173a2fa956e3793b3643b44d928a4c81a1599bdf4b057396bfca5948ce1097194dbb5f528959c8cf4e34d058922828236c6060b41510e9ea2cb9ed424b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\places.sqlite

MD5 0bc05748443a5c2f14d20728f8a42199
SHA1 38f35980f32f843533691766baf70cefd30f539a
SHA256 d11e2d4b8a3cda1338f4b6b1014fcf795e52fea571e61d4db499d8dea5003688
SHA512 e8e852146c5e8b9b979f553dc28a1068e7e8e812cc6be8608d94b61411254f5ab8ea031472784227e29f8847582e0313fd9f9a75894f1cecd4f05605c816153a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\activity-stream.discovery_stream.json

MD5 d121652ddb9832a50c3602481fa0de61
SHA1 2e146892b9b73bbcf7d3d6c1516f70fd399d99d1
SHA256 c3281ace8ffad49f144dd9351c9e377b87d50e027719757bc40d12e7f55fc1f7
SHA512 cbe1d893d42b9080c5ee20024a3f9966b51b272f7d808a6b2e63c81c5b955fd4e3c27111e46322e094a918a70f43c76776da7a22cb905522bef76450e2acae40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\SiteSecurityServiceState.bin

MD5 56839f687d069242793c99899a766386
SHA1 42942bcf4fd88f36e1b387b3aaf2c375cd784290
SHA256 c14c8589046eb153d6c025ebd56da0e6d8106b1457774d1ac25e263d359d3183
SHA512 521982e4cd603426aed364d4206963f3217b5787fa3ad0e8feeee2f0fe72036f98a18ad9db26ca1e9c51ff5964374dc893dcfac60e39afbdee7a7b2bc3eb59d5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cert9.db

MD5 dd52f3e2b977bf0f8480cdd84247cb34
SHA1 9d4d3d467d8287c29982f51304e2feb3690439f2
SHA256 230c6b50320b2cdf9d6079be8eda0fd03dacb67154c716a590db481a512ec523
SHA512 592da69b004852bea8d55531e6e244674cb1bf0f55cbff0e330fdb262c2b78a27a190d0f057b43f76728e92c5cbb34c729b9448f389d1cf2805d68f7a1b22de2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5 4a872bde97cb9b1696cfea3e073e915a
SHA1 9a769c8163e6040ef3b5a928704f82322d98cfc4
SHA256 909ff24c90353d01c0d9c9713b848588ba098dbfeb46007e1f73ab5d0e9ab6d8
SHA512 64d919d810d7b19025513caf69049a26ad961c40a54b3097b51bbd664c8904ba23c4463334bdfe5b0fd7d418cd1cf7a82f8490bd6e0c82480e6d0515b95c8271

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

MD5 c3ead580031a1d67102069848ae9f27a
SHA1 fd9be735970837d72806ffd109f4de957e7454e5
SHA256 fddf128e4bb93ec5fab6e4e4886239b809dd3dde31ac99dbc4036321e8001093
SHA512 3885a7f0df2400191225c5c636654ff75a2ab0f913eb5b68e03d8b176b59ffd3f64c2cd42c4d4e3e52fa178f7c514553908bfdce613fc52265a2febd145eadb1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\92F4D5A4F9CED6E2E644D803AEE3647A0EA4D984

MD5 8ce55cbd12058431f3be1f2687d2c6d6
SHA1 013aa3cddb02309ee901ab0629a7a265e7608fa3
SHA256 633d828ae5aeeae5519d66a34d98b4fdd010ca105614c239e4789e5cfe6871db
SHA512 3eaa6117337d0a759ffc06b14775b0b9a3b5ed696e128047f2b7524d39bd5d5ed941edfeec20c6cd3f1ae5392cf56b4e653897acb6ca588b5fdb1e1177e9b109

