IOC Report
http://reallyfreegeoip.org

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 11:00:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 11:00:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 11:00:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 11:00:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 11:00:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\Downloads\8bb97a7e-e181-4414-b469-e04d513a6c8f.tmp
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Downloads\reallyfreegeoip.org.csv (copy)
ASCII text, with CRLF line terminators
dropped
C:\Users\user\Downloads\reallyfreegeoip.org.csv.crdownload (copy)
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 121
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (2950)
downloaded
Chrome Cache Entry: 123
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 124
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 125
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 126
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 127
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 128
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 129
ASCII text, with very long lines (2888)
downloaded
Chrome Cache Entry: 130
ASCII text
downloaded
Chrome Cache Entry: 131
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 132
HTML document, ASCII text
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (3920)
downloaded
Chrome Cache Entry: 134
PNG image data, 120 x 600, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 135
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 136
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 137
HTML document, ASCII text, with very long lines (32065), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 138
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 139
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 140
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 141
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 142
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 143
ASCII text, with very long lines (1321)
downloaded
Chrome Cache Entry: 144
JSON data
downloaded
Chrome Cache Entry: 145
ASCII text, with very long lines (2573)
downloaded
Chrome Cache Entry: 146
JSON data
downloaded
Chrome Cache Entry: 147
HTML document, ASCII text, with very long lines (32065), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 148
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 149
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 150
HTML document, ASCII text, with very long lines (2020)
downloaded
Chrome Cache Entry: 151
ASCII text
downloaded
Chrome Cache Entry: 152
ASCII text, with very long lines (1054)
downloaded
Chrome Cache Entry: 153
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 154
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 155
C++ source, ASCII text, with very long lines (2402)
downloaded
Chrome Cache Entry: 156
ASCII text, with very long lines (2374)
downloaded
Chrome Cache Entry: 157
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 158
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 159
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 160
ASCII text, with very long lines (4068)
downloaded
Chrome Cache Entry: 161
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 162
ASCII text, with very long lines (786)
downloaded
Chrome Cache Entry: 163
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 164
ASCII text, with very long lines (3920)
downloaded
Chrome Cache Entry: 165
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
downloaded
Chrome Cache Entry: 166
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 167
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 168
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 169
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 170
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 171
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 172
JSON data
downloaded
Chrome Cache Entry: 173
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 174
ASCII text, with very long lines (1595)
downloaded
Chrome Cache Entry: 175
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 176
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
downloaded
Chrome Cache Entry: 177
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 178
ASCII text
downloaded
Chrome Cache Entry: 179
JSON data
dropped
Chrome Cache Entry: 180
JSON data
dropped
Chrome Cache Entry: 182
Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
downloaded
Chrome Cache Entry: 183
ASCII text, with very long lines (1838)
downloaded