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\AlternateServices.bin

MD5 8806a4dd3de904eb5dd77ef6f4f7c2fb
SHA1 08c2db56f6d8af1c2574d80a8c3c76a82ff1d6b5
SHA256 4ac159f1284564ecaed3756491f696c0371f6e41eb780455683a59a13a8c99df
SHA512 ac21f0b3cc5e11e5e7b64597c854a1db02e152672c52bba02b24249d6be8adaea7318cf0d7cb7d926413779ff96e039d7cbab4cb48c9b0978fcb42976f5e8fec

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\5101df54-bd2b-4603-8f7c-16bcab75bbe1

MD5 e3b3a422b4587b848d7f8b7af06878a4
SHA1 5554eff43ff1056941c313916a33ba2d7559ab2b
SHA256 780b5d499eab7afde115ec3f99d968bfbc1d9e5d31bd9146e94375f00245f76a
SHA512 18587d0b0c4b7ce0dce3ce751937b3030fe928cc6b4d3244b111c0162b22ad4855e49cec1bc3a9d2c69929f4437ffcce7da203d2200b949ef44b561ce1b4895b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\a65a3f14-4d08-4b27-859b-9bc55f22896b

MD5 bf58516f3519b7aebe50e32745464d1e
SHA1 bf2a40ff63179e83bf1363e1a1a703dbf36d9364
SHA256 57a0e2a28fd8d7fec628e61520cf3a4c110dae2e72fd9f32d781da48c6b069a1
SHA512 f0328067d58ef9bbf06ebee0c431cb866427eee359ffbb1d8945bae0be77f596b07917e8e48c3853c3824bde5a7bb9fed00e8536700cb75f5c6bd8e60dfb67a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\82372b6f-6972-4c13-9036-dc9d71adf292

MD5 4d772392e9be768a108c1cef7924623c
SHA1 d493286c0c84a351ba013de9f1c2ddfb478112bc
SHA256 91f8fa604400ef623324043048c508cb7b9d1e8baefb5903f52866790c815383
SHA512 0bc6d8b501e110c8cc8d0962d4600128d78773c08c0ac95e4e5952067b885a31563edb6b67dc46f6418cdb17c7bd65bb701901a163ebbb6f1d401c63fbb2adc6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.tmp

MD5 4ceca7ac08c96cfc4c55d9655efa9f31
SHA1 9452a5e7934a05f71c7a2adffe7a70eaff3ef4e5
SHA256 25583986722e81dbba8e265682879cd4149f0e5017513f33bf916c0df295ab58
SHA512 96b2cfd3661562e9826b429783c56526582b17286380a37462e7af837cf9535f013a31a71a4ee88aa8e37c70203b6bac00d43585e213814f3698d49919e3cf5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\events\pageload

MD5 19110b1b445ba6373ef3890f2f9c836a
SHA1 ee887089bf48c78044f2e53d3e8f106f2f3a1461
SHA256 72eefb194952f48c3defb0ee4247ee363f3d5946e5f2de385de7a0dbc59591fb
SHA512 f65ccd31c56bb3e5755efd64c4d3cd024a73417456788f525a8ef9987266520f7e5d6a9d9540f2ecee10bf579d3cc8f5460f31ce579d4b7a5f453bf9aed0b0d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

MD5 903c9ac3a8bbc0c5e83381f60777db9a
SHA1 70940e8115661149d1b85b588b8e7b451ebd8c53
SHA256 4049e0d694667b0d24472d139f07cfc174868e966d28aa8a7329798c7b299a88
SHA512 ea920a0176f4b9bd3773fbb9cd9fcea5f554a554e3af63cd3b76b53448d9f611105688c3f1b2f9ae9cd95461164cc1889b4dee1602f54b7a7dd3ee9baf107b98

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\events\events

MD5 bc637d493b9df353d12d674db88e282a
SHA1 85ff21115e419a6d083250b48b352a85dde20b77
SHA256 556a93d716ad6427060a1efa3b67e08767b83c0ae4873f4dfa4cbc4bd670b39f
SHA512 40248cb4270c692e17ceb865692120e71763c552be131e91bef6e0a4147005f9b796b78b59e6e3159dec8a2098f7e421086e1e6d53afa9f1f1859f25296662c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.bin

MD5 b41f02b5ac7fd7b6c7c226e65af8123d
SHA1 6343bb534d6eec3c7b2e55546d33c76f1f57681e
SHA256 95f79af7e2b5625ae77be95f0b0c61787198e9c9d1611d433093afbb33a45b4d
SHA512 a22557f343cc5e9b7a753752978743aadc632a278b2917f158eda12af6b5741ea6221c786730ccc3c93557648f8a2860216c6d4904f57cd64caf698646fcc536

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\protections.sqlite

MD5 76786a4c0dd19d88d6d3ed95a293bf2f
SHA1 b0d6d676127a7694fc6e71ee57fcc2ffaa621ff7
SHA256 1a2564c1ba20b8038d35c2319258d94dc15d97914dcf753b31c48b79940dfd31
SHA512 8cd3298e2ebba763d3c80ac4b17e44af7eb63b46304967d0c6316d314baf8611c05f7b9979c2c5c329ac167aea0246e8c9f057ffbb272481c13fd5e4b4bcb2d0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\formhistory.sqlite

MD5 9264a7f57eb4f53ced6cb296a7f1762c
SHA1 e294d1071b3f5a458f23f1a4e422b5df1fa1c240
SHA256 d56a6e2cc6c459b01ad9f0efaca8a06ac376834619b3f07f8c9c584194a7f382
SHA512 e50ac898edc0e60912f7446e64c4460161d5473f313c55b3f18ff825d816e1199934751ea47a319b06ba12aefaf5f8663d8590ac31792884843bf9ba4d9f6375

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C

MD5 02c544a45ddefb3ec35e372ada6c3bd3
SHA1 86c331bcc5a25699027206b865d2c39f0c17237c
SHA256 9f7393b9f754a90a89fc998fe16473dea018f1a2f1201fece2096b417e4c5ee5
SHA512 e98091d9d085163b2112d0d0d9e9eec18de7c9e5c72b24f217669e559518b0cfceb59610ba8285fc35006923e65c3afcca16b25bb30c3cdd7a2f1d5eae9d13ea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage\default\https+++www.google.com\ls\usage

MD5 4c428e195a2fad0b912480f1aaa48bf3
SHA1 52a8ec75e9ebe26a80438cfa5b234ccd96f24621
SHA256 330e0baa0683f9a1187cfcee449c80c8d142c70ed58f6ed5bff634f23f399a8d
SHA512 795d309afb1c8bd2bb3ffa40ad5632fca3a1a8926143a1592a051ec8667bddcb21d0540fd33a898e4f28bfd65e13ae96693d96b11c13adcae09ff1f415a13ef2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage\default\https+++www.google.com\ls\data.sqlite

MD5 f18ec3c5622bcd30602e15aae666a139
SHA1 dc1564e03a43855fa4c034c0b71f230b4b7a7aa5
SHA256 00705c81f82da23da6fff0ee0bb95a6f95f8f4546c5d20509616c038500935d1
SHA512 064ae7ee278ac11b34379beee0e5659f54eebadd13470ac19cb8d63cfabd778a78cf944be4e23545d8ec5a693ff4b7745d32e652334b8933574358e3a82b3ff6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\storage\default\https+++www.google.com\.metadata-v2

MD5 38d8fdfc5ed73b8c68095cf6ac268971
SHA1 777138eaad2a0154f25636770bbce97d8aaa89fc
SHA256 26185e42a8b6f21296f65961244f2cfb52901ed8696b0b8922f5be2b30582630
SHA512 a8c85c6033685bbed21a93a9dcb2495bdb9811756326959ea556c75089ccfccddf5196d8f3f6c32a379ff34cdf86f39527deaa189336c3e4c10c97ab28915b37

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0496E33B07BB9340090B6FF9A653DA5443DBD403