Chrome Cache Entry: 185
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 186
ASCII text, with very long lines (2364)
downloaded
Chrome Cache Entry: 187
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 188
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 189
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 190
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 191
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 192
JSON data
dropped
Chrome Cache Entry: 193
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 194
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 195
HTML document, ASCII text, with very long lines (634)
downloaded
Chrome Cache Entry: 196
ASCII text, with very long lines (5285)
downloaded
Chrome Cache Entry: 197
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 198
JSON data
downloaded
Chrome Cache Entry: 199
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 200
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 201
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 202
PNG image data, 120 x 600, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 203
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 204
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 205
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 206
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 207
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 208
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
downloaded
Chrome Cache Entry: 209
HTML document, ASCII text
downloaded
Chrome Cache Entry: 210
ASCII text, with very long lines (39767)
downloaded
Chrome Cache Entry: 211
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
downloaded
Chrome Cache Entry: 212
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 213
Web Open Font Format (Version 2), TrueType, length 14556, version 2.0
downloaded
Chrome Cache Entry: 214
HTML document, ASCII text, with very long lines (829), with no line terminators
downloaded
Chrome Cache Entry: 215
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 216
C++ source, ASCII text, with very long lines (3386)
downloaded
Chrome Cache Entry: 217
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 218
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 219
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
downloaded
Chrome Cache Entry: 220
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
dropped
Chrome Cache Entry: 221
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 222
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 223
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 224
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 225
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 226
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 227
ASCII text, with very long lines (5955)
downloaded
Chrome Cache Entry: 228
ASCII text, with very long lines (2937)
downloaded
Chrome Cache Entry: 229
ASCII text, with very long lines (2553)
downloaded
Chrome Cache Entry: 230
ASCII text
downloaded
Chrome Cache Entry: 231
HTML document, ASCII text, with very long lines (32065), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 232
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 233
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
dropped
Chrome Cache Entry: 234
ASCII text, with very long lines (51588)
downloaded
There are 112 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2524,i,10992271263540220420,14325751845824133788,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://reallyfreegeoip.org"
C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Downloads\reallyfreegeoip.org.csv"

URLs

Name
IP
Malicious
http://reallyfreegeoip.org
https://stats.g.doubleclick.net/g/collect
unknown
https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
https://reallyfreegeoip.org/csv/
unknown
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-1-&adk=1812271803&client=ca-pub-6818625889483991&fa=3&ifi=8&uci=a!8&btvi=4
https://reallyfreegeoip.org/json/90.76.249.101?callback=myFunction
unknown
https://a.nel.cloudflare.com/report/v4?s=edOgSkCqL94WQdnTia6aP2wfi2lZoNVzA2CjnwlTovPNuoJ4CgMPxURclB9YbkwMfPazK7hsLsopnH0dcoBuumO5gc7%2BBd%2BS%2B6lz1t6TUqrzlb%2BbIt%2FbZbtSRKxRyejK557Q6Uh%2B
35.190.80.1
https://aid.send.microad.jp/g/asr?google_gid=CAESEJW-h_A-pCGkiK90-9eBUw8&google_cver=1&google_push=AXcoOmTJfD_M3HqZ7skkR_tlHN3OfwPj4pakrZ4D2I1DHC7uZ-tv6U-9-Ur3IcJkxscLn_DMra1B-hbQwxH1ft3N6GrPefuRP2lQCwA
202.233.84.1
https://reallyfreegeoip.org/json/90.76.249.101
104.21.67.152
about:blank