MD5 552eb6d39fd6bcb1211a3a73144bb635
SHA1 32a298f43feaa5f1199823f4df681870a847a6f3
SHA256 93d05c38017a6d66fa3e568d4e72cf8536f0085b53c64aa5ca3452ce02d53ee4
SHA512 b9987fda5a6bce8096c0f1c5eed57148fd4a28af055d2b937b52753292097fe9870a8f9bbd55dfd5ddc2216b1840d6514e1925df329858b34b2e5ce93deb8890

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\8540EC873F08CBAD5DF5121BD3BABF95624B4A14

MD5 ec18c52bb3c44c487f71743b555f7f58
SHA1 d1000fdbcafd11778469081e9ac0cd4a37435a34
SHA256 7c4b835442dec521c1f64245c6c639a93698efd5441cc6f1574b9546c758df01
SHA512 95d118827f3d09bfe4981cee2ecfba088dd7813b9304ce35d0240bff7363f9c8eff00c881726acdde9d8657f37b65a8bfe77e459fa0f419b56f880c3d8640e76

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\CE30F9E7CB4E0D8AEB054228E581960CC2812E48

MD5 210cbcf6ec090ae0096332c434aa5720
SHA1 763b18ce9834b70f7d3307bce4a0a8a8ddaf40a1
SHA256 98c6590f6b233484bd44326a76f62d38eac238ee8697ce4db0d835c53a4d62bc
SHA512 6636d914c6e86ef417923649b078ff3213a3749dc5a12b2524a574418d39da5553887065669e58e2e13d8f6dddb1cf12e2750a1705d3624b23de261f0ffba2de

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\1028C0594A2905A51C9BE4B9198A912DA5F01823

MD5 ddd3a6a61aa022dfbabc278144a2b3fa
SHA1 7a57e00640e99b2d9ff05e638da126d79a0946d5
SHA256 259ac65c0737c3df392acfb7ba5d5f8d28ef4c4e6a79b8ad5ad42abe25cbbf1f
SHA512 8649e31951492d68c8128000b4d554bb3f7f75959e043c8de5114cd99c60e20b17b80029f1a9db23cf359d2c4bf0a393984bf026066be79b8e7ee6778a8a146a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\B12380E59E366D551CA91542483B50A71D3DB16C

MD5 3b4758c9862f50f7badcf098602fcac7
SHA1 bf4bf0932e0cbc396acd9bab55e610c7fcb43562
SHA256 6ebc829108a522fcba4a03775b63e7a18f9382d141da49ed9dc58d6b7c40b8d7
SHA512 2da0a7e8a22d2a4df1e41c47b690820d97f0c87356b997965bf3dbd13f9ea945c8623f1a774eeb91587966c2d07b635459c5e574b94cdda100784cfb84ef3061

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\FD3C8B7B2C5FC530AE8D3FC8050677579C3D2E17

MD5 a22ac60cf6e7f8a38fd0663e08a09b55
SHA1 7fa6f684482b2b8291d6136ca535e96532d01af9
SHA256 e005236e943aff2ab8c7fc4e07cae62e727672b48f2b5ecbd90211fffc6417ba
SHA512 b003341e01036242defba6333bbf9d3d23baabd2d05cadd2f63d241850772e80b257bf964210e66cf094820926bbd8ee57dd97abbc358d5cff41beed9572581e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\586D25A03895848B0609C1B0C9097200E0CF65C6

MD5 1f124aa3817f19ba00b35c9c6fdef668
SHA1 be325b2728aa285f09bd383fb7cd5efdd6f7d75c
SHA256 4de87ddbe4f3f39a65ee2c3fb048db29e3a90a48c048e8ab2f77eac0c555e49a
SHA512 51a4a39d656ef48840967a241f061f615547dc30aa16f592011ddb196cef2b35097794265e24172a43577bb8d6c7d6bd8c8e64e647c652407d520963028d42b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\CBC29A4096AA94E6825DCD53DCE0814E150DB428