https://googleads.g.doubleclick.net/pagead/adview?ai=CE6TlkGgeZtDMN4DNrr4PkLWkgA6CyK_CdtDY_bqOEuzI__jbKRABILeBvSNgybbdjOCkhBSgAffLuMICyAECqQJYMhVuI9BJPqgDAcgDyQSqBNQBT9Df1R1VpmY1SHVcte1mp8OcHIS8AdPArkb-KIdQWInwC15N440VUNNSlDhCW9BI-7qYF6--hf_Wuz5KkTS34uDs6552bp3evPSt9IQz17xXiQkFGSmuKHvn-CRV87qE3k78Tg5bqphDxKcJIQBEIYLNcxOImjjVmEYnyQpD45q-OBHnTb0otJLiV6G9C4iL74QRIjK7gy5EtTc9IoAaP5kLWiQQvZ9JcRftz4VVNnaBEbDVOh-kW54H-r2WNiH_mXH4VSwLNivxLUOcOXzRT1ufbELABM3Pi7vcA4gF1fuQnjeSBQQIBBgBkgUECAUYBKAGAoAH8bPHvQGoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAfIHBBCKpVnSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpYnra0-NfGhQOaCVBodHRwczovL3d3dy5tYW5hZ2VlbmdpbmUuY29tL3Byb2R1Y3RzL3NlcnZpY2UtZGVzay9scC9zZXJ2aWNlLWRlc2stc29sdXRpb24uaHRtbIAKAcgLAdoMEQoLEPCmlvzfgaWhhAESAgED2BMC0BUBmBYBgBcBshccChoIABIUcHViLTY4MTg2MjU4ODk0ODM5OTEYALIYCRICuFAYAiIBAOgYAQ&sigh=HoVhKm2fa_w&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwB7FLtq49onUFUEPR1wMU5fs9VGwi74IlymFcLgqpPkG099tmfB-y3aypk17up9TkcCgudMyKjkBXOSqQjhYRTVqkBzCMa4-AQCjOoTsAIYAQ&cbvp=2&vis=1&nis=6
64.233.176.157
https://reallyfreegeoip.org/json/
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSxv5fD1Tm04uAwlAEDb-tAHm5RhfiBheN86s48UnhGlNMLilIH2se34uidJa4wlZ-Vpq4yvhFJAJm22u9hss8v8jU0Kg
74.125.136.104
https://t.pswec.com/bsw_sync?ssp=google&bsw_user_id=64a1af68-e378-4141-af74-9ecad6be1ba1
52.44.225.182
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=3012990119&pi=t.aa~a.361413772~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280&nras=3&correlator=569516815409&frm=20&pv=1&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=282&ady=2311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&psts=AOrYGsmWFHh6A3_v6k_at-rztDupCuopbKpA-ZTjODfRKVJwHHt12i9pEbKbxKprH6JeP1mmCTWIWJe0RFjZRCoEzMsSQbvm&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=117
https://www.google.com/ads/measurement/l?ebcid=ALh7CaTiBIKzKNuETr1w-l3sy0eTeL_ip62zou988OofscCVBxqxvfaNUkLBtKel17ykNjbLqmwE2gxISOCsLNrYwux2sEUsRA
74.125.136.104
https://www.google.com
unknown
https://reallyfreegeoip.org/json/81.181.57.52?callback=myFunction
https://fundingchoicesmessages.google.com/i/%
unknown
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEM6lxBOc1FdAG1PhFDSNrmQ&google_cver=1&google_push=AXcoOmQCLBnddGtpk0IUZLMch6PubdmLVKy36F1llg1uKJ5KbZL-AISMvUs0pT0-Is-kgZkLIaJXBp2aFEcklS4ED9TvUTBRM--FoPw
35.211.178.172
https://reallyfreegeoip.org/
https://aid.send.microad.jp/g/asr?google_gid=CAESEGxxjB0aJlj08TJSAayUtos&google_cver=1&google_push=AXcoOmSc3_LHItao7R2MVc2KER3Lt3DcpBT4W5HrzuPDMe1b0aSL6X7Jhaie6aP_WobB5X6BaKZOeestTSMORBBzynKXHY6dIMAVcCc
202.233.84.1
https://reallyfreegeoip.org/bulk
https://reallyfreegeoip.org/csv/90.76.249.101
unknown
https://match.adsrvr.org/track/cmf/google?google_gid=CAESECqq3lhmL1MW8wwHo1rWmlU&google_cver=1&google_push=AXcoOmTVcCQcvLdnCFjE1DHHToNIELy_nDBPPxkqCmHIakZyiIJvFyatt6BIX8Iftr7Q4dptK6eBWt8ytwljV78pUBaDw6gwe4BF_w8
52.223.40.198
https://cdn.ampproject.org/amp4ads-host-v0.js
unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CCIHqk2geZvzzG_vlrr4P5N24SILIr8J2k4e3gpISzfWxwJVAEAEgt4G9I2DJtt2M4KSEFKAB98u4wgLIAQmpAlgyFW4j0Ek-qAMByAPLBKoE2gFP0PF6M3Ogx_7fe1QOsvZNUHHgbtesYqjEkRg6ICz3vhdYAoNPwWJnUPxiLIyXUQUYFQUCNhYng2zrDCZsZjfBfqZHHhxn1n_MqGT5NsMOUqmgclQCtQiVqHy5xXQwavCIERGSm4sjtps9X83Joq7ciLf_lak8Th2V2M_bnsDEnN6AKz-GW0XAxj4JBj05wlCkYGpiMOxSjam1Mhvhf5S8VX07eZgYGipAZYUwxbbEWJkZdq7szW8b54tZmKqRH7EJirmwWtN3wmnTr3hYx6Xjq-7ABwgwWcdL48AE0eboo6MEiAXV-5CeN5IFBAgEGAGSBQQIBRgEoAYugAfxs8e9AagH2baxAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcA8gcEEO_VQtIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOlj47M_518aFA5oJUGh0dHBzOi8vd3d3Lm1hbmFnZWVuZ2luZS5jb20vcHJvZHVjdHMvc2VydmljZS1kZXNrL2xwL3NlcnZpY2UtZGVzay1zb2x1dGlvbi5odG1sgAoByAsB2gwRCgsQ8NvRqaPl3N2TARICAQPYEwLQFQGYFgGAFwGyFxwKGggAEhRwdWItNjgxODYyNTg4OTQ4Mzk5MRgAshgJEgK4UBguIgEA6BgB&sigh=ZqlnWtPV_Zw&uach_m=%5BUACH%5D&ase=2&cid=CAQSPAB7FLtqZEAQd2owvRcE7P40MvaagF3YuWULXVpdj35FKAcw_4sGCqiCg1Gexg3SgWOxwZKReitVzVBXzBgB&template_id=5000&cbvp=2&vis=1&nis=6
64.233.176.157
https://googleads.g.doubleclick.net/pagead/html/$
unknown
https://s.uuidksinc.net/match/47/?remote_uid=CAESEBwhUKF8xsr4PPyPvnMAMRk&c_param1=AXcoOmRj8J-30DvSH5JN2JPulQaxH6eJzSg1-10TbNeMtW3jm1e2l3G3W-1zH3PcSNgNBLLje_jC9YIFF4dnC_YYW8CMLOnEfHaoe_Il&gdpr=%%GDPR%%&addtl_consent=%%ADDTL_CONSENT%%&google_cver=1
31.220.27.155
https://reallyfreegeoip.org/assets/roboto.woff2
104.21.67.152
https://reallyfreegeoip.org/favicon.ico
104.21.67.152
https://reallyfreegeoip.org/xml/
unknown
https://www.google.com/adsense
unknown
https://reallyfreegeoip.org/favicon.png
104.21.67.152
https://t.adx.opera.com/pub/sync?pubid=pub6871767557696&google_push=AXcoOmQHJVWeykoC-nW61BgbLOc9wXd5V1LOINOlkq8MTdGZK5-I-1JL7gfAPDbzY8Oql_T1eKwrjh6Y4Seae7t2kxHxIsTkpOFsXHrn&google_gid=CAESEFpq0tLyqvK6T3uzR9UOJfk&google_cver=1
82.145.213.8
https://reallyfreegeoip.org/xml/90.76.249.101
unknown
https://an.yandex.ru/resource/spacer.gif
87.250.250.90
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=1992864447&pi=t.aa~a.3071472229~rp.1&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280%2C700x280&nras=4&correlator=569516815409&frm=20&pv=1&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=282&ady=2601&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&psts=AOrYGsmWFHh6A3_v6k_at-rztDupCuopbKpA-ZTjODfRKVJwHHt12i9pEbKbxKprH6JeP1mmCTWIWJe0RFjZRCoEzMsSQbvm&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=131
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-3-&adk=1812271801&client=ca-pub-6818625889483991&fa=1&ifi=10&uci=a!a&btvi=6
https://adservice.google.com/pagead/regclk
unknown
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_br&google_gid=CAESEAr2PuWl0cXxfkp_IdZEsjg&google_cver=1&google_push=AXcoOmS0e5AnpVmFTTw8t00BAxuCo7-6hyyalGdVEMIzhnzfQpLb7QRp_EiskmaaiVybEces8uqc9dPjxDW-eE_T2f98BQlAuTDCn-M
185.184.8.90
https://cct.google/taggy/agent.js
unknown
http://mathiasbynens.be/
unknown
https://reallyfreegeoip.org/xml/81.181.57.52
104.21.67.152
https://rtb.mfadsrvr.com/ul_cb/sync?ssp=google&ssp_init=step1&google_gid=CAESEL1U9PSETpBc57kRP3tnvVY&google_cver=1&google_push=AXcoOmRPecVpPkCkEkhMVs7RrEscDoLWpuAkfwSBwiHS8xZwU_S6aaIO4Nci1uE1Ub8KMjH5zES6GzTKf2WWVZKEllLtdx2HZ_62VHUx
35.207.24.140
https://www.google.com/adsense/search/async-ads.js
unknown
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEM6lxBOc1FdAG1PhFDSNrmQ&google_cver=1&google_push=AXcoOmQCLBnddGtpk0IUZLMch6PubdmLVKy36F1llg1uKJ5KbZL-AISMvUs0pT0-Is-kgZkLIaJXBp2aFEcklS4ED9TvUTBRM--FoPw
35.211.178.172
https://reallyfreegeoip.org
unknown
https://stats.g.doubleclick.net/g/collect?v=2&
unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CM2axkGgeZtHMN4DNrr4PkLWkgA6CyK_Cdt3znJGwEezI__jbKRABILeBvSNgybbdjOCkhBSgAffLuMICyAEBqQJYMhVuI9BJPqgDAcgDywSqBNUBT9AfEIS2mQx97CYSSizLqCZKbTIQAcQ2gEagf2m8AXUwvW7eEIdQwrCDSkXVL2Beo8T7vtKWlyv2Rdz6_ulev6ndQHmJicIXWTe53Pkog_PinykfRVguCDkpYAc41D-PMn7Zh3EcMxTj-Mv8qzy2__dn_M5mqdzqWv1t8Doq5tqJnr2DSW6HTCyqar3XHikeZHYx2Ws4nA1G2G6wTne9fpy26HR523ZFim2B7hHnTgm17hwaVGqf58Q6sGuVa1vUivMZuqMaF3wxzWVCTwo4hMYZj_PEwATNz4u73AOIBdX7kJ43kgUECAQYAZIFBAgFGASAB_Gzx70BqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwUQ7_ynAdIIJAiAYRABGB8yAooCOgmAQIDAgICAoChIvf3BOlietrT418aFA5oJUGh0dHBzOi8vd3d3Lm1hbmFnZWVuZ2luZS5jb20vcHJvZHVjdHMvc2VydmljZS1kZXNrL2xwL3NlcnZpY2UtZGVzay1zb2x1dGlvbi5odG1sgAoByAsB2gwRCgsQ0KPSh5GYr9-lARICAQPYEwKIFATQFQGYFgGAFwGyFxwKGggAEhRwdWItNjgxODYyNTg4OTQ4Mzk5MRgAshgJEgK4UBgBIgEA6BgB&sigh=Ru6vvddGZwE&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwB7FLtq49onUFUEPR1wMU5fs9VGwi74IlymFcLgqpPkG099tmfB-y3aypk17up9TkcCgudMyKjkBXOSqQjhYRTVqkBzCMa4-AQCjOoTsAIYAQ&cbvp=2&vis=1&nis=6
64.233.176.157
http://googleads.g.doubleclick.net
unknown
https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
https://fonts.google.com/license/googlerestricted
unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6818625889483991&output=html&h=280&slotname=3601043988&adk=1035231763&adf=365811147&pi=t.ma~as.3601043988&w=686&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&format=686x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268877967&bpp=7&bdt=1150&idt=1033&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=569516815409&frm=20&pv=2&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=289&ady=789&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CaoeE%7C&abl=CA&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1054
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
unknown
https://um.simpli.fi/gp_match?google_gid=CAESEJnF8qVUeNA3yH447KsdHmA&google_cver=1&google_push=AXcoOmT-nqrzjzceulmNlSqL6Dq9pkeL-RDIp1YVkXvSbPHi9fGUVHCLLooe8eiNtU3_z8dKJu4yYC2Jxxy1gQczEsEfqMxzReSBtec
35.194.66.159
http://google.com
unknown
https://zenorocha.github.io/clipboard.js
unknown
https://an.yandex.ru/mapuid/google/CAESEF8Q23zzrafPh1KSr938-VE?ext-param=AXcoOmSiazq0BMGVUO4TPVvYtUH8uHR6Gjz7652XElM_rPFcGWgGpyovsiwjDF6hXSTfO1wATC0Sq0-zDb8Jhu4qol9iVDx0MrkmgDQ9Ww&partner-tag=yandex_ag&google_cver=1
87.250.250.90
https://fundingchoicesmessages.google.com/el/AGSKWxVgT1hlUkfpkechve4br5WoRjHGfIpMAUZNEg8jPYqGg16XM2vTt94CbeBC2I2cgdCcHRYE4WXC2ifh_RT1OiDwaM-wfPCUmVTX8JwaypFz38aZTw-vEtWZ5OC3qmOHBtufA_2fxw==
74.125.138.102
https://www.google.com/recaptcha/api2/aframe