MD5 93adf178c325a8deece69a31dfa1a6de
SHA1 fdbaf8a3489d50496223cc50dfd5a5eb13c6891b
SHA256 df08a420ce5c6191c96086f950a1db04526331bb2a4fb6b64eeeead7f0ac45a0
SHA512 43af2df2d877119b203b66d9edfe180e006f9ce01ba2877d53e7e405a51ea232e1ee1c9040f395ffe12993a73e7c36c256e0c09ad9f26c80d7aac4c8b60fd626

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 7ae0844746ae79548054570c2a13828b
SHA1 74e49881d101f7adfadf59c33c200d33b808e444
SHA256 2b3e90b8133e7b5355069fda05b2c399fe09787e2aac1d30e790e141ad78c36a
SHA512 d374bc235ae6d011efcb204f58dc2f4f539f02057661b0764ae1b3547d7790201d396fcd55ecfbbbb2c3c0a524476ece0fba14dcd18537b317810bc5d42ff62f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\AlternateServices.bin

MD5 fd2a6875d75879005dbe07b5b6cb60bb
SHA1 4454a386fdf3a8f679e067a76f8980681aa70242
SHA256 23fb3c6d829777b0bc588f64b8cc732c1e319c9ff92d2f685c82299cbd2eac3b
SHA512 0f05b3f57f3ef8344a0fe241558eddab48136b1b680ff9b4b80950dc2e91f261c60adb2b172a8119162861a2fd60205dc7d24d0995467261ce42bdefd26809e3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 4e8ab1ca130e8bd3fb07cb9f2f0f19ab
SHA1 9ab664ebdea82416a991aaaa15a4af943d50ed83
SHA256 30659381e124ca93a452d3670d798f5a2d614e1ffa8fc224903cda477ddaeb46
SHA512 012e9dae9d85efee2ed30ce43a06d6fe75298be69dc5aaceae9e0b14085061a761aa40785dedd7c9f1f516f7e2d408eed260d27b23e5bd2167524d0fbaa70aca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\prefs.js

MD5 a3316885bc5e8e0f21803381c5998952
SHA1 e86f1bc1791d4e657a710057bdcb23cc31e6b1cd
SHA256 ffe6148be3e113541a7d38aa9d3d434bb86593225c50e75d83c667424b5efbc9
SHA512 6d9c0c60c1bca872b5274c9a0ecf321708e5e88aae22bcf97231eb0109e3a3425a3f156e25bd6da71a8c9d1bf21390bf9b9996ccd1e405a104404b7180463518

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\F21F53293B85556D4D7282B4E507DC37E6D6037D

MD5 a46fe937542824df1e9d8419ac8a71bd
SHA1 564868ebab690214fea83655b687b785b5cb9362
SHA256 b4aeaa0ada616de558fbe62854ebb8923ddce9eadeb106ad5ba1d34266c19291
SHA512 fae4b994e0325d1b05e16e76b92c0d9042349ba0c2ac4503b8927f307f35d36ff681cd031213feb8b4decd9e4d58c1d8b709b87844fdf908972590f341e34746

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\94F72B6F2D0DC3ED340D601AFA278D214906FBC5

MD5 ea40c3c09af192b41d83dd2eb2f26093
SHA1 d3190a1c70016dbd467eb58027e0b115823834de
SHA256 758dff58c9d256874dda5332c172e2cdd56edb18546d51623a6d8b074a164e33
SHA512 52ad5c97b9462345c8c2c33b5440fa46f84ae626eccf66b1c06dd38fbe64a003dbc76e11754fb39be9ee7a8763505d46f9048fe629ae59da73677ce88c679d2b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\A9FB5E6047697568641592A7A75CA6ED3DBF5590

MD5 b1c17d919446b56ce6cba84100ae722f
SHA1 0cc5bdbc9f270ef2442815f5816cc07ca10b1a03
SHA256 7977dc95ee0b374cfbd231bcdf7a2fa05757fa42a791905b5a641bf7cdc98c61
SHA512 314812aa11d1cf88f04359f4e9eca239f336e2bfd3ae1b794d5e131efcec4b38a0a260ac5883df72c287fdbab59076ced20075f8909478322280f1408b795666