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=9752778&pi=t.aa~a.786254476~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4774&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0&nras=2&correlator=569516815409&frm=20&pv=1&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=282&ady=1384&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&psts=AOrYGsmWFHh6A3_v6k_at-rztDupCuopbKpA-ZTjODfRKVJwHHt12i9pEbKbxKprH6JeP1mmCTWIWJe0RFjZRCoEzMsSQbvm&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=109
https://www.google.com/s2/favicons?sz=64&domain_url=
unknown
http://www.dynamicdrive.com/
unknown
https://reallyfreegeoip.org/csv/81.181.57.52
104.21.67.152
https://fundingchoicesmessages.google.com/f/AGSKWxVu_J9GMFsCwnVUzP_dpbBHcRgK7fFwH6VPFQo3gqGMGA-u0DrC_HGrdb2OQhOrZ906TBTm6bXTxeqxNKimBeqdYoe1tZuYIOJVvqRMgQm7sI8qn2twsQc3rRIxnnEcFZbJvd0OZg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzEzMjY4ODgyLDMyMzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vcmVhbGx5ZnJlZWdlb2lwLm9yZy9idWxrIixudWxsLFtbOCwiZWNKSG94Sl9YOHciXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMjAsIltudWxsLG51bGwsWzk1MzI5ODQzXSwxNCwxM10iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0
74.125.138.102
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESELXya2SqvMwLvBDTBcImRyY&google_cver=1&google_push=AXcoOmScn2dKTIYbuYoxAt_hIQ0zW0tTwhlyVVlURjnDvFXx3QRu8bYNKS8PIaa-oYW1FqEhCXR70BY5TxTmamrJKuFYo3vJJ9WkrdgW
192.184.67.18
http://www.dynamicdrive.com.
unknown
https://ums.acuityplatform.com/tum?umid=4&uid=CAESEHemRA7j9x_ZFSV3EmiTAtE&google_cver=1&google_push=AXcoOmSj-OWwdxfjcvZfEBQylR1fRj276GLjaDY4n8fkKNtkExS_l32_MbRNlk16vi0HXacJp4NFgiA5-BWFlXHz4fh4Gzdu7Gzclo3W
69.90.254.78
https://t.pswec.com/ul_cb/bsw_sync?ssp=google&bsw_user_id=64a1af68-e378-4141-af74-9ecad6be1ba1
52.44.225.182
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6818625889483991&output=html&adk=1812271804&adf=3025194257&lmt=1713268878&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=250x816_l%7C250x816_r&format=0x0&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&pra=7&wgl=1&easpi=0&asro=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268877974&bpp=5&bdt=1156&idt=1069&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=686x280&nras=1&correlator=569516815409&frm=20&pv=1&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1096
https://yandex.ru/an/mapuid/google/CAESEF8Q23zzrafPh1KSr938-VE?redir-setuniq=1&ext-param=AXcoOmSiazq0BMGVUO4TPVvYtUH8uHR6Gjz7652XElM_rPFcGWgGpyovsiwjDF6hXSTfO1wATC0Sq0-zDb8Jhu4qol9iVDx0MrkmgDQ9Ww&partner-tag=yandex_ag&google_cver=1
77.88.55.88
https://s.uuidksinc.net/match/47/?remote_uid=CAESEJmHsLofe6i8ILkHO_AzbaE&c_param1=AXcoOmSVB6nPiklpxmQF8XmGAFV2BEqDuTrwUGyl19lRkJzA00Omm3fK0tPIBH3tq-QtBGwARvzTGCVNBRf-cqofVRKanjVNR-sF90Rf&gdpr=%%GDPR%%&addtl_consent=%%ADDTL_CONSENT%%&google_cver=1
31.220.27.155
https://reallyfreegeoip.org/90.76.249.101
https://gtrace.mediago.io/ju/cs/google?google_gid=CAESEEaj-IKrJFj6IN4REVHViIk&google_cver=1&google_push=AXcoOmR77Y9HP1up4Y5IZEtV30mRb24AozZHkxu3YAcuM-rpWqgGp5TMExtV3qryDy7dUJCUqznibGUMOCDA6VAY9PrCU_3sar67FY3E
35.208.249.213
https://www.google.com/pagead/drt/ui
74.125.136.104
https://googleads.g.doubleclick.net/pagead/adview?ai=CAZWlk2geZvOwHcDmrr4Py72IsAuCyK_CdpOHt4KSEs31scCVQBABILeBvSNgybbdjOCkhBSgAffLuMICyAEJqQJYMhVuI9BJPqgDAcgDywSqBNQBT9ByN_V40mYKRG3Ttf7xoJ2kh6ZoOL70EzLB_eOcUdeBm_a7Q3V5t0GfPeKU2dO9HT4nUVU9yM2EJqcFoT3JprF34ed438sxgJ1_FWzLlPhQycdRDxaBaPHz_rWFjlIeELencWxKCWUYH4jUT5Rbb-S4p_RZEEnQLsVzDBHJTU_AOy-bVlnHsaXrOtt5RFAoz76qVn50U44MCix5EgjMrc54p_3KkL8Bviqvzn0mAhMkoBtleXcSRj2V6btbr29Aa1CqdMYoeK9tgGZvEec4vLkGiCTABNHm6KOjBIgF1fuQnjeSBQQIBBgBkgUECAUYBKAGLoAH8bPHvQGoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBBCP737SCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpYqZnR-dfGhQOaCVBodHRwczovL3d3dy5tYW5hZ2VlbmdpbmUuY29tL3Byb2R1Y3RzL3NlcnZpY2UtZGVzay9scC9zZXJ2aWNlLWRlc2stc29sdXRpb24uaHRtbIAKAcgLAdoMEQoLEJC9jbHhh97gvgESAgEDuBPkA9gTAtAVAZgWAYAXAbIXHAoaCAASFHB1Yi02ODE4NjI1ODg5NDgzOTkxGACyGAkSArhQGC4iAQDoGAE&sigh=RNHCxa6OB1o&uach_m=%5BUACH%5D&ase=2&cid=CAQSPAB7FLtqltTZogJnZX4x4Q2N3yir7Sec5fuAPgXWrlPBKo7QaXRxBWGInXGvI1KhfkDQSo9S_jWNoP_pGRgB&template_id=484&cbvp=2&vis=1&nis=6
64.233.176.157
http://www.apache.org/licenses/LICENSE-2.0
unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CFf_Ek2geZor4HPyirr4Pz6OP-AGCyK_CdpOHt4KSEs31scCVQBABILeBvSNgybbdjOCkhBSgAffLuMICyAEJqQJYMhVuI9BJPqgDAcgDywSqBNQBT9Bu7CMA3dg9Hj4Ri3r8-bjLSteZQ3ueEv59HTes_xdCnLUNfyPZ4hS44jJj3ULz0BaWLt9CX4JJEprIvKT6wVqOW5jh4Ujy_eC4EuEzg-bKu5JPe5qBLcpVey7dC9r5_RAzJqlQohOYnF2OOmkI1eiJ3f2MESkPyZVYP3RodUK9GH097IEtIBBTSMR-QAgL140F1FlSevTsuDHFtyfEg0REHQQttDJVBNISyToDTFoEXwLAm4GvLdxWSjWVlUknogqZ6SlLJTbHCuOCKrU062HX5cbABNHm6KOjBIgF1fuQnjeSBQQIBBgBkgUECAUYBKAGLoAH8bPHvQGoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBBDWpivSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpY-vPQ-dfGhQOaCVBodHRwczovL3d3dy5tYW5hZ2VlbmdpbmUuY29tL3Byb2R1Y3RzL3NlcnZpY2UtZGVzay9scC9zZXJ2aWNlLWRlc2stc29sdXRpb24uaHRtbIAKAcgLAdoMEAoKEJD_mp7Z9PqhTBICAQO4E-QD2BMC0BUBmBYBgBcBshccChoIABIUcHViLTY4MTg2MjU4ODk0ODM5OTEYALIYCRICuFAYLiIBAOgYAQ&sigh=xWDdWWB5EpA&uach_m=%5BUACH%5D&ase=2&cid=CAQSPAB7FLtqnM9NGOp93WvJClMIzRrhBpWGjwIsbjza7_6f_xw_-HlQwaWrfgoER6ajBoWHTlW0yOdPUSrtDRgB&template_id=484&cbvp=2&vis=1&nis=6
64.233.176.157
https://cse.google.com/cse.js
unknown
https://googleads.g.doubleclick.net
unknown
https://cdn.ampproject.org/rtv/$
unknown
https://fundingchoicesmessages.google.com/f/AGSKWxW87iMTYAA9JxIgnDNwCAoD-MvbbeYkPo6YFFiSTwTWDmGY_ykyBp9Af6t-sQxU23M2UK6WEo-v4osGSjO6rM5mZluvcFDXECcJN-TtSmA7-HAbX9cH_6ASshcs7OLkY-UcdhcFGg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzEzMjY4ODgxLDc4NTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9yZWFsbHlmcmVlZ2VvaXAub3JnL2J1bGsiLG51bGwsW1s4LCJlY0pIb3hKX1g4dyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsyMCwiW251bGwsbnVsbCxbOTUzMjk4NDNdLDE0LDEzXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ
74.125.138.102
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-2-&adk=1812271804&client=ca-pub-6818625889483991&fa=4&ifi=9&uci=a!9&btvi=5
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_br&google_gid=CAESEAr2PuWl0cXxfkp_IdZEsjg&google_cver=1&google_push=AXcoOmS0e5AnpVmFTTw8t00BAxuCo7-6hyyalGdVEMIzhnzfQpLb7QRp_EiskmaaiVybEces8uqc9dPjxDW-eE_T2f98BQlAuTDCn-M&tc=1
185.184.8.90
https://fundingchoicesmessages.google.com/f/AGSKWxUHmnjoKVF7OGzM2eYE9Em3SpiATp2t78QswjGRNcNPnM016p005hG3WLPouC4UyY75CDCgY-F2L9IbcjpHo6ckLhv1pj1NtAfiCTlaJBc9DzrGZYCQNrwQaCofNHFw_hie_okycw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzEzMjY4ODg0LDM2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly9yZWFsbHlmcmVlZ2VvaXAub3JnL2J1bGsiLG51bGwsW1s4LCJlY0pIb3hKX1g4dyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsyMCwiW251bGwsbnVsbCxbOTUzMjk4NDNdLDE0LDEzXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ
74.125.138.102
https://googleads.g.doubleclick.net/pagead/adview?ai=COWD9kGgeZuaqN9uWrr4Pu6aSqAeCyK_CdpOHt4KSEs31scCVQBABILeBvSNgybbdjOCkhBSgAffLuMICyAEJqQJYMhVuI9BJPqgDAcgDywSqBNcBT9DJsdQtBDXGZGjmkNccPeq5aj1rqHH2QQ1ytIk8_7pr96uOJj9vfjLc-56o-_pgJV_gWVGQ4zY7obxGNsUSdGBDL-oTPXuU_8pCPa0Ubf54Tst-YyPTWq9g1kDmsWA4chOvYVvL_F-ce8-daTWYwYAcWTsca2C26hf4DunW6mx2urp6C4Uv1-XlgQdvynA9YFQoGOiQh2Kgn2G9-El23iyNgADz7tNHwNDoJAICpDFBQt8MOwXCdNYB71kH6zb9kSYtPPwN_j0dJaq7iy2eJVnygJHw5QHABNHm6KOjBIgF1fuQnjeSBQQIBBgBkgUECAUYBKAGLoAH8bPHvQGoB9m2sQKoB9XJG6gHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBBCj80TSCCQIgGEQARgfMgKKAjoJgECAwICAgKAoSL39wTpYyvmz-NfGhQOaCVBodHRwczovL3d3dy5tYW5hZ2VlbmdpbmUuY29tL3Byb2R1Y3RzL3NlcnZpY2UtZGVzay9scC9zZXJ2aWNlLWRlc2stc29sdXRpb24uaHRtbIAKAcgLAdoMEAoKEKDk5YiG8MyKbRICAQO4E-QD2BMC0BUBmBYBgBcBshccChoIABIUcHViLTY4MTg2MjU4ODk0ODM5OTEYALIYCRICuFAYLiIBAOgYAQ&sigh=TiU2P5DEuak&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwB7FLtqoRm0Fk8gaRNlJVydO-AcgX-ex_0w0yph4vyK7Rujr9KZ2Ks_58E900rfhiznrSrvz9eEPtGiIv3MhEz7LRHZEHwT49RQnYFUZwEYAQ&template_id=484&cbvp=2&vis=1&nis=6
64.233.176.157
https://fundingchoicesmessages.google.com/i/ca-pub-6818625889483991?ers=2
74.125.138.102
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-6818625889483991&fa=8&ifi=7&uci=a!7
https://td.doubleclick.net
unknown
https://rtb.mfadsrvr.com/sync?ssp=google&ssp_init=step1&google_gid=CAESEL1U9PSETpBc57kRP3tnvVY&google_cver=1&google_push=AXcoOmRPecVpPkCkEkhMVs7RrEscDoLWpuAkfwSBwiHS8xZwU_S6aaIO4Nci1uE1Ub8KMjH5zES6GzTKf2WWVZKEllLtdx2HZ_62VHUx
35.207.24.140
https://reallyfreegeoip.org/json/81.181.57.52
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEMY_t0JvEC7FV31G0FF9Prs&google_cver=1&google_push=AXcoOmRqK9Gv9_63g-Ie5PdI51IX_a6U4niKaHFHqkGHHOacHaT8Mse9CBSS77CLITWa74i6w3II5qO60SYg17BzwbTgxk9tnjdUCdIzDg
185.184.8.90
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEMY_t0JvEC7FV31G0FF9Prs&google_cver=1&google_push=AXcoOmRqK9Gv9_63g-Ie5PdI51IX_a6U4niKaHFHqkGHHOacHaT8Mse9CBSS77CLITWa74i6w3II5qO60SYg17BzwbTgxk9tnjdUCdIzDg&tc=1
185.184.8.90
https://www.merchant-center-analytics.goog
unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQskQMkYWVqjzvmoqZsI475nztg5bC81gq-VXB49XRTpFz4dBlxb1d6y7bMRCjbUCu4eql7BhOgFexRoiRj_ejCDizwbg
74.125.136.104
https://fundingchoicesmessages.google.com/el/AGSKWxX_tYMqUoII9GLUksj__m7aEJtgzovGAH0WoPYdPkDrC5tkCi2M9qcAp_EgoTz4ZJGlh50KEb4FFq5x1fYguHXgzDaMzyZGzYx0h_uruslEKmQu1MFDzhCmX3USIVyMdNDX1IKGmA==
74.125.138.102
https://adsense.com.