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 f7fb44c63cadf94286b056b896b9a48a
SHA1 2189113e31df69db7e0d831712467bfb6553b1a6
SHA256 7b5b981dd70c34cb67a57fd5026b95c09e5d4b6b893c5357ff8821665800e7f5
SHA512 eb712bd35f1852d63fc102f698ef809335094812d45fec17bb1fb5ce417039231f0022c90c88ae4bc7b40d0324aa616cb4322103360252e2ca5edc1ab2e82eea

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\D8C2CFE0485DFC922614553B1999E8CE09530D68

MD5 593210ca3b3ccca8b1ddbdb936b50aef
SHA1 c9bbd9209e8cd7c56096d2e8a70b2f9517570145
SHA256 982ff5544cd2e37674264665497588dba04113f3b8fb361cfe83817b05a9fead
SHA512 48f16113caf3489cecab46352e1cf13e29a824c0e62b78e2f6ad462882293dad2234f1d707fedbc3602642a4970caefd7d72352974de28c1d0b9cd5e4b3be906

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 dae0e0f919ba4bcae5a018a85eae5aa4
SHA1 f8d79a0ae9c5822c42499a0bd8321dffd795f45d
SHA256 41dd52a8808a53bc1d35a4baee4d91ef9f9222a1dd342da709fcc59b46f71040
SHA512 7409a0bc5bb1c46d8f084eed57283427325efac94dfa192c4c850be55bdc3b151f150ce52addd9bb2af113ddd2eb7095646e723f107f28184ac6b06687c1bb5e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0FD7231A14F1C4D0726CC96B251935B6402B56DB

MD5 babfc0be631f65917a03944361004c34
SHA1 3a9ba10129a98cc30806d856f969826440abf947
SHA256 56bbfce7c18b402b0a89d13ffa8ad38335ced41d7aa2ecb6622ff1025c4bcd18
SHA512 dbc172add68df8adeb7e4700fdc77377d536476c581b78de116a9d73643128c294d1423724124c97a6a58a94c745b630024b03bf231f43930e89405ae0951bdd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\1381779480CA73E6842C6CB195BC1FC7D127CCD8

MD5 d90b0798b3e0a55957585947c2cc4e81
SHA1 ce2d870a49c2991ea722e7e460f767b5661cb550
SHA256 4ea7108f7a87324461756e030114c422dd278a1e2dda7bdc8b0b13eb3eb59ac6
SHA512 ca8b1c784f42f1060f2e3df2cc9b2e91033d8e8f5ead45297b8fb0f07596b25eb042b04395ecabe7c422ce800e574ffdbdce589d7c5acb5686c5822be453d438

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\11E28E677587E2CB091E68AD17AEFEE7EAFAD23B

MD5 b46192dd402f9d1e8f07e2d13c18fa71
SHA1 9aa22016a2f709a13c6ad883403000bad34ef03f
SHA256 748e5689e86272570d4a584daff6af7373ccb37d36f17ce594c88038d9f68528
SHA512 6e463a2ee23d643142e16d6800c68daac17a48740802a4960a4ed85f2a0c573233b3ceb91142f3a5a1c357e464bb4dbcec507a31ba4ee84bba4ec6388dcaca0e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\109D080055C1548CE320A422FD98DA1D5E1A5BC8

MD5 48c7b9bff68517989119b433c0c2d073
SHA1 a128ac040cf45079372bc69470585b690a864bb1
SHA256 64785bc2cb85c419444d6c7f0a0b1c3490966fc7a1061a779ad88b8de8e57e39
SHA512 b118acb69771643f822f72261ef0a16aa4c3fc042360bdd353fc66bc8dbb9867f00abbe2613f81b7763577d78c48b8ed30d5ba11d53c6d2475ba3442d19b4f5c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F

MD5 f29bc7e541da3e684d8464f83454a1c2
SHA1 22c1b80d70936c51b8696f730fd805b40973a6ab
SHA256 611e3642282cd7770bbb0dfe1b91eed0549c467df5337f2192ba044a5cc3082d
SHA512 a88696093af0474e93bf573d650ad9807be4d5480bdb7876d4068760ea90bac67b2360ec94a5f0397be4f527456a3a0b9a26fe4dabf1a5e06f4d10bdaf051d25

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0EA2E1AC3653A248EDE38E975FF2A4ADDA308244

MD5 735613b103fd6de29c9a2bbafde86418
SHA1 9519aa2ac287ac308846aa7d9d8687e87927d8a1
SHA256 e139f0bfd76f3aca810bd4049ba05c030d6335c35609fe6aa3511d9aa308c6c1
SHA512 5b7613542364163e35cebb3f505196166d1f079e54f9e688b512d9766f39c7c6655a644f45a7753ee53331108953a41d56859ad54deb4f70a96a0d5db88791b0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\094A5FA25D56295058D77CC5F86E2D4A73ACC96F

MD5 a649b8ea0814bec4e9bc1de848daf879
SHA1 fbf1feed586812dda0c55a8e0450e615ce243b2f
SHA256 fa34566bcfc6a3c683343b2994382e956eeef9862853e6e468219e96f682d870
SHA512 a108a3b6a6ade1e4f80263b7a1547100dbe504d8253ba2badcdeee0e1f39e586a8c3369542aa12346d28b37456d5d4c625e8f472c414fe9100033ece1d6eb9e6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\crashes\store.json.mozlz4

MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 d2dea4ee4c3ffe213b6e5e8d20929176
SHA1 c9da9fe24eb9611634869c3f24439f3c072a0d2a
SHA256 72cdc7eadf0101388cc24b95fc2f8fc588add3c6acfcd9220595b7a21a590a17
SHA512 638a426f989afe3a7202279aa7fd96c138815831cefffcc22d007ad54051dda6e5cd8c0f175b3026a6fda3ab84acec7cf4424a2f23a8b6f2259b892c871ab40c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\40371339ad31a7e6.customDestinations-ms

MD5 45b61548ce214c8cf97856c633eddb49
SHA1 e29326f37aadedd3ca74c8abc791b778dcf50a0a
SHA256 8a671bb523ede22b082d84becdedfad1a3f8dbade252267b7ed4449fe3930333
SHA512 d2b660a3f33374a7fa8916cfbf266d84e8e2013ce1c3bb0f61d1bf7e93f1ee5e0d2f1359cd4f5f3a237cb4362a760f392fac2e4f8c580a6e22d7737fcbfdab3e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 237e90ae3b35f1674447bf0a2f9b7c92
SHA1 be05d8d8d6dba5905a09767e46599c3b51d31900
SHA256 52fe7b7cee03c7fcb1e4b36134b74426c42ae559aba9df808920a5ffdc986e26
SHA512 adb1bd9d4b0b910f531fc5c5ac060f90b91c60c3574e94872346c245dd93f2014c42527b4d1e0d2b63ada230f70956cd79af1f71fdd6289607f3c3b639ba1d79

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 4c96332f73859ea9c5e3fce2f34e6e6e
SHA1 357627259d2b66b7be896016963fabd265b60741
SHA256 3a1002f576c131339a554b8da6333c7f3418dc76226be93ef02d926a9e4aeb21
SHA512 6474acc80f64fb6ac3a9fe6cb90345c296c4e4893e53508fd7a22fe846dc3d03f87f99b29cca13d211b4216cc4a798b742f7836e44ea5d8b048c952e6678266f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\B7C49AFA0212E4ACE3BFDDA51E5C05DF2BF62A4C

MD5 e07f6b8b6ec101c26dea81db966447ac
SHA1 5b81408948e671a333dd2bc56adb83b8e2fdf6e0
SHA256 eba35f8b3828ff77693ba13db388bc93e0fbb144afe1f91ec097ac694c96d8ac
SHA512 5a5963bbcde5921430e65e02041547847f2a93cb4f45547664b440aaf528ad6c65d91d6b8e0a9f0bdd093bd81ac752c74058b52132751bf51674c7280344b795

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\2F0296D391FA2EAD6FC1EE5368B09D27FD799C3B