unknown
There are 88 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
um.simpli.fi
35.194.66.159
a.nel.cloudflare.com
35.190.80.1
creativecdn.com
185.184.8.90
yandex.ru
77.88.55.88
elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com
52.44.225.182
global.px.quantserve.com
192.184.67.18
ums.acuityplatform.com
69.90.254.78
s.uuidksinc.net
31.220.27.155
reallyfreegeoip.org
172.67.177.134
fp2e7a.wpc.phicdn.net
192.229.211.108
gtrace.mediago.io
35.208.249.213
gw-c-us.temu.com
20.83.139.214
bg.microsoft.map.fastly.net
199.232.210.172
aid.send.microad.jp
202.233.84.1
googleads.g.doubleclick.net
64.233.177.157
www3.l.google.com
74.125.138.102
outspot2-ams.adx.opera.com
82.145.213.8
dorpat.geo.iponweb.net
35.207.24.140
an.yandex.ru
87.250.250.90
cm.g.doubleclick.net
173.194.219.154
www.google.com
142.250.105.147
user-data-us-east.bidswitch.net
35.211.178.172
windowsupdatebg.s.llnwi.net
69.164.42.0
match.adsrvr.org
52.223.40.198
sync.teads.tv
unknown
t.adx.opera.com
unknown
a.rfihub.com
unknown
px.owneriq.net
unknown
fundingchoicesmessages.google.com
unknown
www.temu.com
unknown
e.dlx.addthis.com
unknown
t.pswec.com
unknown
beacon.walmart.com
unknown
x.bidswitch.net
unknown
rtb.mfadsrvr.com
unknown
cms.quantserve.com
unknown
There are 26 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
35.194.66.159
um.simpli.fi
United States
213.180.193.90
unknown
Russian Federation
20.83.139.214
gw-c-us.temu.com
United States
74.125.136.104
unknown
United States
35.207.24.140
dorpat.geo.iponweb.net
United States
52.44.225.182
elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com
United States
192.168.2.5
unknown
unknown
35.211.178.172
user-data-us-east.bidswitch.net
United States
104.21.67.152
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
74.125.138.102
www3.l.google.com
United States
3.33.220.150
unknown
United States
69.90.254.78
ums.acuityplatform.com
Canada
202.233.84.1
aid.send.microad.jp
Japan
87.250.250.90
an.yandex.ru
Russian Federation
185.184.8.90
creativecdn.com
Poland
239.255.255.250
unknown
Reserved
77.88.55.88
yandex.ru
Russian Federation
52.223.40.198
match.adsrvr.org
United States
82.145.213.8
outspot2-ams.adx.opera.com
United Kingdom
23.220.189.216
unknown
United States
64.233.177.157
googleads.g.doubleclick.net
United States
31.220.27.155
s.uuidksinc.net
Netherlands
64.233.176.157
unknown
United States
35.208.249.213
gtrace.mediago.io
United States
192.184.67.18
global.px.quantserve.com
United States
142.250.105.147
www.google.com
United States
172.67.177.134
reallyfreegeoip.org
United States
There are 18 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
()5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
u.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\45EF6
45EF6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
$/5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookOpenedCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSAllCategories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
FileTypeBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
OoxmlConverterBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\460CA
460CA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\FileIO
FileActivityStoreVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Place MRU
Item 1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.23
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.25
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.26
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.27
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.28
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.29
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ConfigIds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelPreviousSessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
Item 20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeExcel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeExcel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\3664
0
There are 291 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://reallyfreegeoip.org/
https://reallyfreegeoip.org/json/81.181.57.52
https://reallyfreegeoip.org/90.76.249.101
https://reallyfreegeoip.org/json/81.181.57.52?callback=myFunction
https://reallyfreegeoip.org/json/
https://reallyfreegeoip.org/bulk
https://reallyfreegeoip.org/bulk
https://reallyfreegeoip.org/bulk
about:blank
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6818625889483991&output=html&adk=1812271804&adf=3025194257&lmt=1713268878&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=250x816_l%7C250x816_r&format=0x0&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&pra=7&wgl=1&easpi=0&asro=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268877974&bpp=5&bdt=1156&idt=1069&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&eoidce=1&prev_fmts=686x280&nras=1&correlator=569516815409&frm=20&pv=1&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6818625889483991&output=html&h=280&slotname=3601043988&adk=1035231763&adf=365811147&pi=t.ma~as.3601043988&w=686&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&format=686x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268877967&bpp=7&bdt=1150&idt=1033&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=569516815409&frm=20&pv=2&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=289&ady=789&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=89
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6818625889483991&output=html&h=280&slotname=3601043988&adk=1035231763&adf=365811147&pi=t.ma~as.3601043988&w=686&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&format=686x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268877967&bpp=7&bdt=1150&idt=1033&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&eoidce=1&correlator=569516815409&frm=20&pv=2&ga_vid=1290037316.1713268821&ga_sid=1713268879&ga_hid=1944407695&ga_fc=1&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=289&ady=789&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C95329427%2C31082799%2C95320377%2C95329830%2C31081718&oid=2&pvsid=1770005119173300&tmod=1121539662&uas=0&nvt=1&fc=89