MD5 19a6a3e3f560604235770544a11b0786
SHA1 e02d0ffc15c32d2ec9c7a6102952b7beefa298e6
SHA256 8bc57ae61626b3c0f928424127b5e1ff5ccd3ae91f65112d6aef2a1c7b7385a0
SHA512 3818816d54d8c4da6b2504e0d313199240d12d0ac64ca6cd103d7ae02ec70eeeb9dd7f052b1dff65eb2e404225e88146bf0efe3e5da0fdb20d2760ec2650ca0f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\sessionstore-backups\recovery.baklz4

MD5 66ae2fdcb455b9ec5fb7841bf3ed0e2c
SHA1 8941d4e346b0de2a852d2f1de99b54355be74617
SHA256 42293f6fe505a0d6d0a827a614e051676b896e00bda3d429ffa779aec8528a75
SHA512 bbd8dd016c7b775e015dcccbf58b98c69272649946bd053d9ddf09ac9b6bff30ff00cf2edcde3ceec9ac4ee5f1b3da751bde8833834cdbcb5b29acf78e4e762b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\9106D04FACD0D171FFD9706366A68E837F25B941

MD5 c7e853f74cc698e249855094c9e882bc
SHA1 ce78822dfb6350b1248e255a235a3ce3ebfa8e89
SHA256 70959a4f6e7b3d61b69687b45ddfd4146e2d67299d65e9c751e8e3b97adcdb6d
SHA512 7f867e654ab7fdefa3cc78f9b76984392b3d44cdddce905f473fdbf595f4e2e75d025ac5363cda835f487dc4495fdf16d9e8813dd1e8db0c0d291a24a8a51eee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wedc8dlt.default-release\cache2\entries\0742D054EE9A2DC66A4AB25551F2F261F0A69D96

MD5 0dd59de79e1285674d82c54e082caaa0
SHA1 4ef71d746d4780fbd5c026d1b9d972d1ecdbb77f
SHA256 7409099a3fe03348c8d7dc2457aa772596c466b0d0b57d505da0d3c6a2bd5bf3
SHA512 501c165c87abc5c3257534ff14a1186abc3ec84e8180a2dade374c477f8e1db35731a63bd1db83f21117410a2562aad9cb168d7fe07b7a464c23c22269ffe4fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\db\data.safe.bin

MD5 0ebe52c13e21b85aa92955d950c4d040
SHA1 b1278cb17627089ee53c0d89d7ba3684246afa52
SHA256 90ca939e91131de322597f3690b93f72d963cde4be271b0ae612eab5ad9d6ad1
SHA512 3ff2512e5152b59764a0f58f6122bf84c5a0d9496fdd54289c2cc60db6d4de81bd77b2171b2fab6ae2160479eab716b1159a95d79688ef64971d6b6963b60e40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\05acc352-ce91-482d-8f1d-e575f8e790ba

MD5 5a6a82805d95f0a61d65d4916b779eec
SHA1 84045e8ae985f273288a47f678dd7a5bab69f13c
SHA256 caa06aa2ae0b7e604b6d10c41378d9d67ef1ee792b5a42461a1cd00e763d8279
SHA512 7a4f9addf465d26c399c499f248c644a8be53794e75f5abc7556a49ab7c56c4b70bee534a8144eac82e3cfb55e3c8275a938e6d6e0eb6ef9fc3b583edf726aaf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wedc8dlt.default-release\datareporting\glean\pending_pings\b92fae7f-641a-40e3-a149-9e414995b6da

MD5 bb3acd3697b7188de7ac1d0b338a7a3f
SHA1 2711b5334c8e23e5a91fb73bca4af276e4db0d20
SHA256 6e7a10a77c2bd710431a232fa358d18a978cc0a2e72acc746cde10d3e4e87d0a
SHA512 6f5fe62247147fda1751322eab46db882389fe7af2c790983f53e607e3bf0c2eb1dc1a38dfff2f94c751d8503dad0de74e02b3aff24f3095b57a939e1b9a5b86