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html
https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9weC5vd25lcmlxLm5ldC9lY21nP2dvb2dsZV9naWQ9Q0FFU0VCOU4xZGY0eHF4MHQtWEM3amsyUlBjJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tUUd3dzVWQ3NDWktzLU1hT2tsNDh3SE5rRXAtOGpxUzU1b3ZXTV9MUV9BVWRLMkN5ZVBwTGpENXBETDczaWVSTUxoVi1sUGoxV01aaklGcXBqZHFtSTFEXzVkMWJLdW1xemU=,aHR0cHM6Ly91bXMuYWN1aXR5cGxhdGZvcm0uY29tL3R1bT91bWlkPTQmdWlkPUNBRVNFSGVtUkE3ajl4X1pGU1YzRW1pVEF0RSZnb29nbGVfY3Zlcj0xJmdvb2dsZV9wdXNoPUFYY29PbVNqLU9Xd2R4ZmpjdlpmRUJReWxSMWZSajI3NkdMamFEWTRuOGZrS050a0V4U19sMzJfTWJSTmxrMTZ2aTBIWGFjSnA0TkZnaUE1LUJXRmxYSHo0Zmg0R3pkdTdHemNsbzNX,aHR0cHM6Ly9lLmRseC5hZGR0aGlzLmNvbS9lL2EtMTE4OS9zLTM2MTQ_cmVkaXJlY3RfcHJvdmlkZXJfaWQ9MzYxNCZydT1odHRwcyUzQSUyRiUyRmNtLmcuZG91YmxlY2xpY2submV0JTJGcGl4ZWwlM0Znb29nbGVfbmlkJTNEZGF0YWxvZ2l4X2RtcCUyNmdvb2dsZV9obSUzRCUzQ05BX0lEJTNFJTI2Z29vZ2xlX3B1c2glM0RBWGNvT21ULVY1RlBsR1JBNGdKOVZIUzRKa2dyZVg2ZjNHb1ZBTGVYTWJOTDFWUTV4UVRIM2VTMDRJa1hSeEN6RV9zRlY3TXlXSFp6UkhYam5iaXpVa1lnTkpXY2F6eTlzVjR1MTVTUSZnb29nbGVfZ2lkPUNBRVNFS0JyUkd
https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9jbXMucXVhbnRzZXJ2ZS5jb20vZHBpeGVsP2E9cC1uNXZ2THZSZGpnMGVrJmVpZD0wJnFjX2dvb2dsZV9wdXNoPSZnb29nbGVfZ2lkPUNBRVNFTFh5YTJTcXZNd0x2QkRUQmNJbVJ5WSZnb29nbGVfY3Zlcj0xJmdvb2dsZV9wdXNoPUFYY29PbVNjbjJkS1RJWWJ1WW94QXRfaElRMHpXMHRUd2hseVZWbFVSam5EdkZYeDNRUnU4YllOS1M4UElhYS1vWVcxRnFFaENYUjcwQlk1VHhUbWFtckpLdUZZbzN2Sko5V2tyZGdX,aHR0cHM6Ly9iZWFjb24ud2FsbWFydC5jb20vZXRhcC5naWY_dGFwPWdBZHMmZ29vZ2xlX2dpZD1DQUVTRURQMkdiR1VBX3B6M25nZVFJVlh3Wm8mZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21UdnlzaWVhdl9fb2RReDNqQkZoS1Z0ZGZFc3pLUG9RN3REVXlqUE9Zci1oRGMzZjNjQ0Qyd3RkVEV5b3FRR3JrRTJUdGVDajhTY0k5cDd6WDhJSEx6QTVUM2VFWklFNWk4OQ==,aHR0cHM6Ly9haWQuc2VuZC5taWNyb2FkLmpwL2cvYXNyP2dvb2dsZV9naWQ9Q0FFU0VKVy1oX0EtcENHa2lLOTAtOWVCVXc4Jmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVEpmRF9NM0hxWjdza2tSX3RsSE4zT2Z3UGo0cGFrclo0RDJJMURIQzd1Wi10djZVLTktVXIzSWNKa3hzY0xuX0RNcmExQi1oYlF3eEgxZnQzTjZHclBlZnVSUDJsUUN3QQ==,aHR0cHM6Ly9zLnV1aWRrc2luYy5uZXQvbWF0Y2gvNDcvP3JlbW90ZV91aWQ9Q0FFU0
https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly91bS5zaW1wbGkuZmkvZ3BfbWF0Y2g_Z29vZ2xlX2dpZD1DQUVTRUpuRjhxVlVlTkEzeUg0NDdLc2RIbUEmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21ULW5xcnpqemNldWxtTmxTcUw2RHE5cGtlTC1SRElwMVlWa1h2U2JQSGk5ZkdVVkhDTExvb2U4ZWlOdFUzX3o4ZEtKdTR5WUMySnh4eTFnUWN6RXNFZnFNeHpSZVNCdGVj,aHR0cHM6Ly9tYXRjaC5hZHNydnIub3JnL3RyYWNrL2NtZi9nb29nbGU_Z29vZ2xlX2dpZD1DQUVTRUNxcTNsaG1MMU1XOHd3SG8xcldtbFUmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21UVmNDUWN2TGRuQ0ZqRTFESEhUb05JRUx5X25EQlBQeGtxQ21ISWFrWnlpSUp2RnlhdHQ2QklYOElmdHI3UTRkcHRLNmVCV3Q4eXR3bGpWNzhwVUJhRHc2Z3dlNEJGX3c4,aHR0cHM6Ly94LmJpZHN3aXRjaC5uZXQvc3luYz9zc3A9Z29vZ2xlJmdvb2dsZV9naWQ9Q0FFU0VNNmx4Qk9jMUZkQUcxUGhGRFNOcm1RJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tUUNMQm5kZEd0cGswSVVaTE1jaDZQdWJkbUxWS3kzNkYxbGxnMXVLSjVLYlpMLUFJU012VXMwcFQwLUlzLWtnWmtMSWFKWEJwMmFGRWNrbFM0RUQ5VHZVVEJSTS0tRm9Qdw==,aHR0cHM6Ly9haWQuc2VuZC5taWNyb2FkLmpwL2cvYXNyP2dvb2dsZV9naWQ9Q0FFU0VHeHhqQjBhSmxqMDhUSlNBYXlVdG9zJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3
https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=1992864447&pi=t.aa~a.3071472229~rp.1&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280%2C700x280&nras=4&correlator=569516815
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=1992864447&pi=t.aa~a.3071472229~rp.1&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280%2C700x280&nras=4&correlator=569516815
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=3012990119&pi=t.aa~a.361413772~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280&nras=3&correlator=569516815409&frm=20&
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=3012990119&pi=t.aa~a.361413772~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4773&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0%2C700x280&nras=3&correlator=569516815409&frm=20&
https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=9752778&pi=t.aa~a.786254476~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4774&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0&nras=2&correlator=569516815409&frm=20&pv=1&ga_vid=1
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6818625889483991&output=html&h=280&adk=2968995696&adf=9752778&pi=t.aa~a.786254476~rp.4&w=700&fwrn=4&fwrnh=100&lmt=1713268878&rafmt=1&to=qs&pwprc=3568082181&format=700x280&url=https%3A%2F%2Freallyfreegeoip.org%2Fbulk&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1713268881591&bpp=1&bdt=4774&idt=-M&shv=r20240411&mjsv=m202404150101&ptt=9&saldr=aa&abxe=1&cookie=ID%3Df83b9080ae7c5c1b%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaS9dDUB4sCGvRvSzjkth-zAnuMWQ&gpic=UID%3D00000ddf8ead9cd1%3AT%3D1713268880%3ART%3D1713268880%3AS%3DALNI_MaLRWrIb736NF6jEIKIY-xAPBnydw&eo_id_str=ID%3D8ad260a50f7e8846%3AT%3D1713268880%3ART%3D1713268880%3AS%3DAA-AfjZhYn5g4MYS4kxGt0kr7Xlv&prev_fmts=686x280%2C0x0&nras=2&correlator=569516815409&frm=20&pv=1&ga_vid=1
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-1-&adk=1812271803&client=ca-pub-6818625889483991&fa=3&ifi=8&uci=a!8&btvi=4
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-1-&adk=1812271803&client=ca-pub-6818625889483991&fa=3&ifi=8&uci=a!8&btvi=4
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-6818625889483991&fa=8&ifi=7&uci=a!7
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-2-&adk=1812271804&client=ca-pub-6818625889483991&fa=4&ifi=9&uci=a!9&btvi=5
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-2-&adk=1812271804&client=ca-pub-6818625889483991&fa=4&ifi=9&uci=a!9&btvi=5
https://googleads.g.doubleclick.net/pagead/html/r20240411/r20110914/zrt_lookup_fy2021.html#RS-3-&adk=1812271801&client=ca-pub-6818625889483991&fa=1&ifi=10&uci=a!a&btvi=6
https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
https://www.google.com/recaptcha/api2/aframe
There are 23 hidden doms, click here to show them.